This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json) Hash identifier: w6lPkFSSnfHmWuIavRLTnEzC0pVptbxBTIUzCKp1oL0= Subject key identifier: F1:DF:96:A0:82:82:BA:8B:CB:1D:2C:F9:9F:3A:4B:62:BE:B5:97:08 Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Certificate serial: 019BF8AD167C5FF78BB2ABE4D909092346AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 05:00:51 +0000 Manifest this update: Mon 26 Jan 2026 05:00:51 +0000 Manifest next update: Tue 27 Jan 2026 05:00:51 +0000 Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=) 2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: CxjOdLZsBwoBPu0GwfGegwA2iJnCP/06zvREMw9i8yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:16:7c:5f:f7:8b:b2:ab:e4:d9:09:09:23:46:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a Validity Not Before: Jan 26 05:00:51 2026 GMT Not After : Jan 27 05:00:51 2026 GMT Subject: CN=f1df96a08282ba8bcb1d2cf99f3a4b62beb59708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:86:35:3b:d9:a2:1d:c9:9d:6b:e1:73:e1:7f: 16:93:e9:dd:ba:ee:52:c0:55:9c:68:11:4f:98:0a: c1:4c:49:ef:cd:ed:0b:96:f9:a6:b9:78:47:71:cf: d0:68:38:f5:79:c1:1a:58:46:7b:dd:0c:38:07:55: 9f:0c:c5:49:9f:45:e2:31:3e:6b:51:78:6b:69:fe: dc:f7:03:24:ac:18:7c:39:cf:08:f9:00:60:bf:3b: 1d:8a:92:2c:a2:e6:41:c7:cd:4e:52:d9:ce:ac:54: 83:12:27:3d:c5:fa:a4:bf:be:db:f1:4f:1d:b0:97: 2e:c4:e6:85:b6:c2:31:04:15:12:91:2d:af:69:6a: 77:63:15:2a:a4:31:43:a9:3e:d7:15:ba:8f:59:d8: 6c:51:93:6b:0d:99:cc:7b:d6:78:ca:4e:89:75:c7: f4:1f:a5:36:9b:b3:c7:e4:49:b7:90:bb:9d:06:f5: f2:b1:b6:9c:21:51:5a:80:55:ab:19:be:2f:19:fb: 8d:ef:00:07:83:2e:08:f5:82:5d:a4:e9:4f:8f:cc: d8:3e:9f:89:99:96:29:84:06:09:7d:e1:5b:f9:f6: d8:2b:ab:df:af:a5:aa:46:7a:62:b3:10:ea:18:a7: 15:4e:b2:6d:64:07:f0:12:31:38:05:2f:e4:fe:c8: 98:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:96:A0:82:82:BA:8B:CB:1D:2C:F9:9F:3A:4B:62:BE:B5:97:08 X509v3 Authority Key Identifier: keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:21:02:7e:cc:ae:1a:3b:de:5d:88:03:9b:3e:1c:57:40:32: c8:85:fc:2d:a6:57:b6:93:96:06:ee:b8:fc:20:80:45:0c:a7: 71:ee:d9:b5:0a:f6:d5:a4:4d:c4:1e:20:8b:0b:35:7b:fc:c6: 0f:12:e4:6a:90:9b:81:12:de:3f:0e:4f:89:9a:ca:6b:8b:e1: 67:db:35:cf:b8:3d:16:d2:ee:20:71:af:f1:ee:6f:6f:56:ef: aa:fb:8d:ac:97:15:c8:8d:5a:9f:e1:d5:17:5d:10:40:db:9c: 89:f7:39:f2:69:45:3d:64:53:5d:81:77:a2:e8:f8:a8:ce:0e: 66:50:2b:d3:4b:bf:4c:e3:9e:8f:09:31:a7:e6:54:3c:b7:db: cd:e7:08:e7:f7:f7:3a:ab:a1:58:af:f0:37:12:17:55:62:44: 29:f0:d9:aa:33:ef:52:87:4c:25:e7:40:df:c1:12:30:4e:06: e7:0b:5a:4e:93:d7:48:32:1c:24:3b:06:cb:8e:1d:bf:9f:3f: 37:99:e5:d5:ba:df:2e:3f:21:96:61:68:0f:a8:f1:e6:f0:9c: 93:e5:91:fd:5d:0c:8d:06:3b:2c:6e:fc:57:d1:14:49:3a:75: 2c:19:3d:cb:80:a9:41:50:7a:18:fb:bb:39:13:72:10:d9:96: f5:ef:31:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rRZ8X/eLsqvk2QkJI0arMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNTdlMGViNGE0NTA2YTE5YWIyZWZmOTg5YTY3ZDU1OWI5 OGNjMWEwHhcNMjYwMTI2MDUwMDUxWhcNMjYwMTI3MDUwMDUxWjAzMTEwLwYDVQQD EyhmMWRmOTZhMDgyODJiYThiY2IxZDJjZjk5ZjNhNGI2MmJlYjU5NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoY1O9miHcmda+Fz4X8Wk+nduu5S wFWcaBFPmArBTEnvze0LlvmmuXhHcc/QaDj1ecEaWEZ73Qw4B1WfDMVJn0XiMT5r UXhraf7c9wMkrBh8Oc8I+QBgvzsdipIsouZBx81OUtnOrFSDEic9xfqkv77b8U8d sJcuxOaFtsIxBBUSkS2vaWp3YxUqpDFDqT7XFbqPWdhsUZNrDZnMe9Z4yk6Jdcf0 H6U2m7PH5Em3kLudBvXysbacIVFagFWrGb4vGfuN7wAHgy4I9YJdpOlPj8zYPp+J mZYphAYJfeFb+fbYK6vfr6WqRnpisxDqGKcVTrJtZAfwEjE4BS/k/siYvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHflqCCgrqLyx0s+Z86S2K+tZcIMB8GA1UdIwQY MBaAFKpX4OtKRQahmrLv+YmmfVWbmMwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDIt MGZkMDJjNDQyNTNiLzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZmFmZGItZjc0YS00YmExLTk3MDItMGZkMDJjNDQyNTNi LzEvcWxmZzYwcEZCcUdhc3VfNWlhWjlWWnVZekJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSECfsyu GjveXYgDmz4cV0AyyIX8LaZXtpOWBu64/CCARQynce7ZtQr21aRNxB4giws1e/zG DxLkapCbgRLePw5PiZrKa4vhZ9s1z7g9FtLuIHGv8e5vb1bvqvuNrJcVyI1an+HV F10QQNucifc58mlFPWRTXYF3ouj4qM4OZlAr00u/TOOejwkxp+ZUPLfbzecI5/f3 OquhWK/wNxIXVWJEKfDZqjPvUodMJedA38ESME4G5wtaTpPXSDIcJDsGy44dv58/ N5nl1brfLj8hlmFoD6jx5vCck+WR/V0MjQY7LG78V9EUSTp1LBk9y4CpQVB6GPu7 ORNyENmW9e8xjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:49:23 2026 by rpki-client