This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: wua9coYhgCqdoM6kP4mhmAYv+r1Fnik510eFNufAqb8= Subject key identifier: 51:16:9E:01:1A:0E:D5:23:86:03:AD:46:62:BD:55:7A:10:91:EA:1D Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019BF72DA9AEB3376479C084843DCD38E16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 03D4 Signing time: Sun 25 Jan 2026 22:02:03 +0000 Manifest this update: Sun 25 Jan 2026 22:02:03 +0000 Manifest next update: Mon 26 Jan 2026 22:02:03 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: hjTqHBknFHEEWEx154605pxWpJz29FsnnnNEgi6pKnY=) 2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a9:ae:b3:37:64:79:c0:84:84:3d:cd:38:e1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Jan 25 22:02:03 2026 GMT Not After : Jan 26 22:02:03 2026 GMT Subject: CN=51169e011a0ed5238603ad4662bd557a1091ea1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:74:9e:e8:8a:bf:4d:73:86:2a:1e:35:b1: 54:9e:3d:87:46:8e:6f:d1:20:bd:25:74:4b:4d:fa: 0d:32:a1:7e:a4:8a:c9:89:ef:1d:fe:a4:2d:45:0b: 27:a7:ff:cb:45:6c:97:16:59:8c:62:18:98:cb:0b: 6f:33:01:7a:e7:03:96:27:96:44:69:a3:02:d7:c4: eb:01:f1:c2:a6:82:42:3b:d5:21:72:df:0f:dd:30: b3:30:7a:cd:82:93:3a:25:33:30:06:d7:b6:26:8d: 2b:e3:9e:3c:42:38:d8:d4:d2:2c:2c:65:ac:4d:05: bd:a4:e0:b1:22:85:5c:ff:73:92:31:75:cb:9b:96: ad:9b:ff:13:b1:02:e2:46:2e:84:d4:4b:e8:9d:07: 1d:96:88:0b:bc:82:0e:41:f6:f9:eb:f5:f5:8e:af: cf:27:ab:e8:3b:f3:ad:e5:23:f9:9f:55:6d:67:03: 6c:f3:29:45:e7:6f:2b:5e:cb:3d:df:03:24:95:c0: bd:4c:3b:c0:50:b0:99:5b:8b:ea:b2:62:6a:b8:a1: 6f:fe:5b:a2:18:37:26:ac:22:e7:2d:9e:fe:66:0f: cc:f3:14:a1:ce:09:a7:ca:69:cb:a3:4c:63:44:7f: cd:9e:07:e1:7f:e1:b3:7b:55:c6:c8:f3:e5:49:bf: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:9E:01:1A:0E:D5:23:86:03:AD:46:62:BD:55:7A:10:91:EA:1D X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e1:eb:ca:15:ba:01:dc:a2:c3:d8:07:ce:77:8b:06:2e:2d: f0:14:22:ff:e2:57:85:39:19:cb:aa:2a:99:8c:4c:26:7a:b8: fd:66:9c:8b:d4:12:d4:d8:a7:20:4f:a5:71:51:dc:15:c1:71: a9:5c:1b:29:0e:df:9e:34:0f:5a:c5:df:39:90:f7:fb:a7:ae: 62:a7:b4:b6:4b:fc:a1:59:a4:66:7c:fa:0b:82:b8:f3:8b:eb: 56:ac:aa:f4:da:ee:9b:7c:ba:f6:5c:c8:5d:2d:d3:b9:b0:83: 38:c6:b3:9b:9e:f1:0d:ed:b4:60:2e:c8:2b:ad:7d:3e:e6:9d: 90:f6:20:14:2f:6b:43:31:66:a5:e3:8f:70:6d:e2:90:7e:b5: 8d:f2:7e:93:75:6d:a6:44:f0:0b:91:ca:62:e6:2b:2f:6a:d3: 27:75:e3:8b:2b:6b:6f:95:66:82:a8:6a:4f:b2:d6:32:ca:05: c2:cc:fc:ea:86:8a:0a:6b:2f:e9:d0:66:62:24:fe:a9:11:4d: 0a:28:9b:00:a9:ef:49:4f:71:41:d7:78:2c:7f:4d:a6:66:46: 37:3f:a9:dd:df:40:49:47:f0:49:66:70:eb:7d:0e:40:bf:c2: b7:8f:8b:47:8d:0b:f3:89:7d:59:95:3c:3f:25:6d:7d:1e:28: 94:fc:45:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LamuszdkecCEhD3NOOFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjYwMTI1MjIwMjAzWhcNMjYwMTI2MjIwMjAzWjAzMTEwLwYDVQQD Eyg1MTE2OWUwMTFhMGVkNTIzODYwM2FkNDY2MmJkNTU3YTEwOTFlYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2d0nuiKv01zhioeNbFUnj2HRo5v 0SC9JXRLTfoNMqF+pIrJie8d/qQtRQsnp//LRWyXFlmMYhiYywtvMwF65wOWJ5ZE aaMC18TrAfHCpoJCO9Uhct8P3TCzMHrNgpM6JTMwBte2Jo0r4548QjjY1NIsLGWs TQW9pOCxIoVc/3OSMXXLm5atm/8TsQLiRi6E1EvonQcdlogLvIIOQfb56/X1jq/P J6voO/Ot5SP5n1VtZwNs8ylF528rXss93wMklcC9TDvAULCZW4vqsmJquKFv/lui GDcmrCLnLZ7+Zg/M8xShzgmnymnLo0xjRH/Nngfhf+Gze1XGyPPlSb+ivQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEWngEaDtUjhgOtRmK9VXoQkeodMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuHryhW6 Adyiw9gHzneLBi4t8BQi/+JXhTkZy6oqmYxMJnq4/Waci9QS1NinIE+lcVHcFcFx qVwbKQ7fnjQPWsXfOZD3+6euYqe0tkv8oVmkZnz6C4K484vrVqyq9Nrum3y69lzI XS3TubCDOMazm57xDe20YC7IK619PuadkPYgFC9rQzFmpeOPcG3ikH61jfJ+k3Vt pkTwC5HKYuYrL2rTJ3Xjiytrb5VmgqhqT7LWMsoFwsz86oaKCmsv6dBmYiT+qRFN CiibAKnvSU9xQdd4LH9NpmZGNz+p3d9ASUfwSWZw630OQL/Ct4+LR40L84l9WZU8 PyVtfR4olPxFog== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:59 2026 by rpki-client