This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json) Hash identifier: qs+05EHM9vbpqxrKXXAa0EUcj+TPd3Bv8xbZyPWJ1xw= Subject key identifier: B6:97:81:14:81:94:31:99:CF:D4:19:84:A2:05:EF:DF:FE:BB:C4:CC Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Certificate serial: 019BF3BE24A843B2C96C12489E81E68E5D8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 06:01:23 +0000 Manifest this update: Sun 25 Jan 2026 06:01:23 +0000 Manifest next update: Mon 26 Jan 2026 06:01:23 +0000 Files and hashes: 1: 1R1NGCUOSW1LiHiCITHoK558Vbc.roa (hash: zT7tlG6Mu9v2k7UcaJAbV5WxMHw7/BViKEKtfLvKHQg=) 2: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: OMOq4vddWoAOAdvf+x36ShzZe5NC8NzTLZzWH57/nwc=) 3: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:24:a8:43:b2:c9:6c:12:48:9e:81:e6:8e:5d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8 Validity Not Before: Jan 25 06:01:23 2026 GMT Not After : Jan 26 06:01:23 2026 GMT Subject: CN=b697811481943199cfd41984a205efdffebbc4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:e0:3b:82:35:bc:8f:92:aa:c5:2d:2f:c3: c9:e9:13:2a:da:5b:02:5f:85:72:3e:0a:01:cb:5c: 39:34:40:a7:7d:81:a7:79:00:cc:2a:98:49:e6:31: 39:bb:ca:d7:3d:7d:74:33:28:51:90:44:3e:3f:33: 3b:aa:51:25:87:7c:0b:5e:d8:52:d2:d1:e1:b7:0b: b4:75:3a:06:0a:24:d7:49:56:e4:f0:f5:36:e6:8e: 7e:09:14:03:44:31:07:65:2d:32:95:64:68:b4:1d: 4e:65:5e:bd:99:39:b4:3f:a7:fb:96:83:d6:54:bb: d1:4e:66:b9:63:22:f4:4b:f4:ee:a0:89:14:c6:53: 2f:2b:64:b5:1a:99:8b:56:4e:43:8f:8c:ea:6a:4b: 3b:06:14:82:f4:e0:dc:e6:4f:69:60:44:49:4e:a3: 0f:6d:1b:ab:21:86:a7:0c:9e:cf:62:3c:23:9e:6b: 3e:8c:5e:70:26:79:48:61:f7:77:88:74:78:1f:62: 4a:ab:a6:9a:05:56:e1:cf:eb:68:a8:aa:cd:44:e6: 6b:3a:bb:38:7c:97:05:9a:60:50:0b:04:4d:3f:47: 30:37:a4:35:2d:80:08:85:d6:72:95:3b:c5:7d:d8: 06:7d:25:6b:7e:4b:ae:a2:78:4d:8e:b8:3c:9b:08: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:97:81:14:81:94:31:99:CF:D4:19:84:A2:05:EF:DF:FE:BB:C4:CC X509v3 Authority Key Identifier: keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:1a:6c:eb:0f:1e:21:85:85:7c:4b:17:6a:98:5e:99:55:43: d0:16:5a:47:a9:5d:28:0d:f4:b4:af:ee:dc:21:29:6a:99:16: 45:a5:9b:18:1d:a6:5f:9c:0d:7c:15:a6:da:ea:37:36:41:50: 72:8a:f9:3f:81:d0:e6:26:3f:93:c0:d8:94:c0:69:bf:bf:4a: 45:d9:b8:36:9c:0d:c9:2a:c7:b0:46:ab:a0:c8:cc:47:85:44: 06:61:d6:d3:d5:5c:a8:bc:19:03:91:f8:ba:c0:ff:48:9d:e5: 94:de:c1:4e:00:cd:64:2e:51:c6:dc:bb:b4:4b:bd:3c:fe:28: b8:e3:c8:a6:f4:4d:72:ba:08:ac:5a:62:b7:5a:e8:08:67:c6: ff:fc:be:58:02:17:eb:0a:b2:aa:ba:b1:91:1a:60:0c:94:3d: 4b:62:3e:c6:b1:ec:19:e8:63:6f:1d:ac:0c:00:97:f1:5a:b6: a8:f9:fd:1c:52:2c:e3:a2:f6:14:17:e4:5d:cf:c6:a1:77:85: 35:84:de:8e:d0:7a:7d:fe:19:5a:03:0e:5c:c7:0e:dc:5c:27: 82:e2:d1:a1:da:ca:e1:eb:60:98:49:44:74:7d:44:e1:41:59: c3:e1:94:ef:cc:b2:c7:f3:18:6d:17:a5:12:15:a7:66:3f:bd: 7e:16:94:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzviSoQ7LJbBJInoHmjl2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz NzRlZDgwHhcNMjYwMTI1MDYwMTIzWhcNMjYwMTI2MDYwMTIzWjAzMTEwLwYDVQQD EyhiNjk3ODExNDgxOTQzMTk5Y2ZkNDE5ODRhMjA1ZWZkZmZlYmJjNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBjgO4I1vI+SqsUtL8PJ6RMq2lsC X4VyPgoBy1w5NECnfYGneQDMKphJ5jE5u8rXPX10MyhRkEQ+PzM7qlElh3wLXthS 0tHhtwu0dToGCiTXSVbk8PU25o5+CRQDRDEHZS0ylWRotB1OZV69mTm0P6f7loPW VLvRTma5YyL0S/TuoIkUxlMvK2S1GpmLVk5Dj4zqaks7BhSC9ODc5k9pYERJTqMP bRurIYanDJ7PYjwjnms+jF5wJnlIYfd3iHR4H2JKq6aaBVbhz+toqKrNROZrOrs4 fJcFmmBQCwRNP0cwN6Q1LYAIhdZylTvFfdgGfSVrfkuuonhNjrg8mwhQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaXgRSBlDGZz9QZhKIF79/+u8TMMB8GA1UdIwQY MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4 LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxps6w8e IYWFfEsXaphemVVD0BZaR6ldKA30tK/u3CEpapkWRaWbGB2mX5wNfBWm2uo3NkFQ cor5P4HQ5iY/k8DYlMBpv79KRdm4NpwNySrHsEaroMjMR4VEBmHW09VcqLwZA5H4 usD/SJ3llN7BTgDNZC5Rxty7tEu9PP4ouOPIpvRNcroIrFpit1roCGfG//y+WAIX 6wqyqrqxkRpgDJQ9S2I+xrHsGehjbx2sDACX8Vq2qPn9HFIs46L2FBfkXc/GoXeF NYTejtB6ff4ZWgMOXMcO3FwnguLRodrK4etgmElEdH1E4UFZw+GU78yyx/MYbRel EhWnZj+9fhaU8w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:35 2026 by rpki-client