This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json) Hash identifier: ZczWiNh2bpzwGQoeml53y5eY3UqEch+gu71gyYjfKPc= Subject key identifier: C2:C9:F2:95:00:2C:C7:4C:61:D7:08:92:F2:29:02:47:86:D3:85:C8 Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb Certificate serial: 019BF619AFC2FC22C43B4747901C29276129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft Manifest number: 08AE Signing time: Sun 25 Jan 2026 17:00:37 +0000 Manifest this update: Sun 25 Jan 2026 17:00:37 +0000 Manifest next update: Mon 26 Jan 2026 17:00:37 +0000 Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: yf+ydt3NHDJq43Zt2+C6rfK5SGpgTRqAXuRwsfO5NME=) 2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:af:c2:fc:22:c4:3b:47:47:90:1c:29:27:61:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb Validity Not Before: Jan 25 17:00:37 2026 GMT Not After : Jan 26 17:00:37 2026 GMT Subject: CN=c2c9f295002cc74c61d70892f229024786d385c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:55:f0:c1:65:23:3a:47:2e:51:8c:ae:98: db:80:a0:32:19:36:c2:e6:40:4a:2e:58:6d:99:2e: 5d:59:30:68:7e:e4:6e:7f:14:a6:e5:44:cb:f5:fc: 43:3d:85:15:99:ea:63:b6:a5:01:cf:bd:45:f7:4f: f4:f9:18:77:10:08:f6:ac:38:f7:67:fa:3c:37:53: 2d:c1:f3:a1:35:90:17:48:ac:9a:ca:69:ae:ef:03: 9d:cf:97:0a:c9:7e:fc:57:b0:62:26:d5:5b:4b:7c: 99:82:15:e6:af:97:e6:64:3e:d0:6c:65:a8:24:5b: 72:04:46:02:e8:0b:e2:90:c7:fc:3b:59:ca:25:d2: ac:c8:d5:62:c5:a5:e4:d3:3e:99:dc:90:53:48:f2: 08:57:f8:5d:5c:a6:25:15:ac:5a:59:76:e3:7b:83: 73:fc:8d:5e:8a:60:b8:03:1e:e5:e7:be:53:9f:f0: a2:03:3b:5c:89:8a:66:b0:7b:46:cd:82:9e:44:fc: 98:bb:cc:6d:f6:31:8a:79:5c:fe:8e:e8:d8:d8:dd: 55:60:eb:4a:0a:b4:7f:b2:c8:40:66:f7:54:9f:59: 86:f3:67:cf:de:7d:58:b9:8f:ed:79:75:b3:77:77: 1d:9c:3e:b7:47:6e:76:9f:47:91:8b:1e:25:cf:1f: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:F2:95:00:2C:C7:4C:61:D7:08:92:F2:29:02:47:86:D3:85:C8 X509v3 Authority Key Identifier: keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:25:4c:0d:11:a9:3c:01:6d:e4:c8:81:a3:a3:de:f3:90:8c: 67:ca:6e:b0:de:cc:fa:b9:52:2d:c3:a3:e9:c6:4a:6e:79:86: 70:65:af:f9:e6:27:a5:05:57:e2:83:70:12:99:57:1d:fa:32: bd:2f:0d:e1:58:01:f6:51:9b:17:71:d0:f7:b3:11:f6:9b:b3: b3:00:4e:63:ce:d9:62:0e:6d:34:02:ef:72:05:55:cf:7f:6e: 15:6e:e3:cf:a9:d6:07:fc:16:b2:47:44:ba:4a:48:31:92:97: 4e:7f:a4:34:93:bb:cd:a0:7b:f4:68:15:76:79:4f:0d:21:31: c7:f8:c9:6c:59:0f:85:e9:83:25:09:5c:31:b5:69:71:7d:7f: b1:2f:44:f8:db:13:96:74:bb:12:37:cc:4c:d3:a3:ea:e5:2d: a5:39:d5:72:6c:42:62:82:a2:d9:9f:69:14:d1:ab:03:5a:ca: ef:28:e4:e5:9f:35:47:4d:5e:59:3f:93:4a:b3:db:49:85:a0: 0d:16:56:8c:b6:db:9c:53:ea:57:41:f6:18:d6:a5:9e:c9:ed: f3:83:39:61:b0:58:ad:3b:fd:b6:ee:e5:38:41:79:89:f2:74: 71:e5:43:5d:c3:6d:95:b3:1f:22:54:e6:44:c8:89:ba:c0:4f: a8:e6:b8:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ga/C/CLEO0dHkBwpJ2EpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi MWE0Y2IwHhcNMjYwMTI1MTcwMDM3WhcNMjYwMTI2MTcwMDM3WjAzMTEwLwYDVQQD EyhjMmM5ZjI5NTAwMmNjNzRjNjFkNzA4OTJmMjI5MDI0Nzg2ZDM4NWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9V8MFlIzpHLlGMrpjbgKAyGTbC 5kBKLlhtmS5dWTBofuRufxSm5UTL9fxDPYUVmepjtqUBz71F90/0+Rh3EAj2rDj3 Z/o8N1MtwfOhNZAXSKyaymmu7wOdz5cKyX78V7BiJtVbS3yZghXmr5fmZD7QbGWo JFtyBEYC6AvikMf8O1nKJdKsyNVixaXk0z6Z3JBTSPIIV/hdXKYlFaxaWXbje4Nz /I1eimC4Ax7l575Tn/CiAztciYpmsHtGzYKeRPyYu8xt9jGKeVz+jujY2N1VYOtK CrR/sshAZvdUn1mG82fP3n1YuY/teXWzd3cdnD63R252n0eRix4lzx+iJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLJ8pUALMdMYdcIkvIpAkeG04XIMB8GA1UdIwQY MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyVMDRGp PAFt5MiBo6Pe85CMZ8pusN7M+rlSLcOj6cZKbnmGcGWv+eYnpQVX4oNwEplXHfoy vS8N4VgB9lGbF3HQ97MR9puzswBOY87ZYg5tNALvcgVVz39uFW7jz6nWB/wWskdE ukpIMZKXTn+kNJO7zaB79GgVdnlPDSExx/jJbFkPhemDJQlcMbVpcX1/sS9E+NsT lnS7EjfMTNOj6uUtpTnVcmxCYoKi2Z9pFNGrA1rK7yjk5Z81R01eWT+TSrPbSYWg DRZWjLbbnFPqV0H2GNalnsnt84M5YbBYrTv9tu7lOEF5ifJ0ceVDXcNtlbMfIlTm RMiJusBPqOa41g== -----END CERTIFICATE-----Generated at Mon Jan 26 00:44:16 2026 by rpki-client