This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json) Hash identifier: q6fBTuYR0Kgw75AYJZP3pEMn6izjLVLDTlK9VuSIcZk= Subject key identifier: 78:C6:1F:7D:CD:11:4D:72:E3:BE:2D:17:42:73:B2:0E:28:64:8F:2C Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4 Certificate serial: 019BF763EB93C0B65E071EFAF94BBF7BF131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft Manifest number: 04DA Signing time: Sun 25 Jan 2026 23:01:19 +0000 Manifest this update: Sun 25 Jan 2026 23:01:19 +0000 Manifest next update: Mon 26 Jan 2026 23:01:19 +0000 Files and hashes: 1: AM8wqrVen9abV5PnuP0fFkgYh4s.roa (hash: 00YdS+/flhKRH8HANRVEUHvN1iN5BPyjtlDWahcZik0=) 2: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: QQxxm+FayuKfXF3SVPW/dMg8aE08FJBalcvS34bYtSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:eb:93:c0:b6:5e:07:1e:fa:f9:4b:bf:7b:f1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4 Validity Not Before: Jan 25 23:01:19 2026 GMT Not After : Jan 26 23:01:19 2026 GMT Subject: CN=78c61f7dcd114d72e3be2d174273b20e28648f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:a8:39:8e:f5:98:fb:53:0b:78:90:62:3d: 89:24:1a:c7:84:aa:30:a9:fe:4f:12:80:68:cc:37: df:b9:2c:0d:55:34:2b:8f:d6:30:31:7a:f9:ba:2f: 22:35:dc:d1:a3:34:4a:0e:74:16:74:74:5a:26:2e: c9:09:7f:59:bf:c2:5d:a2:58:00:3b:be:3e:d1:11: a8:c1:94:ff:6f:ee:16:98:50:f8:e7:5d:14:43:38: 4f:6b:d9:73:63:a1:6d:54:db:5b:d8:5f:90:7c:d9: f4:8d:fe:69:4b:ad:6b:5c:4a:20:77:d6:3a:73:f4: 54:4d:80:af:a4:7a:08:e9:32:69:c1:55:1d:56:94: 63:79:07:db:6a:87:4a:26:1e:ee:f1:70:d8:7a:d6: fd:86:b6:99:bc:eb:12:db:cd:d3:13:48:12:b0:80: 60:c0:71:5f:e8:dc:7c:d1:f9:bb:1a:0d:4c:d7:a8: 79:3b:84:87:46:ce:96:8a:14:82:8e:df:55:d3:1a: f7:e0:d2:9a:24:45:01:ac:5c:7d:93:46:d2:58:31: ea:64:f6:08:76:a9:1c:9a:f7:ab:5e:30:c2:cb:96: bd:25:c0:b2:76:e1:3b:67:ec:23:9e:ca:09:ee:43: 35:40:83:e4:62:cf:e5:9f:f3:47:39:26:bf:d9:5d: df:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C6:1F:7D:CD:11:4D:72:E3:BE:2D:17:42:73:B2:0E:28:64:8F:2C X509v3 Authority Key Identifier: keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:be:21:44:88:a4:46:bf:79:50:02:cd:20:a8:12:d9:be:bf: a1:8b:ff:59:7c:8e:34:5f:ef:42:81:10:f6:d8:4e:0a:e9:20: f1:1a:61:27:07:32:0d:10:b0:6d:9d:91:9f:ae:1e:c2:f3:64: d3:5d:1c:43:be:13:b7:44:e3:6b:10:2d:8b:99:c4:58:92:9b: a5:af:f1:65:69:35:ea:03:13:01:27:4e:90:18:7f:21:c9:5e: 9f:0e:e9:63:3c:d9:e1:da:ee:90:ad:1f:78:34:31:78:83:5d: 7e:6f:d5:ea:b5:f1:d1:64:c9:13:42:58:27:a3:0a:fa:b0:b9: 09:4e:8c:70:e6:ff:3e:2b:c5:79:f5:27:c5:ec:44:80:e0:eb: 9e:b1:6d:52:51:2f:e6:02:bb:ea:89:9c:75:53:9c:67:2c:3e: fe:50:10:b8:28:a6:1d:d3:6f:fd:78:2c:f9:b0:b6:a1:1e:28: 65:8e:c5:7b:74:af:94:42:01:16:d0:38:ed:b3:9f:73:b2:ac: 0e:c4:dc:9f:08:3a:d6:cc:72:4c:99:3b:ed:07:46:a8:3c:22: 67:8c:f2:b7:b8:ef:e6:ca:31:bb:e5:c2:46:7d:f6:d7:31:85: 53:10:bc:3f:8a:7c:ea:46:bb:ce:1e:17:6e:5b:8a:1e:68:b7: 6d:ee:b4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y+uTwLZeBx76+Uu/e/ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1 ZmNkYTQwHhcNMjYwMTI1MjMwMTE5WhcNMjYwMTI2MjMwMTE5WjAzMTEwLwYDVQQD Eyg3OGM2MWY3ZGNkMTE0ZDcyZTNiZTJkMTc0MjczYjIwZTI4NjQ4ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBKoOY71mPtTC3iQYj2JJBrHhKow qf5PEoBozDffuSwNVTQrj9YwMXr5ui8iNdzRozRKDnQWdHRaJi7JCX9Zv8JdolgA O74+0RGowZT/b+4WmFD4510UQzhPa9lzY6FtVNtb2F+QfNn0jf5pS61rXEogd9Y6 c/RUTYCvpHoI6TJpwVUdVpRjeQfbaodKJh7u8XDYetb9hraZvOsS283TE0gSsIBg wHFf6Nx80fm7Gg1M16h5O4SHRs6WihSCjt9V0xr34NKaJEUBrFx9k0bSWDHqZPYI dqkcmverXjDCy5a9JcCyduE7Z+wjnsoJ7kM1QIPkYs/ln/NHOSa/2V3fXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjGH33NEU1y474tF0Jzsg4oZI8sMB8GA1UdIwQY MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt YmM5ODg3YTdiNTUzLzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb4hRIik Rr95UALNIKgS2b6/oYv/WXyONF/vQoEQ9thOCukg8RphJwcyDRCwbZ2Rn64ewvNk 010cQ74Tt0TjaxAti5nEWJKbpa/xZWk16gMTASdOkBh/Iclenw7pYzzZ4drukK0f eDQxeINdfm/V6rXx0WTJE0JYJ6MK+rC5CU6McOb/PivFefUnxexEgODrnrFtUlEv 5gK76omcdVOcZyw+/lAQuCimHdNv/Xgs+bC2oR4oZY7Fe3SvlEIBFtA47bOfc7Ks DsTcnwg61sxyTJk77QdGqDwiZ4zyt7jv5soxu+XCRn321zGFUxC8P4p86ka7zh4X bluKHmi3be60gQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:52 2026 by rpki-client