This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json) Hash identifier: uD6nozehgNw7MLp9y7vgDyUDw7CZMJYjHbe0HKePDUY= Subject key identifier: 8C:41:B7:66:69:6E:C9:90:52:4A:70:36:35:46:49:D1:3D:74:C5:6A Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Certificate serial: 019BF5ABC87E7ECE1ED104123607D25A3BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: obuhR8o+ZYjJrguqaX6np+4kqQ7JOqrCwuFBfmmpqKM=) 2: kfw5lT51mmJB9r-mzPnYBcO07ic.roa (hash: lu7TOjtxr8LPfyeKuliFVqXP9APAZsRzOs+MqTY5wZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c8:7e:7e:ce:1e:d1:04:12:36:07:d2:5a:3b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40 Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=8c41b766696ec990524a7036354649d13d74c56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d1:ec:03:cd:ba:e7:18:34:1a:c2:9a:73:a9: e5:ee:85:f7:22:9c:3f:aa:0f:ec:a5:36:0c:74:30: bd:af:ab:fa:66:c8:52:55:8e:9d:9e:99:96:53:d7: f2:6c:88:34:41:4c:2d:d3:cc:de:30:5d:50:b7:f8: d8:d8:5b:70:fc:bf:6f:d0:7c:9f:e5:9d:6a:67:0b: 90:f4:35:b1:d5:64:c9:22:44:c2:0f:b4:f7:79:89: e4:62:69:4e:b5:5b:f8:4a:d7:72:a5:6c:86:32:7b: 1f:2f:31:31:32:06:ed:62:cb:63:00:67:a2:f6:46: a1:c6:3c:05:38:88:3d:81:78:1a:57:ca:88:a4:ca: ae:27:9c:b3:e3:eb:e4:18:00:8f:b2:a6:64:a6:ed: 60:c2:31:4d:f5:a2:64:2c:b9:8a:e8:c2:b7:6a:61: 1c:cd:14:c4:f9:eb:34:0a:f6:db:69:3e:fd:e7:b7: 0c:41:9d:64:55:e6:96:ee:db:19:a8:7f:30:4d:78: 37:9d:11:e9:0d:3f:b8:27:f5:06:91:85:70:65:6e: 66:e7:51:2e:bf:65:3a:3a:62:c5:9f:7b:d2:1e:b3: 6d:50:85:a4:e5:91:c8:45:ec:eb:ad:60:91:26:61: 8b:7f:9b:ef:eb:ea:bf:31:fb:02:21:1a:6c:d2:9e: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:41:B7:66:69:6E:C9:90:52:4A:70:36:35:46:49:D1:3D:74:C5:6A X509v3 Authority Key Identifier: keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:eb:b2:36:d3:dc:1b:82:27:66:16:4e:30:1d:f3:e2:e5:0b: fc:87:11:6a:5a:36:70:3b:ad:a5:5c:72:1b:71:7b:38:42:ee: 8b:7e:b7:b9:f7:1c:20:ec:95:98:b0:b3:2e:1d:92:f5:93:38: d8:b4:f1:72:cf:d2:08:69:37:52:88:52:3c:88:dd:05:58:da: 78:dc:05:e1:cf:0f:21:18:fe:c7:bc:03:04:e7:39:11:b3:ab: cf:13:2e:d6:70:db:6b:35:e9:cc:af:16:22:d4:cb:b3:04:98: 28:b1:96:0a:ed:ca:19:1c:a4:07:30:6a:bf:09:9e:67:a2:72: 8e:cb:7c:f4:21:7f:f1:73:9c:bf:2f:d1:38:43:a1:64:fc:eb: 41:bd:c5:a1:7f:8a:41:d6:4b:33:1e:ba:9f:71:c4:29:e3:d3: 94:e5:70:03:fe:43:70:c9:9a:77:46:f3:a6:60:df:ca:d4:65: 10:93:c9:bb:c2:f6:14:88:e7:2e:6b:b8:d9:4a:c6:89:a9:87: bf:bb:2a:0f:17:f7:7e:a8:61:69:ce:ae:00:79:a0:7a:d1:ef: 62:93:e4:49:50:19:ab:27:8b:97:56:67:90:33:61:94:6b:c6: 06:04:0d:87:f1:0f:24:bf:fc:4c:23:48:fb:1e:74:4f:c1:9b: bc:1b:04:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8h+fs4e0QQSNgfSWjurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh MWZjNDAwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD Eyg4YzQxYjc2NjY5NmVjOTkwNTI0YTcwMzYzNTQ2NDlkMTNkNzRjNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29HsA8265xg0GsKac6nl7oX3Ipw/ qg/spTYMdDC9r6v6ZshSVY6dnpmWU9fybIg0QUwt08zeMF1Qt/jY2Ftw/L9v0Hyf 5Z1qZwuQ9DWx1WTJIkTCD7T3eYnkYmlOtVv4StdypWyGMnsfLzExMgbtYstjAGei 9kahxjwFOIg9gXgaV8qIpMquJ5yz4+vkGACPsqZkpu1gwjFN9aJkLLmK6MK3amEc zRTE+es0CvbbaT7957cMQZ1kVeaW7tsZqH8wTXg3nRHpDT+4J/UGkYVwZW5m51Eu v2U6OmLFn3vSHrNtUIWk5ZHIRezrrWCRJmGLf5vv6+q/MfsCIRps0p5/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxBt2ZpbsmQUkpwNjVGSdE9dMVqMB8GA1UdIwQY MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuuyNtPc G4InZhZOMB3z4uUL/IcRalo2cDutpVxyG3F7OELui363ufccIOyVmLCzLh2S9ZM4 2LTxcs/SCGk3UohSPIjdBVjaeNwF4c8PIRj+x7wDBOc5EbOrzxMu1nDbazXpzK8W ItTLswSYKLGWCu3KGRykBzBqvwmeZ6Jyjst89CF/8XOcvy/ROEOhZPzrQb3FoX+K QdZLMx66n3HEKePTlOVwA/5DcMmad0bzpmDfytRlEJPJu8L2FIjnLmu42UrGiamH v7sqDxf3fqhhac6uAHmgetHvYpPkSVAZqyeLl1ZnkDNhlGvGBgQNh/EPJL/8TCNI +x50T8GbvBsEjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:15 2026 by rpki-client