This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: uuCOAknY+p+6ZkELfw3iheFoYXdUf2oL+0ZzbK4FJgs= Subject key identifier: F4:C4:76:4F:68:45:33:02:32:34:63:1F:CF:72:B9:0E:39:C2:37:BC Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019BF5070814E265212777DDDA0B4F491459 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 1829 Signing time: Sun 25 Jan 2026 12:00:37 +0000 Manifest this update: Sun 25 Jan 2026 12:00:37 +0000 Manifest next update: Mon 26 Jan 2026 12:00:37 +0000 Files and hashes: 1: Mlne1IYUugYsEEIS3jxaVdlC9Tk.roa (hash: 7DS29eRcsAN4a+co4sNfgsE+ZaIkRf7RxGeM93m+Nac=) 2: P-d8pM3ZUaWx7RORvhmY0byklDA.roa (hash: TNlFLwzOtLz7DKoRELe5o3L3+L4T1FawURG1uQlmVU0=) 3: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: 2zv7aWOMFDeJx1W9oSQjxt+YFkp5TzOW5TfEBj6R/nU=) 4: W7xXQepVYqOcN3HtIVDmtoxvm_U.roa (hash: 1dqGMvwgE4nyLDHC/icI0sBfdJkRLj5FLFOTHDIJ6Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:08:14:e2:65:21:27:77:dd:da:0b:4f:49:14:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Jan 25 12:00:37 2026 GMT Not After : Jan 26 12:00:37 2026 GMT Subject: CN=f4c4764f684533023234631fcf72b90e39c237bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:dc:a6:f0:7a:e7:05:30:9a:8b:4e:28:ef: 65:5b:9d:42:0a:1a:4e:1c:0c:63:dd:b8:ff:f4:c4: fe:04:3f:9d:9f:f8:0b:93:30:88:7b:53:56:5b:12: ff:64:ba:5c:6f:00:28:2a:6b:21:89:1a:27:b0:67: c9:48:42:b7:af:79:b5:e2:04:46:a6:ba:74:d7:cd: cf:41:8b:9a:4f:22:c6:cd:91:bf:5e:52:ae:04:7b: 5f:2c:00:f0:b1:00:27:48:b7:4f:c9:13:c4:6e:61: f5:a4:c8:29:02:77:66:0d:37:02:ba:14:ff:d9:12: 8e:34:55:85:29:19:1d:3a:da:19:8e:9e:6a:5e:e1: 49:ed:4e:a6:83:f9:13:22:b7:a8:cd:05:8c:c7:63: 00:7f:34:69:a3:f8:d7:2e:30:99:d9:d6:7a:55:88: 85:27:db:f9:a0:96:18:71:22:f8:49:45:9c:8f:d5: 75:90:16:7d:31:1a:3b:da:d2:76:00:c3:48:39:2d: 76:c0:dc:fe:4d:a2:10:1d:0f:79:fd:b1:90:80:a8: a8:f2:63:57:f0:df:b1:a6:be:61:5a:12:4d:42:c5: f5:fb:41:85:f6:05:5c:12:20:28:26:51:02:fd:fa: b0:19:53:6a:a6:46:bf:dd:2f:8f:3b:37:34:b5:03: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C4:76:4F:68:45:33:02:32:34:63:1F:CF:72:B9:0E:39:C2:37:BC X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:0b:a0:ed:8c:10:85:a5:92:80:c6:5a:ac:3a:18:af:a6: af:fc:0a:c3:d9:1e:af:e6:02:b5:1f:dc:ad:e0:48:23:4f:ef: 99:e8:2a:c4:d7:52:91:7c:18:69:c5:40:d5:ed:79:9a:ca:ec: b8:51:34:15:d7:64:74:d6:a7:7d:92:60:ca:84:c8:a4:7e:da: 8b:1e:3a:7c:75:83:8c:88:76:27:df:c1:6f:99:57:45:f9:66: e3:e4:47:e9:6a:b5:f3:7a:cf:f6:c0:52:b4:98:51:53:e8:65: 20:57:e2:0d:3c:c4:97:ad:3f:25:85:df:f7:07:2a:f4:b7:da: 6c:bc:b8:32:d6:c7:4a:eb:6e:ce:fc:5e:4d:b0:44:7b:28:d7: 7c:c9:85:0b:e7:fb:11:39:cd:0d:94:d0:a0:9f:c5:e6:3f:b8: ee:36:24:19:71:88:90:70:57:13:04:db:79:0f:66:26:aa:49: d9:dd:2e:26:1d:78:58:c2:36:e8:17:33:d7:fb:fd:72:53:b4: 08:31:16:18:cf:f9:2b:32:1e:fa:f6:6e:65:38:f1:ae:b5:cc: 9b:88:f0:18:b7:58:99:83:a8:a7:1d:60:a4:b3:e2:06:fb:61: 63:80:7c:53:7d:1f:2c:53:3a:7d:99:21:df:d6:f4:d2:6b:f5: 5b:30:50:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BwgU4mUhJ3fd2gtPSRRZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjYwMTI1MTIwMDM3WhcNMjYwMTI2MTIwMDM3WjAzMTEwLwYDVQQD EyhmNGM0NzY0ZjY4NDUzMzAyMzIzNDYzMWZjZjcyYjkwZTM5YzIzN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy/cpvB65wUwmotOKO9lW51CChpO HAxj3bj/9MT+BD+dn/gLkzCIe1NWWxL/ZLpcbwAoKmshiRonsGfJSEK3r3m14gRG prp0183PQYuaTyLGzZG/XlKuBHtfLADwsQAnSLdPyRPEbmH1pMgpAndmDTcCuhT/ 2RKONFWFKRkdOtoZjp5qXuFJ7U6mg/kTIreozQWMx2MAfzRpo/jXLjCZ2dZ6VYiF J9v5oJYYcSL4SUWcj9V1kBZ9MRo72tJ2AMNIOS12wNz+TaIQHQ95/bGQgKio8mNX 8N+xpr5hWhJNQsX1+0GF9gVcEiAoJlEC/fqwGVNqpka/3S+POzc0tQOnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTEdk9oRTMCMjRjH89yuQ45wje8MB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB4LoO2M EIWlkoDGWqw6GK+mr/wKw9ker+YCtR/creBII0/vmegqxNdSkXwYacVA1e15msrs uFE0FddkdNanfZJgyoTIpH7aix46fHWDjIh2J9/Bb5lXRflm4+RH6Wq183rP9sBS tJhRU+hlIFfiDTzEl60/JYXf9wcq9LfabLy4MtbHSutuzvxeTbBEeyjXfMmFC+f7 ETnNDZTQoJ/F5j+47jYkGXGIkHBXEwTbeQ9mJqpJ2d0uJh14WMI26Bcz1/v9clO0 CDEWGM/5KzIe+vZuZTjxrrXMm4jwGLdYmYOopx1gpLPiBvthY4B8U30fLFM6fZkh 39b00mv1WzBQKg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:40 2026 by rpki-client