This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json) Hash identifier: o/tH1X3tCvQqZ9cPHODAO6HLMk/w65nQuW2ZE5yz3AU= Subject key identifier: 85:B1:24:1F:CF:A7:A2:56:4D:01:7D:60:E0:55:9E:0D:46:5B:C4:83 Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Certificate serial: 019BF3F57391ED1B0C67368A4DC43C7200D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft Manifest number: 1384 Signing time: Sun 25 Jan 2026 07:01:47 +0000 Manifest this update: Sun 25 Jan 2026 07:01:47 +0000 Manifest next update: Mon 26 Jan 2026 07:01:47 +0000 Files and hashes: 1: V_7nI2rclmISW7ugXTvlUt42zwc.roa (hash: dgCH/3weKUPvWu32YRYMJtSWtM0AYHSCUPBoJHsRJj8=) 2: gH9SOFGnHPwoUMA2V0WudJj9Q74.roa (hash: qynBe2yLaxPIvjQZTw4fuQC6WMeX9Hc3FmOm9LE7GH8=) 3: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: bKb9fqdUIpWVLgBvXFY2aEWKFpyD6s3b8jomUrE6kvo=) 4: vC57wbOLFiAKhCB_1aTbbKiskGA.roa (hash: n6ntOBWK7goFgSVFaq97RplF4ii7t5Z5AdSbkU7hXp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:73:91:ed:1b:0c:67:36:8a:4d:c4:3c:72:00:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Validity Not Before: Jan 25 07:01:47 2026 GMT Not After : Jan 26 07:01:47 2026 GMT Subject: CN=85b1241fcfa7a2564d017d60e0559e0d465bc483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:28:b1:53:93:94:ed:15:c7:1a:90:d2:ae: f8:60:9a:b2:dd:c7:37:24:88:4a:e4:6f:d1:e1:4b: 19:ec:8e:ad:b4:d3:72:8d:c8:dc:74:6e:56:08:6e: b6:d6:75:d4:23:82:86:73:3f:37:62:9d:d0:b8:e1: 69:74:b9:49:b8:65:88:b5:90:2e:e5:00:cd:f6:b3: 18:55:77:f7:c6:4b:29:c8:16:be:b8:f5:3f:2f:05: 73:96:37:f5:c0:62:4f:46:9b:05:ee:f2:b6:fd:af: 9f:93:8c:d7:f1:d5:76:94:bc:54:bb:4e:42:b0:51: 39:c3:26:91:56:42:5b:7f:97:d2:3c:ce:48:15:2b: 53:d2:ad:1b:6a:d6:3d:91:44:b9:34:36:b3:5f:6c: 0f:f9:be:51:45:28:21:88:9f:f5:29:90:1c:4a:24: e1:e5:c9:93:59:5e:be:70:2f:e7:d0:4c:14:4e:44: 0a:93:c9:c2:2f:d4:5d:8d:89:f4:38:36:34:6d:14: e0:d5:5c:b4:96:13:c8:3c:d3:d4:cf:91:f1:1d:c4: a5:b8:a2:7e:15:c2:06:90:92:ad:f5:09:e0:5d:2b: f2:6b:5a:72:f2:d4:b9:d8:7b:7f:f2:3e:78:ee:23: 20:f1:ad:82:c8:6a:cc:69:2f:af:b8:58:aa:00:8a: 85:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:24:1F:CF:A7:A2:56:4D:01:7D:60:E0:55:9E:0D:46:5B:C4:83 X509v3 Authority Key Identifier: keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:13:1a:bf:c5:75:2a:64:2c:15:7f:c2:0b:71:80:60:58:bc: f9:22:37:7b:15:8f:99:8b:b0:e1:fc:4f:d8:c9:b9:21:d0:d5: 16:81:f1:f2:19:13:de:3c:7a:9d:f5:15:8a:2a:e5:24:86:90: d3:cc:69:bf:f5:f0:6a:92:6a:e9:a0:01:49:45:5a:ab:d5:9c: 6a:45:30:70:63:7b:e5:18:84:3b:a2:2b:42:2f:ad:9b:a3:3e: b1:47:c9:4b:a8:4c:38:f3:9f:8c:95:64:2d:66:15:14:ed:53: 8b:b2:4f:d6:9c:06:0c:56:32:31:53:46:ae:e0:79:5d:89:53: 8d:95:29:60:2c:55:50:57:e8:2d:c1:37:4d:d4:e4:9e:ae:ca: db:87:40:e6:64:5e:ca:b9:f2:78:75:e1:1a:1a:9b:22:bc:71: b9:7f:d5:b2:ae:e3:5a:87:46:f1:7c:24:de:a9:6c:76:75:4e: c9:7b:c4:7a:c1:c6:cd:d7:b8:3e:b8:65:a0:2c:fe:56:49:e0: 4a:79:d6:aa:e6:9c:4e:a9:72:34:1d:27:12:22:50:43:5c:88: c9:09:b8:d5:81:4e:cd:4a:82:10:1f:a7:83:7b:96:90:b7:b0: 09:68:70:b0:0d:66:89:d8:ea:26:7e:e8:6e:ff:e5:c0:ec:24: 7f:f9:f1:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9XOR7RsMZzaKTcQ8cgDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx OTkyNWYwHhcNMjYwMTI1MDcwMTQ3WhcNMjYwMTI2MDcwMTQ3WjAzMTEwLwYDVQQD Eyg4NWIxMjQxZmNmYTdhMjU2NGQwMTdkNjBlMDU1OWUwZDQ2NWJjNDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4EosVOTlO0VxxqQ0q74YJqy3cc3 JIhK5G/R4UsZ7I6ttNNyjcjcdG5WCG621nXUI4KGcz83Yp3QuOFpdLlJuGWItZAu 5QDN9rMYVXf3xkspyBa+uPU/LwVzljf1wGJPRpsF7vK2/a+fk4zX8dV2lLxUu05C sFE5wyaRVkJbf5fSPM5IFStT0q0batY9kUS5NDazX2wP+b5RRSghiJ/1KZAcSiTh 5cmTWV6+cC/n0EwUTkQKk8nCL9RdjYn0ODY0bRTg1Vy0lhPIPNPUz5HxHcSluKJ+ FcIGkJKt9QngXSvya1py8tS52Ht/8j547iMg8a2CyGrMaS+vuFiqAIqFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWxJB/Pp6JWTQF9YOBVng1GW8SDMB8GA1UdIwQY MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchMav8V1 KmQsFX/CC3GAYFi8+SI3exWPmYuw4fxP2Mm5IdDVFoHx8hkT3jx6nfUViirlJIaQ 08xpv/XwapJq6aABSUVaq9WcakUwcGN75RiEO6IrQi+tm6M+sUfJS6hMOPOfjJVk LWYVFO1Ti7JP1pwGDFYyMVNGruB5XYlTjZUpYCxVUFfoLcE3TdTknq7K24dA5mRe yrnyeHXhGhqbIrxxuX/Vsq7jWodG8Xwk3qlsdnVOyXvEesHGzde4PrhloCz+Vkng SnnWquacTqlyNB0nEiJQQ1yIyQm41YFOzUqCEB+ng3uWkLewCWhwsA1midjqJn7o bv/lwOwkf/nxBA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:43:33 2026 by rpki-client