This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: h+7cQL6gtXxMJauoj75jfuWTfGR8b5ZwpAPER+cfnJI= Subject key identifier: 03:66:1D:CB:7A:B7:9C:F0:25:FE:15:A3:78:69:57:7C:52:E5:D3:08 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019BF650AD25258F786C688B2B69F74606D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0FE2 Signing time: Sun 25 Jan 2026 18:00:40 +0000 Manifest this update: Sun 25 Jan 2026 18:00:40 +0000 Manifest next update: Mon 26 Jan 2026 18:00:40 +0000 Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=) 2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=) 3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=) 4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=) 5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=) 6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=) 7: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=) 8: lTzV12OyW6xdIWMBiN9FukKZ0iQ.roa (hash: QQ84Zgi4BUbvoffh1ymJ43nM7iuXA7F8Sv6Ix0cOmoQ=) 9: nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa (hash: TDSKC81PAYDavcfZed5v/E88qBB6XxHDAxUBaCYBTgk=) 10: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=) 11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: MEX3DIpeFAwm1tVL0JhUlowRYHHXclx98yqd3GLna6U=) 12: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=) 13: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ad:25:25:8f:78:6c:68:8b:2b:69:f7:46:06:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 25 18:00:40 2026 GMT Not After : Jan 26 18:00:40 2026 GMT Subject: CN=03661dcb7ab79cf025fe15a37869577c52e5d308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:02:a4:7b:23:67:6e:95:01:0e:99:68:33: 4f:55:9a:5a:e6:35:33:be:e6:c2:15:a2:ce:27:15: b7:19:2a:e3:9d:83:ba:70:45:f8:90:73:2d:7c:38: aa:61:77:5d:a8:6b:b8:49:ff:31:70:38:f6:64:4e: 36:3b:38:da:cd:ae:73:e0:03:85:3d:af:a5:90:9a: 75:9f:29:95:30:47:90:5a:3e:bd:b7:a9:9f:2f:15: 16:5a:75:ef:9b:f7:7a:d1:92:2c:a1:29:27:66:c9: a3:83:5b:68:e7:94:e5:02:d8:07:17:fc:36:0c:a5: b1:4b:e8:71:6b:5f:e1:62:af:59:a7:c5:6e:89:02: d4:68:2b:23:78:e6:b0:f8:fd:23:89:77:bb:00:05: 86:83:15:c1:6c:9d:0b:e4:17:4a:2a:c8:f7:fe:85: c5:15:76:d7:57:50:6e:f9:f8:0b:b0:d5:28:15:92: 6d:78:7d:2b:8f:15:8a:82:19:34:d2:9e:9d:42:2a: 98:63:a9:6e:43:a4:f5:14:39:3a:76:85:2c:f3:a9: cc:69:c6:d6:7e:46:3d:ed:0e:15:53:21:05:9e:3b: 71:d3:46:f6:fc:87:d7:ac:6f:b3:0a:0b:26:75:13: 6e:37:23:bf:ba:14:95:f1:a6:09:0f:8a:72:fe:68: 1c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:66:1D:CB:7A:B7:9C:F0:25:FE:15:A3:78:69:57:7C:52:E5:D3:08 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:31:16:47:48:f1:1d:01:a6:f1:7a:3d:51:d1:19:d2:de:f7: 45:ea:c6:ef:19:f5:08:97:58:31:d0:ad:89:1b:d8:ba:a8:bd: ad:9b:a4:4c:68:63:07:78:22:c1:e1:d2:47:ef:62:39:65:82: 85:30:72:6f:9e:e7:d9:b7:5c:f4:fd:14:88:45:ce:e5:17:a3: 4c:73:e4:f4:bc:f2:3b:3c:f7:10:19:60:17:4f:f6:6e:37:6f: 01:d1:6d:70:0f:69:98:ae:22:4d:47:5e:fb:64:8c:b3:e9:b2: a9:e9:44:1b:5a:51:b2:a6:2e:cd:66:b5:b7:fc:56:9d:f2:8c: 54:9c:9f:67:0e:a4:37:1d:63:54:c3:a1:1c:01:e6:c2:e3:f1: fc:ed:d3:db:0f:98:d0:14:f7:92:da:5f:c6:28:c4:16:94:e2: 52:48:d8:bb:19:da:7e:c0:1c:4a:26:20:e1:5b:74:b6:4b:d9: fb:e9:22:8b:ab:4a:36:8a:1e:69:52:83:41:20:bc:dd:d6:2a: 64:8c:20:18:02:eb:75:b1:54:fe:9f:10:8e:31:2a:04:ab:56: 35:fa:50:e3:2b:0b:b3:ef:1a:e3:89:02:91:0d:b0:a3:a4:3b: fb:9f:0b:29:2d:1d:74:2e:e8:7b:02:e7:20:a5:4c:2a:d2:1f: 74:56:41:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UK0lJY94bGiLK2n3RgbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTI1MTgwMDQwWhcNMjYwMTI2MTgwMDQwWjAzMTEwLwYDVQQD EygwMzY2MWRjYjdhYjc5Y2YwMjVmZTE1YTM3ODY5NTc3YzUyZTVkMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4wCpHsjZ26VAQ6ZaDNPVZpa5jUz vubCFaLOJxW3GSrjnYO6cEX4kHMtfDiqYXddqGu4Sf8xcDj2ZE42Ozjaza5z4AOF Pa+lkJp1nymVMEeQWj69t6mfLxUWWnXvm/d60ZIsoSknZsmjg1to55TlAtgHF/w2 DKWxS+hxa1/hYq9Zp8VuiQLUaCsjeOaw+P0jiXe7AAWGgxXBbJ0L5BdKKsj3/oXF FXbXV1Bu+fgLsNUoFZJteH0rjxWKghk00p6dQiqYY6luQ6T1FDk6doUs86nMacbW fkY97Q4VUyEFnjtx00b2/IfXrG+zCgsmdRNuNyO/uhSV8aYJD4py/mgcNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANmHct6t5zwJf4Vo3hpV3xS5dMIMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjEWR0jx HQGm8Xo9UdEZ0t73RerG7xn1CJdYMdCtiRvYuqi9rZukTGhjB3giweHSR+9iOWWC hTByb57n2bdc9P0UiEXO5RejTHPk9LzyOzz3EBlgF0/2bjdvAdFtcA9pmK4iTUde +2SMs+myqelEG1pRsqYuzWa1t/xWnfKMVJyfZw6kNx1jVMOhHAHmwuPx/O3T2w+Y 0BT3ktpfxijEFpTiUkjYuxnafsAcSiYg4Vt0tkvZ++kii6tKNooeaVKDQSC83dYq ZIwgGALrdbFU/p8QjjEqBKtWNfpQ4ysLs+8a44kCkQ2wo6Q7+58LKS0ddC7oewLn IKVMKtIfdFZBig== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:00 2026 by rpki-client