This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json) Hash identifier: i9FkRqYmrLPSxH82xTtdbxbNk1AILC88vAeQoClX4GY= Subject key identifier: 67:0D:D8:A4:D7:68:02:84:2C:C9:AB:C6:2E:34:0A:92:F8:C8:00:16 Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4 Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4 Certificate serial: 019BF6BF19049EA3C9AD2552F7510D8FD390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft Manifest number: 1572 Signing time: Sun 25 Jan 2026 20:01:17 +0000 Manifest this update: Sun 25 Jan 2026 20:01:17 +0000 Manifest next update: Mon 26 Jan 2026 20:01:17 +0000 Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=) 2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 1RS14G5EEXpACyZPmZTtkSHtM4R/tNTczetmzfbtrm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:19:04:9e:a3:c9:ad:25:52:f7:51:0d:8f:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4 Validity Not Before: Jan 25 20:01:17 2026 GMT Not After : Jan 26 20:01:17 2026 GMT Subject: CN=670dd8a4d76802842cc9abc62e340a92f8c80016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b9:38:bf:a1:cb:f9:cb:be:68:85:68:8e:e8: 08:bf:4d:80:32:02:90:57:b0:1b:89:c8:bf:af:f8: 40:cb:cd:22:7a:dd:1c:a5:f8:14:3f:1b:64:07:b1: df:ec:3d:86:83:e7:fb:2c:7a:3c:29:d7:e7:96:47: 0e:d2:3e:18:89:64:96:67:c4:18:7c:04:0b:17:ff: d9:79:b9:af:56:dd:4e:d8:93:85:98:ee:ff:97:06: 2c:52:e2:d8:1d:e6:c7:80:cb:ac:3c:ab:b5:e5:39: 7c:9b:38:fa:07:6b:bd:8e:c5:8e:33:32:c2:f0:f5: 4c:8a:46:18:18:a9:54:68:f1:c3:be:ba:37:13:c5: f0:17:f1:49:25:2f:35:6b:8c:f4:ba:af:72:24:a5: 64:49:de:37:da:31:2e:e7:75:01:35:03:f2:32:b6: f7:f1:6f:e9:97:2b:d0:1c:ca:6b:05:fe:67:f0:be: 3d:c3:d9:b1:f0:40:7e:6e:89:6a:7d:34:27:8a:46: 8a:2b:fc:7e:bf:83:06:20:8b:6d:27:f7:c6:ac:ca: 3d:da:a5:7e:de:6f:be:43:b3:f9:85:e1:e1:ee:d7: 6f:e6:a7:2c:a9:cf:75:e6:fd:0f:db:fb:07:3c:4d: ae:7a:84:77:f9:dc:64:25:06:8f:26:3d:0e:a1:8e: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:D8:A4:D7:68:02:84:2C:C9:AB:C6:2E:34:0A:92:F8:C8:00:16 X509v3 Authority Key Identifier: keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:13:a6:ff:80:49:85:68:a5:7c:51:66:6d:c3:f5:1e:0a: 02:e2:13:73:6e:ae:cd:72:12:bd:10:04:1c:63:cb:3f:e1:5c: b5:33:53:dc:d4:0e:d9:0c:f3:e3:ad:d9:25:45:c3:43:96:57: 77:b5:1a:c6:b8:bf:f9:b2:21:93:46:9a:7d:d0:85:d0:fa:44: 38:bf:97:a2:f5:69:3a:76:7f:1e:d9:83:77:a1:f9:a3:06:d9: ff:66:98:a5:b4:3b:02:4f:fc:d3:1f:c3:ae:18:1b:82:48:19: c9:55:b1:d7:04:ae:cf:5a:e7:b4:25:1a:2d:3e:8e:29:db:1f: 7c:f4:28:ce:ea:9b:36:18:1e:ea:6d:57:25:dc:99:d1:0f:12: f9:21:5a:01:21:52:46:ce:a0:08:8c:a8:9a:52:68:b8:3b:8f: a8:2e:86:9c:40:1d:30:df:7d:13:d8:45:23:a8:36:47:79:84: 92:e9:3c:36:29:49:f6:10:b0:97:78:26:28:4b:65:5c:fc:48: 62:2f:81:94:e0:4e:be:55:1c:5b:78:2b:1a:f9:ff:b8:1f:74: d9:06:98:ed:49:9a:8a:50:46:2d:3a:f9:89:85:f0:3b:5e:10: 10:12:3b:7a:81:f9:48:22:92:7f:6d:d4:c8:50:58:e2:f2:25: eb:03:8b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxkEnqPJrSVS91ENj9OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw NmI0YjQwHhcNMjYwMTI1MjAwMTE3WhcNMjYwMTI2MjAwMTE3WjAzMTEwLwYDVQQD Eyg2NzBkZDhhNGQ3NjgwMjg0MmNjOWFiYzYyZTM0MGE5MmY4YzgwMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rk4v6HL+cu+aIVojugIv02AMgKQ V7Abici/r/hAy80iet0cpfgUPxtkB7Hf7D2Gg+f7LHo8KdfnlkcO0j4YiWSWZ8QY fAQLF//ZebmvVt1O2JOFmO7/lwYsUuLYHebHgMusPKu15Tl8mzj6B2u9jsWOMzLC 8PVMikYYGKlUaPHDvro3E8XwF/FJJS81a4z0uq9yJKVkSd432jEu53UBNQPyMrb3 8W/plyvQHMprBf5n8L49w9mx8EB+bolqfTQnikaKK/x+v4MGIIttJ/fGrMo92qV+ 3m++Q7P5heHh7tdv5qcsqc915v0P2/sHPE2ueoR3+dxkJQaPJj0OoY4wKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcN2KTXaAKELMmrxi40CpL4yAAWMB8GA1UdIwQY MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7oTpv+A SYVopXxRZm3D9R4KAuITc26uzXISvRAEHGPLP+FctTNT3NQO2Qzz463ZJUXDQ5ZX d7Uaxri/+bIhk0aafdCF0PpEOL+XovVpOnZ/HtmDd6H5owbZ/2aYpbQ7Ak/80x/D rhgbgkgZyVWx1wSuz1rntCUaLT6OKdsffPQozuqbNhge6m1XJdyZ0Q8S+SFaASFS Rs6gCIyomlJouDuPqC6GnEAdMN99E9hFI6g2R3mEkuk8NilJ9hCwl3gmKEtlXPxI Yi+BlOBOvlUcW3grGvn/uB902QaY7UmailBGLTr5iYXwO14QEBI7eoH5SCKSf23U yFBY4vIl6wOLoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:55 2026 by rpki-client