This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json) Hash identifier: O7ZYdcYkxqcoxNXTVovoLK/+jL9kDzqMlqs1vkT2Li8= Subject key identifier: A1:FF:F1:67:46:AE:4C:65:80:DA:FA:41:B8:DE:77:1A:71:DA:62:8C Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Certificate serial: 019BF7D1729812CA76BD8040994DC0093722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft Manifest number: 0CCD Signing time: Mon 26 Jan 2026 01:00:57 +0000 Manifest this update: Mon 26 Jan 2026 01:00:57 +0000 Manifest next update: Tue 27 Jan 2026 01:00:57 +0000 Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: uGTjAdUixyp1QxzbKvw88bsKoAAKReG17JjBj7EDj0s=) 2: rhstuAH1RjeoFX9aBL9o13FXeo8.roa (hash: V/dFIE6DEQQYxzvLKa9DV5po5slChYjT93vla6o5qEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:72:98:12:ca:76:bd:80:40:99:4d:c0:09:37:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Validity Not Before: Jan 26 01:00:57 2026 GMT Not After : Jan 27 01:00:57 2026 GMT Subject: CN=a1fff16746ae4c6580dafa41b8de771a71da628c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:83:b5:78:2a:0d:e7:f0:b4:5a:fe:cc:8d: bf:63:ab:45:2e:75:b3:fc:97:fb:04:18:06:f0:6b: 75:93:a1:f2:2a:bf:c2:3f:a6:89:f7:b0:cd:76:45: db:d2:f0:bf:9f:9e:2d:15:08:71:44:ac:32:0a:25: ed:ff:49:ab:ca:6d:af:4a:ed:6e:ad:64:71:b5:3a: 5d:f5:d7:c8:50:34:71:30:2f:ce:f1:67:91:6b:8a: da:a8:6b:79:15:8c:2c:a6:97:67:9b:b0:19:d3:e6: c4:27:a3:3c:8e:65:27:cb:5f:8e:7e:e7:4d:02:49: 79:d4:57:29:15:c4:45:8c:35:69:6c:46:52:89:2e: 7c:0c:78:7e:63:38:c6:51:6b:12:85:a6:20:86:4d: 68:81:49:b6:a7:00:0f:6b:3b:f4:56:78:6e:af:f3: 75:b9:09:05:1d:b8:b5:3d:32:72:73:86:63:c4:c7: 94:f5:26:6a:19:9f:8a:ab:73:d0:4b:9c:0d:98:09: 26:79:a8:7f:ae:c2:c7:c5:61:36:a8:e0:4a:5c:9c: b2:6c:eb:e6:7a:53:2d:1d:9e:1f:79:99:af:ef:2f: 44:5f:4c:47:0d:96:c1:55:86:01:a4:59:c8:bd:90: 6f:c5:a5:bc:22:f6:88:12:7b:03:3b:9a:c7:70:2e: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FF:F1:67:46:AE:4C:65:80:DA:FA:41:B8:DE:77:1A:71:DA:62:8C X509v3 Authority Key Identifier: keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:06:0f:59:2b:07:30:c7:e7:be:52:44:7e:3e:68:42:80:9f: ae:49:17:b2:80:60:6c:36:80:c6:2d:fe:39:b7:75:e0:56:65: 1e:38:1d:20:66:7c:3f:9f:67:9f:13:26:1b:7c:12:ca:b3:fb: dd:49:a0:c8:1a:ab:74:e3:e3:0a:1d:23:a8:96:59:ed:b6:46: a9:d4:d6:0e:63:0a:48:df:00:e6:ea:b6:81:73:d7:52:24:96: e5:50:1f:1a:09:ad:0b:f0:af:85:8e:4b:4e:50:c2:e1:4c:e6: 1e:ae:bf:56:2b:cd:71:35:76:36:b7:72:e0:8a:fd:36:47:29: d1:f5:0d:8c:b8:b9:63:3e:9d:df:2f:92:a6:b0:16:cf:3e:db: e2:34:15:00:ec:ae:57:45:06:52:09:4a:f7:2e:50:9f:e0:ce: 5e:4d:3b:2c:82:d5:ce:7e:55:67:e3:b5:47:8c:15:50:8c:42: 3d:fa:ea:6a:91:ec:e8:bc:62:51:d4:44:5f:77:a8:7a:82:f1: a7:b5:c8:8a:1a:6e:19:d1:15:10:13:61:87:94:c7:64:07:b9: 18:e4:fc:27:ae:25:ef:b6:13:e7:af:1c:42:18:5b:a8:2f:e5: cb:5a:17:f0:85:b2:07:2b:6b:cb:b4:15:5f:bb:52:23:21:c6: 5b:8c:cc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30XKYEsp2vYBAmU3ACTciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw MTkwODQwHhcNMjYwMTI2MDEwMDU3WhcNMjYwMTI3MDEwMDU3WjAzMTEwLwYDVQQD EyhhMWZmZjE2NzQ2YWU0YzY1ODBkYWZhNDFiOGRlNzcxYTcxZGE2MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8GDtXgqDefwtFr+zI2/Y6tFLnWz /Jf7BBgG8Gt1k6HyKr/CP6aJ97DNdkXb0vC/n54tFQhxRKwyCiXt/0mrym2vSu1u rWRxtTpd9dfIUDRxMC/O8WeRa4raqGt5FYwsppdnm7AZ0+bEJ6M8jmUny1+OfudN Akl51FcpFcRFjDVpbEZSiS58DHh+YzjGUWsShaYghk1ogUm2pwAPazv0Vnhur/N1 uQkFHbi1PTJyc4ZjxMeU9SZqGZ+Kq3PQS5wNmAkmeah/rsLHxWE2qOBKXJyybOvm elMtHZ4feZmv7y9EX0xHDZbBVYYBpFnIvZBvxaW8IvaIEnsDO5rHcC6oHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKH/8WdGrkxlgNr6Qbjedxpx2mKMMB8GA1UdIwQY MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgYPWSsH MMfnvlJEfj5oQoCfrkkXsoBgbDaAxi3+Obd14FZlHjgdIGZ8P59nnxMmG3wSyrP7 3UmgyBqrdOPjCh0jqJZZ7bZGqdTWDmMKSN8A5uq2gXPXUiSW5VAfGgmtC/CvhY5L TlDC4UzmHq6/VivNcTV2Nrdy4Ir9Nkcp0fUNjLi5Yz6d3y+SprAWzz7b4jQVAOyu V0UGUglK9y5Qn+DOXk07LILVzn5VZ+O1R4wVUIxCPfrqapHs6LxiUdREX3eoeoLx p7XIihpuGdEVEBNhh5THZAe5GOT8J64l77YT568cQhhbqC/ly1oX8IWyBytry7QV X7tSIyHGW4zMnA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:09 2026 by rpki-client