This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json) Hash identifier: qZa6F7l7CLpvbAr2LTBlidsOaH9nukqcPdCJmloFHo8= Subject key identifier: 71:2B:42:04:F6:42:A9:2A:40:34:B9:4D:CB:3F:80:4A:44:D2:F7:33 Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f Certificate serial: 019BF9524078520537669798FFED2A36CB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft Manifest number: 14A3 Signing time: Mon 26 Jan 2026 08:01:15 +0000 Manifest this update: Mon 26 Jan 2026 08:01:15 +0000 Manifest next update: Tue 27 Jan 2026 08:01:15 +0000 Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: ApAPNmQcdYT/5mVP6Aut1Hi6WGYUMY6TUDymUcLBORc=) 2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:40:78:52:05:37:66:97:98:ff:ed:2a:36:cb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f Validity Not Before: Jan 26 08:01:15 2026 GMT Not After : Jan 27 08:01:15 2026 GMT Subject: CN=712b4204f642a92a4034b94dcb3f804a44d2f733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a6:7b:85:01:9d:3a:7e:0e:3e:ab:ee:17:a5: f9:bf:ea:6e:6e:42:37:ee:73:2e:77:cc:3d:25:73: 3a:8e:78:15:72:3a:ba:87:dd:02:2a:99:6a:d0:82: ca:3c:04:06:39:43:94:b7:04:94:94:00:37:73:03: 0c:40:91:28:b0:99:35:99:ae:a0:30:46:e8:6c:34: ee:09:48:e1:81:3f:e9:8d:6d:e4:29:24:97:03:85: db:bf:3c:07:be:3c:01:62:89:dd:da:38:c6:f8:83: 39:c8:51:2a:4f:88:57:dc:68:ab:b2:67:dd:f7:29: 3f:45:0f:80:87:d3:91:b6:ad:02:b8:18:ed:07:4d: b2:6b:88:fb:20:99:ab:5c:f1:15:c6:8c:e3:6c:65: bf:bc:59:e8:8a:39:80:5d:72:f1:01:73:43:25:44: a0:93:95:b7:7e:2e:72:fd:3f:dc:0a:bd:b7:ed:a8: 12:40:2e:cd:ef:f4:1a:94:94:55:a4:9c:7e:57:dc: f2:a7:4f:08:fe:6b:ef:e1:7e:a3:91:30:6f:eb:5a: 80:a2:58:ab:b3:ce:97:53:e3:3a:d8:9d:52:3c:24: a4:cd:f7:3e:ef:a1:83:1b:98:34:dd:01:d6:fa:26: d0:e2:63:12:27:bc:56:00:72:91:9c:c0:36:c3:af: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:42:04:F6:42:A9:2A:40:34:B9:4D:CB:3F:80:4A:44:D2:F7:33 X509v3 Authority Key Identifier: keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d8:5f:78:e4:74:dd:ad:19:da:f4:7e:7c:4b:b0:a2:6c:25: f9:cd:cb:53:95:79:45:04:22:d7:10:8f:44:4d:d8:c8:ac:fd: 38:56:22:5b:17:a6:23:f4:35:d2:4b:67:e4:7a:5d:b3:0f:00: a0:4f:c2:e1:71:43:9b:c2:a5:d9:bd:51:e4:72:25:ec:87:9d: 85:06:e2:b3:59:7c:da:b0:4c:9e:00:be:c9:a7:d5:5c:99:ed: 0e:1b:c1:52:28:23:62:2b:d9:25:9a:85:e4:ec:3f:e4:ac:1a: aa:f9:7e:35:06:a6:26:3d:d7:1b:a6:6d:fe:45:5f:99:30:28: 08:7d:95:61:e4:3e:61:78:1b:a8:77:0c:d8:f1:18:9b:fe:9d: 17:bf:5b:f3:08:d5:0d:cd:e4:07:1d:a7:f5:d3:33:1b:22:e4: 43:a9:35:ab:5f:f9:ea:a8:8c:77:50:91:74:19:a3:cf:00:5b: 72:fd:c3:0f:5a:51:cc:38:08:01:c1:ed:6e:76:b5:de:45:93: 32:73:70:0b:7f:83:9a:5c:1d:a7:70:29:94:b0:46:bc:ad:1a: 0d:4a:0b:ea:41:e2:b9:e1:e8:62:4e:f8:c5:55:6d:2c:3f:1d: 05:46:de:d8:54:00:85:5c:75:af:0a:56:4f:fd:02:8e:d5:16: e1:30:8c:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UkB4UgU3ZpeY/+0qNsszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz NjY2NmYwHhcNMjYwMTI2MDgwMTE1WhcNMjYwMTI3MDgwMTE1WjAzMTEwLwYDVQQD Eyg3MTJiNDIwNGY2NDJhOTJhNDAzNGI5NGRjYjNmODA0YTQ0ZDJmNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaZ7hQGdOn4OPqvuF6X5v+pubkI3 7nMud8w9JXM6jngVcjq6h90CKplq0ILKPAQGOUOUtwSUlAA3cwMMQJEosJk1ma6g MEbobDTuCUjhgT/pjW3kKSSXA4XbvzwHvjwBYond2jjG+IM5yFEqT4hX3Girsmfd 9yk/RQ+Ah9ORtq0CuBjtB02ya4j7IJmrXPEVxozjbGW/vFnoijmAXXLxAXNDJUSg k5W3fi5y/T/cCr237agSQC7N7/QalJRVpJx+V9zyp08I/mvv4X6jkTBv61qAolir s86XU+M62J1SPCSkzfc+76GDG5g03QHW+ibQ4mMSJ7xWAHKRnMA2w689vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHErQgT2QqkqQDS5Tcs/gEpE0vczMB8GA1UdIwQY MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct Y2ZkZmNkNGVlMGYyLzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANhfeOR0 3a0Z2vR+fEuwomwl+c3LU5V5RQQi1xCPRE3YyKz9OFYiWxemI/Q10ktn5Hpdsw8A oE/C4XFDm8Kl2b1R5HIl7IedhQbis1l82rBMngC+yafVXJntDhvBUigjYivZJZqF 5Ow/5Kwaqvl+NQamJj3XG6Zt/kVfmTAoCH2VYeQ+YXgbqHcM2PEYm/6dF79b8wjV Dc3kBx2n9dMzGyLkQ6k1q1/56qiMd1CRdBmjzwBbcv3DD1pRzDgIAcHtbna13kWT MnNwC3+Dmlwdp3AplLBGvK0aDUoL6kHiueHoYk74xVVtLD8dBUbe2FQAhVx1rwpW T/0CjtUW4TCMqw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:52 2026 by rpki-client