This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json) Hash identifier: rlo5UA2HW5b2JMLGOnvCRx/FkJk7jv1bFOvIGTQdFS8= Subject key identifier: 3F:21:73:CF:37:A6:B0:92:18:F3:F8:B7:97:CE:23:5D:8E:90:39:2E Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Certificate serial: 019BF6BEC879D846FD04D428C3F4D0E8AE0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 20:00:56 +0000 Manifest this update: Sun 25 Jan 2026 20:00:56 +0000 Manifest next update: Mon 26 Jan 2026 20:00:56 +0000 Files and hashes: 1: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: 2TQK223NlcMMYOx3nHsBXTcdAoqg7d0g3/XyB0PF/Sk=) 2: SzUYKWffDLzD3KfG-tHUGCGVR50.roa (hash: HYko2OtpzwVD1bQm6/aHErTnPd1yFyteka+/4h0Bbfo=) 3: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=) 4: zrlAYru86sKNfdp41yXXW-vHWVA.roa (hash: OeRsLdUmyVY56D+kTeE010Uoy9wfuuFNR8ruGwb2Hwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c8:79:d8:46:fd:04:d4:28:c3:f4:d0:e8:ae:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb Validity Not Before: Jan 25 20:00:56 2026 GMT Not After : Jan 26 20:00:56 2026 GMT Subject: CN=3f2173cf37a6b09218f3f8b797ce235d8e90392e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:15:1c:b8:fc:62:07:02:31:29:e6:04:f2: e5:97:a4:95:f6:45:61:8d:ca:ec:2d:ac:82:6d:ce: 14:29:38:b0:92:d8:ed:ab:89:c4:f0:f8:9f:72:61: 53:e4:21:7b:bd:64:08:39:44:77:b1:ca:21:7d:b6: 4b:6c:5c:87:a8:52:5b:ab:f8:af:bb:fa:0d:ad:21: a7:4c:92:54:73:85:49:f0:81:65:73:a8:7a:8f:ab: 56:ab:d9:92:8f:4d:32:a5:89:0f:bd:82:9c:a7:39: e9:c4:77:08:b6:71:1d:f6:56:17:23:57:53:49:3e: 5d:b4:54:33:f5:4a:21:ac:de:f7:e6:2e:f3:01:9f: 87:4a:64:15:39:08:2a:33:ec:08:96:88:cc:95:6d: cb:61:c3:83:67:ce:fa:18:14:b1:8b:fd:ff:6c:6d: 18:eb:e8:13:6d:0b:05:1d:af:2b:7e:5e:ad:eb:50: 02:b9:ba:0f:bf:b1:20:58:db:45:7c:6a:af:f9:ec: a9:4b:fc:82:06:29:2f:21:be:ad:fb:7e:84:4e:52: 1a:69:63:a5:ca:2a:96:a0:58:6e:90:71:23:12:a5: 21:a0:09:3f:18:fc:9f:4b:02:0d:a7:99:02:b2:b0: 16:45:b3:e9:ee:42:67:22:5f:69:e9:57:7e:84:05: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:21:73:CF:37:A6:B0:92:18:F3:F8:B7:97:CE:23:5D:8E:90:39:2E X509v3 Authority Key Identifier: keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:88:4a:90:82:fc:b3:98:48:86:22:94:77:f7:3e:e4:0d:ac: 41:c1:88:6b:3a:6d:b0:3e:95:34:53:6d:20:ee:6b:28:44:c8: c8:9e:8f:16:43:56:be:cb:18:f7:80:63:79:95:ca:f3:9d:98: 68:89:f1:02:2f:1f:02:c8:00:1c:dd:d9:c9:2c:63:56:ac:7d: 65:60:ca:c2:2f:76:97:9c:4c:2d:56:00:a4:7f:d5:83:1c:dc: 70:dc:bc:98:18:ac:c1:25:c3:b7:dc:46:06:af:ba:8c:a5:c6: c3:68:63:aa:8b:90:fc:47:b9:ce:07:6a:f7:39:84:75:1d:da: 4d:f9:09:5d:6d:15:98:df:54:12:c5:98:ad:77:0d:74:12:6b: 30:8a:e8:50:cd:01:92:24:f8:4d:d4:20:67:cd:1f:c9:0a:30: a0:ad:2e:2b:2c:6d:dd:20:a6:4e:b2:c3:40:69:d9:bf:d4:a0: 36:0b:cc:7d:6b:4a:93:97:8d:24:eb:79:66:44:87:0b:c5:c5: c8:80:eb:e4:9a:4a:6a:60:0b:3a:ec:e8:71:58:81:f1:96:2f: 29:dc:34:f8:de:bf:ba:fc:e0:08:37:2e:96:bb:ff:78:10:8f: dd:54:bb:10:73:f9:a0:0f:b7:50:ed:57:99:f8:64:72:7d:30: 53:48:8f:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsh52Eb9BNQow/TQ6K4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTY1ZGQxZjZmMjRhNDZkN2NjNGJjY2ZlY2Q0MTUxYzZk ZDFiZmIwHhcNMjYwMTI1MjAwMDU2WhcNMjYwMTI2MjAwMDU2WjAzMTEwLwYDVQQD EygzZjIxNzNjZjM3YTZiMDkyMThmM2Y4Yjc5N2NlMjM1ZDhlOTAzOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxkVHLj8YgcCMSnmBPLll6SV9kVh jcrsLayCbc4UKTiwktjtq4nE8PifcmFT5CF7vWQIOUR3scohfbZLbFyHqFJbq/iv u/oNrSGnTJJUc4VJ8IFlc6h6j6tWq9mSj00ypYkPvYKcpznpxHcItnEd9lYXI1dT ST5dtFQz9UohrN735i7zAZ+HSmQVOQgqM+wIlojMlW3LYcODZ876GBSxi/3/bG0Y 6+gTbQsFHa8rfl6t61ACuboPv7EgWNtFfGqv+eypS/yCBikvIb6t+36ETlIaaWOl yiqWoFhukHEjEqUhoAk/GPyfSwINp5kCsrAWRbPp7kJnIl9p6Vd+hAXmxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8hc883prCSGPP4t5fOI12OkDkuMB8GA1UdIwQY MBaAFEOWXdH28kpG18xLzP7NQVHG3Rv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEt MzM5ODBjMDNmMDhlLzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jNzMxYzQtOTE4My00ZGIzLWI3MGEtMzM5ODBjMDNmMDhl LzEvUTVaZDBmYnlTa2JYekV2TV9zMUJVY2JkR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMohKkIL8 s5hIhiKUd/c+5A2sQcGIazptsD6VNFNtIO5rKETIyJ6PFkNWvssY94BjeZXK852Y aInxAi8fAsgAHN3ZySxjVqx9ZWDKwi92l5xMLVYApH/VgxzccNy8mBiswSXDt9xG Bq+6jKXGw2hjqouQ/Ee5zgdq9zmEdR3aTfkJXW0VmN9UEsWYrXcNdBJrMIroUM0B kiT4TdQgZ80fyQowoK0uKyxt3SCmTrLDQGnZv9SgNgvMfWtKk5eNJOt5ZkSHC8XF yIDr5JpKamALOuzocViB8ZYvKdw0+N6/uvzgCDculrv/eBCP3VS7EHP5oA+3UO1X mfhkcn0wU0iPFg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:22 2026 by rpki-client