This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json) Hash identifier: Is9TlxXid6iqhiE3IGSoHZfuROJH0lEBsxv7s/mj/po= Subject key identifier: A6:AD:6B:AF:3C:A4:9C:35:3F:10:8F:B0:D6:24:C0:B0:D4:DA:18:FA Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef Certificate serial: 019BFC89BA9A49FABA60144B86C133E147AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft Manifest number: 1528 Signing time: Mon 26 Jan 2026 23:00:43 +0000 Manifest this update: Mon 26 Jan 2026 23:00:43 +0000 Manifest next update: Tue 27 Jan 2026 23:00:43 +0000 Files and hashes: 1: GLWh56MMEykKTE4rrV87G9Vgki8.roa (hash: 02Z7LQfQNnw59BWb8xFGQ1xpLvcBlJFnepDp+x8RT7E=) 2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: JnwDz/jvWXz1IgwZYzBOQ2J14fADp44s6zrYSjijbuY=) 3: w5TxS3vkHkeqXw3CmU-mwmwBXvQ.roa (hash: Rh0VsCvy2O3VBR0z+FrTOlGdPanimSzIyXLHmJJMba4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:ba:9a:49:fa:ba:60:14:4b:86:c1:33:e1:47:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef Validity Not Before: Jan 26 23:00:43 2026 GMT Not After : Jan 27 23:00:43 2026 GMT Subject: CN=a6ad6baf3ca49c353f108fb0d624c0b0d4da18fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:ad:c7:80:5a:34:c2:dc:c9:2f:00:25:99: 2e:63:d2:97:ed:27:a6:4e:e6:b2:60:6d:59:20:fd: ed:0b:50:d0:ae:1e:d3:ff:7f:25:a4:88:dc:5a:32: 33:e4:57:c1:24:c7:4f:4c:4e:bf:43:0b:40:8a:d3: d5:15:12:5c:6c:d7:71:e0:a9:90:d2:b0:8f:e5:dc: ba:d3:5c:2d:0b:c0:f9:ac:af:23:ab:c6:8c:bc:ad: 3e:37:04:f7:61:4f:64:49:fe:54:a3:48:3d:aa:fb: 0c:cc:cc:fc:f4:6c:d3:f2:06:52:9f:db:7a:3d:80: 12:a1:f7:c3:73:84:7f:26:14:ec:21:52:50:55:b6: 14:8b:a4:cd:00:61:76:36:23:38:5f:a3:cb:84:0a: ae:d2:7c:47:f4:33:ff:72:eb:71:2a:1d:72:63:f2: 40:22:29:ca:8e:19:dc:89:a1:85:67:7f:aa:33:c3: 14:9a:81:b6:5e:34:e6:36:8f:d8:48:df:5b:01:29: f0:a1:91:f0:aa:b6:a8:f4:c7:49:38:0c:78:86:84: 36:7a:e9:d9:22:ac:5e:0a:b0:e0:82:3b:a4:45:9e: 0d:d4:5b:e4:5e:1e:c8:04:ff:12:d5:ca:13:56:5e: 48:c5:33:ef:c4:fe:89:24:a9:ea:d9:bd:45:6a:13: 66:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:6B:AF:3C:A4:9C:35:3F:10:8F:B0:D6:24:C0:B0:D4:DA:18:FA X509v3 Authority Key Identifier: keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:79:45:e9:f1:d3:2a:f0:7b:5e:ca:c5:e6:71:07:b6:18:ce: 56:8f:4f:85:cc:f4:dd:5c:65:df:23:bb:46:3e:3a:b8:49:5a: aa:f6:9f:81:8b:f0:db:a6:be:83:f2:b7:ea:21:a2:10:e9:94: a3:55:f9:c6:04:a4:79:32:ab:52:00:1c:08:dd:12:39:0a:88: 2b:a0:0b:2e:f9:49:f2:64:83:bc:16:8b:7f:fe:3c:e1:15:f2: df:b5:8c:c7:46:56:d8:c7:9e:98:3c:e3:51:69:ab:30:54:9e: a9:12:fb:9f:fc:25:b8:14:01:cf:3e:3e:38:90:bc:8a:bf:35: 12:35:44:11:bc:bc:7d:9b:84:2d:17:24:29:26:6c:d4:f4:6c: 54:6b:51:98:2e:ac:02:00:45:a5:4e:62:34:e9:9a:94:13:2a: ec:68:93:4d:34:4c:da:61:9b:18:66:46:a5:f7:15:e4:02:7f: 93:83:ba:89:13:9e:d0:d8:de:5d:c2:52:07:35:77:6f:73:96: 5f:67:57:81:cb:36:72:59:48:97:ab:81:53:db:41:0f:de:9e: b3:e7:55:b8:fc:52:e1:fb:31:ad:28:c4:08:49:7f:93:2e:0f: 8b:7f:4f:d3:6a:df:aa:f6:dd:6c:c6:8c:1d:92:10:bf:72:50: b2:39:1b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ibqaSfq6YBRLhsEz4UerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk NDU0ZWYwHhcNMjYwMTI2MjMwMDQzWhcNMjYwMTI3MjMwMDQzWjAzMTEwLwYDVQQD EyhhNmFkNmJhZjNjYTQ5YzM1M2YxMDhmYjBkNjI0YzBiMGQ0ZGExOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikmtx4BaNMLcyS8AJZkuY9KX7Sem TuayYG1ZIP3tC1DQrh7T/38lpIjcWjIz5FfBJMdPTE6/QwtAitPVFRJcbNdx4KmQ 0rCP5dy601wtC8D5rK8jq8aMvK0+NwT3YU9kSf5Uo0g9qvsMzMz89GzT8gZSn9t6 PYASoffDc4R/JhTsIVJQVbYUi6TNAGF2NiM4X6PLhAqu0nxH9DP/cutxKh1yY/JA IinKjhnciaGFZ3+qM8MUmoG2XjTmNo/YSN9bASnwoZHwqrao9MdJOAx4hoQ2eunZ IqxeCrDggjukRZ4N1FvkXh7IBP8S1coTVl5IxTPvxP6JJKnq2b1FahNmlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKata688pJw1PxCPsNYkwLDU2hj6MB8GA1UdIwQY MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4 LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXlF6fHT KvB7XsrF5nEHthjOVo9Phcz03Vxl3yO7Rj46uElaqvafgYvw26a+g/K36iGiEOmU o1X5xgSkeTKrUgAcCN0SOQqIK6ALLvlJ8mSDvBaLf/484RXy37WMx0ZW2MeemDzj UWmrMFSeqRL7n/wluBQBzz4+OJC8ir81EjVEEby8fZuELRckKSZs1PRsVGtRmC6s AgBFpU5iNOmalBMq7GiTTTRM2mGbGGZGpfcV5AJ/k4O6iROe0NjeXcJSBzV3b3OW X2dXgcs2cllIl6uBU9tBD96es+dVuPxS4fsxrSjECEl/ky4Pi39P02rfqvbdbMaM HZIQv3JQsjkb0g== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:43 2026 by rpki-client