This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json) Hash identifier: I53GY5HAJXBH8e1jnf5Rip9psTQmEBEt6SYV94xFusY= Subject key identifier: 1B:EA:4E:5E:4A:F0:99:96:C2:6A:0F:48:08:07:A0:87:17:37:0B:21 Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Certificate serial: 019BF83EFD895C17E0CD3770BB88CF5080AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:00:36 +0000 Manifest this update: Mon 26 Jan 2026 03:00:36 +0000 Manifest next update: Tue 27 Jan 2026 03:00:36 +0000 Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: pJshJPkZWfiqme64Qc/s+srdWiCp6LaFlgLEWq3fGN0=) 2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:fd:89:5c:17:e0:cd:37:70:bb:88:cf:50:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Validity Not Before: Jan 26 03:00:36 2026 GMT Not After : Jan 27 03:00:36 2026 GMT Subject: CN=1bea4e5e4af09996c26a0f480807a08717370b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:f5:56:9e:fb:88:98:94:0e:31:4f:10:f0: fb:00:9f:c0:2f:8a:83:e0:79:98:2c:f5:a1:4c:a7: e9:20:ed:44:a8:b0:dc:81:78:2c:2d:7b:ed:26:58: 29:77:65:bf:f8:d5:4b:5e:3c:fc:a4:7d:e7:11:bd: d6:86:31:d1:cd:08:e1:5c:2e:12:12:b5:7d:c0:a9: e1:c5:fd:d5:5a:f7:d0:e9:ed:63:18:d7:b0:9a:42: a8:63:75:a5:6b:af:b5:13:f1:23:ea:7b:b6:88:c3: a3:32:a1:fb:23:7e:7f:da:25:2b:de:ec:ce:f3:a6: f9:f3:3e:1f:ed:8a:db:35:62:ad:b2:d6:8c:f0:e4: 90:65:55:4d:bb:ca:4c:c0:3a:4c:29:cf:9e:21:8a: d3:77:87:1c:80:4b:31:db:3e:e8:55:dd:de:07:71: da:04:e4:dd:5b:ec:89:f0:f2:e2:31:51:97:f3:d9: 8b:7f:e5:42:31:a7:99:c9:24:ae:a3:61:e8:78:68: d5:0e:e7:30:6e:39:73:cd:53:92:3c:dc:15:d7:54: 94:a7:67:03:10:c6:01:69:58:4d:14:a2:fc:16:47: 3a:be:ab:c3:96:f1:a0:1c:a6:c6:ba:ac:ca:21:03: 17:e8:68:35:0c:a0:49:cf:33:80:ef:66:49:3b:2d: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EA:4E:5E:4A:F0:99:96:C2:6A:0F:48:08:07:A0:87:17:37:0B:21 X509v3 Authority Key Identifier: keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b2:de:67:d8:01:2e:08:f2:51:cc:05:d0:1e:a2:e5:ec:e2: 53:41:5f:27:85:a8:87:8f:d0:92:b0:bb:8d:1d:62:8f:5d:8a: 2d:0b:ff:87:fb:9b:11:4e:98:3e:38:5e:07:76:81:51:60:3f: e3:03:c1:32:f4:09:cb:60:bd:73:e4:6f:89:31:d8:da:bb:b6: 31:f5:37:02:88:e8:6c:15:01:97:35:3c:df:2d:f5:0f:b9:5c: 3a:e8:6a:fb:24:1f:72:05:13:15:70:c3:b1:b6:49:fc:06:fc: 4a:04:2a:9f:53:c4:f4:9e:03:63:0b:01:50:98:eb:95:63:51: f7:43:bf:da:82:61:50:6c:c2:ce:5f:46:84:75:58:73:00:c2: 9d:bf:60:a4:e1:c2:98:40:ab:a8:2c:c7:62:0d:0c:b6:25:45: 0d:27:7c:8c:39:c2:91:1c:d5:f6:5b:c7:d3:3e:7b:c1:41:b0: 92:74:e1:d0:ce:f5:e2:4c:1e:3f:6b:7b:8d:2d:4b:ab:37:f5: 70:c6:fe:3d:c8:a5:48:37:a5:0d:e7:fa:66:30:fb:0b:cc:e9: 00:09:14:5b:72:db:25:ac:55:24:c0:ce:b9:63:b0:1e:c5:4b: 71:33:a0:c3:d2:db:b2:db:be:3a:c4:df:4f:4b:16:14:f6:74: 3b:3c:40:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Pv2JXBfgzTdwu4jPUICtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0 MjFhNzIwHhcNMjYwMTI2MDMwMDM2WhcNMjYwMTI3MDMwMDM2WjAzMTEwLwYDVQQD EygxYmVhNGU1ZTRhZjA5OTk2YzI2YTBmNDgwODA3YTA4NzE3MzcwYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0D1Vp77iJiUDjFPEPD7AJ/AL4qD 4HmYLPWhTKfpIO1EqLDcgXgsLXvtJlgpd2W/+NVLXjz8pH3nEb3WhjHRzQjhXC4S ErV9wKnhxf3VWvfQ6e1jGNewmkKoY3Wla6+1E/Ej6nu2iMOjMqH7I35/2iUr3uzO 86b58z4f7YrbNWKtstaM8OSQZVVNu8pMwDpMKc+eIYrTd4ccgEsx2z7oVd3eB3Ha BOTdW+yJ8PLiMVGX89mLf+VCMaeZySSuo2HoeGjVDucwbjlzzVOSPNwV11SUp2cD EMYBaVhNFKL8Fkc6vqvDlvGgHKbGuqzKIQMX6Gg1DKBJzzOA72ZJOy0EcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvqTl5K8JmWwmoPSAgHoIcXNwshMB8GA1UdIwQY MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7LeZ9gB LgjyUcwF0B6i5eziU0FfJ4Woh4/QkrC7jR1ij12KLQv/h/ubEU6YPjheB3aBUWA/ 4wPBMvQJy2C9c+RviTHY2ru2MfU3AojobBUBlzU83y31D7lcOuhq+yQfcgUTFXDD sbZJ/Ab8SgQqn1PE9J4DYwsBUJjrlWNR90O/2oJhUGzCzl9GhHVYcwDCnb9gpOHC mECrqCzHYg0MtiVFDSd8jDnCkRzV9lvH0z57wUGwknTh0M714kweP2t7jS1Lqzf1 cMb+PcilSDelDef6ZjD7C8zpAAkUW3LbJaxVJMDOuWOwHsVLcTOgw9Lbstu+OsTf T0sWFPZ0OzxAaQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:07 2026 by rpki-client