This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json) Hash identifier: hbw5l0CExN7F42UQCmoStTpQtsc5jmsr+Wmx8+t/7jc= Subject key identifier: 40:67:4B:7E:D0:D0:D4:9A:32:7F:54:C2:1A:99:F2:52:71:7D:37:0B Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4 Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4 Certificate serial: 019BF5AC2381682DB0BAF2F63E0FD6725C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft Manifest number: 0E62 Signing time: Sun 25 Jan 2026 15:00:57 +0000 Manifest this update: Sun 25 Jan 2026 15:00:57 +0000 Manifest next update: Mon 26 Jan 2026 15:00:57 +0000 Files and hashes: 1: 3kLb2SclnRZ3nd2D3Q0PJ_hFvoA.roa (hash: 6pxbFnk+ektQu+gyRYaAFu/ZHeh+7fJhw5N9t7HsTNc=) 2: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: HHFWzqqtbCuqGlInwOdhfF5UpDnhR+MNDUnyc+cw5Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:23:81:68:2d:b0:ba:f2:f6:3e:0f:d6:72:5c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4 Validity Not Before: Jan 25 15:00:57 2026 GMT Not After : Jan 26 15:00:57 2026 GMT Subject: CN=40674b7ed0d0d49a327f54c21a99f252717d370b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:19:b0:68:d0:08:aa:5d:b9:1c:bc:5b:07: 05:4b:a9:a5:23:14:86:c2:d9:e4:ba:bc:83:ba:4d: b0:c5:0a:62:25:bf:a9:f6:06:07:29:dd:65:ad:99: 83:43:40:1a:c3:0f:96:d5:1a:93:38:24:1c:3b:64: 4f:e2:b7:b3:32:04:b0:97:a8:6b:05:65:f6:fc:b8: a4:b6:51:1f:cf:b2:42:6a:5f:4c:45:cf:4d:88:2e: 26:1b:09:68:40:6f:00:2f:71:3f:7e:ea:78:07:5c: 9c:e4:06:47:59:ff:28:60:03:e7:76:4d:a8:70:43: b1:63:98:33:ec:dc:18:35:14:e9:6f:dc:14:66:48: 43:a6:ed:5a:31:c6:8f:88:80:11:65:02:21:2a:1c: fc:d9:47:34:3f:51:80:d1:0b:c0:2d:ee:3d:e4:b4: e7:9e:64:11:86:d0:52:36:18:52:49:c6:da:ab:19: 6e:04:9a:d9:1c:1f:63:bf:8c:92:b1:44:33:93:c6: 56:dc:d5:5f:d0:4d:89:83:ed:2e:1d:9a:58:9f:9e: ed:41:7d:65:50:32:b0:2d:3e:f2:0e:b4:72:ff:00: 82:f5:76:c8:22:5d:ec:b2:9d:39:4c:5b:db:aa:6c: 72:f5:e2:29:d8:4b:b4:f6:a3:3f:d3:d2:51:01:77: 8a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:67:4B:7E:D0:D0:D4:9A:32:7F:54:C2:1A:99:F2:52:71:7D:37:0B X509v3 Authority Key Identifier: keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:55:38:74:ae:c1:0f:2d:e6:53:cb:21:15:27:60:a3:6b:87: 10:18:91:2f:73:70:39:32:d9:5f:23:03:74:70:be:25:9f:bc: a6:7a:c2:67:84:e8:c8:ca:8c:35:49:37:fa:bc:93:9e:3e:d7: 1a:d1:05:51:76:11:05:19:28:31:f6:db:99:61:7a:8d:1c:17: d7:bf:2f:e4:b4:34:70:03:c7:67:21:d9:d3:63:a0:3f:ad:d4: 4e:86:f3:fc:d5:ba:58:ab:df:3f:ca:16:ee:76:6e:9a:99:30: a6:17:6b:3e:b9:f8:f9:9e:98:bd:d5:cd:dc:73:2b:a4:ff:1c: e6:f8:05:7a:bc:21:da:e9:28:84:8e:39:46:a9:33:77:06:0f: f3:cb:61:03:2f:cd:2a:db:84:f4:07:ab:fc:2f:98:aa:fb:ea: a3:5d:1a:a2:e4:e0:78:33:11:31:af:a6:9a:e8:11:8a:24:a3: 0e:14:7b:b5:b9:9b:86:c7:ac:3e:2a:89:2d:83:c0:10:c0:d3: f2:00:df:6d:3b:ae:3e:45:09:50:86:31:8d:57:0e:81:c6:37: 60:e9:cc:a7:59:b5:e9:18:49:13:dd:a1:97:c8:bd:f9:ee:56: 79:40:5f:4c:36:e0:ca:d9:62:97:77:d3:03:5b:60:9c:65:d5: 56:64:92:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCOBaC2wuvL2Pg/WclxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2M4MWZmODJjZWQ2MWFlZjg0NzZhY2U3YTBlODE4YmJh ZThmYzQwHhcNMjYwMTI1MTUwMDU3WhcNMjYwMTI2MTUwMDU3WjAzMTEwLwYDVQQD Eyg0MDY3NGI3ZWQwZDBkNDlhMzI3ZjU0YzIxYTk5ZjI1MjcxN2QzNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ0ZsGjQCKpduRy8WwcFS6mlIxSG wtnkuryDuk2wxQpiJb+p9gYHKd1lrZmDQ0Aaww+W1RqTOCQcO2RP4rezMgSwl6hr BWX2/LiktlEfz7JCal9MRc9NiC4mGwloQG8AL3E/fup4B1yc5AZHWf8oYAPndk2o cEOxY5gz7NwYNRTpb9wUZkhDpu1aMcaPiIARZQIhKhz82Uc0P1GA0QvALe495LTn nmQRhtBSNhhSScbaqxluBJrZHB9jv4ySsUQzk8ZW3NVf0E2Jg+0uHZpYn57tQX1l UDKwLT7yDrRy/wCC9XbIIl3ssp05TFvbqmxy9eIp2Eu09qM/09JRAXeK2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBnS37Q0NSaMn9UwhqZ8lJxfTcLMB8GA1UdIwQY MBaAFEDMgf+CztYa74R2rOeg6Bi7ro/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgt ZGI1ZDg5ZThhMTdjLzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgtZGI1ZDg5ZThhMTdj LzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1U4dK7B Dy3mU8shFSdgo2uHEBiRL3NwOTLZXyMDdHC+JZ+8pnrCZ4ToyMqMNUk3+ryTnj7X GtEFUXYRBRkoMfbbmWF6jRwX178v5LQ0cAPHZyHZ02OgP63UTobz/NW6WKvfP8oW 7nZumpkwphdrPrn4+Z6YvdXN3HMrpP8c5vgFerwh2ukohI45RqkzdwYP88thAy/N KtuE9Aer/C+Yqvvqo10aouTgeDMRMa+mmugRiiSjDhR7tbmbhsesPiqJLYPAEMDT 8gDfbTuuPkUJUIYxjVcOgcY3YOnMp1m16RhJE92hl8i9+e5WeUBfTDbgytlil3fT A1tgnGXVVmSSsw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:40 2026 by rpki-client