This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json) Hash identifier: fr5wno5bUrMFt06BjOn+EEDg2H4OuB5myeClGpzkJrk= Subject key identifier: D2:DF:93:54:D7:2C:F0:46:E3:E9:56:A6:50:D2:F8:2A:CD:5E:8C:A1 Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be Certificate serial: 019BF6517899BEA1570090C911A91F68A20D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft Manifest number: 07FA Signing time: Sun 25 Jan 2026 18:01:32 +0000 Manifest this update: Sun 25 Jan 2026 18:01:32 +0000 Manifest next update: Mon 26 Jan 2026 18:01:32 +0000 Files and hashes: 1: LxJ2cP9FD-p0dupRMRZXbJCM7sY.asa (hash: iBiku35zb/mbmMqlLPtW45yVOj3xwgmSYQcfBAIaZ4s=) 2: YpBXBhkoKA6B8vn-SSW0uagBSZg.asa (hash: 6NDwm9dk0C3RTxSSU90zrNxDOX6XaM6xxTgSgc87I9Q=) 3: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: rLrRiYryM3W/GKrt6cRtvU1GW8i2fvebCg3wsRfEOeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:78:99:be:a1:57:00:90:c9:11:a9:1f:68:a2:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be Validity Not Before: Jan 25 18:01:32 2026 GMT Not After : Jan 26 18:01:32 2026 GMT Subject: CN=d2df9354d72cf046e3e956a650d2f82acd5e8ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:81:14:16:73:1d:e2:7f:50:bb:7e:46:c2: 7f:b0:c2:14:9c:19:fd:3a:7b:17:dc:59:89:4b:7f: 9a:e0:b4:a4:9e:b7:05:bf:32:da:ec:ae:ca:1e:3f: 47:aa:b4:3c:01:e1:c9:5a:89:e0:10:39:0d:88:0f: ac:a4:b2:a0:b5:c0:74:fc:7f:c2:2d:43:5a:6d:10: 5e:2d:75:d0:ff:7c:1a:99:86:ce:8f:25:69:93:e0: 3d:f1:23:53:b7:9d:d2:c8:49:f7:fe:d4:fb:e9:04: 10:60:98:53:c7:90:2a:54:a9:ee:74:61:47:87:4f: 3d:10:94:45:e9:f1:51:5d:b8:38:48:d0:96:a9:a9: 53:e4:f5:b2:fa:3f:fb:e4:44:aa:5c:ab:6f:a3:d3: 46:7d:37:c6:88:ce:8e:9e:4e:38:9a:56:f1:f6:c3: 43:76:ff:0a:94:7e:d3:22:5e:d1:83:29:cc:32:18: 5f:86:29:22:13:ed:9c:63:0a:eb:39:cc:ed:5a:d5: 5e:d4:a4:98:84:1e:c5:6d:91:11:00:13:6e:2a:b5: 7f:3a:62:13:c8:73:90:04:3a:68:c9:56:00:71:ad: c4:f8:8c:8c:c9:11:1c:fd:72:cd:20:f1:ff:ad:4a: 59:a4:6e:bb:76:a4:d2:b7:1b:41:60:e6:92:15:7d: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DF:93:54:D7:2C:F0:46:E3:E9:56:A6:50:D2:F8:2A:CD:5E:8C:A1 X509v3 Authority Key Identifier: keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c3:70:ca:30:15:4f:49:ba:27:b8:53:cc:fe:c0:60:28:41: e6:33:bd:67:0a:f6:98:97:2a:ab:9a:61:2d:25:18:cd:51:35: d6:57:d4:2c:70:93:44:1d:51:e0:4b:a8:61:7e:41:32:4f:f2: 90:bd:6d:a6:1a:6a:bc:4c:c0:18:d6:99:08:77:f6:0b:e7:33: 09:6c:0e:e7:04:44:be:61:8b:37:60:d4:13:54:e9:be:44:5d: 4b:f6:99:77:bc:f3:e8:46:be:e0:87:5b:b9:64:f5:d0:2d:3f: bb:f9:02:7d:fc:e0:a2:d5:6d:6f:a2:ef:b5:38:dd:15:5f:c8: 7b:26:8a:8e:97:c6:69:e6:f0:7c:4c:9c:bb:c8:88:79:2c:d5: 6d:1e:d0:7a:88:d7:7a:a3:4d:b0:03:49:77:3b:20:b7:09:81: 97:24:d0:d9:1a:ea:63:db:8f:44:8e:3c:86:c0:14:eb:5a:a6: 4e:b5:71:2d:75:54:36:da:42:9f:1e:fd:96:82:5b:f1:78:c0: bf:6e:44:39:8d:f2:a4:ab:5a:01:01:e4:e9:c9:a0:92:5c:a3: 7c:7a:54:ff:d1:94:fd:b0:46:65:db:88:82:3e:7b:c8:4c:08: e5:34:19:13:8d:cd:f8:68:1e:f6:70:f5:65:d8:54:b1:1f:4d: 4e:72:c4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXiZvqFXAJDJEakfaKINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMjdmNTEyYjBhMTAyNjVkZjJiMzQ2ZjE0M2E2NDVjMzgy NzQyYmUwHhcNMjYwMTI1MTgwMTMyWhcNMjYwMTI2MTgwMTMyWjAzMTEwLwYDVQQD EyhkMmRmOTM1NGQ3MmNmMDQ2ZTNlOTU2YTY1MGQyZjgyYWNkNWU4Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSqBFBZzHeJ/ULt+RsJ/sMIUnBn9 OnsX3FmJS3+a4LSknrcFvzLa7K7KHj9HqrQ8AeHJWongEDkNiA+spLKgtcB0/H/C LUNabRBeLXXQ/3wamYbOjyVpk+A98SNTt53SyEn3/tT76QQQYJhTx5AqVKnudGFH h089EJRF6fFRXbg4SNCWqalT5PWy+j/75ESqXKtvo9NGfTfGiM6Onk44mlbx9sND dv8KlH7TIl7RgynMMhhfhikiE+2cYwrrOcztWtVe1KSYhB7FbZERABNuKrV/OmIT yHOQBDpoyVYAca3E+IyMyREc/XLNIPH/rUpZpG67dqTStxtBYOaSFX2/vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLfk1TXLPBG4+lWplDS+CrNXoyhMB8GA1UdIwQY MBaAFKon9RKwoQJl3ys0bxQ6ZFw4J0K+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAt ZmI3ZmJiMWM1OGZlLzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAtZmI3ZmJiMWM1OGZl LzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsNwyjAV T0m6J7hTzP7AYChB5jO9Zwr2mJcqq5phLSUYzVE11lfULHCTRB1R4EuoYX5BMk/y kL1tphpqvEzAGNaZCHf2C+czCWwO5wREvmGLN2DUE1TpvkRdS/aZd7zz6Ea+4Idb uWT10C0/u/kCffzgotVtb6LvtTjdFV/IeyaKjpfGaebwfEycu8iIeSzVbR7QeojX eqNNsANJdzsgtwmBlyTQ2RrqY9uPRI48hsAU61qmTrVxLXVUNtpCnx79loJb8XjA v25EOY3ypKtaAQHk6cmgklyjfHpU/9GU/bBGZduIgj57yEwI5TQZE43N+Gge9nD1 ZdhUsR9NTnLETA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:54 2026 by rpki-client