This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json) Hash identifier: WnimjWeHQTitNUXsmsLiq6qtPtxjROv0gZhfF0hIfgc= Subject key identifier: CB:86:4B:57:83:A6:57:20:3D:39:E1:30:EC:3A:FE:85:B7:2A:10:D8 Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Certificate serial: 019BF808A71E77D71A41694293508B4DD2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft Manifest number: 0502 Signing time: Mon 26 Jan 2026 02:01:15 +0000 Manifest this update: Mon 26 Jan 2026 02:01:15 +0000 Manifest next update: Tue 27 Jan 2026 02:01:15 +0000 Files and hashes: 1: 17zD_45Ojk85pCPTQUH6kHV39wg.roa (hash: 2aOFgr3OtXXpdP6T9v8he8K/GmBIDnp5QHJOyXnb+rI=) 2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: 3BS516CBGAJSUhriQs5LKASu2z7h/HYhNY6UUv7Gm44=) 3: tVgtWKf3hovbROlWOuakv2HBNcQ.roa (hash: tZH+J6Wky64drRqnuI4atQm17bvmIikThIiw7SOfunU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:a7:1e:77:d7:1a:41:69:42:93:50:8b:4d:d2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42 Validity Not Before: Jan 26 02:01:15 2026 GMT Not After : Jan 27 02:01:15 2026 GMT Subject: CN=cb864b5783a657203d39e130ec3afe85b72a10d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:cd:f0:a2:0a:e0:d3:1a:3a:82:64:3e:5a: 44:17:8c:c5:db:66:33:59:db:21:1a:c3:bc:c2:5f: d6:5c:b7:25:58:a7:7f:f8:05:60:07:48:7c:85:af: 7b:34:ce:05:62:a2:25:17:4e:63:79:17:1b:a9:08: 7a:b5:eb:ce:c1:44:fd:94:95:46:70:40:af:4a:52: d7:83:c5:ff:7b:bf:56:9d:df:2c:a1:96:df:59:d5: 67:a1:0d:de:5b:25:16:76:c8:50:e7:e2:53:a0:13: 33:b9:26:c4:36:18:ee:72:ab:5a:05:d0:1a:57:8b: 13:09:67:ff:6f:ae:15:6c:44:27:33:2c:de:15:5e: 36:e1:4e:0c:4d:27:bf:b3:84:ff:32:c7:15:26:3c: d0:a0:0b:4a:d5:f1:ab:65:f0:d4:9b:60:08:be:58: 3b:0a:12:07:7e:cd:6d:e1:54:60:97:2a:1c:90:78: 40:17:48:15:4c:a5:cd:b4:86:14:f9:18:83:10:ba: c8:18:4c:65:4c:e0:74:00:c0:f6:56:05:75:b1:dc: f7:e1:50:93:b7:2e:ff:98:cd:c5:0b:66:da:8e:a3: fc:31:d0:b7:f8:e4:8d:fd:30:b9:3f:5a:d7:b5:ea: b6:33:c7:d2:bb:cf:23:df:7e:38:b9:f7:07:07:72: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:86:4B:57:83:A6:57:20:3D:39:E1:30:EC:3A:FE:85:B7:2A:10:D8 X509v3 Authority Key Identifier: keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:58:90:8f:08:c0:88:e2:70:04:8e:42:6d:61:8a:cc:38:2a: da:38:01:59:90:23:e0:0e:8a:a0:6c:56:33:fa:b7:48:ca:3f: 78:df:d6:9f:d3:13:02:5d:46:82:05:d5:fe:e9:e5:92:a4:1f: 53:01:2a:40:6d:9c:35:a6:33:5d:33:51:ea:2f:44:75:ca:1b: f2:44:51:84:73:f1:b4:37:74:d4:02:72:5d:d5:16:51:d4:0e: eb:70:96:29:f2:1b:07:c4:8b:66:a5:01:5b:be:a6:7d:a3:e6: be:cc:67:35:25:54:12:e5:e4:88:bf:70:93:45:36:7b:54:21: 1e:be:6b:9d:89:a2:7f:8a:5e:04:d4:ed:af:32:99:70:e0:38: a7:8e:97:35:bb:41:a8:a0:bf:7e:6a:5a:43:bf:f6:59:51:46: 7a:18:12:69:43:b9:d6:e3:7c:20:d2:e0:62:e7:cb:2c:3e:1f: 23:63:a6:25:fd:b0:e9:81:fb:15:e3:15:09:56:0c:71:cb:f5: 42:25:f0:fd:ee:16:b7:0e:08:0a:80:cd:b0:7c:0a:71:6b:5a: f9:17:5a:47:7a:cc:bd:c8:cc:ce:61:1d:1d:4e:d5:35:45:68: 36:8c:ef:d3:ac:18:b7:d7:d5:83:b3:0e:04:fb:15:d2:61:26: 74:3a:12:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CKced9caQWlCk1CLTdLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm YjVmNDIwHhcNMjYwMTI2MDIwMTE1WhcNMjYwMTI3MDIwMTE1WjAzMTEwLwYDVQQD EyhjYjg2NGI1NzgzYTY1NzIwM2QzOWUxMzBlYzNhZmU4NWI3MmExMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2DN8KIK4NMaOoJkPlpEF4zF22Yz WdshGsO8wl/WXLclWKd/+AVgB0h8ha97NM4FYqIlF05jeRcbqQh6tevOwUT9lJVG cECvSlLXg8X/e79Wnd8soZbfWdVnoQ3eWyUWdshQ5+JToBMzuSbENhjucqtaBdAa V4sTCWf/b64VbEQnMyzeFV424U4MTSe/s4T/MscVJjzQoAtK1fGrZfDUm2AIvlg7 ChIHfs1t4VRglyockHhAF0gVTKXNtIYU+RiDELrIGExlTOB0AMD2VgV1sdz34VCT ty7/mM3FC2bajqP8MdC3+OSN/TC5P1rXteq2M8fSu88j3344ufcHB3IxHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuGS1eDplcgPTnhMOw6/oW3KhDYMB8GA1UdIwQY MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACViQjwjA iOJwBI5CbWGKzDgq2jgBWZAj4A6KoGxWM/q3SMo/eN/Wn9MTAl1GggXV/unlkqQf UwEqQG2cNaYzXTNR6i9Edcob8kRRhHPxtDd01AJyXdUWUdQO63CWKfIbB8SLZqUB W76mfaPmvsxnNSVUEuXkiL9wk0U2e1QhHr5rnYmif4peBNTtrzKZcOA4p46XNbtB qKC/fmpaQ7/2WVFGehgSaUO51uN8INLgYufLLD4fI2OmJf2w6YH7FeMVCVYMccv1 QiXw/e4Wtw4ICoDNsHwKcWta+RdaR3rMvcjMzmEdHU7VNUVoNozv06wYt9fVg7MO BPsV0mEmdDoSpw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:17 2026 by rpki-client