This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json) Hash identifier: VehoaMlf+6sKYavovy3F5HRCaZlOJ5npN1bFtrJANc0= Subject key identifier: 8A:A1:05:B2:3B:FF:26:E1:48:E9:AD:C1:F3:2A:1D:E5:A5:84:3F:11 Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Certificate serial: 019BF507486C5F4E7778C6D798CF6DCC5C21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft Manifest number: 14EE Signing time: Sun 25 Jan 2026 12:00:53 +0000 Manifest this update: Sun 25 Jan 2026 12:00:53 +0000 Manifest next update: Mon 26 Jan 2026 12:00:53 +0000 Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=) 2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: aQZd2fo6AsR+GLGgyvxWfEgtljgkxK5mQadk8NCbsXY=) 3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:48:6c:5f:4e:77:78:c6:d7:98:cf:6d:cc:5c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092 Validity Not Before: Jan 25 12:00:53 2026 GMT Not After : Jan 26 12:00:53 2026 GMT Subject: CN=8aa105b23bff26e148e9adc1f32a1de5a5843f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:e7:9a:93:c4:fd:34:1b:6f:d6:ae:3a:03: 5f:42:38:78:01:c6:11:1c:6b:1b:0f:9c:23:af:f6: 2c:c5:70:6a:eb:f8:ab:e9:22:00:ff:64:3a:62:e4: 8c:62:7d:78:4d:ee:4c:ff:3e:a4:fd:bf:8c:3c:c0: 3d:5f:50:c4:dc:9b:45:17:9f:ae:1e:04:95:fb:47: 37:d8:6b:ea:5f:14:28:ec:71:cc:26:32:19:9d:42: 13:9b:62:99:8c:80:46:07:e3:f8:e7:e1:cd:52:ff: 6d:b6:ba:80:a8:4d:50:0a:18:93:87:ee:05:3b:d4: a9:9d:76:a0:f2:82:d9:4f:a1:49:78:43:91:db:ec: b7:8b:39:15:f2:5a:3c:8e:a1:0e:a2:28:3d:b3:b2: f1:4e:da:99:f8:a7:78:e0:4f:3f:bd:0e:f4:26:0f: 47:6a:8d:46:81:a5:f8:d9:37:64:c3:bc:f8:49:95: f1:3d:f1:da:90:2a:2e:70:6e:47:49:bc:06:ee:1d: d0:12:1f:66:43:d4:c4:73:2a:e8:90:58:c6:63:1b: df:22:c0:b4:f5:04:e4:b3:89:d5:71:db:d8:4c:21: b8:12:3a:cd:e4:1b:dd:5c:1f:00:4c:de:28:29:91: 31:a6:50:65:4a:7b:cf:9d:e4:81:c0:b2:65:6b:3d: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:05:B2:3B:FF:26:E1:48:E9:AD:C1:F3:2A:1D:E5:A5:84:3F:11 X509v3 Authority Key Identifier: keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f3:62:9b:c6:ef:be:08:72:68:00:f6:a4:31:31:6d:af:32: 7d:e1:ce:a6:d6:91:e4:55:42:8c:39:0b:2a:8d:de:ac:62:b2: 7f:3c:64:4a:92:4f:98:bf:6a:f2:a1:e9:3b:0f:a7:d3:77:8d: 7c:6c:eb:e1:e5:35:c7:07:4d:ba:cd:f4:90:98:dd:9a:2b:ab: 57:72:a9:88:6a:bd:df:ed:9e:78:d6:e1:36:50:5e:ae:ae:50: 3f:0b:d7:aa:d2:ac:72:b5:17:a7:fd:3a:28:81:61:be:76:44: 96:b4:e7:3e:00:b8:81:19:c6:90:63:08:f5:d7:2e:62:3f:3e: 0d:8d:f3:ef:d2:a7:d2:88:17:98:8a:24:d8:0e:9d:e6:fd:0c: 0d:48:c3:d7:48:2b:aa:3a:0f:77:2d:66:98:8f:5b:5e:f7:46: 5f:09:1e:58:c7:aa:77:47:d0:74:4a:24:4b:52:9a:53:19:63: 81:f7:3f:a2:81:ba:4b:0a:d1:2e:fa:9a:08:16:39:d4:ec:9c: 12:c4:25:f6:1e:c9:2b:05:ef:43:e2:5d:f5:4c:b1:3d:b9:69: 21:ef:5f:bb:41:e9:cf:96:29:44:18:b2:67:69:2c:50:0d:57: 75:4e:84:05:5b:ee:06:34:fe:3a:fe:94:64:4f:dd:58:e5:7a: 07:d4:0a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0hsX053eMbXmM9tzFwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi YjgwOTIwHhcNMjYwMTI1MTIwMDUzWhcNMjYwMTI2MTIwMDUzWjAzMTEwLwYDVQQD Eyg4YWExMDViMjNiZmYyNmUxNDhlOWFkYzFmMzJhMWRlNWE1ODQzZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZjnmpPE/TQbb9auOgNfQjh4AcYR HGsbD5wjr/YsxXBq6/ir6SIA/2Q6YuSMYn14Te5M/z6k/b+MPMA9X1DE3JtFF5+u HgSV+0c32GvqXxQo7HHMJjIZnUITm2KZjIBGB+P45+HNUv9ttrqAqE1QChiTh+4F O9SpnXag8oLZT6FJeEOR2+y3izkV8lo8jqEOoig9s7LxTtqZ+Kd44E8/vQ70Jg9H ao1GgaX42Tdkw7z4SZXxPfHakCoucG5HSbwG7h3QEh9mQ9TEcyrokFjGYxvfIsC0 9QTks4nVcdvYTCG4EjrN5BvdXB8ATN4oKZExplBlSnvPneSBwLJlaz2LGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqhBbI7/ybhSOmtwfMqHeWlhD8RMB8GA1UdIwQY MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPNim8bv vghyaAD2pDExba8yfeHOptaR5FVCjDkLKo3erGKyfzxkSpJPmL9q8qHpOw+n03eN fGzr4eU1xwdNus30kJjdmiurV3KpiGq93+2eeNbhNlBerq5QPwvXqtKscrUXp/06 KIFhvnZElrTnPgC4gRnGkGMI9dcuYj8+DY3z79Kn0ogXmIok2A6d5v0MDUjD10gr qjoPdy1mmI9bXvdGXwkeWMeqd0fQdEokS1KaUxljgfc/ooG6SwrRLvqaCBY51Oyc EsQl9h7JKwXvQ+Jd9UyxPblpIe9fu0Hpz5YpRBiyZ2ksUA1XdU6EBVvuBjT+Ov6U ZE/dWOV6B9QKTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:22 2026 by rpki-client