This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json) Hash identifier: Z/2B/JI0wnGLvkf2RdQxoHHKz1n6CHKIg2fWN9gT6Is= Subject key identifier: 35:E4:EB:94:28:C8:D3:BE:52:B8:78:FE:E4:B3:69:4F:DE:91:90:BB Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92 Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92 Certificate serial: 019BF5AC19B4AC622D19AE1D5CFE4168834B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft Manifest number: 04EE Signing time: Sun 25 Jan 2026 15:00:55 +0000 Manifest this update: Sun 25 Jan 2026 15:00:55 +0000 Manifest next update: Mon 26 Jan 2026 15:00:55 +0000 Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: KYs8DTexutDHCJM8eY8nXMahMAf8emcTwnYngY9DLN8=) 2: lex0MSfafX69jgAmgDrAWYS2f9Y.roa (hash: i/FMA/z6OJZHxVdVZzVnuaqiacIER1savYD4hQ1WM2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:19:b4:ac:62:2d:19:ae:1d:5c:fe:41:68:83:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92 Validity Not Before: Jan 25 15:00:55 2026 GMT Not After : Jan 26 15:00:55 2026 GMT Subject: CN=35e4eb9428c8d3be52b878fee4b3694fde9190bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:83:57:6d:c9:74:44:a7:e3:fa:15:b3:85:b3: ff:17:d5:74:d6:92:a1:5c:5a:da:3b:5d:86:df:0b: bc:77:7e:44:27:78:a8:a0:f9:b0:99:c4:56:78:20: 2f:9d:f7:10:e5:06:ea:aa:fb:b9:22:5e:e2:be:5f: fb:87:85:17:d5:dc:79:31:cf:85:d4:92:16:b4:bd: b1:fd:51:74:c0:33:46:07:12:29:68:53:b8:dc:b6: 78:05:3f:7b:da:74:65:29:e6:d1:c1:0a:8b:e7:60: 7b:8f:0a:2b:60:a5:16:d7:8d:08:3c:48:6f:2c:4c: 56:90:d7:35:19:6d:81:a3:86:a7:97:54:5f:11:75: 53:af:ad:24:6a:e7:4b:36:7b:18:4d:81:43:ea:6d: 0a:a1:f7:78:47:0a:21:93:15:10:13:ec:6a:00:ff: 0a:18:9d:08:a1:ca:74:39:01:5e:ed:40:6b:5d:75: 3c:f3:69:13:8a:b2:4f:56:06:05:f3:12:9c:d8:53: 97:ad:88:cd:a9:16:7c:eb:45:f0:e0:a6:00:d8:a4: d5:fd:b3:2d:99:50:56:91:af:35:04:1b:24:24:29: 8d:8f:7d:de:e5:57:7f:db:1c:84:3a:0c:ff:83:f8: f0:c1:a8:3b:32:4e:d0:2c:c4:ab:2b:1b:02:17:34: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:EB:94:28:C8:D3:BE:52:B8:78:FE:E4:B3:69:4F:DE:91:90:BB X509v3 Authority Key Identifier: keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ed:06:10:5e:a9:7d:94:0f:20:0a:79:f2:35:bb:9c:df:71: d4:81:fe:9e:bd:6c:05:9e:5e:39:7d:05:4d:da:22:5e:10:38: 84:73:c3:a1:94:b0:7f:ce:3b:1e:6f:10:c9:16:dc:35:ea:60: 91:55:9b:87:63:89:6a:20:81:90:82:83:89:9b:d8:66:4b:90: 2a:c5:80:29:a9:ef:26:b2:07:46:20:85:c6:4f:1c:fd:df:e4: b4:d1:23:cd:76:3a:6c:ac:2a:fe:36:bd:0b:51:f5:8f:f3:54: 9f:7f:52:d9:5a:64:54:0c:1e:69:6b:c2:06:3c:ba:9d:31:6b: 74:38:11:c9:cf:bc:13:ce:92:38:b4:70:db:58:4e:ab:4a:91: 4b:74:df:e6:83:5c:f4:d5:e3:03:78:de:fa:e3:aa:0c:3a:c7: c6:c0:29:8b:f3:bd:ab:d3:6e:eb:6f:e3:a7:c5:be:91:fe:08: c7:67:76:22:02:49:4d:38:ba:94:80:4e:83:53:fe:92:08:65: f0:ce:1c:2f:cc:41:0a:a4:01:3f:9c:9c:dc:ed:48:cc:10:c5: 25:28:2a:8f:bc:38:31:c2:07:f1:f5:4c:39:cd:ca:7f:63:a1: b3:a6:9a:27:fb:1b:0c:78:8f:6a:84:25:35:bf:7f:98:ef:32: 5e:f2:da:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rBm0rGItGa4dXP5BaINLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMGRlMjgxMzFjNzNiNWY1MzIwZjUxZGFlNmMxYmQ0N2Fi ODJmOTIwHhcNMjYwMTI1MTUwMDU1WhcNMjYwMTI2MTUwMDU1WjAzMTEwLwYDVQQD EygzNWU0ZWI5NDI4YzhkM2JlNTJiODc4ZmVlNGIzNjk0ZmRlOTE5MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtINXbcl0RKfj+hWzhbP/F9V01pKh XFraO12G3wu8d35EJ3iooPmwmcRWeCAvnfcQ5Qbqqvu5Il7ivl/7h4UX1dx5Mc+F 1JIWtL2x/VF0wDNGBxIpaFO43LZ4BT972nRlKebRwQqL52B7jworYKUW140IPEhv LExWkNc1GW2Bo4anl1RfEXVTr60kaudLNnsYTYFD6m0Kofd4RwohkxUQE+xqAP8K GJ0Iocp0OQFe7UBrXXU882kTirJPVgYF8xKc2FOXrYjNqRZ860Xw4KYA2KTV/bMt mVBWka81BBskJCmNj33e5Vd/2xyEOgz/g/jwwag7Mk7QLMSrKxsCFzT2awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXk65QoyNO+Urh4/uSzaU/ekZC7MB8GA1UdIwQY MBaAFEAN4oExxztfUyD1Ha5sG9R6uC+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUt YmM2YTFiMjFmZDVlLzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUtYmM2YTFiMjFmZDVl LzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIu0GEF6p fZQPIAp58jW7nN9x1IH+nr1sBZ5eOX0FTdoiXhA4hHPDoZSwf847Hm8QyRbcNepg kVWbh2OJaiCBkIKDiZvYZkuQKsWAKanvJrIHRiCFxk8c/d/ktNEjzXY6bKwq/ja9 C1H1j/NUn39S2VpkVAweaWvCBjy6nTFrdDgRyc+8E86SOLRw21hOq0qRS3Tf5oNc 9NXjA3je+uOqDDrHxsApi/O9q9Nu62/jp8W+kf4Ix2d2IgJJTTi6lIBOg1P+kghl 8M4cL8xBCqQBP5yc3O1IzBDFJSgqj7w4McIH8fVMOc3Kf2Ohs6aaJ/sbDHiPaoQl Nb9/mO8yXvLadw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:48 2026 by rpki-client