This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json) Hash identifier: FlG+jr6CoxPXAeNbJh0XbhH2IvWP2lmyYTmN9E9aA+s= Subject key identifier: 1C:CF:3F:03:04:B2:D6:A9:9E:E5:8F:72:FE:97:DF:AD:A9:32:FC:7D Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4 Certificate serial: 019BD5B40FE4161C550344D45E71E21406DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft Manifest number: 17E6 Signing time: Mon 19 Jan 2026 10:01:45 +0000 Manifest this update: Mon 19 Jan 2026 10:01:45 +0000 Manifest next update: Tue 20 Jan 2026 10:01:45 +0000 Files and hashes: 1: JQ-BG16GBmiKTRtWlx0jbggGDzY.roa (hash: Rybx78lS/tFD5mooAKxD5CnTfaalNbrJsTnAOJa1SbI=) 2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: 9bknW4EMDvraz4KQP7UkkGw87Wtx6E01ADVyJSVdthc=) 3: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:0f:e4:16:1c:55:03:44:d4:5e:71:e2:14:06:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4 Validity Not Before: Jan 19 10:01:45 2026 GMT Not After : Jan 20 10:01:45 2026 GMT Subject: CN=1ccf3f0304b2d6a99ee58f72fe97dfada932fc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5f:05:c6:bc:09:97:15:af:db:5f:36:76:3c: 6f:ba:22:18:90:02:8f:ce:6e:f1:e5:ca:70:49:f1: 27:c8:45:83:43:47:65:04:07:b0:78:24:a0:1d:29: b1:71:42:41:77:10:a5:72:c0:47:41:d8:a6:2d:a9: 7c:64:5e:ab:ca:59:05:3a:fe:e2:f2:44:ec:cf:32: ad:3f:f0:57:8f:c3:e5:8e:77:f2:a4:3e:8d:c4:7d: 60:66:bc:41:2b:60:b9:24:49:22:3b:e9:a6:5d:24: 84:53:0b:59:f9:2d:f0:44:44:59:8f:2c:d0:f1:ae: c1:ec:d8:83:6f:fd:48:d1:02:16:d2:85:ba:3c:14: f0:03:69:a4:6b:97:ab:ae:20:53:a0:0e:3c:d0:fc: 96:e3:9e:ab:a7:35:eb:94:08:20:18:be:cc:94:62: d2:a7:9e:40:5e:df:46:98:ba:97:d6:da:f1:e6:d4: db:c8:2b:fd:e2:88:bf:47:18:a9:82:64:6d:cb:c2: dc:a4:d5:3c:94:ae:77:48:87:f6:e7:c3:74:87:fb: 72:a0:19:02:7b:8a:d2:1d:2d:63:a1:65:13:b7:ce: 55:be:0a:ae:a3:aa:f4:9b:14:dd:d4:ae:5a:35:05: 0f:56:ea:4c:84:45:53:8a:79:04:fd:31:44:c1:77: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:3F:03:04:B2:D6:A9:9E:E5:8F:72:FE:97:DF:AD:A9:32:FC:7D X509v3 Authority Key Identifier: keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:46:c4:59:ca:51:49:83:39:45:5f:ec:77:10:47:ff:f1:b9: e3:88:eb:47:3e:22:8e:f2:82:b4:2f:98:84:51:6a:89:4e:f5: fd:2a:d4:05:68:12:51:6e:23:70:c8:bc:53:07:95:4f:7d:f7: 70:f8:d6:3d:14:c8:91:f4:39:bd:4e:f1:31:2d:3e:7d:76:c0: 9a:a4:52:c0:30:22:18:59:1d:f5:f3:07:e8:c0:04:43:cb:ef: e5:6c:5e:6c:20:83:cd:7a:fc:39:85:e8:20:99:ae:fe:49:f4: d5:a8:2d:48:b1:2d:94:8d:b0:b2:15:be:ff:ab:f8:a3:c9:6f: 7d:01:dc:2b:5f:65:ea:1b:fa:ab:82:e6:23:c9:6f:9c:08:75: 3d:5c:a1:2a:34:69:c1:f6:8b:d1:ab:1e:74:50:12:e5:c7:f7: ad:dc:40:4b:81:bb:60:68:aa:6a:ba:99:45:7b:ab:06:d7:1f: d0:24:fe:fc:23:48:26:4c:a1:b8:9b:31:5e:3d:e3:d0:5b:49: ca:36:2b:ad:75:58:11:0b:23:3f:67:49:8e:f3:dc:9e:ef:bc: 64:d8:88:26:59:da:64:46:84:85:d7:35:9c:a5:36:73:0c:64: df:33:e4:e6:eb:00:f1:65:aa:1b:36:f8:ca:83:f1:cc:b8:f0: 7c:e7:d5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVtA/kFhxVA0TUXnHiFAbaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1 NjJmYTQwHhcNMjYwMTE5MTAwMTQ1WhcNMjYwMTIwMTAwMTQ1WjAzMTEwLwYDVQQD EygxY2NmM2YwMzA0YjJkNmE5OWVlNThmNzJmZTk3ZGZhZGE5MzJmYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V8FxrwJlxWv2182djxvuiIYkAKP zm7x5cpwSfEnyEWDQ0dlBAeweCSgHSmxcUJBdxClcsBHQdimLal8ZF6rylkFOv7i 8kTszzKtP/BXj8PljnfypD6NxH1gZrxBK2C5JEkiO+mmXSSEUwtZ+S3wRERZjyzQ 8a7B7NiDb/1I0QIW0oW6PBTwA2mka5erriBToA480PyW456rpzXrlAggGL7MlGLS p55AXt9GmLqX1trx5tTbyCv94oi/RxipgmRty8LcpNU8lK53SIf258N0h/tyoBkC e4rSHS1joWUTt85Vvgquo6r0mxTd1K5aNQUPVupMhEVTinkE/TFEwXdgswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzPPwMEstapnuWPcv6X362pMvx9MB8GA1UdIwQY MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0 LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkbEWcpR SYM5RV/sdxBH//G544jrRz4ijvKCtC+YhFFqiU71/SrUBWgSUW4jcMi8UweVT333 cPjWPRTIkfQ5vU7xMS0+fXbAmqRSwDAiGFkd9fMH6MAEQ8vv5WxebCCDzXr8OYXo IJmu/kn01agtSLEtlI2wshW+/6v4o8lvfQHcK19l6hv6q4LmI8lvnAh1PVyhKjRp wfaL0asedFAS5cf3rdxAS4G7YGiqarqZRXurBtcf0CT+/CNIJkyhuJsxXj3j0FtJ yjYrrXVYEQsjP2dJjvPcnu+8ZNiIJlnaZEaEhdc1nKU2cwxk3zPk5usA8WWqGzb4 yoPxzLjwfOfVEA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:01:45 2026 by rpki-client