This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json) Hash identifier: CTHVlpyaVziMT3TOYL3dMnct99jO+rNIKJ1JIjqVoLM= Subject key identifier: A7:2C:FD:B4:66:2A:DD:E1:F6:DB:96:F2:32:97:C7:3F:D3:0D:D8:24 Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Certificate serial: 019BF5077F65EE710BDDB2791F8CEE7D9187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft Manifest number: 10AA Signing time: Sun 25 Jan 2026 12:01:07 +0000 Manifest this update: Sun 25 Jan 2026 12:01:07 +0000 Manifest next update: Mon 26 Jan 2026 12:01:07 +0000 Files and hashes: 1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=) 2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: MwpDqIS05BLewgh1WPWg71lhlYpTENq5d+Vae35I1xE=) 3: g7UrTtSi9lC9FtScbdFi6vmPG8A.roa (hash: 9bMP8pgyCTANYeZlQWWvnnhz13Jp6puZHGDV9OfYQg0=) 4: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=) 5: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7f:65:ee:71:0b:dd:b2:79:1f:8c:ee:7d:91:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Validity Not Before: Jan 25 12:01:07 2026 GMT Not After : Jan 26 12:01:07 2026 GMT Subject: CN=a72cfdb4662adde1f6db96f23297c73fd30dd824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:a7:10:7c:5e:36:98:42:a2:ae:b7:02:e6: cd:fa:2e:bc:f6:4d:e5:f1:7a:99:d3:06:73:f6:5e: 80:93:6d:13:a9:42:c5:9e:b1:be:5d:69:e9:fe:b1: 58:b7:2a:42:ab:62:ab:f6:aa:b0:f3:05:4a:d1:7e: cd:d4:60:34:42:e6:4d:b1:ec:ae:4e:4c:6b:37:15: bc:9b:aa:e6:34:84:43:36:8f:7e:c2:f1:5f:bd:fd: df:7f:91:ce:55:25:23:d9:fc:f8:b7:7d:52:bc:fd: 53:89:0a:0b:8b:5e:5e:8f:71:74:7d:cf:9d:eb:0a: 0c:2e:79:60:21:2c:82:a5:2c:db:21:50:9d:4e:1a: 72:50:a3:9f:26:35:62:d9:d4:dc:c8:9d:e2:60:92: 0e:47:19:84:1c:85:49:7c:9f:e9:1f:ec:a9:d9:1e: 22:f6:79:a8:2f:d3:a8:c0:9b:e0:59:61:eb:37:6f: 5a:e8:05:2b:3c:02:65:04:85:5a:1f:5d:51:54:bf: 2e:41:37:a5:f9:84:f0:7a:a4:81:1d:6d:ea:43:fa: 70:e7:9a:70:29:24:41:04:b5:b8:2c:1f:51:8b:31: 60:a4:52:28:46:76:65:75:aa:cb:3b:78:ad:2e:70: 9c:52:6b:36:e5:79:9a:b1:57:fb:51:dc:0e:19:87: 0c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:FD:B4:66:2A:DD:E1:F6:DB:96:F2:32:97:C7:3F:D3:0D:D8:24 X509v3 Authority Key Identifier: keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0b:6c:2e:8f:14:8b:07:ea:66:b2:83:64:0b:ac:3c:c5:30: 8f:87:60:0e:89:3c:3b:ce:3d:39:df:8f:c0:f1:76:d2:53:df: eb:2d:9b:46:a5:85:09:55:3a:fe:4a:1c:d9:c8:d9:23:32:20: 4f:4c:c1:9e:6a:57:ae:0a:3e:96:d3:b3:74:e3:f6:50:1e:57: e6:8d:eb:a7:b0:c7:20:7e:16:42:37:be:d0:d3:0b:e1:3c:6e: 7a:42:d5:88:fe:3e:7e:2b:03:9e:d5:66:de:12:99:ff:43:fc: 87:63:c9:ad:db:c8:91:9e:24:e7:c7:6b:97:93:4f:27:57:cd: d0:c7:22:49:7e:93:e1:e3:83:26:8b:0f:10:30:36:57:e2:de: 6e:b0:85:17:87:a1:95:72:2d:84:a2:ea:77:63:6b:fe:66:93: 61:aa:e2:5b:c5:bd:f5:2d:d5:0e:a3:f3:cb:5e:63:a8:25:3a: 1f:8d:04:7e:e1:7b:3d:cc:bd:7f:bd:9d:2b:58:99:96:c9:2d: 1b:87:cd:ad:56:19:f5:67:57:37:9c:5f:ac:ac:22:13:7e:a4: ab:0b:78:9a:10:27:d0:17:9a:2e:2d:b1:63:1e:e0:fe:dc:3e: d7:8c:aa:c2:0d:cd:31:46:af:dd:14:23:9f:41:8c:2f:cf:79: 37:b1:75:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B39l7nEL3bJ5H4zufZGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm Mzg5ZjUwHhcNMjYwMTI1MTIwMTA3WhcNMjYwMTI2MTIwMTA3WjAzMTEwLwYDVQQD EyhhNzJjZmRiNDY2MmFkZGUxZjZkYjk2ZjIzMjk3YzczZmQzMGRkODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFSnEHxeNphCoq63AubN+i689k3l 8XqZ0wZz9l6Ak20TqULFnrG+XWnp/rFYtypCq2Kr9qqw8wVK0X7N1GA0QuZNseyu TkxrNxW8m6rmNIRDNo9+wvFfvf3ff5HOVSUj2fz4t31SvP1TiQoLi15ej3F0fc+d 6woMLnlgISyCpSzbIVCdThpyUKOfJjVi2dTcyJ3iYJIORxmEHIVJfJ/pH+yp2R4i 9nmoL9OowJvgWWHrN29a6AUrPAJlBIVaH11RVL8uQTel+YTweqSBHW3qQ/pw55pw KSRBBLW4LB9RizFgpFIoRnZldarLO3itLnCcUms25XmasVf7UdwOGYcMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcs/bRmKt3h9tuW8jKXxz/TDdgkMB8GA1UdIwQY MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt MmJlZmZmZDU3ZmI3LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3 LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwtsLo8U iwfqZrKDZAusPMUwj4dgDok8O849Od+PwPF20lPf6y2bRqWFCVU6/koc2cjZIzIg T0zBnmpXrgo+ltOzdOP2UB5X5o3rp7DHIH4WQje+0NML4TxuekLViP4+fisDntVm 3hKZ/0P8h2PJrdvIkZ4k58drl5NPJ1fN0MciSX6T4eODJosPEDA2V+LebrCFF4eh lXIthKLqd2Nr/maTYariW8W99S3VDqPzy15jqCU6H40EfuF7Pcy9f72dK1iZlskt G4fNrVYZ9WdXN5xfrKwiE36kqwt4mhAn0BeaLi2xYx7g/tw+14yqwg3NMUav3RQj n0GML895N7F17g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:41 2026 by rpki-client