This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft File: Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json) Hash identifier: vjj/zm9PyyG0pdyoX2ZuVv5CJ5i2rfmorik1/frAmKE= Subject key identifier: 1F:79:0D:17:AA:9C:FC:BF:73:B3:A1:E4:84:DE:A4:C0:87:95:56:35 Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 Certificate issuer: /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Certificate serial: 019C1BA766571849E223B8D3358E5E5A44C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft Manifest number: 0AC8 Signing time: Mon 02 Feb 2026 00:01:21 +0000 Manifest this update: Mon 02 Feb 2026 00:01:21 +0000 Manifest next update: Tue 03 Feb 2026 00:01:21 +0000 Files and hashes: 1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=) 2: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: /NH7mV1F1ZPTP/En8PEJ27NYUbIJr1IdwWgQeI4rrkc=) 3: Tr4wiRoRfvJvFB5ZbM0sqvD35vA.asa (hash: OndDrzFgYP1E7JjXKJ2d2BNCF0Kss6Gv5D3BbTzjQxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:a7:66:57:18:49:e2:23:b8:d3:35:8e:5e:5a:44:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712 Validity Not Before: Feb 2 00:01:21 2026 GMT Not After : Feb 3 00:01:21 2026 GMT Subject: CN=1f790d17aa9cfcbf73b3a1e484dea4c087955635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:33:e8:2f:cd:dd:0e:b2:51:09:0a:3f:04:2d: 57:f6:15:ee:0e:c3:de:68:a2:db:7a:df:8f:87:86: 23:27:31:a5:08:27:b6:e9:89:bc:a0:bd:2b:11:98: db:e3:39:9b:f6:e5:e5:9a:ef:61:45:22:bc:5e:4c: 87:76:3d:18:4d:ca:40:11:51:bd:58:18:eb:02:16: 3a:55:72:b3:df:82:11:c0:fd:c2:43:08:9a:1c:4c: 87:11:9c:92:b3:fa:9a:6b:30:8e:0e:8c:2f:76:6c: 21:0a:cb:6a:33:77:f5:17:3a:2c:a4:46:7d:24:10: fa:91:75:8c:8f:66:7b:2c:b0:04:68:a6:d0:43:df: 04:3f:cc:f1:a4:99:68:3e:18:8a:f4:7b:ae:69:a3: 7b:c6:5e:ff:d5:01:73:69:d7:a5:40:76:ce:57:f2: ee:1b:5f:31:55:35:19:b4:7e:2b:0f:cd:1a:2e:e1: 90:0e:08:b5:4d:c7:53:5b:4c:1a:85:8b:b8:d3:cd: b7:81:d8:e4:51:ac:f1:b9:ce:bc:5a:16:32:b4:69: 12:b2:fa:9f:39:f3:e8:ab:9a:6b:f3:c1:46:c9:43: b4:b0:3e:66:69:29:a9:fa:96:29:41:ef:24:97:ea: e9:a3:0b:8a:eb:fc:32:22:52:04:c8:72:70:83:6e: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:79:0D:17:AA:9C:FC:BF:73:B3:A1:E4:84:DE:A4:C0:87:95:56:35 X509v3 Authority Key Identifier: keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:25:2f:81:7e:34:99:25:6f:2a:81:7e:98:7c:5e:62:b3:b8: fb:94:37:18:75:ac:55:76:31:5c:ea:12:24:0b:74:5e:37:4b: c6:8b:82:4b:0c:02:67:40:ff:3b:89:9b:ee:7e:d1:e8:57:8e: 35:7d:19:71:3a:89:98:f5:60:a8:f1:e7:03:08:0a:72:4d:88: 4a:aa:e2:26:41:be:e2:4a:69:cd:6d:81:29:73:87:28:9b:29: 66:6f:82:95:7c:b8:1e:23:2e:2f:09:d4:5b:92:70:b8:e1:87: d3:bd:7a:cb:fa:a8:b7:07:da:a9:89:92:c2:50:43:d0:1e:63: 51:4c:43:7c:35:80:9f:cd:1d:2b:88:9b:de:5a:ad:df:25:8f: d4:41:8a:41:a3:c8:a2:b7:f0:41:7c:64:0e:31:19:21:bb:9a: 0d:9b:50:ef:e1:44:9c:c0:f0:be:0f:9b:a0:1a:f7:72:70:d2: f1:90:52:6a:05:59:c0:f8:9d:e1:db:7e:e6:8a:45:4f:71:be: 79:3e:5e:da:6b:e6:5f:d2:07:f7:63:6d:87:9c:77:a7:72:b9: dc:7e:6d:28:8d:aa:22:e5:27:db:ca:6b:81:3c:dc:2e:50:52: a9:3c:0a:7b:d6:23:fa:d4:f9:5c:0b:c6:b3:c2:1b:68:2b:cf: b9:15:53:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbp2ZXGEniI7jTNY5eWkTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTdmYzZiNzRiMmI4NjMyODExZmRmZDgxNmQwM2U5Mzlh ZmQ3MTIwHhcNMjYwMjAyMDAwMTIxWhcNMjYwMjAzMDAwMTIxWjAzMTEwLwYDVQQD EygxZjc5MGQxN2FhOWNmY2JmNzNiM2ExZTQ4NGRlYTRjMDg3OTU1NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jPoL83dDrJRCQo/BC1X9hXuDsPe aKLbet+Ph4YjJzGlCCe26Ym8oL0rEZjb4zmb9uXlmu9hRSK8XkyHdj0YTcpAEVG9 WBjrAhY6VXKz34IRwP3CQwiaHEyHEZySs/qaazCODowvdmwhCstqM3f1FzospEZ9 JBD6kXWMj2Z7LLAEaKbQQ98EP8zxpJloPhiK9HuuaaN7xl7/1QFzadelQHbOV/Lu G18xVTUZtH4rD80aLuGQDgi1TcdTW0wahYu40823gdjkUazxuc68WhYytGkSsvqf OfPoq5pr88FGyUO0sD5maSmp+pYpQe8kl+rpowuK6/wyIlIEyHJwg26n5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB95DReqnPy/c7Oh5ITepMCHlVY1MB8GA1UdIwQY MBaAFELn/Gt0srhjKBH9/YFtA+k5r9cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEt MmY5MDZkYTJlZjIwLzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hN2NjZWQtZGE1NC00MDM3LWJjOWEtMmY5MDZkYTJlZjIw LzEvUXVmOGEzU3l1R01vRWYzOWdXMEQ2VG12MXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCUvgX40 mSVvKoF+mHxeYrO4+5Q3GHWsVXYxXOoSJAt0XjdLxouCSwwCZ0D/O4mb7n7R6FeO NX0ZcTqJmPVgqPHnAwgKck2ISqriJkG+4kppzW2BKXOHKJspZm+ClXy4HiMuLwnU W5JwuOGH0716y/qotwfaqYmSwlBD0B5jUUxDfDWAn80dK4ib3lqt3yWP1EGKQaPI orfwQXxkDjEZIbuaDZtQ7+FEnMDwvg+boBr3cnDS8ZBSagVZwPid4dt+5opFT3G+ eT5e2mvmX9IH92Nth5x3p3K53H5tKI2qIuUn28prgTzcLlBSqTwKe9Yj+tT5XAvG s8IbaCvPuRVT5A== -----END CERTIFICATE-----Generated at Mon Feb 2 08:14:06 2026 by rpki-client