This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json) Hash identifier: OOulA1U9d7H0ytEHQ1SO9a24of70sxFvdo4lVX5NQtY= Subject key identifier: 27:85:0C:04:D9:6F:93:B2:2A:69:6B:BD:CE:7A:62:20:C8:36:83:54 Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Certificate serial: 019BF42B7D8DDF3E6DB8C8D057C7516B4C55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 08:00:49 +0000 Manifest this update: Sun 25 Jan 2026 08:00:49 +0000 Manifest next update: Mon 26 Jan 2026 08:00:49 +0000 Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=) 2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: 5W6QlPMxo+s3P0pgvVy2T10ozC1t8hqWtpcrVVpGehw=) 3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=) 4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=) 5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:7d:8d:df:3e:6d:b8:c8:d0:57:c7:51:6b:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c Validity Not Before: Jan 25 08:00:49 2026 GMT Not After : Jan 26 08:00:49 2026 GMT Subject: CN=27850c04d96f93b22a696bbdce7a6220c8368354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:d9:c8:46:a9:50:e4:7d:c9:f8:7b:62:fa: 46:21:73:5e:0b:24:cc:ed:9a:5d:6c:f7:81:68:40: ec:b2:c6:86:d5:80:15:d6:94:14:48:c4:63:06:53: a5:8a:47:eb:8b:7c:ef:bc:51:9b:f8:36:82:26:91: d8:45:3e:76:f2:51:5b:ec:41:d1:f7:7a:4b:3e:34: 31:e6:af:fc:32:68:ce:01:f4:b6:9f:db:ed:2a:0a: 4d:68:24:5b:c1:db:8c:8a:15:f1:9c:e5:e1:b7:82: b5:c1:2a:43:68:c4:cf:cb:b7:20:e7:58:8f:ed:2d: 40:fe:d1:9c:bb:6d:80:ef:9c:9f:73:e1:49:7f:45: 92:e8:25:1e:30:12:9f:39:29:71:f7:f3:46:c3:11: 11:cf:2e:9a:5a:8f:de:9a:a1:19:b9:22:64:5d:28: 7f:dd:9d:70:2e:69:58:47:b3:10:a7:d9:6b:23:f3: a7:9d:cb:f3:e6:ca:c9:ab:99:e9:c4:89:38:33:35: d4:f8:d3:37:d7:97:39:e7:95:cc:34:7e:e5:9b:e3: bf:68:65:d3:c9:11:d1:a5:58:01:ba:e3:a0:20:3a: 7f:ef:1f:e2:d6:57:ae:13:59:ef:85:91:68:44:76: 8c:86:bc:9e:f2:b1:5b:95:15:20:a6:83:92:56:12: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:0C:04:D9:6F:93:B2:2A:69:6B:BD:CE:7A:62:20:C8:36:83:54 X509v3 Authority Key Identifier: keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f3:eb:17:95:58:8e:c2:17:be:83:a5:81:be:69:68:b6:1d: d9:b8:f7:a7:bf:cc:f1:7a:0a:a7:07:d3:d7:39:2c:ed:2b:7f: 0f:8b:6b:a1:61:98:45:ab:2f:67:5d:f5:c0:1a:a2:0c:5d:dc: 0b:fe:ad:60:bf:9e:78:05:06:8b:88:0d:f4:d2:ee:72:c0:c3: ec:c7:c7:2b:9f:43:0a:da:be:6a:bd:c8:42:95:df:6a:6e:95: a0:ac:9f:c8:50:bb:63:b8:b3:eb:be:ef:6a:37:c2:74:9f:eb: b4:74:c5:03:8d:de:2c:f6:9a:40:1e:0b:c8:2d:2d:ff:a9:f0: 1b:1d:1b:d6:f6:c1:18:c0:f7:d1:d5:45:1a:17:42:83:7f:16: 20:b3:7e:46:2b:29:e2:23:cb:cd:87:f3:41:80:87:79:b2:f7: 82:b7:dc:43:7d:15:b8:5e:ed:e3:6f:4f:ed:03:f8:02:b0:51: 5e:89:ac:94:ad:53:3b:a6:fb:83:4e:9f:eb:a4:65:8f:8a:0c: d0:38:16:99:0e:eb:77:b5:0c:2c:b3:78:27:e6:e1:6d:89:65: 3e:b8:12:29:8f:f4:3a:56:2c:e1:c2:1d:b7:5f:0b:ce:5e:1e: 50:53:b1:96:5a:c9:96:74:3c:8b:1f:f2:1b:84:c2:9e:91:a1: 32:94:8b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K32N3z5tuMjQV8dRa0xVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj NWUyMWMwHhcNMjYwMTI1MDgwMDQ5WhcNMjYwMTI2MDgwMDQ5WjAzMTEwLwYDVQQD EygyNzg1MGMwNGQ5NmY5M2IyMmE2OTZiYmRjZTdhNjIyMGM4MzY4MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7jZyEapUOR9yfh7YvpGIXNeCyTM 7ZpdbPeBaEDsssaG1YAV1pQUSMRjBlOlikfri3zvvFGb+DaCJpHYRT528lFb7EHR 93pLPjQx5q/8MmjOAfS2n9vtKgpNaCRbwduMihXxnOXht4K1wSpDaMTPy7cg51iP 7S1A/tGcu22A75yfc+FJf0WS6CUeMBKfOSlx9/NGwxERzy6aWo/emqEZuSJkXSh/ 3Z1wLmlYR7MQp9lrI/Onncvz5srJq5npxIk4MzXU+NM315c555XMNH7lm+O/aGXT yRHRpVgBuuOgIDp/7x/i1leuE1nvhZFoRHaMhrye8rFblRUgpoOSVhIBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeFDATZb5OyKmlrvc56YiDINoNUMB8GA1UdIwQY MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfPrF5VY jsIXvoOlgb5paLYd2bj3p7/M8XoKpwfT1zks7St/D4troWGYRasvZ131wBqiDF3c C/6tYL+eeAUGi4gN9NLucsDD7MfHK59DCtq+ar3IQpXfam6VoKyfyFC7Y7iz677v ajfCdJ/rtHTFA43eLPaaQB4LyC0t/6nwGx0b1vbBGMD30dVFGhdCg38WILN+Risp 4iPLzYfzQYCHebL3grfcQ30VuF7t429P7QP4ArBRXomslK1TO6b7g06f66Rlj4oM 0DgWmQ7rd7UMLLN4J+bhbYllPrgSKY/0OlYs4cIdt18Lzl4eUFOxllrJlnQ8ix/y G4TCnpGhMpSLZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:16:18 2026 by rpki-client