This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json) Hash identifier: EKCTe2vyRnqy+QYiCz3EX4g6wCP+5BzIqgEX2hiya88= Subject key identifier: 99:C8:79:BA:5A:56:29:9A:EB:2E:1D:09:70:DF:52:73:90:9F:94:EC Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Certificate serial: 019BFCF84B01769AAA02C5083103C43086A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 01:01:29 +0000 Manifest this update: Tue 27 Jan 2026 01:01:29 +0000 Manifest next update: Wed 28 Jan 2026 01:01:29 +0000 Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: Wut+pgU9qy9iv6xqUNNojbULElQvDhIk+3MwRyDNV+k=) 2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:4b:01:76:9a:aa:02:c5:08:31:03:c4:30:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462 Validity Not Before: Jan 27 01:01:29 2026 GMT Not After : Jan 28 01:01:29 2026 GMT Subject: CN=99c879ba5a56299aeb2e1d0970df5273909f94ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:34:e6:34:24:18:0f:48:14:bf:43:f2:a9: 5f:23:c4:f1:90:11:5b:e0:35:d4:37:c0:92:b9:a7: 4c:f1:6b:ab:d0:ae:4b:0d:7e:de:0e:91:17:b1:e6: 44:71:82:ec:20:b2:42:1c:a6:e3:a5:65:6d:7a:80: 65:4f:e9:c2:87:d1:36:5c:b5:d8:d1:fb:87:2d:1c: f9:98:b7:dc:24:11:d5:9e:28:dc:b3:f8:a0:a0:c9: f2:08:54:b0:a5:50:19:dd:d8:02:77:34:a8:49:5f: bf:4a:1b:e0:0e:ba:71:c9:3d:fe:c6:21:a4:e2:e4: 58:c0:71:26:2d:3f:28:62:c6:4f:69:4b:03:c3:d6: f7:09:8b:63:bd:6c:f3:b2:2f:1c:61:b8:41:74:e8: de:6e:6b:b5:8e:0c:30:97:fd:e5:1e:65:b0:a7:e4: c6:5a:2d:d7:d9:91:e8:5e:40:16:9b:63:cf:d4:63: 12:21:31:ee:2b:ad:84:82:b9:8c:73:2c:26:50:d5: 8b:12:63:6d:a2:2f:0d:c8:27:e5:4f:03:40:c0:a0: ed:73:7d:37:e9:e6:9f:a2:51:ae:68:1b:f0:37:83: c8:8f:c9:cd:b4:f8:27:d0:3b:38:9f:c8:01:e9:2d: ab:6b:ef:bf:15:11:40:6f:57:0b:38:d9:d5:33:41: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C8:79:BA:5A:56:29:9A:EB:2E:1D:09:70:DF:52:73:90:9F:94:EC X509v3 Authority Key Identifier: keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e8:16:34:41:fb:91:09:8e:53:41:ea:61:fd:cd:54:6c:ba: 37:16:44:8b:b8:b4:ed:64:6d:da:a0:5b:bb:7a:15:fd:55:d3: 41:09:ce:c2:2f:dc:09:86:17:3a:06:78:e9:e0:25:0c:90:e8: f8:9b:95:94:ef:28:2a:6f:14:6c:cf:d6:a3:f3:6f:aa:7c:4b: 9c:7c:8b:75:b1:8b:8c:80:0f:fd:d6:d8:57:95:a7:f2:cc:f9: f2:74:d0:5b:8d:d9:a5:31:b9:0a:b9:d9:05:26:50:33:a6:56: cc:94:9e:88:21:44:e2:45:2a:a8:32:78:f7:0f:b8:72:f9:48: 8a:07:2c:db:ca:53:92:5c:54:89:48:b7:b4:c8:ef:98:98:b9: 5a:a9:c1:43:46:42:2b:84:c7:74:d0:85:ce:82:e5:ba:e4:2c: cd:68:2b:ef:b7:0e:b6:f7:66:a7:db:97:89:14:a4:c8:16:49: ec:7d:cf:f8:70:5c:bf:56:b6:f9:84:e7:ab:d3:d1:38:0f:05: 94:f5:f7:53:54:43:43:12:50:ae:61:1a:55:ba:91:7e:d1:43: 8c:87:c1:da:01:d4:04:83:f0:af:40:76:f0:de:0a:e1:7b:69: 4b:15:c9:69:6b:14:0c:19:10:b2:39:1b:3b:2c:0f:3e:d7:29: 83:c1:e9:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+EsBdpqqAsUIMQPEMIahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl M2I0NjIwHhcNMjYwMTI3MDEwMTI5WhcNMjYwMTI4MDEwMTI5WjAzMTEwLwYDVQQD Eyg5OWM4NzliYTVhNTYyOTlhZWIyZTFkMDk3MGRmNTI3MzkwOWY5NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbE05jQkGA9IFL9D8qlfI8TxkBFb 4DXUN8CSuadM8Wur0K5LDX7eDpEXseZEcYLsILJCHKbjpWVteoBlT+nCh9E2XLXY 0fuHLRz5mLfcJBHVnijcs/igoMnyCFSwpVAZ3dgCdzSoSV+/ShvgDrpxyT3+xiGk 4uRYwHEmLT8oYsZPaUsDw9b3CYtjvWzzsi8cYbhBdOjebmu1jgwwl/3lHmWwp+TG Wi3X2ZHoXkAWm2PP1GMSITHuK62EgrmMcywmUNWLEmNtoi8NyCflTwNAwKDtc303 6eafolGuaBvwN4PIj8nNtPgn0Ds4n8gB6S2ra++/FRFAb1cLONnVM0HJDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnIebpaVima6y4dCXDfUnOQn5TsMB8GA1UdIwQY MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1 LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYegWNEH7 kQmOU0HqYf3NVGy6NxZEi7i07WRt2qBbu3oV/VXTQQnOwi/cCYYXOgZ46eAlDJDo +JuVlO8oKm8UbM/Wo/NvqnxLnHyLdbGLjIAP/dbYV5Wn8sz58nTQW43ZpTG5CrnZ BSZQM6ZWzJSeiCFE4kUqqDJ49w+4cvlIigcs28pTklxUiUi3tMjvmJi5WqnBQ0ZC K4THdNCFzoLluuQszWgr77cOtvdmp9uXiRSkyBZJ7H3P+HBcv1a2+YTnq9PROA8F lPX3U1RDQxJQrmEaVbqRftFDjIfB2gHUBIPwr0B28N4K4XtpSxXJaWsUDBkQsjkb OywPPtcpg8Hp3w== -----END CERTIFICATE-----Generated at Tue Jan 27 09:59:20 2026 by rpki-client