This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json) Hash identifier: +d9Vc2kzS68KR5TCJ36eOk3/5AjlAaFRAFGZSbgy7y8= Subject key identifier: 82:1F:87:9E:C8:53:5B:4F:C9:1F:90:9B:1D:F5:82:8C:0C:45:F3:AB Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Certificate serial: 019BF53E09679CB0BB760D1F1ED9D4000CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 13:00:42 +0000 Manifest this update: Sun 25 Jan 2026 13:00:42 +0000 Manifest next update: Mon 26 Jan 2026 13:00:42 +0000 Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: g6mqBsGdgNc6DInmb+RLMO8LTfGqj8fit8jLV2ty+/8=) 2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=) 3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:09:67:9c:b0:bb:76:0d:1f:1e:d9:d4:00:0c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Validity Not Before: Jan 25 13:00:42 2026 GMT Not After : Jan 26 13:00:42 2026 GMT Subject: CN=821f879ec8535b4fc91f909b1df5828c0c45f3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:b0:44:50:88:cc:18:ba:4a:0a:85:f0:9c: 6e:12:e7:e2:2e:02:a9:0c:d7:2f:d0:ea:bd:bf:ec: af:3d:47:90:42:1f:e6:96:03:7e:f2:43:e9:22:d2: ef:51:c3:d2:ea:82:d8:b8:27:3f:1e:72:c5:54:ea: 20:e1:ab:dd:c8:b2:c6:61:97:92:16:ea:fb:83:5a: a3:23:4e:70:87:19:28:53:2d:f2:e0:26:16:4c:a4: 98:5d:b6:6a:84:f7:65:59:0c:4d:d9:01:00:74:6e: 37:43:4a:e3:f5:a4:d4:d4:81:f8:3d:40:8f:cb:c7: 12:d4:aa:3f:6c:95:fd:a0:85:d8:0d:12:7e:46:2d: 59:42:b2:ac:f0:5e:20:90:eb:31:b1:92:86:c7:f7: 59:f2:40:55:09:f4:8f:4b:67:3c:94:99:d9:4b:cc: 88:cb:e5:05:5f:4a:59:ec:e0:6e:10:0f:e7:23:fe: 83:cc:85:3f:b3:3f:41:b6:c0:07:c1:c0:97:da:b0: 88:2f:81:f9:46:1b:2a:44:c5:65:88:b6:3d:99:9b: c3:63:3a:c4:42:b5:bf:7d:a2:c6:7b:e7:0d:55:87: ef:7a:35:c0:d6:25:c8:37:02:e8:ba:6a:50:53:fb: 2e:71:a0:22:7c:5e:30:f6:a4:da:cb:16:3a:cb:e2: e7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:87:9E:C8:53:5B:4F:C9:1F:90:9B:1D:F5:82:8C:0C:45:F3:AB X509v3 Authority Key Identifier: keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5d:af:ac:a6:f0:2b:ed:63:1d:04:f2:b9:2d:03:79:31:c9: 6e:be:e1:c4:a2:31:63:2d:e1:cb:c9:ed:89:7a:16:62:ae:7e: f9:aa:7f:4f:45:9c:44:ce:9e:6e:82:4c:2c:5b:f7:ea:03:24: 39:4d:6a:ca:3b:01:9c:70:5c:ba:07:5e:bd:28:c9:7a:31:a8: 8e:0b:fc:62:52:06:e9:23:24:70:72:9c:9b:d7:fe:a6:e6:84: 02:db:a8:b5:c9:5a:93:a4:d8:e9:74:69:da:26:ec:ca:41:eb: cf:d3:bf:8e:e9:07:a4:22:f1:71:e1:29:5e:7a:55:e2:f4:94: bd:cf:45:5f:95:90:e5:e6:5e:e9:3c:a2:4f:11:4e:f8:0a:55: 56:50:e4:52:2a:f0:31:78:ef:a5:76:20:05:66:a0:0b:b3:57: 20:b7:7a:ba:39:2f:e3:e1:50:46:2f:cf:7c:3d:a6:a4:fe:62: 85:28:7e:22:76:d9:cb:8d:52:90:ae:69:32:36:97:7f:85:42: b2:2a:eb:99:8b:bd:bb:bd:f0:23:7d:a9:20:98:12:30:ba:ed: b3:38:bf:0a:0f:e9:c4:4d:13:9f:cf:07:6a:32:ae:9a:e4:c0: ba:a8:ef:ef:79:3b:aa:8e:64:aa:62:94:96:e3:8d:e2:04:9d: fa:8a:2b:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PglnnLC7dg0fHtnUAAz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNzRhMWMwMzgzYWQ1ZWIwZjA1ODhlNGMzMzk0YmEzNDAx MGE2MjEwHhcNMjYwMTI1MTMwMDQyWhcNMjYwMTI2MTMwMDQyWjAzMTEwLwYDVQQD Eyg4MjFmODc5ZWM4NTM1YjRmYzkxZjkwOWIxZGY1ODI4YzBjNDVmM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJywRFCIzBi6SgqF8JxuEufiLgKp DNcv0Oq9v+yvPUeQQh/mlgN+8kPpItLvUcPS6oLYuCc/HnLFVOog4avdyLLGYZeS Fur7g1qjI05whxkoUy3y4CYWTKSYXbZqhPdlWQxN2QEAdG43Q0rj9aTU1IH4PUCP y8cS1Ko/bJX9oIXYDRJ+Ri1ZQrKs8F4gkOsxsZKGx/dZ8kBVCfSPS2c8lJnZS8yI y+UFX0pZ7OBuEA/nI/6DzIU/sz9BtsAHwcCX2rCIL4H5RhsqRMVliLY9mZvDYzrE QrW/faLGe+cNVYfvejXA1iXINwLoumpQU/sucaAifF4w9qTayxY6y+LnhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIfh57IU1tPyR+Qmx31gowMRfOrMB8GA1UdIwQY MBaAFEB0ocA4OtXrDwWI5MM5S6NAEKYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMt MjZjMzM2NTE1M2FmLzEvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMtMjZjMzM2NTE1M2Fm LzEvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl2vrKbw K+1jHQTyuS0DeTHJbr7hxKIxYy3hy8ntiXoWYq5++ap/T0WcRM6eboJMLFv36gMk OU1qyjsBnHBcugdevSjJejGojgv8YlIG6SMkcHKcm9f+puaEAtuotclak6TY6XRp 2ibsykHrz9O/jukHpCLxceEpXnpV4vSUvc9FX5WQ5eZe6TyiTxFO+ApVVlDkUirw MXjvpXYgBWagC7NXILd6ujkv4+FQRi/PfD2mpP5ihSh+InbZy41SkK5pMjaXf4VC sirrmYu9u73wI32pIJgSMLrtszi/Cg/pxE0Tn88HajKumuTAuqjv73k7qo5kqmKU luON4gSd+oorCA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:30 2026 by rpki-client