This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json) Hash identifier: OelHp8cRYLcyd0H417gH5l1yL5tkPvNA24OkQtDt38Y= Subject key identifier: 20:BC:CA:30:A1:22:40:A6:9E:E6:0D:E5:D2:8F:A4:31:99:DD:4C:02 Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Certificate serial: 019BF650EECD0DE4915307FF170F6284A0B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft Manifest number: 157D Signing time: Sun 25 Jan 2026 18:00:57 +0000 Manifest this update: Sun 25 Jan 2026 18:00:57 +0000 Manifest next update: Mon 26 Jan 2026 18:00:57 +0000 Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=) 2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: n4TvZJOnORZ4QEVjZ2p3XfTBQa6t0x88EjrPd84TOiw=) 3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=) 4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ee:cd:0d:e4:91:53:07:ff:17:0f:62:84:a0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Validity Not Before: Jan 25 18:00:57 2026 GMT Not After : Jan 26 18:00:57 2026 GMT Subject: CN=20bcca30a12240a69ee60de5d28fa43199dd4c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:af:d9:12:08:44:aa:13:bc:b8:54:45:7f: f8:0b:60:4a:00:04:13:6d:16:01:7e:52:e0:96:33: e6:ec:52:f6:ac:a6:d2:a5:87:1f:bf:6c:11:89:c9: b5:a9:f8:89:f1:21:e7:f3:17:d5:be:8e:37:a2:cd: 6d:0f:4f:26:a4:3b:6b:1c:7b:1f:ef:4d:ac:f9:57: 12:12:6c:fc:4b:61:18:8f:83:b8:53:8f:12:e9:a0: ce:6d:9d:1d:45:5c:ef:3f:ab:da:b0:b2:28:3f:86: aa:7d:d2:31:c6:7a:ac:f0:44:a6:80:88:91:ca:ba: 12:48:cf:f9:87:d8:13:6c:b6:e5:0e:23:1d:5d:2c: 7c:3e:68:1c:14:cc:a8:0c:bd:a3:a0:32:cb:5c:e3: 42:b6:02:7a:55:88:b4:80:f6:e8:5d:ea:3a:ba:49: 93:27:a5:a1:6a:0b:e0:07:ef:9a:dc:34:97:24:f9: 3d:8e:12:b9:67:1a:b8:98:15:3a:63:9d:72:1a:61: a3:82:47:8f:b2:a0:63:ed:4a:5d:2f:2e:68:93:32: d4:25:7f:b5:8d:cc:49:f6:cd:83:71:90:08:e3:6c: 8e:24:69:d7:62:2a:26:35:0f:50:92:00:bc:8e:a4: 5e:42:46:b3:a5:cc:bf:11:90:2a:c4:44:98:4b:fc: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BC:CA:30:A1:22:40:A6:9E:E6:0D:E5:D2:8F:A4:31:99:DD:4C:02 X509v3 Authority Key Identifier: keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f2:97:26:8f:14:d9:75:53:f3:6d:2f:cb:12:fc:c9:ad:ad: 75:a6:d3:9f:9e:59:29:1b:fc:f5:41:da:fb:9f:48:8e:a1:c8: 5f:0f:12:ec:95:2e:ae:f4:b6:77:b1:02:61:fe:79:8e:7e:51: af:4b:22:e5:34:c9:92:9d:5e:4a:b8:ce:72:ef:46:20:d7:2d: 64:3c:dd:ad:55:f9:c9:c3:d7:27:57:21:16:15:1d:8c:fe:35: 4b:22:64:1b:bc:53:21:b1:05:e4:14:19:2a:81:a0:f7:57:5b: 7e:24:f7:36:a3:fa:6a:c5:26:4e:00:c3:5d:66:01:9b:8e:a4: be:12:ab:8b:1c:73:ee:41:c0:eb:6d:fd:05:e9:25:4e:4f:e9: 7c:94:b7:74:04:9b:83:78:21:88:8e:ed:71:9d:f9:da:55:38: 23:3c:59:ae:cb:43:33:65:aa:8c:cb:67:60:e8:e4:97:df:53: 13:e1:32:1f:c5:af:36:31:d0:bc:f5:bd:c3:e8:4f:f3:d4:78: 2a:06:b5:0e:de:e4:d8:be:7d:ce:86:88:09:68:89:f8:f4:37: bd:9c:03:8c:d2:44:aa:90:ad:1d:3a:f8:47:a8:a8:07:a1:e8: eb:5a:1a:cc:24:10:85:7a:cf:64:91:6d:11:30:ce:01:36:55: 60:4c:7d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UO7NDeSRUwf/Fw9ihKC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx MmFjNjgwHhcNMjYwMTI1MTgwMDU3WhcNMjYwMTI2MTgwMDU3WjAzMTEwLwYDVQQD EygyMGJjY2EzMGExMjI0MGE2OWVlNjBkZTVkMjhmYTQzMTk5ZGQ0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKmv2RIIRKoTvLhURX/4C2BKAAQT bRYBflLgljPm7FL2rKbSpYcfv2wRicm1qfiJ8SHn8xfVvo43os1tD08mpDtrHHsf 702s+VcSEmz8S2EYj4O4U48S6aDObZ0dRVzvP6vasLIoP4aqfdIxxnqs8ESmgIiR yroSSM/5h9gTbLblDiMdXSx8PmgcFMyoDL2joDLLXONCtgJ6VYi0gPboXeo6ukmT J6WhagvgB++a3DSXJPk9jhK5Zxq4mBU6Y51yGmGjgkePsqBj7UpdLy5okzLUJX+1 jcxJ9s2DcZAI42yOJGnXYiomNQ9QkgC8jqReQkazpcy/EZAqxESYS/wdkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCC8yjChIkCmnuYN5dKPpDGZ3UwCMB8GA1UdIwQY MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfKXJo8U 2XVT820vyxL8ya2tdabTn55ZKRv89UHa+59IjqHIXw8S7JUurvS2d7ECYf55jn5R r0si5TTJkp1eSrjOcu9GINctZDzdrVX5ycPXJ1chFhUdjP41SyJkG7xTIbEF5BQZ KoGg91dbfiT3NqP6asUmTgDDXWYBm46kvhKrixxz7kHA6239BeklTk/pfJS3dASb g3ghiI7tcZ352lU4IzxZrstDM2WqjMtnYOjkl99TE+EyH8WvNjHQvPW9w+hP89R4 Kga1Dt7k2L59zoaICWiJ+PQ3vZwDjNJEqpCtHTr4R6ioB6Ho61oazCQQhXrPZJFt ETDOATZVYEx9cg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:02 2026 by rpki-client