This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json) Hash identifier: LgnckKWsGir3kOnGFADTRrQzvxMxQRNmoA5OXyxPclI= Subject key identifier: 98:FC:A3:EC:E4:79:AB:A4:34:01:10:60:02:0D:B2:2D:65:71:30:D6 Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4 Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4 Certificate serial: 019BF72D9368E2B7586A07A0A456CAEBC7EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft Manifest number: 01EB Signing time: Sun 25 Jan 2026 22:01:57 +0000 Manifest this update: Sun 25 Jan 2026 22:01:57 +0000 Manifest next update: Mon 26 Jan 2026 22:01:57 +0000 Files and hashes: 1: TvCeC-CTMvUOvfqvZDepdi4lqnQ.roa (hash: ESVtJ3kouBpjTr4WqJWzhzotaZoW4Cj/KB3SLHg/1MA=) 2: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: m9jy3IwS2Rd6bwR6oDtaoEMd3M0tQyJWQvvwKjXXlqs=) 3: yQ4lwVZKtZ37ncDrw-J5ETPGiug.roa (hash: YOCERM8UiZIP0yKzgGY8Yras8dDVp4zqydgV9vmHZ3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:93:68:e2:b7:58:6a:07:a0:a4:56:ca:eb:c7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4 Validity Not Before: Jan 25 22:01:57 2026 GMT Not After : Jan 26 22:01:57 2026 GMT Subject: CN=98fca3ece479aba434011060020db22d657130d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:4b:85:ae:16:b3:0f:11:e6:3c:e8:e8:f3: e8:fe:8d:74:64:da:d3:06:f8:f5:fe:14:dc:fe:d7: d5:6c:31:74:21:ad:34:b1:4a:dd:73:c5:62:05:be: be:1b:6c:30:1f:ad:5d:88:c6:be:59:62:6b:b2:b1: 4d:b2:08:a1:80:e6:b9:e2:6d:ed:9d:43:5c:95:11: 22:9e:41:49:e7:31:fb:04:38:82:e3:84:3a:93:9f: bb:8d:01:d0:c9:c4:36:ed:50:e7:a2:c1:4f:e8:7a: d8:f1:f1:3a:7f:32:80:0e:ca:a3:76:c5:62:11:7a: 87:66:bf:fb:bb:fa:35:3e:a9:1e:53:96:b7:64:93: 82:c3:cb:c4:d8:a0:e5:47:d5:bb:09:a6:13:b9:da: b7:48:9c:39:6a:c7:8e:1f:37:33:38:b9:6a:93:a8: a0:1d:a6:4a:1c:d4:6c:25:a5:fa:2b:af:31:c6:bd: 89:dd:06:b4:7d:07:2e:7c:d6:ff:0b:f2:3a:c1:40: 7a:b0:39:50:48:ee:3d:53:43:d3:ff:c5:08:d3:da: 98:32:61:ed:75:72:83:30:27:33:0d:28:bb:ad:69: 72:0f:d6:d2:c0:2c:21:56:f8:38:be:0b:ab:24:61: b1:1a:d9:19:7f:a8:20:64:3b:58:ad:9b:e4:df:dc: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FC:A3:EC:E4:79:AB:A4:34:01:10:60:02:0D:B2:2D:65:71:30:D6 X509v3 Authority Key Identifier: keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c2:90:68:ff:0e:88:28:eb:51:95:8b:c8:a0:58:2f:68:ed: e2:94:63:43:71:2b:b9:eb:49:a3:37:00:2b:ff:cd:c8:52:c6: 42:d7:12:fc:8e:5e:44:e3:15:43:e1:4b:c7:12:90:d3:de:95: f5:6c:2a:30:97:ee:ee:43:4f:25:24:e4:de:ae:06:11:84:f0: 08:8c:ac:32:65:76:6e:c5:10:66:01:4a:ae:0c:af:93:26:96: 05:47:9f:b8:a2:27:27:09:d7:f6:29:93:89:29:3e:12:b3:de: 84:b4:0d:3b:73:85:ef:d0:7f:06:da:82:d6:e4:b0:b5:d7:71: 41:69:12:aa:77:da:63:e3:f5:d2:6d:92:9a:b5:b8:c2:6e:40: 85:56:c3:cc:5c:f7:1b:eb:80:f9:a0:dc:5e:bf:e5:a6:8d:82: 77:e7:39:b0:06:bd:e0:ce:1a:e1:61:77:7c:a1:04:1b:dd:91: 28:59:13:60:dd:77:6b:8a:aa:4d:aa:37:0d:1d:ec:90:bc:99: 37:38:41:91:5a:b6:e1:8d:da:4f:3e:0b:74:c9:c4:0a:90:0c: 1e:fa:22:66:14:6d:51:2e:db:59:9a:c1:0c:1e:56:40:f0:cb: 1e:d7:28:dd:8b:94:e8:79:d4:37:2a:b7:88:95:31:d3:70:34: 58:51:78:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZNo4rdYagegpFbK68frMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1 YzIzYzQwHhcNMjYwMTI1MjIwMTU3WhcNMjYwMTI2MjIwMTU3WjAzMTEwLwYDVQQD Eyg5OGZjYTNlY2U0NzlhYmE0MzQwMTEwNjAwMjBkYjIyZDY1NzEzMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxLha4Wsw8R5jzo6PPo/o10ZNrT Bvj1/hTc/tfVbDF0Ia00sUrdc8ViBb6+G2wwH61diMa+WWJrsrFNsgihgOa54m3t nUNclREinkFJ5zH7BDiC44Q6k5+7jQHQycQ27VDnosFP6HrY8fE6fzKADsqjdsVi EXqHZr/7u/o1PqkeU5a3ZJOCw8vE2KDlR9W7CaYTudq3SJw5aseOHzczOLlqk6ig HaZKHNRsJaX6K68xxr2J3Qa0fQcufNb/C/I6wUB6sDlQSO49U0PT/8UI09qYMmHt dXKDMCczDSi7rWlyD9bSwCwhVvg4vgurJGGxGtkZf6ggZDtYrZvk39zLJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj8o+zkeaukNAEQYAINsi1lcTDWMB8GA1UdIwQY MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt YjQzMGU4ZGU3NzQ3LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3 LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcKQaP8O iCjrUZWLyKBYL2jt4pRjQ3EruetJozcAK//NyFLGQtcS/I5eROMVQ+FLxxKQ096V 9WwqMJfu7kNPJSTk3q4GEYTwCIysMmV2bsUQZgFKrgyvkyaWBUefuKInJwnX9imT iSk+ErPehLQNO3OF79B/BtqC1uSwtddxQWkSqnfaY+P10m2SmrW4wm5AhVbDzFz3 G+uA+aDcXr/lpo2Cd+c5sAa94M4a4WF3fKEEG92RKFkTYN13a4qqTao3DR3skLyZ NzhBkVq24Y3aTz4LdMnECpAMHvoiZhRtUS7bWZrBDB5WQPDLHtco3YuU6HnUNyq3 iJUx03A0WFF4dA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:38 2026 by rpki-client