This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json) Hash identifier: OfdbPf1DWNqulh5D61HZRti5WE4hSdVIhQruGITH8UU= Subject key identifier: F5:DD:12:28:B0:73:5A:10:E7:AA:36:7E:37:73:EC:8D:A9:D6:F0:C7 Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Certificate serial: 019BFA64DB64308EA7D13B443C68551B4216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft Manifest number: 01F6 Signing time: Mon 26 Jan 2026 13:01:12 +0000 Manifest this update: Mon 26 Jan 2026 13:01:12 +0000 Manifest next update: Tue 27 Jan 2026 13:01:12 +0000 Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=) 2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: A7nzIYHHlaVcQC9T1sVHQLunwNoDZUM479imPIx/Rgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:db:64:30:8e:a7:d1:3b:44:3c:68:55:1b:42:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Validity Not Before: Jan 26 13:01:12 2026 GMT Not After : Jan 27 13:01:12 2026 GMT Subject: CN=f5dd1228b0735a10e7aa367e3773ec8da9d6f0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:27:2b:d8:e7:35:15:83:a2:72:53:06:fb: 8a:48:c2:05:7a:e7:9f:92:ee:60:39:72:a4:82:86: 34:e6:30:56:f1:f6:77:eb:50:44:bd:c7:79:5f:21: 70:60:2d:df:f3:74:d2:c5:87:99:aa:96:de:08:91: 07:32:30:e2:c8:da:b3:6a:73:86:ae:04:aa:d4:25: e2:4c:ed:51:74:7f:c5:02:81:7f:71:20:7d:66:9a: dc:3f:c3:a7:30:94:ee:9a:08:e9:e3:ea:11:46:40: 2c:c3:22:0a:3d:c4:6c:2f:57:17:41:d8:35:26:3a: 1d:b2:af:27:86:01:72:43:98:a0:fe:0a:9e:46:ef: 94:1a:8c:c8:46:41:24:44:63:1f:a8:eb:56:7c:07: ec:50:79:f5:d0:af:43:5d:18:a9:f4:04:79:bc:c1: d7:17:d4:cb:a2:b3:74:40:6a:b1:19:98:95:bd:d5: 23:f7:7f:e8:4f:26:7c:73:0d:79:1c:b6:45:25:81: 33:d0:d2:79:fc:ae:aa:94:5f:2e:af:82:d2:9d:67: 82:79:37:05:a9:af:91:34:ff:15:ac:82:56:26:be: 14:1e:27:fc:cc:f4:bb:4e:71:14:c3:26:71:f4:66: ae:c2:1a:b6:0e:c0:0f:c0:e6:25:db:45:a6:f7:82: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DD:12:28:B0:73:5A:10:E7:AA:36:7E:37:73:EC:8D:A9:D6:F0:C7 X509v3 Authority Key Identifier: keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:da:a7:23:cb:fa:ea:b2:7c:57:3e:8c:f3:9d:82:7c:aa:f6: 9c:44:19:50:ea:c9:e6:d4:ab:be:ce:4c:10:e4:19:12:44:9f: c1:a7:2d:18:8e:5c:51:35:fa:31:cc:f4:0f:a0:1a:d5:9f:2f: 14:4d:2f:af:24:bc:e8:ed:ef:21:2d:4e:13:e3:85:16:3a:60: cf:53:ee:ff:39:8d:05:06:c7:07:07:5d:d5:e9:44:52:a8:e9: a5:2f:b9:53:ef:d5:cb:3d:99:2f:a2:a5:fb:f5:1e:ad:3e:bd: 0f:8e:46:05:2e:93:dd:60:18:ac:31:ee:17:a0:70:8f:86:3b: 35:4e:31:d4:10:d4:51:e0:5c:dd:d5:32:27:a9:80:fe:95:83: a4:30:8b:90:f2:f6:25:57:7e:9d:1e:56:37:02:cf:df:ef:19: 5b:25:8e:09:52:ec:2a:15:49:48:fb:1e:ea:f9:da:a2:2c:fe: c9:f8:d8:de:8a:b3:63:d9:e1:cb:3f:68:f0:b7:26:93:8e:37: b1:37:39:3e:8b:d7:49:1a:0f:33:ac:ea:05:dc:ac:b4:1b:a5: d0:6f:ef:75:f8:47:6d:49:7a:6e:4c:3a:26:94:b7:88:45:33: 67:3a:a6:0a:4b:51:de:a0:95:09:3c:9d:18:89:d5:4f:50:a0: 4a:34:94:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZNtkMI6n0TtEPGhVG0IWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj MTI2MzcwHhcNMjYwMTI2MTMwMTEyWhcNMjYwMTI3MTMwMTEyWjAzMTEwLwYDVQQD EyhmNWRkMTIyOGIwNzM1YTEwZTdhYTM2N2UzNzczZWM4ZGE5ZDZmMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlycnK9jnNRWDonJTBvuKSMIFeuef ku5gOXKkgoY05jBW8fZ361BEvcd5XyFwYC3f83TSxYeZqpbeCJEHMjDiyNqzanOG rgSq1CXiTO1RdH/FAoF/cSB9ZprcP8OnMJTumgjp4+oRRkAswyIKPcRsL1cXQdg1 Jjodsq8nhgFyQ5ig/gqeRu+UGozIRkEkRGMfqOtWfAfsUHn10K9DXRip9AR5vMHX F9TLorN0QGqxGZiVvdUj93/oTyZ8cw15HLZFJYEz0NJ5/K6qlF8ur4LSnWeCeTcF qa+RNP8VrIJWJr4UHif8zPS7TnEUwyZx9Gauwhq2DsAPwOYl20Wm94LwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXdEiiwc1oQ56o2fjdz7I2p1vDHMB8GA1UdIwQY MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetqnI8v6 6rJ8Vz6M852CfKr2nEQZUOrJ5tSrvs5MEOQZEkSfwactGI5cUTX6Mcz0D6Aa1Z8v FE0vryS86O3vIS1OE+OFFjpgz1Pu/zmNBQbHBwdd1elEUqjppS+5U+/Vyz2ZL6Kl +/UerT69D45GBS6T3WAYrDHuF6Bwj4Y7NU4x1BDUUeBc3dUyJ6mA/pWDpDCLkPL2 JVd+nR5WNwLP3+8ZWyWOCVLsKhVJSPse6vnaoiz+yfjY3oqzY9nhyz9o8Lcmk443 sTc5PovXSRoPM6zqBdystBul0G/vdfhHbUl6bkw6JpS3iEUzZzqmCktR3qCVCTyd GInVT1CgSjSUpQ== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:18 2026 by rpki-client