This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json) Hash identifier: Yt9tT3VgzywD76Tui8anOWksLHjn/+gZOkU3xdqKQjo= Subject key identifier: 13:D0:BF:9F:3A:BF:20:40:5E:F5:0A:62:A4:D5:F1:19:B0:F1:E1:A3 Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Certificate serial: 019BF8764F437A7AC7222A99CC179A67EA09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft Manifest number: 08F4 Signing time: Mon 26 Jan 2026 04:01:01 +0000 Manifest this update: Mon 26 Jan 2026 04:01:01 +0000 Manifest next update: Tue 27 Jan 2026 04:01:01 +0000 Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=) 2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 0JH8feXXIc3iiO6KsrcK2SrKAUVmjoDerX6FuMgRb+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:4f:43:7a:7a:c7:22:2a:99:cc:17:9a:67:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3 Validity Not Before: Jan 26 04:01:01 2026 GMT Not After : Jan 27 04:01:01 2026 GMT Subject: CN=13d0bf9f3abf20405ef50a62a4d5f119b0f1e1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:d2:6d:26:c3:54:36:b1:97:bc:1c:9b:1f: 48:f2:c0:fb:c5:fb:ec:a1:e3:49:47:45:37:59:4d: 02:7a:1a:78:c9:d8:b7:e5:de:72:2c:f7:ee:7d:da: 31:47:bd:db:3b:79:2e:ec:c2:e0:5b:d4:e4:91:11: a8:a3:67:b9:73:b8:3e:f9:46:45:06:90:b6:b4:dc: f9:fb:80:bf:88:21:7c:0e:6c:ce:e1:f4:c4:a8:d3: 8d:54:07:20:1d:2f:7c:2e:7e:3c:4d:a7:fb:01:b1: 63:89:97:66:1d:e5:1e:92:a7:08:11:c9:d6:83:e2: e1:ed:5a:e6:e3:3c:b2:71:ce:39:f0:24:d3:91:77: a0:06:07:cf:02:bd:3d:19:3e:56:a6:8a:59:c9:e1: a1:da:f4:7a:f6:fe:5a:77:c3:dd:51:25:f3:50:b3: 54:9f:1c:73:a0:b2:e8:9b:73:32:37:52:2a:54:21: 95:81:ae:ab:93:67:58:43:b0:90:cc:29:d2:fb:3e: 4c:cd:3c:73:46:78:7e:4e:f2:f4:3b:60:65:21:3c: 85:73:0e:c0:77:ad:0c:28:5c:48:a1:78:1f:9b:c2: 6f:e4:c0:60:a9:b6:07:af:34:d9:7f:66:9a:9e:0b: 86:b5:6d:c7:89:14:cb:30:2b:9d:c0:11:ef:68:85: f4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D0:BF:9F:3A:BF:20:40:5E:F5:0A:62:A4:D5:F1:19:B0:F1:E1:A3 X509v3 Authority Key Identifier: keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fc:db:bb:15:fc:31:b0:f2:80:31:ee:a6:b2:e5:08:44:33: 50:06:eb:d8:44:93:42:b8:bf:0e:73:12:3b:a2:ed:0c:36:3a: de:a0:ed:ee:4c:98:9e:f8:f8:cd:6f:33:b3:b7:83:8d:b6:33: 4a:a6:90:05:68:7e:6d:bf:85:62:c7:cd:2a:3a:c7:36:ba:41: d7:37:6f:1d:84:31:e7:a4:e4:e2:e6:7c:b2:db:07:12:24:9a: 0e:e1:fd:2d:e5:82:e0:2a:30:6d:d5:00:97:2c:ef:26:80:af: 85:6a:04:d9:ba:d1:97:87:7d:62:6d:d4:35:de:2f:8d:9b:63: e6:b2:91:62:ad:df:f9:90:41:e2:a2:1b:40:11:09:7f:e5:6c: d7:be:d5:8b:be:3f:34:27:d1:34:b8:ca:24:b5:ae:53:04:d4: d6:b7:e3:21:96:c2:4e:52:bf:90:03:ce:69:45:5d:f8:b2:73: 9b:31:29:b8:d7:63:1e:c9:25:2a:cc:db:cf:89:78:e8:77:2a: d6:ab:62:f5:13:9d:b7:bb:29:66:7a:f0:20:4e:fb:bd:d7:c8: c8:31:98:59:2b:68:69:a4:99:1d:d0:e0:99:f0:67:87:a7:36: 32:16:1e:72:f3:8d:49:07:a8:ec:13:39:c5:f5:af:f4:59:8f: 1c:db:49:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dk9DenrHIiqZzBeaZ+oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj ZjIxZDMwHhcNMjYwMTI2MDQwMTAxWhcNMjYwMTI3MDQwMTAxWjAzMTEwLwYDVQQD EygxM2QwYmY5ZjNhYmYyMDQwNWVmNTBhNjJhNGQ1ZjExOWIwZjFlMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O3SbSbDVDaxl7wcmx9I8sD7xfvs oeNJR0U3WU0Cehp4ydi35d5yLPfufdoxR73bO3ku7MLgW9TkkRGoo2e5c7g++UZF BpC2tNz5+4C/iCF8DmzO4fTEqNONVAcgHS98Ln48Taf7AbFjiZdmHeUekqcIEcnW g+Lh7Vrm4zyycc458CTTkXegBgfPAr09GT5WpopZyeGh2vR69v5ad8PdUSXzULNU nxxzoLLom3MyN1IqVCGVga6rk2dYQ7CQzCnS+z5MzTxzRnh+TvL0O2BlITyFcw7A d60MKFxIoXgfm8Jv5MBgqbYHrzTZf2aanguGtW3HiRTLMCudwBHvaIX0+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPQv586vyBAXvUKYqTV8Rmw8eGjMB8GA1UdIwQY MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovzbuxX8 MbDygDHuprLlCEQzUAbr2ESTQri/DnMSO6LtDDY63qDt7kyYnvj4zW8zs7eDjbYz SqaQBWh+bb+FYsfNKjrHNrpB1zdvHYQx56Tk4uZ8stsHEiSaDuH9LeWC4CowbdUA lyzvJoCvhWoE2brRl4d9Ym3UNd4vjZtj5rKRYq3f+ZBB4qIbQBEJf+Vs177Vi74/ NCfRNLjKJLWuUwTU1rfjIZbCTlK/kAPOaUVd+LJzmzEpuNdjHsklKszbz4l46Hcq 1qti9ROdt7spZnrwIE77vdfIyDGYWStoaaSZHdDgmfBnh6c2MhYecvONSQeo7BM5 xfWv9FmPHNtJFA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:01 2026 by rpki-client