This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json) Hash identifier: XmwLQ24G4QTmroU/ruHj0iv45Y6WnqNWXIVHsBhQz18= Subject key identifier: 39:08:24:2E:A4:5C:59:FA:F5:D4:1B:85:4F:12:C1:D3:20:2F:FC:B7 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019BF3F4E16F5CF1045670363077178964A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 07:01:10 +0000 Manifest this update: Sun 25 Jan 2026 07:01:10 +0000 Manifest next update: Mon 26 Jan 2026 07:01:10 +0000 Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: MhM645tWSz8omcz3gbAzQk4blfFAUPFH/8NXMxv9Zno=) 2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=) 3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=) 4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:e1:6f:5c:f1:04:56:70:36:30:77:17:89:64:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Jan 25 07:01:10 2026 GMT Not After : Jan 26 07:01:10 2026 GMT Subject: CN=3908242ea45c59faf5d41b854f12c1d3202ffcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:4c:89:2e:e9:74:d8:3d:9f:97:9d:65:af: 50:bd:6c:ec:97:4e:b6:60:2e:6c:7f:9e:31:14:6b: bd:ee:7d:5f:dc:e9:1b:45:e9:60:fe:99:2c:8b:10: 06:d2:4b:56:21:20:9c:e9:21:c9:88:a9:63:0d:a2: b1:90:b2:c4:e8:67:a1:89:42:8b:c2:71:f3:47:2e: 12:87:1f:f0:e5:a3:2d:d9:ed:0c:b5:d4:d3:c1:ea: 57:32:87:b5:d9:c4:af:0d:ff:07:d9:88:a1:e1:ef: 14:a1:bc:af:2c:b9:60:44:68:8f:91:7b:7e:7b:f9: 73:e2:2c:d6:ab:40:5d:12:fa:e6:bd:9a:95:eb:bc: 82:90:9f:c0:55:ae:bf:61:21:ca:e8:4c:81:d7:ba: 63:fc:e6:c9:39:9b:29:29:03:a2:40:e9:94:50:0e: 91:fd:59:4d:63:cd:32:c7:69:a7:d5:20:a8:95:80: 03:f8:be:d6:81:54:7d:41:b0:a2:fa:21:f3:f6:23: e3:e4:f7:72:09:b7:d2:0d:c6:40:d2:ba:50:35:d3: c0:9a:fc:56:09:55:b4:9f:28:67:94:15:3b:9e:d7: cb:4f:69:05:26:fc:92:14:24:20:a7:09:fe:b1:0b: c1:b8:87:6f:aa:bd:5a:ae:91:51:ae:26:c7:63:5b: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:08:24:2E:A4:5C:59:FA:F5:D4:1B:85:4F:12:C1:D3:20:2F:FC:B7 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:f5:85:59:c5:60:d3:a7:36:37:0d:d1:8b:b1:3f:3e:16:98: 6f:bb:71:cd:c1:57:55:2a:c6:17:c5:c0:42:23:8d:25:15:09: ca:86:fc:0d:03:7b:ff:f1:8e:b3:c7:68:a6:d0:29:ef:8f:65: cb:f7:f4:72:60:f3:62:0f:a8:1f:95:1a:84:d8:30:84:e9:06: df:1b:11:68:43:6a:35:f3:7a:5b:91:d7:2a:3e:be:19:b9:31: cb:43:de:7a:13:d3:64:29:7f:19:01:78:23:c6:0b:f3:7e:de: c2:a4:a4:62:4c:45:74:36:53:eb:ab:8b:bc:d2:43:a5:4e:0a: f7:5a:9b:c2:6a:4d:6f:ae:17:6a:3d:71:14:66:fe:3e:0e:82: 21:b4:c8:15:52:80:9e:90:bd:50:3c:0b:55:76:3b:21:c9:c7: 39:bc:70:ef:e3:dc:97:e0:f2:4a:69:65:17:17:b7:b8:3f:24: 23:14:c9:2c:ab:42:d3:ae:4e:90:09:39:93:e2:89:c4:94:bb: be:8c:41:17:fa:d4:4d:65:58:cf:49:9e:da:79:90:63:f5:09: f4:ab:47:74:ac:bc:aa:a2:f3:1c:54:40:e6:b8:e9:64:f9:d3: 9d:89:48:c5:f2:69:29:65:c7:ce:5d:6c:3d:cc:58:ef:6b:95: 85:a0:7b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9OFvXPEEVnA2MHcXiWSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjYwMTI1MDcwMTEwWhcNMjYwMTI2MDcwMTEwWjAzMTEwLwYDVQQD EygzOTA4MjQyZWE0NWM1OWZhZjVkNDFiODU0ZjEyYzFkMzIwMmZmY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUNMiS7pdNg9n5edZa9QvWzsl062 YC5sf54xFGu97n1f3OkbRelg/pksixAG0ktWISCc6SHJiKljDaKxkLLE6GehiUKL wnHzRy4Shx/w5aMt2e0MtdTTwepXMoe12cSvDf8H2Yih4e8UobyvLLlgRGiPkXt+ e/lz4izWq0BdEvrmvZqV67yCkJ/AVa6/YSHK6EyB17pj/ObJOZspKQOiQOmUUA6R /VlNY80yx2mn1SColYAD+L7WgVR9QbCi+iHz9iPj5PdyCbfSDcZA0rpQNdPAmvxW CVW0nyhnlBU7ntfLT2kFJvySFCQgpwn+sQvBuIdvqr1arpFRribHY1uIuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkIJC6kXFn69dQbhU8SwdMgL/y3MB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfWFWcVg 06c2Nw3Ri7E/PhaYb7txzcFXVSrGF8XAQiONJRUJyob8DQN7//GOs8doptAp749l y/f0cmDzYg+oH5UahNgwhOkG3xsRaENqNfN6W5HXKj6+Gbkxy0PeehPTZCl/GQF4 I8YL837ewqSkYkxFdDZT66uLvNJDpU4K91qbwmpNb64Xaj1xFGb+Pg6CIbTIFVKA npC9UDwLVXY7IcnHObxw7+Pcl+DySmllFxe3uD8kIxTJLKtC065OkAk5k+KJxJS7 voxBF/rUTWVYz0me2nmQY/UJ9KtHdKy8qqLzHFRA5rjpZPnTnYlIxfJpKWXHzl1s PcxY72uVhaB7ZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:32 2026 by rpki-client