This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json) Hash identifier: 5bhWFyDouGoz80Q/dXyd/M2cTSlOz2ZuLhJmb6Xuw6s= Subject key identifier: D5:DB:D8:C8:BA:A8:61:7E:D6:0A:02:AD:6E:BF:F5:7A:5B:87:6B:3B Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Certificate serial: 019BF68853F4E9511B6F09FAEDC970F41FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft Manifest number: 0E77 Signing time: Sun 25 Jan 2026 19:01:27 +0000 Manifest this update: Sun 25 Jan 2026 19:01:27 +0000 Manifest next update: Mon 26 Jan 2026 19:01:27 +0000 Files and hashes: 1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=) 2: NcpN8sW8qQBrAdmBdPAjvFVJbQ4.asa (hash: YF9c0azhuf6/qBJm+KdWT2V2rii+OM05USUNERyUwKo=) 3: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=) 4: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=) 5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: N1WC7pmR/IscjrO2BAj8MZdwst/+K/dgiRd5uSPTl4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:53:f4:e9:51:1b:6f:09:fa:ed:c9:70:f4:1f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe Validity Not Before: Jan 25 19:01:27 2026 GMT Not After : Jan 26 19:01:27 2026 GMT Subject: CN=d5dbd8c8baa8617ed60a02ad6ebff57a5b876b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ae:33:d2:b8:43:4d:8c:44:7b:01:c6:d6:4f: fb:52:c8:c3:a8:20:82:8a:ca:1b:05:e8:52:24:6e: 48:11:ad:5a:82:50:92:c1:38:d9:48:d6:99:5b:df: 8b:39:7a:d9:76:a0:94:74:90:55:e9:78:81:5c:8d: a6:d0:7d:0c:0b:07:6c:c6:f0:5e:af:b7:fa:d3:f7: b0:87:40:ba:17:bb:92:c9:b9:8e:31:ed:3b:b8:e1: 38:f4:eb:7c:a7:53:79:c9:34:71:fd:35:f7:b8:f6: dd:c2:72:19:5d:b8:2f:e3:3b:c1:f7:55:db:1b:6a: 97:07:9c:9f:45:b4:ae:0a:24:30:0e:9c:27:fe:01: 90:e2:5c:f3:1a:40:6b:67:4c:83:d1:da:03:be:c7: 05:55:bb:df:0b:43:83:66:a3:b9:34:24:57:64:a3: e7:a3:4b:ef:be:e6:2d:1c:23:c5:cf:32:45:ba:72: 12:b6:f7:b5:0a:2c:b1:c5:cf:6e:25:9c:92:31:c0: da:05:e4:14:6b:8d:e8:c0:81:93:2a:b7:57:30:87: f1:12:6e:2f:c7:89:a6:29:e9:d1:51:2f:7c:f1:f8: b3:5c:b5:2f:c9:1e:e5:b0:02:7c:4e:e9:af:d3:00: 46:99:d2:7d:6a:97:30:c8:8a:5b:0f:9b:54:47:9c: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:D8:C8:BA:A8:61:7E:D6:0A:02:AD:6E:BF:F5:7A:5B:87:6B:3B X509v3 Authority Key Identifier: keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:11:40:71:ee:85:29:23:50:88:4d:ff:f7:70:69:b1:6b:56: fb:96:6d:45:49:bb:10:39:83:7f:bc:34:1f:7d:d8:a2:b3:b5: 13:e0:66:7e:17:89:a8:da:cd:54:62:20:cb:04:2b:26:fa:ea: 21:60:e0:ff:a2:9a:dd:f8:0b:41:2a:75:3d:08:55:ca:95:5b: d9:fb:e2:30:d5:7b:ad:3e:25:0a:4f:1e:e9:04:85:98:83:1c: 54:5f:2b:61:df:5a:75:44:9a:da:42:de:3f:25:b0:85:03:e0: c9:cf:f7:20:82:61:34:e2:29:fb:4a:75:19:5e:7b:0e:fa:a5: 4d:24:40:da:00:42:37:29:14:23:13:45:e1:d0:7b:36:ee:9d: 1a:91:f7:7a:91:de:82:14:9b:c7:35:47:dc:79:b6:6e:d0:fe: 0d:fc:f9:81:c6:27:e2:c1:03:dd:64:a7:22:f9:82:6c:f7:12: 6e:79:63:54:0f:2c:a4:5a:b8:95:b6:8d:88:df:a1:8c:a2:bc: 71:31:1d:24:fc:48:f1:91:af:4e:92:90:5a:56:e4:d0:11:92: 59:8d:5c:bf:0d:d2:15:33:0a:46:4a:1b:6e:4b:0c:03:5e:cd: e0:37:de:f4:4c:8c:27:83:d5:15:a9:9b:e5:2c:1f:f7:f3:b2: 2f:3b:5c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFP06VEbbwn67clw9B/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1 YzZkZmUwHhcNMjYwMTI1MTkwMTI3WhcNMjYwMTI2MTkwMTI3WjAzMTEwLwYDVQQD EyhkNWRiZDhjOGJhYTg2MTdlZDYwYTAyYWQ2ZWJmZjU3YTViODc2YjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo64z0rhDTYxEewHG1k/7UsjDqCCC isobBehSJG5IEa1aglCSwTjZSNaZW9+LOXrZdqCUdJBV6XiBXI2m0H0MCwdsxvBe r7f60/ewh0C6F7uSybmOMe07uOE49Ot8p1N5yTRx/TX3uPbdwnIZXbgv4zvB91Xb G2qXB5yfRbSuCiQwDpwn/gGQ4lzzGkBrZ0yD0doDvscFVbvfC0ODZqO5NCRXZKPn o0vvvuYtHCPFzzJFunIStve1Ciyxxc9uJZySMcDaBeQUa43owIGTKrdXMIfxEm4v x4mmKenRUS988fizXLUvyR7lsAJ8Tumv0wBGmdJ9apcwyIpbD5tUR5zlIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXb2Mi6qGF+1goCrW6/9Xpbh2s7MB8GA1UdIwQY MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4 LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARFAce6F KSNQiE3/93BpsWtW+5ZtRUm7EDmDf7w0H33YorO1E+BmfheJqNrNVGIgywQrJvrq IWDg/6Ka3fgLQSp1PQhVypVb2fviMNV7rT4lCk8e6QSFmIMcVF8rYd9adUSa2kLe PyWwhQPgyc/3IIJhNOIp+0p1GV57DvqlTSRA2gBCNykUIxNF4dB7Nu6dGpH3epHe ghSbxzVH3Hm2btD+Dfz5gcYn4sED3WSnIvmCbPcSbnljVA8spFq4lbaNiN+hjKK8 cTEdJPxI8ZGvTpKQWlbk0BGSWY1cvw3SFTMKRkobbksMA17N4Dfe9EyMJ4PVFamb 5Swf9/OyLztcTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:14:58 2026 by rpki-client