This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json) Hash identifier: kVWIhEdejObXgkr9PibGyyPZHnYhS1+vbWtFARD5lnc= Subject key identifier: F4:46:36:B1:3E:3E:6A:0F:4D:98:C1:59:CF:3B:9A:EF:56:0F:89:B6 Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Certificate serial: 019BF5E3991E9E7672E7CA14FE5739C2FD8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft Manifest number: 0445 Signing time: Sun 25 Jan 2026 16:01:32 +0000 Manifest this update: Sun 25 Jan 2026 16:01:32 +0000 Manifest next update: Mon 26 Jan 2026 16:01:32 +0000 Files and hashes: 1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=) 2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: +hgunq4y+32iz13efBfugjQcW7BVe3TAn/KF/1ZmVUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:99:1e:9e:76:72:e7:ca:14:fe:57:39:c2:fd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237 Validity Not Before: Jan 25 16:01:32 2026 GMT Not After : Jan 26 16:01:32 2026 GMT Subject: CN=f44636b13e3e6a0f4d98c159cf3b9aef560f89b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:3a:14:c1:6a:5a:d5:ea:3f:1a:fb:81:61: 91:61:8c:a9:86:f1:81:fe:e0:ce:c7:92:76:b5:09: a9:06:d4:27:9b:88:d7:91:61:80:97:9a:a1:ab:00: c7:45:f9:08:1b:9a:8e:a8:2f:64:00:24:d2:b6:a2: 73:2e:22:35:47:ac:53:9a:6f:eb:9b:2e:43:98:6f: 15:5b:74:84:d3:a2:63:71:d0:95:55:3b:b1:58:10: df:20:76:a0:34:1f:e8:9a:69:81:fb:fa:e7:49:2c: 1c:cb:7e:dc:12:d4:4d:9e:d8:75:e0:52:a1:3e:24: c4:0b:b0:cd:3b:47:e1:f7:f3:90:68:ae:ac:c3:8b: b1:2a:79:70:13:cf:20:d8:ab:0f:62:40:42:b6:6c: 82:3f:32:1a:eb:cf:d0:8a:63:2f:35:67:90:6c:6c: b2:0a:f3:81:73:cf:23:85:e1:55:bd:c6:d0:68:04: 0b:42:61:a3:3e:23:6d:26:3b:c2:b3:97:34:20:f6: 02:9b:a0:41:27:1a:19:bd:df:4c:1b:bc:7c:bb:44: 9d:6d:06:be:ea:a1:38:0e:ca:91:f3:3a:ed:45:74: 87:04:d4:2c:fd:92:c0:10:17:e4:72:e0:2f:bb:e7: ec:75:28:0f:e3:16:b0:30:7b:bf:4e:71:2d:c2:14: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:46:36:B1:3E:3E:6A:0F:4D:98:C1:59:CF:3B:9A:EF:56:0F:89:B6 X509v3 Authority Key Identifier: keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:e9:67:cd:68:ce:e7:18:4b:fd:22:34:84:98:52:7e:fe: 63:58:ba:65:c5:29:e8:29:37:e5:c8:67:b1:76:79:7b:08:b3: 2a:64:af:ad:72:6d:2e:b8:ba:53:cd:85:49:62:52:d5:f8:b7: e8:20:82:08:87:ff:31:50:58:10:a1:63:c4:45:f5:88:66:2b: fc:8c:bb:30:81:d9:e7:ab:09:40:42:c5:d4:d2:97:10:85:a8: b6:24:ec:5c:31:45:f6:f5:48:83:d5:74:85:b6:4e:e9:8c:8a: c2:96:51:2b:51:db:36:03:55:0e:a4:71:8b:a4:5c:d1:7c:e3: 35:0e:08:11:88:d4:c9:6e:4d:14:f3:fc:48:9d:d7:51:e3:59: b9:58:b1:97:6e:da:35:4e:83:de:7e:5a:b0:f3:b1:cf:ac:2c: d3:37:de:2e:ed:be:97:86:2e:71:a6:74:ea:96:6a:fc:85:46: 00:dd:2b:c5:c6:83:e4:5c:71:1e:96:a4:1a:49:ee:62:3f:c0: 07:cd:52:62:c0:f2:e4:58:1f:1d:8e:e9:7c:a6:c2:26:8c:8b: 37:78:d4:a6:9b:db:cd:d6:36:f9:72:8b:0b:15:95:d2:f7:9a: df:c1:cd:39:d4:d9:c2:87:e7:99:58:97:2b:91:bc:b9:5f:13: 3d:65:09:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv145kennZy58oU/lc5wv2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk NzMyMzcwHhcNMjYwMTI1MTYwMTMyWhcNMjYwMTI2MTYwMTMyWjAzMTEwLwYDVQQD EyhmNDQ2MzZiMTNlM2U2YTBmNGQ5OGMxNTljZjNiOWFlZjU2MGY4OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNU6FMFqWtXqPxr7gWGRYYyphvGB /uDOx5J2tQmpBtQnm4jXkWGAl5qhqwDHRfkIG5qOqC9kACTStqJzLiI1R6xTmm/r my5DmG8VW3SE06JjcdCVVTuxWBDfIHagNB/ommmB+/rnSSwcy37cEtRNnth14FKh PiTEC7DNO0fh9/OQaK6sw4uxKnlwE88g2KsPYkBCtmyCPzIa68/QimMvNWeQbGyy CvOBc88jheFVvcbQaAQLQmGjPiNtJjvCs5c0IPYCm6BBJxoZvd9MG7x8u0SdbQa+ 6qE4DsqR8zrtRXSHBNQs/ZLAEBfkcuAvu+fsdSgP4xawMHu/TnEtwhRwUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRGNrE+PmoPTZjBWc87mu9WD4m2MB8GA1UdIwQY MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2 LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK23pZ81o zucYS/0iNISYUn7+Y1i6ZcUp6Ck35chnsXZ5ewizKmSvrXJtLri6U82FSWJS1fi3 6CCCCIf/MVBYEKFjxEX1iGYr/Iy7MIHZ56sJQELF1NKXEIWotiTsXDFF9vVIg9V0 hbZO6YyKwpZRK1HbNgNVDqRxi6Rc0XzjNQ4IEYjUyW5NFPP8SJ3XUeNZuVixl27a NU6D3n5asPOxz6ws0zfeLu2+l4YucaZ06pZq/IVGAN0rxcaD5FxxHpakGknuYj/A B81SYsDy5FgfHY7pfKbCJoyLN3jUppvbzdY2+XKLCxWV0vea38HNOdTZwofnmViX K5G8uV8TPWUJjw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:59 2026 by rpki-client