This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json) Hash identifier: zYreR2ImciWym2bnt27Az7zBBzATueGjjZrxsVyZBWY= Subject key identifier: EA:C0:41:D7:DF:19:E9:3F:8A:3A:70:6F:11:CF:B7:F4:C4:58:13:E8 Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Certificate serial: 019BF6511967CADA40694B4013032E90850A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 18:01:08 +0000 Manifest this update: Sun 25 Jan 2026 18:01:08 +0000 Manifest next update: Mon 26 Jan 2026 18:01:08 +0000 Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: p3NLwDQ93J4LepRhhUAeMRrWG9Qp1VhKSCgGKodYTuE=) 2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=) 3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:19:67:ca:da:40:69:4b:40:13:03:2e:90:85:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21 Validity Not Before: Jan 25 18:01:08 2026 GMT Not After : Jan 26 18:01:08 2026 GMT Subject: CN=eac041d7df19e93f8a3a706f11cfb7f4c45813e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:26:a4:f0:b3:b1:c2:54:4d:aa:78:e3:0c: e5:8e:5c:fd:52:34:78:51:d4:d5:5e:60:d4:72:da: 27:98:be:40:59:ea:a0:dc:4e:ec:9a:59:f1:70:8a: 9c:b3:33:71:40:e0:d0:2c:59:5d:ec:a6:78:0a:b1: ef:ea:2b:7b:42:c3:76:e0:de:11:c2:c2:c5:ba:87: 9a:de:12:ea:69:14:81:4a:fb:37:9b:dc:73:fb:d3: d2:c2:bb:bb:29:20:af:50:9e:5e:07:92:97:b4:8c: 00:6a:f3:95:f7:d1:0c:8f:bf:ca:5a:fb:ce:1f:4d: 1e:e6:33:4d:d1:a8:be:e8:75:62:10:9d:df:94:bb: 0b:8e:7a:d5:af:3e:ad:c9:2d:08:74:f1:ba:b0:61: d6:af:35:e8:54:91:2b:d1:08:cd:6d:c9:dd:33:ab: 3e:43:f8:92:21:65:7d:75:83:8d:34:da:50:65:b6: 28:e1:b2:f2:57:95:90:29:58:4a:f3:7b:53:b5:95: c1:43:1f:ed:c7:74:68:20:76:52:29:67:b3:ad:75: 41:8c:47:b5:11:24:76:00:30:17:09:f7:16:0c:37: 72:0d:ee:4b:be:b4:74:8d:1c:88:7b:0b:10:0f:15: f7:4e:69:73:c3:51:d2:4d:3a:69:d9:31:d3:d3:e3: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:41:D7:DF:19:E9:3F:8A:3A:70:6F:11:CF:B7:F4:C4:58:13:E8 X509v3 Authority Key Identifier: keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b2:4c:f9:4e:b4:ee:ac:a7:e4:b6:78:73:b6:56:5a:b0:12: e9:9a:af:cb:3f:ba:c6:fa:28:af:b4:03:46:21:d6:df:24:99: e0:f5:2c:6a:fe:45:25:a5:fc:cd:13:f2:be:eb:17:6c:76:d3: 8b:ad:2b:42:ac:b4:d8:9c:29:91:58:b7:55:0f:19:27:03:04: 89:0e:61:9c:65:f3:2a:63:01:18:17:11:47:86:ac:f6:ef:47: ca:47:63:b6:da:16:d0:56:66:6b:ac:d6:05:1d:4b:d6:af:8c: 97:87:a4:a4:45:b7:98:98:91:3a:c2:b3:62:ee:ae:03:7b:fe: a7:84:7c:23:2e:47:67:5b:26:99:89:9b:11:d1:1a:41:a0:fe: 6f:42:b0:4b:dd:d8:8c:f9:43:01:13:1b:55:26:a3:35:cd:c8: 48:f0:0a:2e:5f:66:2d:c2:29:0f:5b:39:35:79:1f:71:db:1d: f2:d8:85:91:b8:b6:3f:d3:25:7b:57:cf:51:d4:49:16:4b:e5: 5c:36:bb:39:28:3a:4d:e1:e1:80:04:4b:cf:5c:73:cc:28:ca: 90:53:6f:90:54:d2:61:c8:ab:05:20:20:08:b5:e5:2c:6b:45: f8:16:f9:7d:7a:d6:48:45:92:c3:f2:97:46:0f:85:81:6e:98: 56:01:8f:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URlnytpAaUtAEwMukIUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl ZGJkMjEwHhcNMjYwMTI1MTgwMTA4WhcNMjYwMTI2MTgwMTA4WjAzMTEwLwYDVQQD EyhlYWMwNDFkN2RmMTllOTNmOGEzYTcwNmYxMWNmYjdmNGM0NTgxM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdMmpPCzscJUTap44wzljlz9UjR4 UdTVXmDUctonmL5AWeqg3E7smlnxcIqcszNxQODQLFld7KZ4CrHv6it7QsN24N4R wsLFuoea3hLqaRSBSvs3m9xz+9PSwru7KSCvUJ5eB5KXtIwAavOV99EMj7/KWvvO H00e5jNN0ai+6HViEJ3flLsLjnrVrz6tyS0IdPG6sGHWrzXoVJEr0QjNbcndM6s+ Q/iSIWV9dYONNNpQZbYo4bLyV5WQKVhK83tTtZXBQx/tx3RoIHZSKWezrXVBjEe1 ESR2ADAXCfcWDDdyDe5LvrR0jRyIewsQDxX3Tmlzw1HSTTpp2THT0+P/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrAQdffGek/ijpwbxHPt/TEWBPoMB8GA1UdIwQY MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7JM+U60 7qyn5LZ4c7ZWWrAS6Zqvyz+6xvoor7QDRiHW3ySZ4PUsav5FJaX8zRPyvusXbHbT i60rQqy02JwpkVi3VQ8ZJwMEiQ5hnGXzKmMBGBcRR4as9u9HykdjttoW0FZma6zW BR1L1q+Ml4ekpEW3mJiROsKzYu6uA3v+p4R8Iy5HZ1smmYmbEdEaQaD+b0KwS93Y jPlDARMbVSajNc3ISPAKLl9mLcIpD1s5NXkfcdsd8tiFkbi2P9Mle1fPUdRJFkvl XDa7OSg6TeHhgARLz1xzzCjKkFNvkFTSYcirBSAgCLXlLGtF+Bb5fXrWSEWSw/KX Rg+FgW6YVgGPwQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:07 2026 by rpki-client