This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json) Hash identifier: wN/B6F/K04ru7rGghVx9kzYUcWqD74ApdiziCmyG0q0= Subject key identifier: 5F:AF:38:E9:45:EC:1D:95:C8:C4:3E:6F:2F:7B:D8:A2:03:E2:96:5D Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Certificate serial: 019BF807F9ED7D078AF39EA66B43FE4A6856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft Manifest number: 0635 Signing time: Mon 26 Jan 2026 02:00:30 +0000 Manifest this update: Mon 26 Jan 2026 02:00:30 +0000 Manifest next update: Tue 27 Jan 2026 02:00:30 +0000 Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: SiyXl7MU2UrcTJE+0U9REdsn/ABLaJC7In4yC3WIosE=) 2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:07:f9:ed:7d:07:8a:f3:9e:a6:6b:43:fe:4a:68:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Validity Not Before: Jan 26 02:00:30 2026 GMT Not After : Jan 27 02:00:30 2026 GMT Subject: CN=5faf38e945ec1d95c8c43e6f2f7bd8a203e2965d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:4c:cc:79:e8:a6:d6:a6:a5:22:da:8b:18: 85:de:7e:1d:55:b4:b9:e8:b2:03:4a:b5:2a:3e:5a: a7:b1:75:e9:dd:da:de:61:c4:1d:89:74:f0:ab:ee: 9a:00:73:e5:cf:05:8f:b5:8f:9e:e1:12:b7:f4:69: cd:fc:75:8c:17:42:72:f6:99:50:8c:d8:f8:a0:1e: 2f:53:54:14:09:62:79:e8:b0:18:46:90:b9:87:e9: 82:5c:48:68:bd:6b:72:90:db:20:13:f1:3b:cb:cb: 9e:ff:3e:14:bf:6c:54:70:91:d8:ea:fa:01:8c:5b: 51:f2:74:56:44:1d:6b:c1:36:f0:30:58:89:b7:e9: 23:b1:e6:f6:c3:1b:20:da:42:24:d0:4d:b1:56:34: 9d:65:8b:63:3e:f8:09:a6:2f:da:13:fd:8f:52:c9: 98:0f:b5:52:5e:81:a8:db:a6:b2:af:bd:73:ed:df: b2:ee:44:5a:2c:10:0f:90:c8:67:b5:0e:44:b3:8a: 22:52:8e:a4:88:4a:8e:ce:98:d2:84:22:c4:f0:ae: 62:25:16:2f:c7:5e:ff:20:a8:9d:99:ca:6b:c4:5f: b3:e0:1e:32:25:82:78:8f:c3:c7:87:ca:9d:5a:7e: 61:3b:05:49:86:f3:ae:1f:97:87:39:0d:75:1c:b2: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AF:38:E9:45:EC:1D:95:C8:C4:3E:6F:2F:7B:D8:A2:03:E2:96:5D X509v3 Authority Key Identifier: keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:21:85:02:3f:8b:3d:6f:37:0c:e7:3a:93:e4:b8:f1:0c:d8: 1a:6e:b4:02:37:08:44:4f:01:c3:85:9b:6d:c0:d6:90:a3:b1: 6d:70:04:74:ed:13:a1:be:8e:c2:55:f1:11:16:79:1e:c7:31: 7d:a8:33:b2:bb:91:77:ab:f7:07:98:bc:f6:c5:a7:45:e9:99: 7e:45:76:af:ea:01:c4:80:0d:68:2b:20:59:a8:6b:37:c9:6c: e7:5d:3b:ff:49:fc:0c:15:88:6a:cd:3f:c4:6c:f2:c2:a1:8f: 4c:1c:a9:55:b1:2c:bd:e6:2b:6f:4d:42:c5:a6:8f:90:ba:45: 71:44:85:c0:77:5c:d0:a1:c2:ef:92:c7:1f:31:c1:0c:ad:34: e9:aa:11:ed:c4:cc:49:ce:37:b1:9b:7a:2a:ef:b2:71:81:97: 18:94:a4:79:82:dd:45:58:8b:bd:56:a3:1c:37:9c:74:66:79: 27:3c:c2:47:15:8c:8d:88:52:84:01:63:3a:23:12:7e:ac:10: cc:8f:21:6b:7e:28:bb:17:66:8b:60:a2:ae:e6:65:11:59:c7: c5:e4:aa:be:6b:51:1c:a4:5c:d5:f4:0f:04:d3:62:af:0b:fc: 07:03:95:b3:ab:ac:94:66:18:36:8e:d3:70:ad:04:e0:7a:7b: 97:0e:84:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4B/ntfQeK856ma0P+SmhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj NmRjODgwHhcNMjYwMTI2MDIwMDMwWhcNMjYwMTI3MDIwMDMwWjAzMTEwLwYDVQQD Eyg1ZmFmMzhlOTQ1ZWMxZDk1YzhjNDNlNmYyZjdiZDhhMjAzZTI5NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvihMzHnoptampSLaixiF3n4dVbS5 6LIDSrUqPlqnsXXp3dreYcQdiXTwq+6aAHPlzwWPtY+e4RK39GnN/HWMF0Jy9plQ jNj4oB4vU1QUCWJ56LAYRpC5h+mCXEhovWtykNsgE/E7y8ue/z4Uv2xUcJHY6voB jFtR8nRWRB1rwTbwMFiJt+kjseb2wxsg2kIk0E2xVjSdZYtjPvgJpi/aE/2PUsmY D7VSXoGo26ayr71z7d+y7kRaLBAPkMhntQ5Es4oiUo6kiEqOzpjShCLE8K5iJRYv x17/IKidmcprxF+z4B4yJYJ4j8PHh8qdWn5hOwVJhvOuH5eHOQ11HLKGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+vOOlF7B2VyMQ+by972KID4pZdMB8GA1UdIwQY MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt YTljNWVlZDg1YmE3LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3 LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSGFAj+L PW83DOc6k+S48QzYGm60AjcIRE8Bw4WbbcDWkKOxbXAEdO0Tob6OwlXxERZ5Hscx fagzsruRd6v3B5i89sWnRemZfkV2r+oBxIANaCsgWahrN8ls5107/0n8DBWIas0/ xGzywqGPTBypVbEsveYrb01CxaaPkLpFcUSFwHdc0KHC75LHHzHBDK006aoR7cTM Sc43sZt6Ku+ycYGXGJSkeYLdRViLvVajHDecdGZ5JzzCRxWMjYhShAFjOiMSfqwQ zI8ha34ouxdmi2CiruZlEVnHxeSqvmtRHKRc1fQPBNNirwv8BwOVs6uslGYYNo7T cK0E4Hp7lw6Ezw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:44:45 2026 by rpki-client