This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json) Hash identifier: mEzt3Mht4mA7B2M9YsBwoUTqLUOS9ryXlQcpf8o3zZ0= Subject key identifier: AF:21:9A:C2:F5:21:A0:63:E8:C9:28:EE:8A:0D:FD:5E:05:36:7E:DE Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Certificate serial: 019BF42C2BBDD5F914F7FBE30A00A32B68D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 08:01:33 +0000 Manifest this update: Sun 25 Jan 2026 08:01:33 +0000 Manifest next update: Mon 26 Jan 2026 08:01:33 +0000 Files and hashes: 1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=) 2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=) 3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=) 4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: eIOP9w5REUEv8EUfRr9MUEisi7v6C29eKD1yf3gyfVE=) 5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=) 6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:2b:bd:d5:f9:14:f7:fb:e3:0a:00:a3:2b:68:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Validity Not Before: Jan 25 08:01:33 2026 GMT Not After : Jan 26 08:01:33 2026 GMT Subject: CN=af219ac2f521a063e8c928ee8a0dfd5e05367ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6a:65:5a:b5:c6:e7:6a:ea:30:31:69:49:cf: c4:52:72:49:d3:f3:66:73:07:d6:76:4b:62:02:f0: cd:56:82:cb:b6:3b:b5:b1:b9:6e:11:63:1c:84:e1: 9f:76:df:1b:07:75:f2:6f:b5:eb:05:51:6c:4a:b4: 6b:fb:43:9b:6a:02:d1:52:af:e6:d0:b9:0d:a6:83: 24:a2:00:d4:25:f7:46:5a:8a:c4:d3:d5:dc:12:d3: b1:10:f8:27:43:2c:4f:2d:16:35:25:df:96:d1:c7: cf:ce:4e:a7:ac:fd:27:c1:f6:7b:80:14:39:2b:e8: 29:cd:b9:ef:dc:61:09:da:8f:cd:5e:d5:fa:d8:0b: 5c:24:6c:55:06:e7:c6:7e:ad:f8:01:fc:a1:8f:cc: ae:17:b5:16:46:40:6b:14:63:3c:24:3d:68:b6:be: b6:ae:7e:d7:92:fd:40:91:ad:d5:23:f2:42:92:f5: 27:72:6f:66:ed:4d:d6:ae:56:8b:00:2f:a3:b9:55: f0:18:fd:c8:e8:57:4e:3b:92:14:bb:fa:fe:90:ae: 72:1e:5f:ee:c7:b2:bc:e0:84:bc:cf:dd:47:45:a2: cc:92:9b:d2:ef:45:06:81:d6:58:85:46:6e:6c:d9: 13:79:b6:3f:5b:d3:6d:ce:a9:90:8b:33:76:0a:ae: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:9A:C2:F5:21:A0:63:E8:C9:28:EE:8A:0D:FD:5E:05:36:7E:DE X509v3 Authority Key Identifier: keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c1:f3:e9:5d:17:02:7c:0b:45:70:8a:ef:25:f4:7a:a7:8f: 6a:84:d9:56:b0:36:9f:84:42:74:16:c8:d2:5f:ce:5a:03:bc: fa:9c:51:8d:22:fe:c0:3e:37:83:6e:16:1f:ac:1f:44:94:55: 12:5a:e6:e4:c8:d8:c7:c5:3f:9f:9e:5d:50:10:fc:e8:c0:e5: d9:44:3c:29:eb:5e:44:7e:bb:0f:31:5d:33:bc:39:6a:e7:28: ca:16:f7:e2:97:8f:cb:4f:bc:f5:f0:cd:58:dc:54:88:e3:f3: 08:80:39:17:54:36:7c:c1:70:40:24:78:2d:08:5c:4e:6d:33: df:3d:63:60:b6:ba:e8:4f:3a:a1:55:39:8e:e8:7f:96:b7:43: 3e:5a:b5:fc:15:6b:9f:67:66:34:5f:0e:52:5c:b3:f2:c1:c5: ae:c3:72:97:10:9c:d6:d7:75:70:97:93:78:c9:e8:1a:c7:fc: 18:ab:23:10:c3:8c:84:33:4c:64:76:d7:41:5e:b7:20:19:56: ea:fe:19:68:4d:f6:c6:65:3f:9e:8a:f1:25:70:38:8d:a9:00: 5e:c5:75:dd:0f:b7:76:a8:14:55:7d:42:45:5a:84:d8:ce:f2: b9:f0:77:fe:07:68:3b:31:19:21:f3:b1:c7:aa:ec:85:cb:ca: 1f:56:43:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LCu91fkU9/vjCgCjK2jSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2 YmQ2MzkwHhcNMjYwMTI1MDgwMTMzWhcNMjYwMTI2MDgwMTMzWjAzMTEwLwYDVQQD EyhhZjIxOWFjMmY1MjFhMDYzZThjOTI4ZWU4YTBkZmQ1ZTA1MzY3ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWplWrXG52rqMDFpSc/EUnJJ0/Nm cwfWdktiAvDNVoLLtju1sbluEWMchOGfdt8bB3Xyb7XrBVFsSrRr+0ObagLRUq/m 0LkNpoMkogDUJfdGWorE09XcEtOxEPgnQyxPLRY1Jd+W0cfPzk6nrP0nwfZ7gBQ5 K+gpzbnv3GEJ2o/NXtX62AtcJGxVBufGfq34Afyhj8yuF7UWRkBrFGM8JD1otr62 rn7Xkv1Aka3VI/JCkvUncm9m7U3WrlaLAC+juVXwGP3I6FdOO5IUu/r+kK5yHl/u x7K84IS8z91HRaLMkpvS70UGgdZYhUZubNkTebY/W9NtzqmQizN2Cq42UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8hmsL1IaBj6Mko7ooN/V4FNn7eMB8GA1UdIwQY MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt MDkxYzJkMzAzZmU4LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4 LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcHz6V0X AnwLRXCK7yX0eqePaoTZVrA2n4RCdBbI0l/OWgO8+pxRjSL+wD43g24WH6wfRJRV Elrm5MjYx8U/n55dUBD86MDl2UQ8KeteRH67DzFdM7w5aucoyhb34pePy0+89fDN WNxUiOPzCIA5F1Q2fMFwQCR4LQhcTm0z3z1jYLa66E86oVU5juh/lrdDPlq1/BVr n2dmNF8OUlyz8sHFrsNylxCc1td1cJeTeMnoGsf8GKsjEMOMhDNMZHbXQV63IBlW 6v4ZaE32xmU/norxJXA4jakAXsV13Q+3dqgUVX1CRVqE2M7yufB3/gdoOzEZIfOx x6rshcvKH1ZD8g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:00:00 2026 by rpki-client