This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json) Hash identifier: l2AVtCjlcQY8KhJgXx2enZ9BLZQTFWRg4nIDh+j4T7g= Subject key identifier: EE:83:73:C4:2C:96:67:BD:B6:6D:59:5B:20:40:D1:2A:7E:B1:AE:F1 Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019BF8089AF70979C520EB53CC326BE99DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft Manifest number: 0C44 Signing time: Mon 26 Jan 2026 02:01:11 +0000 Manifest this update: Mon 26 Jan 2026 02:01:11 +0000 Manifest next update: Tue 27 Jan 2026 02:01:11 +0000 Files and hashes: 1: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (hash: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I=) 2: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: bW8jAcMZbFm/zNUos7knbA5QuIAU4tpW8zNPNz0C/W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:9a:f7:09:79:c5:20:eb:53:cc:32:6b:e9:9d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Jan 26 02:01:11 2026 GMT Not After : Jan 27 02:01:11 2026 GMT Subject: CN=ee8373c42c9667bdb66d595b2040d12a7eb1aef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:d7:41:c5:65:f0:5c:8c:1d:ea:8a:7a:13: 19:4c:1a:81:ea:68:ee:f6:00:78:65:9f:82:84:3c: 09:71:2e:71:03:13:b7:09:41:86:51:3d:3b:d4:cf: d3:16:cc:6e:bc:da:ea:7e:bc:1f:c3:c3:8a:fa:8c: 5c:65:f6:85:6f:17:9c:9e:9d:85:a8:d2:2a:c9:0d: 17:39:6c:2f:7f:c4:b2:06:ab:0e:6d:d0:aa:14:f0: e6:b1:9f:62:12:b1:29:5e:fd:94:7b:e7:ef:0c:ed: 56:08:e1:c8:c7:a0:33:93:ef:d0:07:d7:d6:74:98: dd:62:93:48:f3:c3:f5:19:6c:14:7a:2f:06:41:1c: 38:0e:ca:ab:a6:1c:77:0f:df:be:ad:91:5c:f3:d1: 11:d4:4d:ee:71:e7:18:62:cc:e1:52:93:15:62:75: 0c:53:bc:6e:1a:c2:80:f9:85:b1:95:9c:4b:ed:88: 64:42:de:07:05:9b:61:94:a8:45:39:ab:a2:fe:59: 85:0b:5a:45:69:45:4c:60:b0:20:a7:1b:93:d8:73: 46:cb:43:12:27:4a:99:53:2b:d6:47:4c:05:3a:2f: 2c:4a:03:80:2d:18:00:bf:f7:b8:93:d9:a6:db:ba: f4:d3:7a:b5:7b:54:d0:66:7e:85:6c:75:fd:98:c8: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:73:C4:2C:96:67:BD:B6:6D:59:5B:20:40:D1:2A:7E:B1:AE:F1 X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ff:a0:86:f6:9a:10:de:2d:30:21:76:fe:38:0e:5b:54:52: 58:7b:2b:47:49:7d:a5:92:54:4a:d6:cd:c4:e3:e7:f3:c3:ab: 63:77:c8:a4:2e:5b:9c:39:ad:4a:bd:b2:02:76:72:1d:5e:a4: 7d:1d:df:15:1b:9f:29:9f:39:06:ec:23:0d:08:3e:b6:fb:95: 8d:97:9a:81:6d:d3:d9:9f:c2:89:93:86:85:fb:df:c7:65:ea: 44:1d:8c:a3:00:fd:67:3f:c9:b8:6d:78:f9:bb:54:3d:b8:87: 51:38:4a:b4:5c:4b:6c:01:ba:39:43:dc:99:da:35:c5:bb:85: 95:ee:1d:04:70:41:23:39:b2:41:63:42:8a:0a:ba:d3:14:49: f4:8a:d4:7f:71:15:f9:26:58:9a:82:17:e5:9d:a3:e3:0d:5d: c6:1d:4e:e1:e8:db:91:b2:cc:86:ab:01:50:cd:bf:f4:18:f2: ea:2c:fc:0c:cb:97:57:f6:6c:ab:97:ce:9f:ca:ef:43:0f:13: 1f:81:7f:fe:33:df:a3:bb:a1:b8:b1:bf:7a:ea:77:32:d3:e2: bf:1a:3d:3c:af:83:1e:31:3b:6f:22:d2:a6:e9:f0:1e:f9:0e: 85:04:c2:ff:7a:b2:cd:1b:81:19:d2:3c:30:78:4e:51:77:17: 2a:a5:dd:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJr3CXnFIOtTzDJr6Z3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjYwMTI2MDIwMTExWhcNMjYwMTI3MDIwMTExWjAzMTEwLwYDVQQD EyhlZTgzNzNjNDJjOTY2N2JkYjY2ZDU5NWIyMDQwZDEyYTdlYjFhZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7LXQcVl8FyMHeqKehMZTBqB6mju 9gB4ZZ+ChDwJcS5xAxO3CUGGUT071M/TFsxuvNrqfrwfw8OK+oxcZfaFbxecnp2F qNIqyQ0XOWwvf8SyBqsObdCqFPDmsZ9iErEpXv2Ue+fvDO1WCOHIx6Azk+/QB9fW dJjdYpNI88P1GWwUei8GQRw4Dsqrphx3D9++rZFc89ER1E3ucecYYszhUpMVYnUM U7xuGsKA+YWxlZxL7YhkQt4HBZthlKhFOaui/lmFC1pFaUVMYLAgpxuT2HNGy0MS J0qZUyvWR0wFOi8sSgOALRgAv/e4k9mm27r003q1e1TQZn6FbHX9mMgc4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6Dc8Qslme9tm1ZWyBA0Sp+sa7xMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3 LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP+ghvaa EN4tMCF2/jgOW1RSWHsrR0l9pZJUStbNxOPn88OrY3fIpC5bnDmtSr2yAnZyHV6k fR3fFRufKZ85BuwjDQg+tvuVjZeagW3T2Z/CiZOGhfvfx2XqRB2MowD9Zz/JuG14 +btUPbiHUThKtFxLbAG6OUPcmdo1xbuFle4dBHBBIzmyQWNCigq60xRJ9IrUf3EV +SZYmoIX5Z2j4w1dxh1O4ejbkbLMhqsBUM2/9Bjy6iz8DMuXV/Zsq5fOn8rvQw8T H4F//jPfo7uhuLG/eup3MtPivxo9PK+DHjE7byLSpunwHvkOhQTC/3qyzRuBGdI8 MHhOUXcXKqXdAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:10 2026 by rpki-client