This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json) Hash identifier: 1SeQPFsO6k8z123juShF8wk4HUK78qe0Ou0VfjMsDcU= Subject key identifier: 9D:6D:2D:9C:8D:1D:A1:67:DE:C8:F3:43:D7:78:AB:D7:A7:26:74:6E Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Certificate serial: 019BF6F5DEEABC5DFB91C445EA567B272B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft Manifest number: 10AB Signing time: Sun 25 Jan 2026 21:01:06 +0000 Manifest this update: Sun 25 Jan 2026 21:01:06 +0000 Manifest next update: Mon 26 Jan 2026 21:01:06 +0000 Files and hashes: 1: 6RTIAwrwJbLJ1fPq_cac7ZJtAcY.roa (hash: 2ERzYxNpNYyjAlD2AAScZj0ODsBHs3ahvyC6T+s+AbM=) 2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: MpbNqzp5+PKM5p8QghmZSGbJSmllzN9zDSXOa7u72rU=) 3: g7UrTtSi9lC9FtScbdFi6vmPG8A.roa (hash: 9bMP8pgyCTANYeZlQWWvnnhz13Jp6puZHGDV9OfYQg0=) 4: oTRGw6Zs-d6bpDvQ-kL6ClRG4Ik.roa (hash: bLoXf9n41kaDI/ipYk9F3/X8uzxUQT3nnCgm1AJq7NE=) 5: oztBXyy3buPJ87mv28gbdNDGLjw.roa (hash: j94QmNmrVHRGHpcXkadwtbn926rIcrEUhkEOlIuoY3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:de:ea:bc:5d:fb:91:c4:45:ea:56:7b:27:2b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5 Validity Not Before: Jan 25 21:01:06 2026 GMT Not After : Jan 26 21:01:06 2026 GMT Subject: CN=9d6d2d9c8d1da167dec8f343d778abd7a726746e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:62:07:26:47:7e:6b:99:60:ca:55:e1:81: 1c:1d:79:b0:1d:3e:75:32:42:36:4a:89:33:94:e6: 48:3a:18:d9:f3:53:de:f4:58:c7:89:3e:07:4b:81: 74:b1:c1:70:fb:53:49:10:07:53:15:e0:b0:5a:11: fc:27:7c:31:f8:22:d0:19:db:78:25:d2:d3:11:a9: 59:60:b6:77:76:2f:66:1a:ca:e9:7b:0d:5e:da:3d: cc:06:4a:0f:cd:f3:b3:70:29:1c:a9:be:96:4a:e6: a2:00:07:94:c4:e7:c3:f8:f3:2c:8b:0d:11:3b:1c: 28:b8:d3:15:ff:57:7f:ce:fc:d5:28:54:e5:e8:5c: 3f:d6:93:5f:c2:7c:0b:c6:70:25:69:14:58:06:fd: 25:a3:56:92:f4:35:ad:97:0b:7c:67:ae:2d:b2:f1: e7:68:a4:d6:77:ea:0c:99:08:d3:19:13:c5:e2:ac: f1:29:4e:ad:f2:8e:c8:ad:de:cc:a1:b5:69:9a:b2: ce:8d:94:d8:11:36:ad:bf:1f:2a:fc:e3:2f:71:37: ae:f1:56:64:d8:12:9c:d7:58:b3:1c:ec:3b:79:26: fd:69:fc:95:c6:c5:4c:d4:49:7f:77:e5:8f:4e:73: f7:5f:c4:53:36:9e:2e:8e:15:73:25:a1:89:4a:3a: 90:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6D:2D:9C:8D:1D:A1:67:DE:C8:F3:43:D7:78:AB:D7:A7:26:74:6E X509v3 Authority Key Identifier: keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:60:d8:cd:ad:a7:0b:42:44:b7:e6:c0:0a:46:97:6b:73:4d: 3d:3a:df:9c:c5:c6:73:19:d7:f9:54:e6:ef:e7:08:a4:c6:09: ae:87:60:bc:3e:e4:a3:96:58:c9:f1:8d:b7:df:69:be:71:46: a2:ff:5c:82:68:bd:c5:6d:1f:4c:9a:df:3a:38:16:79:5c:e4: 0c:1a:f6:13:db:9f:13:b5:6d:69:bb:b4:79:46:6b:0a:e4:74: be:2c:61:15:3d:03:73:da:fd:46:ce:de:92:34:3a:1e:cd:48: 49:eb:df:6e:90:6b:ff:71:a8:a0:af:8c:70:3c:95:6c:b0:b3: a4:2a:00:07:7b:df:5e:af:4c:2f:bb:fa:7b:26:f0:e9:64:32: 2f:be:b1:10:a9:99:3f:47:e1:2c:92:52:0c:7c:2d:d5:d2:4f: b9:b9:6e:d5:c0:a9:1c:dc:2e:e5:07:6b:52:fc:04:e1:cb:a7: f0:32:40:8a:28:72:71:4a:31:bc:02:18:dc:1c:2f:70:08:37: 75:c1:9a:d1:5b:07:cd:d8:45:de:ed:7c:c1:99:29:1c:a7:cc: a0:7f:c5:c6:72:3f:f1:09:c5:dd:7b:cb:04:fd:df:9e:54:5f: f1:21:f7:29:f3:58:e0:19:3a:db:e4:d1:4d:df:cc:3e:77:55: f8:c6:65:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29d7qvF37kcRF6lZ7Jyt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm Mzg5ZjUwHhcNMjYwMTI1MjEwMTA2WhcNMjYwMTI2MjEwMTA2WjAzMTEwLwYDVQQD Eyg5ZDZkMmQ5YzhkMWRhMTY3ZGVjOGYzNDNkNzc4YWJkN2E3MjY3NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlpiByZHfmuZYMpV4YEcHXmwHT51 MkI2SokzlOZIOhjZ81Pe9FjHiT4HS4F0scFw+1NJEAdTFeCwWhH8J3wx+CLQGdt4 JdLTEalZYLZ3di9mGsrpew1e2j3MBkoPzfOzcCkcqb6WSuaiAAeUxOfD+PMsiw0R OxwouNMV/1d/zvzVKFTl6Fw/1pNfwnwLxnAlaRRYBv0lo1aS9DWtlwt8Z64tsvHn aKTWd+oMmQjTGRPF4qzxKU6t8o7Ird7MobVpmrLOjZTYETatvx8q/OMvcTeu8VZk 2BKc11izHOw7eSb9afyVxsVM1El/d+WPTnP3X8RTNp4ujhVzJaGJSjqQVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1tLZyNHaFn3sjzQ9d4q9enJnRuMB8GA1UdIwQY MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt MmJlZmZmZDU3ZmI3LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3 LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2DYza2n C0JEt+bACkaXa3NNPTrfnMXGcxnX+VTm7+cIpMYJrodgvD7ko5ZYyfGNt99pvnFG ov9cgmi9xW0fTJrfOjgWeVzkDBr2E9ufE7Vtabu0eUZrCuR0vixhFT0Dc9r9Rs7e kjQ6Hs1ISevfbpBr/3GooK+McDyVbLCzpCoAB3vfXq9ML7v6eybw6WQyL76xEKmZ P0fhLJJSDHwt1dJPublu1cCpHNwu5QdrUvwE4cun8DJAiihycUoxvAIY3BwvcAg3 dcGa0VsHzdhF3u18wZkpHKfMoH/FxnI/8QnF3XvLBP3fnlRf8SH3KfNY4Bk62+TR Td/MPndV+MZlOA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:59 2026 by rpki-client