This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json) Hash identifier: 11wUQXXRb78iofbUKdE+VTH5kQrQsoMQf7BUg9dGKiM= Subject key identifier: E5:C8:92:D9:E7:33:5E:A3:77:2C:0A:41:19:8E:96:DD:F8:FD:B7:C7 Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d Certificate serial: 019BF9BFB2689376CEB3B4F6017C2FD84BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft Manifest number: 0BD3 Signing time: Mon 26 Jan 2026 10:00:48 +0000 Manifest this update: Mon 26 Jan 2026 10:00:48 +0000 Manifest next update: Tue 27 Jan 2026 10:00:48 +0000 Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: 5e3ZZfeJf56kWTpVUZQVKJ97lteL9gsEy6uwVaiqPDA=) 2: bgTj1AVpGOJ4PVrdSMxeLKpik_E.roa (hash: PA5QdaiNGx0nBgpS5K3tHFIeNRXLUOzm0Y2JaVTpock=) 3: lePQo6wZD_Sk6G9yXvisbl2Tsao.roa (hash: 4hQP72BMPYOrYdBAheaaMbRjYFT184+eQqEoi9pvU4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:bf:b2:68:93:76:ce:b3:b4:f6:01:7c:2f:d8:4b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=405d645741215677b7748d1fdefd416207adb12d Validity Not Before: Jan 26 10:00:48 2026 GMT Not After : Jan 27 10:00:48 2026 GMT Subject: CN=e5c892d9e7335ea3772c0a41198e96ddf8fdb7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:27:26:3c:af:7c:55:b2:0b:31:f1:63:5b: 60:07:0b:37:7b:04:52:ab:be:45:d2:13:b1:05:c0: c9:c8:2b:0e:b3:49:89:29:15:33:83:62:6b:d5:45: 4a:f0:70:70:24:d5:37:94:1a:0b:09:3c:4a:54:54: b4:e9:5e:cc:05:85:d3:56:db:ba:80:b5:82:4f:0c: a2:38:a0:32:04:62:ce:25:e8:22:f0:f3:a7:db:cd: 62:fb:f9:78:6b:1a:24:b2:3a:1e:e6:09:d4:11:93: 30:f4:d7:1c:e7:86:a6:3a:99:40:d3:99:23:37:2e: e1:fa:1a:cf:22:a1:02:86:ad:92:26:5d:63:93:94: 75:3a:38:67:a7:26:af:e0:de:71:7a:fc:69:da:24: d4:64:2d:26:77:40:cb:9c:58:35:db:a3:4a:17:88: 6d:30:f3:90:cc:ae:8d:c6:b1:d6:83:da:d0:c7:ea: 5c:e0:38:81:47:57:7a:f6:75:92:d2:95:60:19:f5: 97:ad:1a:27:bd:53:6c:25:b4:fe:20:6d:21:48:b2: 0a:81:9e:84:6f:b0:b1:12:b0:55:93:9a:4e:07:9e: f6:e3:5e:8b:12:af:4a:18:54:68:41:0d:20:90:f5: 12:e2:e6:fc:4c:75:f6:74:d9:16:7d:d8:15:0e:7a: e4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C8:92:D9:E7:33:5E:A3:77:2C:0A:41:19:8E:96:DD:F8:FD:B7:C7 X509v3 Authority Key Identifier: keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bc:5f:cb:c2:7c:33:32:89:9c:ef:2b:64:cc:86:53:1f:57: db:48:d2:9a:22:e3:f4:87:2d:96:dd:63:a0:33:41:b5:6d:21: 9a:46:6b:b5:d0:88:03:f4:0e:c8:17:57:aa:7c:0d:14:43:69: 34:69:8c:b4:28:eb:77:68:1d:c1:a0:ad:cb:4f:14:9c:dd:23: 7b:6e:74:bc:c7:ef:39:83:51:28:04:be:d3:63:1c:f5:50:f1: 99:4b:b8:fb:b9:d2:31:d9:3c:c6:e4:2b:00:9c:21:46:d7:65: d7:97:d4:45:ca:3b:53:da:b4:2b:e4:b3:9c:38:d6:af:ad:fd: 33:d3:9b:28:8e:da:e6:d1:97:b3:f0:43:71:9a:23:e0:ea:b8: 9e:cc:33:5b:09:8f:e6:f4:4a:fb:95:68:97:50:02:b2:2e:02: 5b:62:8d:4c:a1:6e:af:84:61:b8:6a:04:26:f4:b8:5e:cf:ea: 70:e0:d3:fc:9d:9e:b7:2a:41:53:bf:9a:8e:9b:db:b6:67:8b: 50:6b:96:63:94:b4:67:28:71:b7:ad:04:b2:f2:70:44:43:a5: 4b:57:33:92:33:3b:a8:09:e6:5c:e4:3e:b0:88:32:6a:5c:93: b7:3a:2d:d8:f9:c1:59:8b:e9:0b:b5:6d:8e:d3:0f:09:14:a3: 02:32:40:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5v7Jok3bOs7T2AXwv2Ev5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh ZGIxMmQwHhcNMjYwMTI2MTAwMDQ4WhcNMjYwMTI3MTAwMDQ4WjAzMTEwLwYDVQQD EyhlNWM4OTJkOWU3MzM1ZWEzNzcyYzBhNDExOThlOTZkZGY4ZmRiN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj8nJjyvfFWyCzHxY1tgBws3ewRS q75F0hOxBcDJyCsOs0mJKRUzg2Jr1UVK8HBwJNU3lBoLCTxKVFS06V7MBYXTVtu6 gLWCTwyiOKAyBGLOJegi8POn281i+/l4axoksjoe5gnUEZMw9Ncc54amOplA05kj Ny7h+hrPIqEChq2SJl1jk5R1Ojhnpyav4N5xevxp2iTUZC0md0DLnFg126NKF4ht MPOQzK6NxrHWg9rQx+pc4DiBR1d69nWS0pVgGfWXrRonvVNsJbT+IG0hSLIKgZ6E b7CxErBVk5pOB572416LEq9KGFRoQQ0gkPUS4ub8THX2dNkWfdgVDnrkaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXIktnnM16jdywKQRmOlt34/bfHMB8GA1UdIwQY MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt NDQwZGQwMTJiMTQxLzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLxfy8J8 MzKJnO8rZMyGUx9X20jSmiLj9Ictlt1joDNBtW0hmkZrtdCIA/QOyBdXqnwNFENp NGmMtCjrd2gdwaCty08UnN0je250vMfvOYNRKAS+02Mc9VDxmUu4+7nSMdk8xuQr AJwhRtdl15fURco7U9q0K+SznDjWr639M9ObKI7a5tGXs/BDcZoj4Oq4nswzWwmP 5vRK+5Vol1ACsi4CW2KNTKFur4RhuGoEJvS4Xs/qcODT/J2etypBU7+ajpvbtmeL UGuWY5S0Zyhxt60EsvJwREOlS1czkjM7qAnmXOQ+sIgyalyTtzot2PnBWYvpC7Vt jtMPCRSjAjJAOw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:40 2026 by rpki-client