This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json) Hash identifier: vJCemqtZRCm7bEmfsx26Fmxq00VBwxOcsTmopyNvprE= Subject key identifier: 1F:1F:D3:74:8C:75:2A:0F:2F:27:1B:09:4D:2D:54:35:99:86:01:3D Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Certificate serial: 019BF23D9298C338468DB8ACE215767CFEF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft Manifest number: 17E8 Signing time: Sat 24 Jan 2026 23:01:19 +0000 Manifest this update: Sat 24 Jan 2026 23:01:19 +0000 Manifest next update: Sun 25 Jan 2026 23:01:19 +0000 Files and hashes: 1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=) 2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=) 3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=) 4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: kGzSnve4H0xRuPyxuvcSTXBHshWDAPgM+bKHVoqjODU=) 5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=) 6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:92:98:c3:38:46:8d:b8:ac:e2:15:76:7c:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Validity Not Before: Jan 24 23:01:19 2026 GMT Not After : Jan 25 23:01:19 2026 GMT Subject: CN=1f1fd3748c752a0f2f271b094d2d54359986013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:0e:2b:1d:66:fa:86:47:36:ae:1f:09:fb:f7: 94:3a:84:04:74:58:cf:2b:e7:2b:0e:37:ad:72:f9: d2:99:1e:22:7b:e7:c3:a9:c7:7b:d9:cf:22:ba:bf: 0a:9e:27:c3:0e:a6:2e:45:fc:0f:f1:65:cb:cc:9c: ee:fb:f8:4e:f8:7c:23:a9:a3:5d:6b:1e:6e:bc:cd: a1:7c:7c:2f:0d:4e:9f:43:d1:90:dc:a8:dd:03:30: 59:9d:61:23:67:a7:bc:88:d9:48:3b:c5:e1:43:63: c5:a8:8f:1d:9f:8a:b0:50:1d:14:7a:25:44:e1:2b: 41:e0:93:84:bb:38:a5:32:22:50:7c:83:96:bc:a1: bf:df:d5:00:af:b2:c6:30:96:85:b3:d0:09:27:2e: 2f:29:42:66:30:1e:49:62:48:08:26:dd:17:a8:93: 27:e4:88:82:e7:aa:c1:a9:81:ff:7e:3a:17:04:89: c3:d3:f0:38:20:b2:cd:13:31:a0:8d:8d:b1:5a:58: 96:9a:e7:39:c1:f4:ac:5a:f1:97:ce:30:85:7e:b2: fb:c2:ef:b2:ec:18:7b:bf:f4:fc:86:4c:b2:af:0f: 71:b6:5c:9a:89:3a:79:f6:46:f2:09:6f:1b:b9:8e: a4:c4:5a:98:f6:7e:45:fe:cc:4c:94:62:fd:4a:a7: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:D3:74:8C:75:2A:0F:2F:27:1B:09:4D:2D:54:35:99:86:01:3D X509v3 Authority Key Identifier: keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:87:ee:78:fc:0a:03:21:d6:2b:4e:4d:98:d6:79:84:0e:12: 19:bc:30:9a:b5:6f:7a:2b:18:62:2c:9a:be:98:57:34:cb:ce: 8f:4e:74:bb:f3:06:fc:49:62:90:95:4e:27:c9:e9:1c:b6:fb: 3b:37:22:f2:ac:1d:d4:7c:3a:1f:20:c8:bb:4b:4c:4f:0f:b3: 69:21:7f:18:b6:7d:5c:b0:10:c4:98:32:3c:50:1d:ba:d1:9d: 7a:7b:28:e8:ab:81:09:0e:6e:ab:0f:33:07:35:f1:08:60:c2: 07:af:ed:07:4d:48:28:45:cf:10:36:4c:e5:3c:e8:97:b6:da: a4:00:a4:c7:dd:53:51:17:2d:4b:f2:2f:97:a4:25:05:05:f3: 45:ad:24:84:69:e2:68:49:c6:32:f0:78:fe:0d:a3:90:47:36: 27:a7:f6:06:0a:2d:96:a5:b6:50:04:dd:ca:70:ac:d5:41:9b: 7c:2b:aa:2f:e6:05:7b:d7:5f:c0:3f:af:4f:86:71:b1:a4:22: 4e:15:c3:45:02:b5:9c:a6:72:a5:f5:b5:9a:8e:04:4d:9f:86: 99:ce:ad:e5:69:78:db:25:0a:d4:ed:2d:94:fe:6b:f5:47:31: 13:04:0b:93:69:45:07:95:72:aa:9a:6a:62:2c:47:ed:91:af: 77:ca:af:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPZKYwzhGjbis4hV2fP74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2 YmQ2MzkwHhcNMjYwMTI0MjMwMTE5WhcNMjYwMTI1MjMwMTE5WjAzMTEwLwYDVQQD EygxZjFmZDM3NDhjNzUyYTBmMmYyNzFiMDk0ZDJkNTQzNTk5ODYwMTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/g4rHWb6hkc2rh8J+/eUOoQEdFjP K+crDjetcvnSmR4ie+fDqcd72c8iur8KnifDDqYuRfwP8WXLzJzu+/hO+HwjqaNd ax5uvM2hfHwvDU6fQ9GQ3KjdAzBZnWEjZ6e8iNlIO8XhQ2PFqI8dn4qwUB0UeiVE 4StB4JOEuzilMiJQfIOWvKG/39UAr7LGMJaFs9AJJy4vKUJmMB5JYkgIJt0XqJMn 5IiC56rBqYH/fjoXBInD0/A4ILLNEzGgjY2xWliWmuc5wfSsWvGXzjCFfrL7wu+y 7Bh7v/T8hkyyrw9xtlyaiTp59kbyCW8buY6kxFqY9n5F/sxMlGL9SqdBUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8f03SMdSoPLycbCU0tVDWZhgE9MB8GA1UdIwQY MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt MDkxYzJkMzAzZmU4LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4 LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMofuePwK AyHWK05NmNZ5hA4SGbwwmrVveisYYiyavphXNMvOj050u/MG/ElikJVOJ8npHLb7 Ozci8qwd1Hw6HyDIu0tMTw+zaSF/GLZ9XLAQxJgyPFAdutGdenso6KuBCQ5uqw8z BzXxCGDCB6/tB01IKEXPEDZM5Tzol7bapACkx91TURctS/Ivl6QlBQXzRa0khGni aEnGMvB4/g2jkEc2J6f2BgotlqW2UATdynCs1UGbfCuqL+YFe9dfwD+vT4ZxsaQi ThXDRQK1nKZypfW1mo4ETZ+Gmc6t5Wl42yUK1O0tlP5r9UcxEwQLk2lFB5Vyqppq YixH7ZGvd8qvJA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:45 2026 by rpki-client