This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json) Hash identifier: 6M8foG07ZnaU2gVr7U4fe1EDTlPw7FzX29uqb/o7CWs= Subject key identifier: 23:5A:7B:B3:80:1F:67:9E:51:2A:DE:8D:CF:D7:92:2D:6C:66:84:5E Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595 Certificate serial: 019BF5074259259D66346B1FA94D0FC6DA3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft Manifest number: 0CF4 Signing time: Sun 25 Jan 2026 12:00:52 +0000 Manifest this update: Sun 25 Jan 2026 12:00:52 +0000 Manifest next update: Mon 26 Jan 2026 12:00:52 +0000 Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: gmq9uZ27w8RJ3DFUZKvW0ClJowFEmPSb0UZKsR370G4=) 2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=) 3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:42:59:25:9d:66:34:6b:1f:a9:4d:0f:c6:da:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595 Validity Not Before: Jan 25 12:00:52 2026 GMT Not After : Jan 26 12:00:52 2026 GMT Subject: CN=235a7bb3801f679e512ade8dcfd7922d6c66845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:27:e2:55:69:b0:05:b0:75:a8:00:77:6b: 0e:04:e9:00:9c:25:2f:8c:19:16:0e:a6:20:50:d5: 78:c3:dd:f9:89:87:66:e6:0c:00:63:1c:b0:14:7a: 67:2d:e1:14:c8:e3:d7:29:9a:39:d5:b9:32:f8:2c: 22:f5:d3:a5:31:91:9d:94:f1:3b:e2:9d:51:ec:3e: f5:74:ca:de:ac:23:96:09:ab:89:3e:b3:58:4b:f2: ec:99:40:8a:22:22:50:4a:37:3e:92:19:2f:5c:1e: 7b:50:d3:33:c1:16:6e:32:dc:71:c2:7c:8e:9e:7d: de:c0:32:8b:93:aa:8d:4e:be:50:04:1a:26:de:fa: 9b:dc:58:9e:20:11:23:ae:42:d2:7d:0d:5c:ed:35: e6:0d:80:7b:58:c9:82:73:c4:ea:0d:25:c6:00:6d: 3d:5d:7d:a1:e8:4d:ec:22:bf:e1:5f:0c:a0:fb:a7: ca:a9:3e:1d:a5:2e:8e:9a:5e:ad:2e:8f:b5:7b:f2: 7d:86:95:58:94:b3:ea:d4:01:65:be:9f:be:ef:e5: 39:62:01:c2:b5:7e:4a:9a:9d:c1:60:03:a3:07:52: 6a:ee:50:91:c5:3e:a9:dd:04:61:f6:ad:31:e6:0b: 52:ea:b6:96:f9:18:cd:22:c3:04:de:16:60:a1:15: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:7B:B3:80:1F:67:9E:51:2A:DE:8D:CF:D7:92:2D:6C:66:84:5E X509v3 Authority Key Identifier: keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b1:ed:57:4b:7f:e9:ad:0d:eb:3e:72:de:83:80:0a:e2:89: 24:08:e2:8e:17:5d:e4:7b:6b:c0:26:31:20:87:b0:81:25:ea: e1:7b:e2:4b:6a:66:3d:f7:3d:dc:56:b1:8f:ce:40:15:67:c9: 30:c4:e4:1f:37:4a:b7:2d:7a:13:92:de:5b:07:3c:e0:91:49: e8:91:cd:4d:3b:e4:28:a5:b8:13:df:d8:00:6b:0e:e3:2d:ae: 16:4b:dd:d2:ca:ac:8a:85:2b:e6:2d:1a:98:f2:e3:38:63:1f: ce:04:89:d7:61:f3:4a:eb:eb:f3:b3:0e:1e:0f:d5:9d:0b:5b: b4:33:8e:3d:40:7b:78:9f:09:e3:89:67:a3:6a:28:8c:94:7c: 27:c1:98:fa:74:dc:3b:e3:f0:4b:f7:87:50:d6:bb:44:c2:71: 8e:ed:16:6d:69:02:be:b7:d9:c6:eb:96:37:ab:5e:73:c9:39: ed:6d:b6:1e:16:b7:53:c8:30:63:86:23:d7:93:48:ff:f6:ab: 9e:e4:65:b2:ef:25:7c:c4:58:15:c5:c4:ae:7b:32:e6:38:52: f9:52:01:b2:90:35:98:f3:b5:55:c8:ac:e3:d9:6b:44:6b:c2: 4c:f7:a9:65:7b:d3:1d:ca:f8:92:64:aa:e7:a2:a7:0c:51:cb: 34:65:86:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0JZJZ1mNGsfqU0Pxto/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1 ZGQ1OTUwHhcNMjYwMTI1MTIwMDUyWhcNMjYwMTI2MTIwMDUyWjAzMTEwLwYDVQQD EygyMzVhN2JiMzgwMWY2NzllNTEyYWRlOGRjZmQ3OTIyZDZjNjY4NDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nsn4lVpsAWwdagAd2sOBOkAnCUv jBkWDqYgUNV4w935iYdm5gwAYxywFHpnLeEUyOPXKZo51bky+Cwi9dOlMZGdlPE7 4p1R7D71dMrerCOWCauJPrNYS/LsmUCKIiJQSjc+khkvXB57UNMzwRZuMtxxwnyO nn3ewDKLk6qNTr5QBBom3vqb3FieIBEjrkLSfQ1c7TXmDYB7WMmCc8TqDSXGAG09 XX2h6E3sIr/hXwyg+6fKqT4dpS6Oml6tLo+1e/J9hpVYlLPq1AFlvp++7+U5YgHC tX5Kmp3BYAOjB1Jq7lCRxT6p3QRh9q0x5gtS6raW+RjNIsME3hZgoRXN1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNae7OAH2eeUSrejc/Xki1sZoReMB8GA1UdIwQY MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLHtV0t/ 6a0N6z5y3oOACuKJJAjijhdd5HtrwCYxIIewgSXq4XviS2pmPfc93Faxj85AFWfJ MMTkHzdKty16E5LeWwc84JFJ6JHNTTvkKKW4E9/YAGsO4y2uFkvd0sqsioUr5i0a mPLjOGMfzgSJ12HzSuvr87MOHg/VnQtbtDOOPUB7eJ8J44lno2oojJR8J8GY+nTc O+PwS/eHUNa7RMJxju0WbWkCvrfZxuuWN6tec8k57W22Hha3U8gwY4Yj15NI//ar nuRlsu8lfMRYFcXErnsy5jhS+VIBspA1mPO1Vcis49lrRGvCTPepZXvTHcr4kmSq 56KnDFHLNGWGEg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:44 2026 by rpki-client