This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json) Hash identifier: V0ablNXc4JxWbUrkSTW75JIo7oeqRyv0IIPz9doqgzg= Subject key identifier: 69:D3:58:B8:FE:B7:E8:9A:A7:9E:A4:7A:A8:DE:74:B9:FA:3D:A8:E4 Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Certificate serial: 019BF8086CC650365E1528127668F724EAD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft Manifest number: 10C1 Signing time: Mon 26 Jan 2026 02:01:00 +0000 Manifest this update: Mon 26 Jan 2026 02:01:00 +0000 Manifest next update: Tue 27 Jan 2026 02:01:00 +0000 Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=) 2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=) 3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: 4UprSBNm069RW8NBeIOnWEUPJn4ZpA8dkYm/+gizg8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:6c:c6:50:36:5e:15:28:12:76:68:f7:24:ea:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Validity Not Before: Jan 26 02:01:00 2026 GMT Not After : Jan 27 02:01:00 2026 GMT Subject: CN=69d358b8feb7e89aa79ea47aa8de74b9fa3da8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:ae:86:f3:94:7d:12:83:22:e4:91:37:10: 0d:ef:c2:62:3b:0e:c9:c4:3b:05:20:00:76:e6:b9: 51:89:cf:df:26:99:75:1c:2e:4b:45:37:66:80:32: 92:a1:36:d4:3a:53:3f:e4:c1:d2:07:f7:3f:8a:0b: aa:eb:f4:26:29:df:63:fd:ac:82:1d:f2:16:96:e3: 44:ec:49:09:bd:d7:3c:cd:70:eb:40:eb:7a:8d:0b: ee:3f:ef:76:65:72:38:aa:db:c6:bc:5e:a1:07:80: c0:5b:2c:16:bb:cf:21:8d:0c:aa:0c:5a:92:ab:4f: ec:f8:48:24:5d:14:b2:35:7a:14:26:04:89:e1:6d: 08:69:6f:f6:c7:47:b5:64:84:58:ca:ed:9e:cc:01: 90:99:ca:ee:cf:76:b9:e8:70:a5:9d:ea:af:02:71: 4d:af:c8:25:e4:a8:cc:dd:8f:13:02:83:55:13:77: 21:7d:de:04:77:dc:42:41:f0:0b:01:cf:13:cb:90: c6:94:d6:9d:74:c9:88:dc:ef:6d:1f:8e:1f:3b:5a: b7:59:bb:65:4c:05:cf:04:a5:7a:69:db:46:3a:dd: 11:15:2a:28:e6:d4:aa:5f:55:cc:33:d5:07:5f:63: be:1e:76:df:a5:08:bd:61:1e:95:ab:7c:16:be:a3: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D3:58:B8:FE:B7:E8:9A:A7:9E:A4:7A:A8:DE:74:B9:FA:3D:A8:E4 X509v3 Authority Key Identifier: keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d4:47:6e:11:19:f4:a6:e9:fc:0b:ae:e4:83:6f:4b:49:fe: 55:9c:bb:86:ec:77:6a:67:08:7e:93:c6:ad:17:84:4b:bc:7b: e3:03:d2:1d:a8:d1:1c:64:4c:58:88:8a:28:26:b4:78:86:17: 3a:c7:19:50:7e:d2:9d:38:25:c8:44:26:e3:98:f5:f7:ce:dc: 42:63:3a:33:aa:65:4e:b8:b8:3d:84:a8:64:a3:bd:37:b2:55: 09:60:d4:b7:75:9e:34:a4:09:7b:91:8f:0e:67:17:e9:63:1f: da:b2:12:f5:9a:d3:e3:58:a4:68:9e:ee:42:a2:66:d5:3d:3c: 33:e2:6c:fb:fe:c0:23:75:3c:7e:98:c6:f8:02:19:d8:11:77: b1:68:2c:3a:d5:6e:52:3b:d9:80:9a:aa:04:f1:a2:02:f2:b0: a9:0c:64:04:5f:3b:9d:b1:57:fd:56:42:e0:c4:a8:59:93:f9: 94:34:e9:fa:da:b6:85:b5:98:5e:41:17:05:2e:24:36:df:a4: 99:c5:78:78:7e:ad:43:33:22:00:1d:4d:11:ac:6f:7f:da:46: 2d:07:f5:a4:f8:88:7d:4c:02:00:42:31:d4:0d:c0:d8:a6:7e: 69:8b:f2:d9:36:b0:c7:0a:a5:49:a0:18:0a:73:d6:ce:ed:9c: 48:d9:f0:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CGzGUDZeFSgSdmj3JOrRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi YTMyMTQwHhcNMjYwMTI2MDIwMTAwWhcNMjYwMTI3MDIwMTAwWjAzMTEwLwYDVQQD Eyg2OWQzNThiOGZlYjdlODlhYTc5ZWE0N2FhOGRlNzRiOWZhM2RhOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjmuhvOUfRKDIuSRNxAN78JiOw7J xDsFIAB25rlRic/fJpl1HC5LRTdmgDKSoTbUOlM/5MHSB/c/iguq6/QmKd9j/ayC HfIWluNE7EkJvdc8zXDrQOt6jQvuP+92ZXI4qtvGvF6hB4DAWywWu88hjQyqDFqS q0/s+EgkXRSyNXoUJgSJ4W0IaW/2x0e1ZIRYyu2ezAGQmcruz3a56HClneqvAnFN r8gl5KjM3Y8TAoNVE3chfd4Ed9xCQfALAc8Ty5DGlNaddMmI3O9tH44fO1q3Wbtl TAXPBKV6adtGOt0RFSoo5tSqX1XMM9UHX2O+HnbfpQi9YR6Vq3wWvqMxcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnTWLj+t+iap56keqjedLn6PajkMB8GA1UdIwQY MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydRHbhEZ 9Kbp/Auu5INvS0n+VZy7hux3amcIfpPGrReES7x74wPSHajRHGRMWIiKKCa0eIYX OscZUH7SnTglyEQm45j1987cQmM6M6plTri4PYSoZKO9N7JVCWDUt3WeNKQJe5GP DmcX6WMf2rIS9ZrT41ikaJ7uQqJm1T08M+Js+/7AI3U8fpjG+AIZ2BF3sWgsOtVu UjvZgJqqBPGiAvKwqQxkBF87nbFX/VZC4MSoWZP5lDTp+tq2hbWYXkEXBS4kNt+k mcV4eH6tQzMiAB1NEaxvf9pGLQf1pPiIfUwCAEIx1A3A2KZ+aYvy2TawxwqlSaAY CnPWzu2cSNnwiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:03 2026 by rpki-client