This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: aiMykwVFRlKSa6A+vHh+2g6Fl/Gir8uekSA7Sz2fNZk= Subject key identifier: 8D:F3:63:41:4E:9A:19:F4:04:60:7D:7C:74:8C:2E:AB:40:98:C8:9F Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019BF4D0E357E811CD65C290741687A39394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0E93 Signing time: Sun 25 Jan 2026 11:01:28 +0000 Manifest this update: Sun 25 Jan 2026 11:01:28 +0000 Manifest next update: Mon 26 Jan 2026 11:01:28 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: 0K88YcMabvM8RQzi7Gw0ct2Ku+cWSLfVQTmsc7z5F4k=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:e3:57:e8:11:cd:65:c2:90:74:16:87:a3:93:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 25 11:01:28 2026 GMT Not After : Jan 26 11:01:28 2026 GMT Subject: CN=8df363414e9a19f404607d7c748c2eab4098c89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:f1:43:c3:be:e8:d5:67:6e:f0:d4:18:2c: 3b:35:30:fc:b6:a8:c7:fb:b7:5d:ba:ff:4a:2b:bc: bf:ae:95:06:3a:1a:ad:22:5d:38:11:9f:34:33:6b: 7d:14:06:9b:c3:37:6e:b5:d2:24:81:91:fa:d4:53: d8:4b:94:54:94:1e:21:09:80:1b:8a:4c:53:c9:bd: 62:45:06:47:85:07:ad:a4:bc:ba:db:a8:28:98:59: 8c:08:b4:fa:36:dd:da:d3:8a:e6:95:b2:14:dd:bb: cd:b9:35:6c:55:c5:22:cf:59:b9:c2:77:e1:09:46: 71:46:a5:07:be:8c:ee:f8:94:ba:e2:95:5a:94:45: f3:36:ad:84:52:90:ed:3e:f6:49:62:8d:9a:d4:bf: 2a:d6:8e:8a:d6:cb:7a:26:55:f6:88:4d:ef:c3:6b: 0a:a6:12:b3:b0:4f:46:76:b7:2d:de:8e:30:6e:46: 5d:a2:e0:42:ae:51:0d:b4:fe:52:b9:86:d9:88:b7: c4:51:19:8e:30:c8:70:05:bd:40:5b:09:c1:e6:89: 4f:c1:71:ff:f1:dc:9a:e2:21:c3:33:ff:3a:f6:83: 22:1b:9b:54:9a:9f:79:78:e9:09:29:2e:d5:d5:92: ce:aa:70:23:f4:f8:42:f6:b9:d4:0f:6d:b3:57:2d: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F3:63:41:4E:9A:19:F4:04:60:7D:7C:74:8C:2E:AB:40:98:C8:9F X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1b:fb:08:31:70:1f:b9:dc:17:66:e9:b2:02:46:0b:83:28: a0:34:77:69:70:5c:9f:42:99:44:68:3d:25:d2:ef:1a:1b:e5: cf:64:69:1b:3c:80:ba:e9:cc:90:66:c4:fc:94:6e:af:ad:62: 75:ea:6c:e4:06:a2:99:79:bf:3a:fb:c6:f0:e6:57:be:a3:f1: b6:6c:50:cc:12:d8:10:c0:c1:a5:16:6a:e6:0b:98:5a:8b:2c: 8d:86:7f:c5:b8:4b:66:f1:d5:83:fa:73:78:74:27:df:2a:cb: f8:08:cc:d0:1f:1e:91:a7:77:8c:21:a6:df:c4:9a:e4:b8:53: bf:ce:fe:74:64:42:1c:80:19:15:5d:75:12:e0:75:71:ec:2a: bf:8b:22:dc:6b:95:56:8e:9c:3b:86:25:0a:cb:08:8e:9a:6c: 14:02:af:ce:2a:d3:d9:58:aa:74:b2:3a:a3:41:79:21:f8:48: 77:3b:00:53:8d:d4:a6:83:48:00:4c:c9:c7:a3:f4:cb:14:d4: f6:3b:70:ef:5e:b7:9d:ab:b3:9b:de:8e:e9:0b:2f:05:34:54: 98:0c:c9:78:04:1e:a7:2f:e1:21:e8:aa:00:37:2d:f8:af:77: a8:87:d3:de:22:f7:82:32:52:ca:44:74:4a:8d:89:16:2e:25: 8a:76:6a:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00ONX6BHNZcKQdBaHo5OUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTI1MTEwMTI4WhcNMjYwMTI2MTEwMTI4WjAzMTEwLwYDVQQD Eyg4ZGYzNjM0MTRlOWExOWY0MDQ2MDdkN2M3NDhjMmVhYjQwOThjODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdjxQ8O+6NVnbvDUGCw7NTD8tqjH +7dduv9KK7y/rpUGOhqtIl04EZ80M2t9FAabwzdutdIkgZH61FPYS5RUlB4hCYAb ikxTyb1iRQZHhQetpLy626gomFmMCLT6Nt3a04rmlbIU3bvNuTVsVcUiz1m5wnfh CUZxRqUHvozu+JS64pValEXzNq2EUpDtPvZJYo2a1L8q1o6K1st6JlX2iE3vw2sK phKzsE9Gdrct3o4wbkZdouBCrlENtP5SuYbZiLfEURmOMMhwBb1AWwnB5olPwXH/ 8dya4iHDM/869oMiG5tUmp95eOkJKS7V1ZLOqnAj9PhC9rnUD22zVy29zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3zY0FOmhn0BGB9fHSMLqtAmMifMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRv7CDFw H7ncF2bpsgJGC4MooDR3aXBcn0KZRGg9JdLvGhvlz2RpGzyAuunMkGbE/JRur61i deps5AaimXm/OvvG8OZXvqPxtmxQzBLYEMDBpRZq5guYWossjYZ/xbhLZvHVg/pz eHQn3yrL+AjM0B8ekad3jCGm38Sa5LhTv87+dGRCHIAZFV11EuB1cewqv4si3GuV Vo6cO4YlCssIjppsFAKvzirT2ViqdLI6o0F5IfhIdzsAU43UpoNIAEzJx6P0yxTU 9jtw7163nauzm96O6QsvBTRUmAzJeAQepy/hIeiqADct+K93qIfT3iL3gjJSykR0 So2JFi4linZq+A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:42 2026 by rpki-client