This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json) Hash identifier: ANR1RyhE1AjoIC3W8bRdFMCn56P46VrtBI4q+cr7FuQ= Subject key identifier: 7C:A3:60:6B:91:B3:BE:6E:74:24:F1:8A:BF:98:BD:9A:6B:DF:54:83 Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019BF462A8AAA519C398155754035BE92EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft Manifest number: 17F4 Signing time: Sun 25 Jan 2026 09:01:04 +0000 Manifest this update: Sun 25 Jan 2026 09:01:04 +0000 Manifest next update: Mon 26 Jan 2026 09:01:04 +0000 Files and hashes: 1: 1-AAmQBvbizmeqxFRtgv0PZkdbaw.roa (hash: szjslYw6N3jLu7zRrYsKftErRAg7H6aZn8Z02fpRv1s=) 2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=) 3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=) 4: Iah6OtePYjsFUK1ItaCxT3f3zKY.roa (hash: 0NSq5x0ip6moKx2U8dB9ksLnbIPKXG3GFtAROl7MkCQ=) 5: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=) 6: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=) 7: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=) 8: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=) 9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: HJz9eLKR07wvHlPvRoyLHWxfsfklTnPiHJPL3NSlqR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:a8:aa:a5:19:c3:98:15:57:54:03:5b:e9:2e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 25 09:01:04 2026 GMT Not After : Jan 26 09:01:04 2026 GMT Subject: CN=7ca3606b91b3be6e7424f18abf98bd9a6bdf5483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ac:93:cd:ce:69:c2:d2:3b:1c:2e:f4:f9:5a: 82:7e:88:ec:67:5d:da:e6:46:fe:b0:3c:c9:0b:43: 82:ba:a9:5a:dc:70:b5:9d:96:f5:09:06:03:0b:e7: 94:1f:7a:cf:dc:5b:b1:6c:98:c6:d3:0e:48:9e:9a: 38:5e:96:c4:80:21:6b:18:7b:ec:c2:b5:46:34:9b: 04:f1:6a:e3:27:d6:79:56:77:4f:4a:4d:bb:51:38: d4:b4:c5:57:27:92:88:07:d0:50:9c:fb:d9:1a:d7: 97:f9:42:4a:73:f0:85:84:c6:70:0f:7a:6a:f5:89: 2f:2d:2e:51:f6:59:05:f5:81:2d:fb:c7:dd:51:9d: 25:08:aa:5a:30:40:1d:40:1f:a4:81:fc:b8:b6:31: 51:66:76:08:94:25:98:bf:a2:6e:00:5e:67:73:59: 0e:ed:7a:85:77:a8:16:2a:e3:b2:0e:13:cd:93:ad: c5:55:8f:e2:69:be:de:fb:69:e3:6c:87:fc:34:5c: 91:ef:aa:d2:aa:ee:e0:08:dd:a0:71:86:70:34:f0: e4:e3:3c:22:e2:44:18:60:91:40:f6:cd:66:fe:a8: 65:e9:dd:29:d7:77:31:bb:0e:6e:a1:99:54:6d:9a: e4:e7:af:df:5f:9f:d7:24:50:1d:81:8a:03:06:fb: 9b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A3:60:6B:91:B3:BE:6E:74:24:F1:8A:BF:98:BD:9A:6B:DF:54:83 X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8e:ed:3b:cc:e1:5a:b1:db:0a:be:31:4d:1a:24:3f:5b:18: 50:5f:6e:5e:67:5c:6d:59:3a:c1:e3:42:91:4e:e4:a4:71:1a: e9:f9:62:05:63:75:75:d6:4b:a5:48:2a:6e:a5:bb:88:23:8d: 34:3c:74:db:69:24:5d:f9:0e:d4:f9:79:a9:ec:9f:10:59:4c: 2d:8c:5e:ca:89:d7:cd:52:af:3d:29:fe:6b:95:9a:15:3a:a4: 38:b8:55:e2:0c:71:31:1f:fd:a1:a4:d1:d6:0f:96:2b:9b:5f: 5d:66:bf:4c:03:22:9e:49:35:ee:40:40:42:94:b5:ac:26:58: 60:23:9a:be:0c:54:4d:1d:f0:bc:cb:30:4b:b6:f0:d0:85:d4: e8:3b:ad:8a:f0:97:f2:86:d4:65:af:19:b9:5b:e8:b7:16:23: c9:e8:de:2e:f2:68:c1:d7:c8:04:46:f4:43:08:57:75:8b:51: e2:29:e4:a5:e0:e5:17:73:7f:b0:82:06:0e:c0:bc:80:d6:b7: a6:63:bf:5d:f3:d3:75:08:14:96:82:fa:b0:ec:0c:45:3a:99: 55:1f:ff:ba:67:00:a5:5d:90:9b:b2:72:d6:fd:de:e5:db:4f: 05:3a:56:c2:01:51:be:68:ea:3f:9a:e2:d7:ca:f4:e5:f7:d6: e5:26:f8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YqiqpRnDmBVXVANb6S79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTI1MDkwMTA0WhcNMjYwMTI2MDkwMTA0WjAzMTEwLwYDVQQD Eyg3Y2EzNjA2YjkxYjNiZTZlNzQyNGYxOGFiZjk4YmQ5YTZiZGY1NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqayTzc5pwtI7HC70+VqCfojsZ13a 5kb+sDzJC0OCuqla3HC1nZb1CQYDC+eUH3rP3FuxbJjG0w5Inpo4XpbEgCFrGHvs wrVGNJsE8WrjJ9Z5VndPSk27UTjUtMVXJ5KIB9BQnPvZGteX+UJKc/CFhMZwD3pq 9YkvLS5R9lkF9YEt+8fdUZ0lCKpaMEAdQB+kgfy4tjFRZnYIlCWYv6JuAF5nc1kO 7XqFd6gWKuOyDhPNk63FVY/iab7e+2njbIf8NFyR76rSqu7gCN2gcYZwNPDk4zwi 4kQYYJFA9s1m/qhl6d0p13cxuw5uoZlUbZrk56/fX5/XJFAdgYoDBvubLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyjYGuRs75udCTxir+YvZpr31SDMB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo7tO8zh WrHbCr4xTRokP1sYUF9uXmdcbVk6weNCkU7kpHEa6fliBWN1ddZLpUgqbqW7iCON NDx022kkXfkO1Pl5qeyfEFlMLYxeyonXzVKvPSn+a5WaFTqkOLhV4gxxMR/9oaTR 1g+WK5tfXWa/TAMinkk17kBAQpS1rCZYYCOavgxUTR3wvMswS7bw0IXU6DutivCX 8obUZa8ZuVvotxYjyejeLvJowdfIBEb0QwhXdYtR4inkpeDlF3N/sIIGDsC8gNa3 pmO/XfPTdQgUloL6sOwMRTqZVR//umcApV2Qm7Jy1v3e5dtPBTpWwgFRvmjqP5ri 18r05ffW5Sb4pw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:42 2026 by rpki-client