This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json) Hash identifier: gV3z9Cn1GllZr7b0aznZgZPORfIyp8xZ8SmXdNdBmx0= Subject key identifier: 49:D3:DD:A1:15:40:34:F1:09:42:6A:41:5E:A4:F7:D1:84:46:EF:0B Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Certificate serial: 019BF6F5F85D0EA557437BE4F4FEF1A73C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft Manifest number: 1518 Signing time: Sun 25 Jan 2026 21:01:13 +0000 Manifest this update: Sun 25 Jan 2026 21:01:13 +0000 Manifest next update: Mon 26 Jan 2026 21:01:13 +0000 Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: zt5i3okdsRXDHK7pDbhwbzHQDRRSQIEZmc5ORq7p+iM=) 2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=) 3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=) 4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:f8:5d:0e:a5:57:43:7b:e4:f4:fe:f1:a7:3c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624 Validity Not Before: Jan 25 21:01:13 2026 GMT Not After : Jan 26 21:01:13 2026 GMT Subject: CN=49d3dda1154034f109426a415ea4f7d18446ef0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:d4:f5:6d:f4:9b:c9:28:05:e9:59:a7:b6: 7c:43:12:31:d0:d0:d1:7c:68:21:b1:45:12:5a:98: 5c:e7:21:d7:bd:1d:bd:fb:29:f6:f5:33:dc:80:f5: f1:03:f2:68:19:e9:23:df:21:be:c0:39:a1:60:bb: 18:83:55:c9:f8:fd:df:75:03:ef:c4:4a:74:a9:79: f0:88:1e:65:b3:a4:dc:02:2b:0b:fd:04:d4:c7:cc: 98:99:4c:4d:53:ba:d1:65:fc:06:68:b8:b5:b6:e1: f9:94:81:b1:06:24:4d:ae:a0:7a:35:be:d4:0f:1d: d1:3f:21:36:47:0d:33:2a:c2:aa:69:eb:83:e3:32: 76:66:64:34:92:25:9c:9e:24:ef:26:9b:b5:75:ca: 91:64:1a:2d:8b:c7:25:0c:0f:b5:c2:f0:e5:22:59: f0:45:7a:fc:62:61:67:fc:dc:a7:ad:dd:6a:c0:47: 21:d1:31:3d:66:e0:7f:e4:fe:fd:dd:54:b9:40:28: 86:31:e4:a5:58:67:bc:2a:b6:b0:f6:c5:84:cb:f6: 2a:00:7e:90:c5:86:19:e8:ca:1a:59:1f:bc:95:a3: 7d:76:dd:83:8f:ff:43:03:9f:bc:5f:6a:30:67:33: 13:76:e5:23:cb:9d:67:6a:0a:0d:eb:07:43:46:1e: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:DD:A1:15:40:34:F1:09:42:6A:41:5E:A4:F7:D1:84:46:EF:0B X509v3 Authority Key Identifier: keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bc:38:05:57:41:5c:59:25:55:26:45:81:d6:a6:23:43:b4: 6d:86:60:be:e1:a9:b0:fa:05:2e:81:8c:64:1b:b2:6d:05:1e: c7:f4:78:99:f3:8c:b8:5f:27:a4:bb:e6:fc:7f:f3:33:47:0b: 2a:31:65:ec:2c:14:a4:17:ba:99:68:cb:d9:0e:b5:5e:7c:22: 48:74:04:dc:68:b8:79:0c:5c:e5:c4:b8:3e:24:94:40:90:5c: ad:0e:3e:20:aa:76:5d:3f:e1:01:06:b9:e9:16:34:5c:38:cf: 73:02:00:a6:cf:17:c2:20:eb:3e:9b:f1:8e:ab:15:de:12:75: 3f:45:9a:7e:07:71:b4:e7:78:1f:46:b2:1d:c8:fb:ab:3d:10: 66:82:8d:ee:ef:3b:78:3d:c2:f5:8e:ce:b5:1c:72:04:ae:8c: 12:46:59:17:08:c2:c5:bd:d0:95:f0:e9:17:f2:e1:96:51:d1: 6c:4e:ad:c1:25:4d:d7:42:54:44:9c:a6:3c:d5:6d:8b:e4:e9: 33:85:41:0a:b1:1a:a2:6b:90:c5:22:c7:06:24:3a:df:35:34: a5:34:7b:a9:e8:33:d9:48:b1:71:1a:5e:07:54:71:c1:f7:33: 5d:66:c9:bf:d0:af:98:b8:96:8d:42:86:52:5d:b2:e8:3f:5f: e1:e5:b4:c7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv29fhdDqVXQ3vk9P7xpzyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy OWQ2MjQwHhcNMjYwMTI1MjEwMTEzWhcNMjYwMTI2MjEwMTEzWjAzMTEwLwYDVQQD Eyg0OWQzZGRhMTE1NDAzNGYxMDk0MjZhNDE1ZWE0ZjdkMTg0NDZlZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypLU9W30m8koBelZp7Z8QxIx0NDR fGghsUUSWphc5yHXvR29+yn29TPcgPXxA/JoGekj3yG+wDmhYLsYg1XJ+P3fdQPv xEp0qXnwiB5ls6TcAisL/QTUx8yYmUxNU7rRZfwGaLi1tuH5lIGxBiRNrqB6Nb7U Dx3RPyE2Rw0zKsKqaeuD4zJ2ZmQ0kiWcniTvJpu1dcqRZBoti8clDA+1wvDlIlnw RXr8YmFn/Nynrd1qwEch0TE9ZuB/5P793VS5QCiGMeSlWGe8Kraw9sWEy/YqAH6Q xYYZ6MoaWR+8laN9dt2Dj/9DA5+8X2owZzMTduUjy51nagoN6wdDRh6VkwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEnT3aEVQDTxCUJqQV6k99GERu8LMB8GA1UdIwQY MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0 YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULw4 BVdBXFklVSZFgdamI0O0bYZgvuGpsPoFLoGMZBuybQUex/R4mfOMuF8npLvm/H/z M0cLKjFl7CwUpBe6mWjL2Q61XnwiSHQE3Gi4eQxc5cS4PiSUQJBcrQ4+IKp2XT/h AQa56RY0XDjPcwIAps8XwiDrPpvxjqsV3hJ1P0WafgdxtOd4H0ayHcj7qz0QZoKN 7u87eD3C9Y7OtRxyBK6MEkZZFwjCxb3QlfDpF/LhllHRbE6twSVN10JURJymPNVt i+TpM4VBCrEaomuQxSLHBiQ63zU0pTR7qegz2UixcRpeB1RxwfczXWbJv9CvmLiW jUKGUl2y6D9f4eW0xw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:58 2026 by rpki-client