This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json) Hash identifier: WpIeFHmASn3LmXYKhatAE2lH6p9lYjxtrOUyV+ESfWQ= Subject key identifier: 10:3B:C3:FE:96:77:21:EC:D8:F4:1C:10:B0:F5:F7:5B:06:43:60:19 Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Certificate serial: 019BF6F59B465C92C676EAEA0688FF32172C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft Manifest number: 173C Signing time: Sun 25 Jan 2026 21:00:49 +0000 Manifest this update: Sun 25 Jan 2026 21:00:49 +0000 Manifest next update: Mon 26 Jan 2026 21:00:49 +0000 Files and hashes: 1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=) 2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: vI65bVWhHVfzcYyOOKRCM/JDmfkHHvLZB7DsEsNj8PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:9b:46:5c:92:c6:76:ea:ea:06:88:ff:32:17:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6 Validity Not Before: Jan 25 21:00:49 2026 GMT Not After : Jan 26 21:00:49 2026 GMT Subject: CN=103bc3fe967721ecd8f41c10b0f5f75b06436019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:2c:22:6d:12:cd:3c:53:4e:b7:82:e3:51: ab:d3:f4:4c:f8:59:0a:ac:aa:0d:8a:65:34:e0:39: 73:0a:5c:54:2c:ec:78:8e:1b:9c:7b:7a:17:b1:da: ae:1e:0b:4c:ff:76:dc:82:95:e3:2d:a7:75:1d:91: 2e:5f:63:ac:b4:d2:f0:76:4c:cf:64:99:2c:d9:73: 6a:6f:d8:63:c5:de:c6:b9:2e:5a:4d:29:f1:a1:0e: 7c:c1:d5:6f:45:ac:1f:1d:6c:e1:c9:d6:74:a1:2d: 76:c1:23:bd:be:97:4e:a2:36:e6:cc:92:c1:c1:e8: 49:93:a9:64:3b:e7:59:d5:2d:09:1f:f7:f2:93:29: 49:1f:78:37:0f:e2:f8:ff:b6:1b:57:51:43:f3:b2: 12:05:c8:33:08:57:b3:42:d4:64:8b:3e:0b:ad:26: 51:f1:89:1b:0a:bd:e8:8c:e5:c8:f8:b2:6d:9e:03: 5d:dd:05:2b:41:91:96:56:fc:aa:c8:e8:61:cc:47: 2d:d9:54:d0:c9:6f:3a:b1:83:15:9a:0e:e6:58:76: 3c:21:43:65:f4:66:08:da:fb:a0:64:44:3f:66:b6: 0e:bd:ec:1d:ae:71:29:6b:e0:1b:fe:fa:5f:ef:c0: 36:4b:89:7d:c3:e4:a4:f6:c6:f3:dc:b6:31:82:9d: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:C3:FE:96:77:21:EC:D8:F4:1C:10:B0:F5:F7:5B:06:43:60:19 X509v3 Authority Key Identifier: keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:63:ab:ef:89:ad:36:62:e0:b5:05:4d:7a:06:e8:ec:b2:04: 32:b4:5c:54:cf:03:23:2a:5e:4e:06:d5:ed:2e:8e:90:66:fd: 47:d1:e8:3d:83:a1:de:ea:8e:62:38:27:67:13:4b:fb:f1:8a: da:4b:c9:5c:3e:b5:d8:6a:56:4d:06:7a:81:5d:75:21:8f:0d: 1f:d1:7c:40:42:5f:d2:a0:b3:16:c2:7d:cc:f4:e0:2a:cb:cf: ce:8a:29:d5:39:66:b8:71:5e:55:2e:cc:02:68:a6:97:35:26: d3:4c:41:01:a1:55:fc:e2:35:23:55:c3:5c:3e:e9:fb:06:cc: d7:c1:43:93:f6:61:10:ef:b9:56:75:f8:0c:07:5d:75:2a:46: 18:e0:96:dc:e0:1c:c7:1d:b6:80:1f:8a:62:f7:b2:ee:90:9a: a3:a9:44:49:d0:27:bf:54:c2:83:f9:50:8f:83:51:51:6b:e8: 7c:b7:ad:08:a9:f9:ba:8c:01:0d:5e:12:dc:ec:f5:66:f0:06: bb:6b:ec:6f:db:3b:40:cf:9d:34:14:49:3d:fb:21:d5:96:50: 3b:74:19:d6:74:05:8f:01:ed:b3:55:9e:52:fe:3c:d8:d0:08: 4d:9a:55:33:ff:8d:04:c9:85:b8:74:e4:80:ea:b4:97:69:20: c7:e4:13:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZtGXJLGdurqBoj/MhcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5 ODdmYzYwHhcNMjYwMTI1MjEwMDQ5WhcNMjYwMTI2MjEwMDQ5WjAzMTEwLwYDVQQD EygxMDNiYzNmZTk2NzcyMWVjZDhmNDFjMTBiMGY1Zjc1YjA2NDM2MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnksIm0SzTxTTreC41Gr0/RM+FkK rKoNimU04DlzClxULOx4jhuce3oXsdquHgtM/3bcgpXjLad1HZEuX2OstNLwdkzP ZJks2XNqb9hjxd7GuS5aTSnxoQ58wdVvRawfHWzhydZ0oS12wSO9vpdOojbmzJLB wehJk6lkO+dZ1S0JH/fykylJH3g3D+L4/7YbV1FD87ISBcgzCFezQtRkiz4LrSZR 8YkbCr3ojOXI+LJtngNd3QUrQZGWVvyqyOhhzEct2VTQyW86sYMVmg7mWHY8IUNl 9GYI2vugZEQ/ZrYOvewdrnEpa+Ab/vpf78A2S4l9w+Sk9sbz3LYxgp0QzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA7w/6WdyHs2PQcELD191sGQ2AZMB8GA1UdIwQY MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt MTFmMWI1YTRiMGRjLzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2Or74mt NmLgtQVNegbo7LIEMrRcVM8DIypeTgbV7S6OkGb9R9HoPYOh3uqOYjgnZxNL+/GK 2kvJXD612GpWTQZ6gV11IY8NH9F8QEJf0qCzFsJ9zPTgKsvPzoop1TlmuHFeVS7M AmimlzUm00xBAaFV/OI1I1XDXD7p+wbM18FDk/ZhEO+5VnX4DAdddSpGGOCW3OAc xx22gB+KYvey7pCao6lESdAnv1TCg/lQj4NRUWvofLetCKn5uowBDV4S3Oz1ZvAG u2vsb9s7QM+dNBRJPfsh1ZZQO3QZ1nQFjwHts1WeUv482NAITZpVM/+NBMmFuHTk gOq0l2kgx+QTeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:28 2026 by rpki-client