This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft File: QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json) Hash identifier: q9u4h+11uTOCABVDTaz3PY74Dssn0xLT0k4MqdBXljY= Subject key identifier: DC:B9:9B:50:35:83:F5:FD:20:6D:2D:B6:F3:C8:A6:B5:E1:32:A8:72 Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Certificate serial: 019BF507B76E6F8E8F0883B4D38022FF7157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft Manifest number: 14E0 Signing time: Sun 25 Jan 2026 12:01:21 +0000 Manifest this update: Sun 25 Jan 2026 12:01:21 +0000 Manifest next update: Mon 26 Jan 2026 12:01:21 +0000 Files and hashes: 1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=) 2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=) 3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=) 4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=) 5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: ZAPaHqJXdJNBGzDVGBwd6BEdSY0kStSoulxOX7B/BY4=) 6: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=) 7: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=) 8: lt0uHb3Ja0C6EHrT16AvTUA7wtE.roa (hash: RTDdcV/67H1P8/R68XrIpR/Fz3ncNmWbnwOYUbaK6Y8=) 9: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:b7:6e:6f:8e:8f:08:83:b4:d3:80:22:ff:71:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811 Validity Not Before: Jan 25 12:01:21 2026 GMT Not After : Jan 26 12:01:21 2026 GMT Subject: CN=dcb99b503583f5fd206d2db6f3c8a6b5e132a872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:49:ad:aa:f5:7f:8e:52:95:8b:97:68:49: 9d:3a:b8:d6:29:d8:9b:a9:60:2b:3b:85:96:be:34: f3:49:91:dd:fe:0f:91:80:5c:d7:51:79:7a:a5:3f: 55:5b:51:1a:d5:0f:b3:f3:9f:6b:50:26:ec:53:6f: 9e:33:56:8e:ec:76:48:5a:4a:ba:25:48:82:f2:6f: 28:37:22:71:d2:cc:df:16:94:d1:c1:82:f2:a5:32: f3:10:38:7f:de:c6:19:84:21:f6:ee:e3:df:36:4f: f5:a6:5f:e7:ee:2a:f9:59:f9:4a:a3:7d:64:91:98: 63:59:81:e5:ee:cd:5e:b2:34:1e:e1:fe:bc:b2:fb: d5:54:10:e0:00:bd:67:72:50:f6:95:e0:1a:be:df: 11:99:4c:c7:07:46:ab:38:e9:58:f2:a8:2a:15:52: 45:34:a1:e1:24:c2:b0:97:dc:ef:38:20:69:ce:48: 38:ea:33:76:e1:a8:3d:8f:88:4f:34:e6:d8:81:b4: 06:4b:cb:ab:86:b9:1b:0b:83:1b:3b:9d:63:64:c2: 4d:34:e5:79:07:d4:74:90:e9:6f:8c:05:42:63:43: 71:24:a9:af:1b:68:4b:e4:94:b9:21:f6:bd:86:57: 4a:51:ca:4d:49:21:1f:93:64:7d:fe:ed:a5:25:c3: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B9:9B:50:35:83:F5:FD:20:6D:2D:B6:F3:C8:A6:B5:E1:32:A8:72 X509v3 Authority Key Identifier: keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e2:1f:59:85:82:16:30:31:f0:fc:34:7e:c6:e5:39:a3:90: 95:5b:2e:e5:59:5a:de:b8:fa:4e:c7:e8:d4:8b:0f:14:ef:df: aa:b0:09:c8:0e:c0:c2:63:0c:bb:0a:44:3a:9e:29:40:c2:73: 07:f3:88:be:7f:2f:d4:11:ad:96:5e:3d:ca:63:88:5c:18:b2: 47:3d:27:6d:a0:3d:d4:13:c1:8f:6d:b5:8d:3e:4c:2b:82:fd: ae:af:40:e7:ae:5e:c9:e5:c6:4e:04:bc:11:8e:ee:48:94:4d: 04:48:17:43:e8:2e:26:54:63:f1:09:9e:ef:46:b1:65:28:9b: fa:92:95:5e:76:fe:5e:d9:80:25:7a:08:fd:28:d0:d3:9a:63: 9f:0a:6f:90:f0:2e:ed:2d:a2:c6:e0:32:e7:ce:24:0f:f8:2c: ee:82:dc:0f:15:23:da:be:da:6b:ca:a2:15:9e:70:3e:cb:b0: 1d:71:ee:1d:fd:a1:0b:e5:23:77:f2:74:51:ea:28:ac:ec:b4: 6d:17:29:0f:f2:d4:67:65:38:4d:59:29:47:a1:77:a1:73:49: db:ce:10:a9:ad:f5:de:9c:b6:ec:43:94:75:d8:86:c7:f3:a3: 4d:18:a9:dd:46:37:c0:f0:c8:b7:51:1c:2c:78:b9:52:75:92: 9a:04:ae:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B7dub46PCIO004Ai/3FXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj YjI4MTEwHhcNMjYwMTI1MTIwMTIxWhcNMjYwMTI2MTIwMTIxWjAzMTEwLwYDVQQD EyhkY2I5OWI1MDM1ODNmNWZkMjA2ZDJkYjZmM2M4YTZiNWUxMzJhODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJJrar1f45SlYuXaEmdOrjWKdib qWArO4WWvjTzSZHd/g+RgFzXUXl6pT9VW1Ea1Q+z859rUCbsU2+eM1aO7HZIWkq6 JUiC8m8oNyJx0szfFpTRwYLypTLzEDh/3sYZhCH27uPfNk/1pl/n7ir5WflKo31k kZhjWYHl7s1esjQe4f68svvVVBDgAL1nclD2leAavt8RmUzHB0arOOlY8qgqFVJF NKHhJMKwl9zvOCBpzkg46jN24ag9j4hPNObYgbQGS8urhrkbC4MbO51jZMJNNOV5 B9R0kOlvjAVCY0NxJKmvG2hL5JS5Ifa9hldKUcpNSSEfk2R9/u2lJcO1TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy5m1A1g/X9IG0ttvPIprXhMqhyMB8GA1UdIwQY MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct YTA0M2UxYjY3Yjk0LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0 LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+IfWYWC FjAx8Pw0fsblOaOQlVsu5Vla3rj6Tsfo1IsPFO/fqrAJyA7AwmMMuwpEOp4pQMJz B/OIvn8v1BGtll49ymOIXBiyRz0nbaA91BPBj221jT5MK4L9rq9A565eyeXGTgS8 EY7uSJRNBEgXQ+guJlRj8Qme70axZSib+pKVXnb+XtmAJXoI/SjQ05pjnwpvkPAu 7S2ixuAy584kD/gs7oLcDxUj2r7aa8qiFZ5wPsuwHXHuHf2hC+Ujd/J0UeoorOy0 bRcpD/LUZ2U4TVkpR6F3oXNJ284Qqa313py27EOUddiGx/OjTRip3UY3wPDIt1Ec LHi5UnWSmgSu0g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:42 2026 by rpki-client