This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json) Hash identifier: pIotCvA0uOJxSUWARHX1yqDoRu1SPXZEg9gyPqH2Tfs= Subject key identifier: B6:14:A2:74:D4:B2:F4:9E:99:6C:3F:53:23:83:7A:03:94:15:F5:94 Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Certificate serial: 019BF79AA92B568319D395C7495960E761E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft Manifest number: 177A Signing time: Mon 26 Jan 2026 00:01:06 +0000 Manifest this update: Mon 26 Jan 2026 00:01:06 +0000 Manifest next update: Tue 27 Jan 2026 00:01:06 +0000 Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=) 2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: SEUowxc3VTNlLibQs7Vj9BxD4mBEitWOsM1mAEo4yVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:a9:2b:56:83:19:d3:95:c7:49:59:60:e7:61:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Validity Not Before: Jan 26 00:01:06 2026 GMT Not After : Jan 27 00:01:06 2026 GMT Subject: CN=b614a274d4b2f49e996c3f5323837a039415f594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:87:a7:53:a4:0c:69:76:d8:49:5c:fb:ba: ce:dc:5b:2e:c6:f9:c2:22:e8:f3:3c:29:e3:fa:3f: 92:a4:50:eb:93:b8:96:a8:7e:e2:70:50:fb:93:1d: e8:db:36:36:70:b6:8e:1b:ac:c1:64:14:42:d9:19: e9:e2:ab:b8:c0:44:59:ed:68:c0:19:63:f3:0a:a2: 90:03:8e:c5:d5:ea:38:82:90:c6:72:35:69:58:74: 6a:49:61:77:33:3f:0d:02:b1:2f:5c:fb:9d:05:3e: c6:de:12:c7:10:2f:fe:97:f4:d9:c6:c3:65:30:bc: c6:57:b8:1f:41:4b:05:f9:b1:a9:b6:69:37:82:8b: d6:e7:d5:d9:34:f7:f0:ca:0b:44:3d:64:24:9b:31: f1:d6:f3:48:53:2d:83:32:e4:a1:df:8e:16:98:77: 02:3d:d8:d7:bd:fb:d6:a9:4c:3a:82:20:5e:45:9a: d3:9f:ca:df:4d:32:33:75:5e:01:80:ac:6d:76:9a: cf:8a:e5:fc:4c:4d:01:44:bf:80:81:29:50:99:a3: 53:64:6a:00:37:cc:02:f1:97:33:69:c5:37:e5:4c: 44:a3:f1:56:f3:48:9f:f8:ae:83:9f:c7:e9:29:e6: a4:75:ea:df:db:ad:5b:6a:c4:10:0a:cb:41:aa:27: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:A2:74:D4:B2:F4:9E:99:6C:3F:53:23:83:7A:03:94:15:F5:94 X509v3 Authority Key Identifier: keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:4f:b8:6f:8f:67:cf:3a:bb:04:58:22:b7:84:6b:0e:b2: da:c7:4e:41:3b:93:2a:f3:c9:35:c4:fc:c3:c2:7e:12:a9:f1: 8f:bd:5d:96:b4:43:25:a9:7a:55:7c:54:4a:b4:45:17:3e:a3: 3e:f7:0e:e2:85:a2:fb:7a:6b:73:d8:18:5c:a4:0c:a2:5d:16: 94:3b:d1:4b:3a:2c:b6:62:0f:7f:b6:b0:84:bd:10:b2:83:1d: b1:bd:fa:be:7d:9a:ba:de:2d:d8:4d:aa:8e:47:6d:37:22:86: 98:4f:61:a8:e9:9f:e6:e5:39:20:f3:bb:9e:0a:9d:ea:2d:ff: e5:90:17:2a:18:b4:d2:94:d4:8e:ea:a6:94:82:de:6d:ef:40: 8c:a7:d2:ec:b2:48:3f:59:1d:a4:71:1a:04:a3:68:81:38:c6: a4:6c:c5:35:f1:5a:32:d1:1f:2a:20:fa:3c:d3:fe:37:63:0a: 2d:b0:6a:bd:bb:be:36:b7:7a:c2:ed:93:77:52:7f:b4:33:4f: 9a:57:91:24:c3:8c:69:4f:30:23:e2:a4:8a:b4:66:5d:17:c6: 6b:e6:32:b7:19:46:2f:32:b4:b9:d9:2b:c5:56:b0:f6:4a:5a: c9:69:58:7a:7c:9b:8b:50:1d:0c:16:ca:d7:6b:53:d5:e5:62: 63:df:3e:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mqkrVoMZ05XHSVlg52HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTM5ZjkzNTVkM2ViNzc4YjFiYjhlZTI3MjMzMjYwMTFh MTIyOWIwHhcNMjYwMTI2MDAwMTA2WhcNMjYwMTI3MDAwMTA2WjAzMTEwLwYDVQQD EyhiNjE0YTI3NGQ0YjJmNDllOTk2YzNmNTMyMzgzN2EwMzk0MTVmNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh+Hp1OkDGl22Elc+7rO3FsuxvnC IujzPCnj+j+SpFDrk7iWqH7icFD7kx3o2zY2cLaOG6zBZBRC2Rnp4qu4wERZ7WjA GWPzCqKQA47F1eo4gpDGcjVpWHRqSWF3Mz8NArEvXPudBT7G3hLHEC/+l/TZxsNl MLzGV7gfQUsF+bGptmk3govW59XZNPfwygtEPWQkmzHx1vNIUy2DMuSh344WmHcC PdjXvfvWqUw6giBeRZrTn8rfTTIzdV4BgKxtdprPiuX8TE0BRL+AgSlQmaNTZGoA N8wC8ZczacU35UxEo/FW80if+K6Dn8fpKeakderf261basQQCstBqieJAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYUonTUsvSemWw/UyODegOUFfWUMB8GA1UdIwQY MBaAFKhTn5NV0+t3ixu47icjMmARoSKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2Ut NzFmNGM0N2Y1MDZlLzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2UtNzFmNGM0N2Y1MDZl LzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0lPuG+P Z886uwRYIreEaw6y2sdOQTuTKvPJNcT8w8J+Eqnxj71dlrRDJal6VXxUSrRFFz6j PvcO4oWi+3prc9gYXKQMol0WlDvRSzostmIPf7awhL0QsoMdsb36vn2aut4t2E2q jkdtNyKGmE9hqOmf5uU5IPO7ngqd6i3/5ZAXKhi00pTUjuqmlILebe9AjKfS7LJI P1kdpHEaBKNogTjGpGzFNfFaMtEfKiD6PNP+N2MKLbBqvbu+Nrd6wu2Td1J/tDNP mleRJMOMaU8wI+KkirRmXRfGa+YytxlGLzK0udkrxVaw9kpayWlYenybi1AdDBbK 12tT1eViY98+QQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:03 2026 by rpki-client