This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json) Hash identifier: doN0gQcHNkC9gQOFS7Qin3CmObxDzm1viBhE2oKUYoY= Subject key identifier: 0D:C2:C0:3A:D1:97:27:9C:22:AB:CD:78:04:88:B9:B2:E8:B0:1C:C6 Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Certificate serial: 019BF49924BAAAE309E63F1BFC87F9A4AD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 10:00:35 +0000 Manifest this update: Sun 25 Jan 2026 10:00:35 +0000 Manifest next update: Mon 26 Jan 2026 10:00:35 +0000 Files and hashes: 1: COcuQD28TY4ZqHPvGBIq2LU3DXk.roa (hash: sGBU4PQ1UIgFaLuANN/BNFi8JnXaw9XHPOkCM2vz3ZQ=) 2: K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa (hash: ivJfY98y3w5lIdblfpjkHHl9Y491gAGuVUxW2bbSNrk=) 3: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: F0PUwdXtYu8Gjom5z/Vy2q9d2RSjwsPv5SKULwZpMtI=) 4: SLqudbuR-X_G17PVNpWnd2oSWUg.roa (hash: D231831UXSiNe5nD27nyCz/MyBN0j+z0R+T49a0xy84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:24:ba:aa:e3:09:e6:3f:1b:fc:87:f9:a4:ad:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52 Validity Not Before: Jan 25 10:00:35 2026 GMT Not After : Jan 26 10:00:35 2026 GMT Subject: CN=0dc2c03ad197279c22abcd780488b9b2e8b01cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:bb:b2:aa:dc:79:99:b7:6f:32:95:86:fa: c7:78:56:43:31:e4:a7:94:e5:fb:6d:8f:df:0a:61: 7a:45:a3:fd:df:24:2f:1a:b7:da:44:1e:de:d3:0a: 55:d5:87:2e:97:4e:7c:b5:9d:df:f3:9e:9a:fd:ed: 75:f7:84:b1:b0:d3:5e:70:7b:aa:d6:65:97:91:3d: 03:c2:06:8b:42:47:a8:e8:87:44:72:03:d2:77:ea: fd:9a:09:15:8a:1d:53:b8:d8:55:59:24:a3:40:8c: 74:51:97:32:53:de:e9:b0:ea:62:3d:a2:88:21:db: 87:59:b3:85:35:5a:75:10:c2:74:39:87:ca:dd:fe: 29:0c:69:bd:6a:8a:a5:d7:5f:de:04:b3:00:63:14: 45:9d:0b:01:63:5d:cb:ba:eb:48:44:33:c7:ac:95: 16:5a:68:d9:33:0c:13:db:cf:cb:32:1a:de:b6:6c: 67:b0:8b:00:58:dc:ac:94:ed:1f:ae:bb:a9:e0:0d: 54:38:7a:f4:ff:cc:b3:a4:9a:56:61:e9:97:b2:de: 40:d5:e6:50:81:49:df:08:43:63:18:27:81:3d:a4: 66:04:0c:ad:33:fa:6c:22:46:5e:4b:0b:67:78:71: b2:69:29:4d:bb:a5:8e:e5:91:07:38:43:b0:ee:b3: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C2:C0:3A:D1:97:27:9C:22:AB:CD:78:04:88:B9:B2:E8:B0:1C:C6 X509v3 Authority Key Identifier: keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4e:76:18:56:be:5c:3c:20:01:9b:67:16:6f:a6:c3:51:03: 38:5f:c9:48:c1:f1:60:f3:47:19:7d:cc:12:9d:ec:8c:43:8e: 8a:46:21:73:3e:dc:e7:5a:8f:c8:57:99:f9:1e:39:c4:97:28: fb:66:64:5e:6d:0f:26:76:c1:cc:86:21:4f:d9:da:81:86:9f: 17:34:59:57:98:99:3b:82:d5:c6:4f:71:4d:4b:f4:30:d8:4e: 28:cf:d5:ec:31:f9:3b:83:6f:8b:7e:35:10:cd:78:6a:79:9a: cd:9a:a9:b8:e1:b8:bb:97:58:bf:27:84:c0:2c:44:65:36:6a: 32:05:16:79:c8:62:43:e6:7c:45:dd:ec:e8:24:ef:7b:a6:12: 5e:87:6d:52:7f:27:bf:8b:59:7e:73:de:cf:98:9f:6d:ea:4e: 6d:71:98:6c:78:20:3f:c7:a8:31:d8:bd:b6:1b:b7:34:e1:80: 30:d0:63:6f:f3:bd:e2:e5:18:b9:fc:48:97:6d:3a:ae:e5:3a: 3f:86:f4:c5:d8:85:f3:11:8a:74:cc:da:8e:d8:fe:56:e5:fc: 0a:f2:0c:be:06:c4:6c:0c:43:31:b4:8e:80:f1:39:7e:d5:7c: 30:e3:e5:e8:f4:49:fe:26:04:4a:9c:68:b6:82:89:42:01:3f: 39:21:3c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mSS6quMJ5j8b/If5pK0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzYzZGIxZWQzMzRhN2M1MjgwYWI5ODU0NzQyOTE0YWUw YzRjNTIwHhcNMjYwMTI1MTAwMDM1WhcNMjYwMTI2MTAwMDM1WjAzMTEwLwYDVQQD EygwZGMyYzAzYWQxOTcyNzljMjJhYmNkNzgwNDg4YjliMmU4YjAxY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKy7sqrceZm3bzKVhvrHeFZDMeSn lOX7bY/fCmF6RaP93yQvGrfaRB7e0wpV1Ycul058tZ3f856a/e1194SxsNNecHuq 1mWXkT0DwgaLQkeo6IdEcgPSd+r9mgkVih1TuNhVWSSjQIx0UZcyU97psOpiPaKI IduHWbOFNVp1EMJ0OYfK3f4pDGm9aoql11/eBLMAYxRFnQsBY13LuutIRDPHrJUW WmjZMwwT28/LMhretmxnsIsAWNyslO0frrup4A1UOHr0/8yzpJpWYemXst5A1eZQ gUnfCENjGCeBPaRmBAytM/psIkZeSwtneHGyaSlNu6WO5ZEHOEOw7rNjSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3CwDrRlyecIqvNeASIubLosBzGMB8GA1UdIwQY MBaAFEF2PbHtM0p8UoCrmFR0KRSuDExSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMt NDljOTVlZWFjODEyLzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lZmQwOTQtNGJjMC00YWQwLWFiYTMtNDljOTVlZWFjODEy LzEvUVhZOXNlMHpTbnhTZ0t1WVZIUXBGSzRNVEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU52GFa+ XDwgAZtnFm+mw1EDOF/JSMHxYPNHGX3MEp3sjEOOikYhcz7c51qPyFeZ+R45xJco +2ZkXm0PJnbBzIYhT9nagYafFzRZV5iZO4LVxk9xTUv0MNhOKM/V7DH5O4Nvi341 EM14anmazZqpuOG4u5dYvyeEwCxEZTZqMgUWechiQ+Z8Rd3s6CTve6YSXodtUn8n v4tZfnPez5ifbepObXGYbHggP8eoMdi9thu3NOGAMNBjb/O94uUYufxIl206ruU6 P4b0xdiF8xGKdMzajtj+VuX8CvIMvgbEbAxDMbSOgPE5ftV8MOPl6PRJ/iYESpxo toKJQgE/OSE8LQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:17 2026 by rpki-client