This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json) Hash identifier: tLMV3y3fb9I9hk8P1W1NM8pzDc7+UuX69ZxDuYQ/1+Q= Subject key identifier: 63:3C:FC:AF:68:57:5E:6B:4F:2A:E5:B1:39:61:12:88:41:2B:32:09 Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c Certificate serial: 019BF9C06331F4BDDA2365042B6DC4FFC59F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft Manifest number: 0518 Signing time: Mon 26 Jan 2026 10:01:33 +0000 Manifest this update: Mon 26 Jan 2026 10:01:33 +0000 Manifest next update: Tue 27 Jan 2026 10:01:33 +0000 Files and hashes: 1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: r+1P0HbeMb1FXSI6qmF8dsvSYLpdm+KmTDeA55scyqM=) 2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:63:31:f4:bd:da:23:65:04:2b:6d:c4:ff:c5:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c Validity Not Before: Jan 26 10:01:33 2026 GMT Not After : Jan 27 10:01:33 2026 GMT Subject: CN=633cfcaf68575e6b4f2ae5b139611288412b3209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:75:b4:c4:41:af:88:6d:58:59:9b:82:31: 7f:e5:92:6c:bf:b0:2e:37:15:ee:ea:3d:5c:c9:5f: a5:2f:57:cc:cd:e3:14:c4:53:e7:d8:37:71:19:64: f0:83:42:6c:95:12:bf:c5:ac:72:b5:71:1b:24:58: 87:e6:ed:d0:ec:5f:eb:ae:d0:11:c4:14:59:be:99: 5c:c4:12:aa:c5:7a:85:0b:ea:88:1c:c3:a5:06:09: 20:52:2f:c1:ac:39:17:ff:51:03:0e:1b:97:78:55: 27:c6:06:e2:a9:45:ba:be:e6:07:c7:5a:cc:9c:29: f3:f8:fb:7b:09:e4:77:f8:45:8c:29:07:e6:e0:57: e1:ac:bf:a0:c2:ba:8b:d9:70:71:6f:24:b8:a8:9f: 3d:d5:44:6f:40:0a:99:10:d4:7e:7e:0c:5e:db:21: ef:dd:4c:e1:fc:6b:11:58:a3:cb:50:2c:49:ed:d5: 6d:e6:6a:2d:a7:a1:c4:48:01:5f:1c:65:85:2c:d6: b5:98:88:65:04:a0:2e:1d:f6:b5:ef:c4:9d:90:1d: 90:7b:ee:ac:e2:3d:8f:82:20:f4:de:fd:3e:df:39: 3d:b2:19:aa:ae:74:d4:ea:5c:55:5d:79:43:66:38: 55:88:df:c7:70:eb:b3:5b:40:77:37:1a:3a:0f:ae: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3C:FC:AF:68:57:5E:6B:4F:2A:E5:B1:39:61:12:88:41:2B:32:09 X509v3 Authority Key Identifier: keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d9:5d:5f:4f:d7:e0:8a:0d:25:00:13:f0:58:21:17:46:df: bf:4c:15:4f:eb:aa:6e:17:22:b1:95:a6:b8:81:2a:ca:ab:08: 21:e2:eb:37:d5:50:26:46:0b:c1:1e:5f:10:65:d3:ed:06:7b: a6:37:5e:aa:a4:f6:81:29:20:b2:95:c7:08:1b:af:ef:2c:23: 4e:17:f6:df:93:7a:3b:15:b0:f5:ef:7a:5d:7e:57:b2:40:33: ea:d1:fb:71:41:6d:9e:d3:b5:d3:f5:b1:5a:95:18:44:e7:b3: 7d:37:19:2a:40:0a:e4:43:0c:88:e1:e4:ac:04:26:5a:1b:cf: 4d:77:b1:e3:d9:18:5d:06:1d:11:f5:48:fb:2a:fd:18:fd:e2: 84:cd:ac:a4:7f:90:66:9e:6e:39:df:a0:1e:82:0f:a1:6d:5b: 00:12:76:c4:0b:d7:0a:0f:2c:50:1e:46:16:a0:d9:bd:c8:da: 05:c5:63:9a:08:ba:80:c2:f3:25:85:28:3a:58:ca:6f:13:62: 80:34:37:11:54:1a:2d:ab:81:00:f9:a8:42:f7:99:93:41:b4: 81:d1:04:4e:75:21:52:45:b4:46:af:d6:81:68:4a:d0:aa:6f: 03:f8:f0:20:28:c1:91:60:29:57:c7:91:35:c4:7a:14:37:3a: ea:06:e6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wGMx9L3aI2UEK23E/8WfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGNkNGQxYmQzZGYyOWFkZDQwNzViNjhmMjlhZjkwNzA0 NzQ0M2MwHhcNMjYwMTI2MTAwMTMzWhcNMjYwMTI3MTAwMTMzWjAzMTEwLwYDVQQD Eyg2MzNjZmNhZjY4NTc1ZTZiNGYyYWU1YjEzOTYxMTI4ODQxMmIzMjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07Z1tMRBr4htWFmbgjF/5ZJsv7Au NxXu6j1cyV+lL1fMzeMUxFPn2DdxGWTwg0JslRK/xaxytXEbJFiH5u3Q7F/rrtAR xBRZvplcxBKqxXqFC+qIHMOlBgkgUi/BrDkX/1EDDhuXeFUnxgbiqUW6vuYHx1rM nCnz+Pt7CeR3+EWMKQfm4FfhrL+gwrqL2XBxbyS4qJ891URvQAqZENR+fgxe2yHv 3Uzh/GsRWKPLUCxJ7dVt5motp6HESAFfHGWFLNa1mIhlBKAuHfa178SdkB2Qe+6s 4j2PgiD03v0+3zk9shmqrnTU6lxVXXlDZjhViN/HcOuzW0B3Nxo6D64PawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM8/K9oV15rTyrlsTlhEohBKzIJMB8GA1UdIwQY MBaAFELc1NG9PfKa3UB1to8pr5BwR0Q8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2Yt ZmI5OGZlM2RiYzE0LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2YtZmI5OGZlM2RiYzE0 LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9ldX0/X 4IoNJQAT8FghF0bfv0wVT+uqbhcisZWmuIEqyqsIIeLrN9VQJkYLwR5fEGXT7QZ7 pjdeqqT2gSkgspXHCBuv7ywjThf235N6OxWw9e96XX5XskAz6tH7cUFtntO10/Wx WpUYROezfTcZKkAK5EMMiOHkrAQmWhvPTXex49kYXQYdEfVI+yr9GP3ihM2spH+Q Zp5uOd+gHoIPoW1bABJ2xAvXCg8sUB5GFqDZvcjaBcVjmgi6gMLzJYUoOljKbxNi gDQ3EVQaLauBAPmoQveZk0G0gdEETnUhUkW0Rq/WgWhK0KpvA/jwICjBkWApV8eR NcR6FDc66gbmAw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:35 2026 by rpki-client