This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json) Hash identifier: hllFW9YSNkHdDCxO3c1eONDi5iJegN1UoaEebgY4Bz8= Subject key identifier: 6B:14:C3:A8:66:ED:F5:26:03:45:87:83:72:99:39:55:D1:DF:90:58 Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712 Certificate serial: 019C1FBA567A57E968E01A03357804F7FAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft Manifest number: 16EF Signing time: Mon 02 Feb 2026 19:00:31 +0000 Manifest this update: Mon 02 Feb 2026 19:00:31 +0000 Manifest next update: Tue 03 Feb 2026 19:00:31 +0000 Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: wWzjXcOZVnWOmWj7Iek2ls7s6LfYi7kw6+DrLjn0PZE=) 2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:ba:56:7a:57:e9:68:e0:1a:03:35:78:04:f7:fa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712 Validity Not Before: Feb 2 19:00:31 2026 GMT Not After : Feb 3 19:00:31 2026 GMT Subject: CN=6b14c3a866edf5260345878372993955d1df9058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:eb:92:aa:30:de:75:92:99:f6:04:2f:da: 84:f6:f7:8e:67:29:42:7d:5e:1a:d5:f1:3b:a8:f2: de:d2:18:e0:42:80:f3:c1:d6:1f:cb:a6:0b:e1:4b: 13:ea:a3:79:e0:00:51:e1:c5:30:6f:10:c6:bd:43: ca:a1:0e:49:03:68:4d:ec:59:0e:89:2d:ed:3d:b5: f6:7a:9c:98:aa:d2:27:7b:dc:3b:9d:78:2d:46:33: 33:b2:0a:14:af:4c:d3:01:16:fb:ee:42:3f:15:21: f9:d3:7f:96:b1:91:62:80:c9:1e:fe:f4:ec:58:f0: 35:18:5e:49:98:94:d3:96:2e:1d:4b:a2:31:87:36: c0:ec:da:1a:cd:05:89:74:94:20:7e:1e:81:7d:92: 01:39:bc:e3:5a:b9:fa:0a:ce:62:45:bc:e2:54:41: 64:48:74:13:70:ac:55:b7:56:64:f8:bf:6f:ae:76: 83:6a:7c:12:18:d2:f1:3a:94:d5:67:89:e0:23:95: 91:4b:c1:04:2c:22:45:39:20:cb:0e:3e:32:d2:cd: a7:e3:be:b6:f4:e2:a7:19:cc:49:ef:8d:56:08:9e: d3:1d:11:a3:3e:a3:59:52:e5:62:17:e7:f2:b4:c6: 5a:50:95:3c:1c:8e:22:2a:90:17:95:b4:df:62:49: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:14:C3:A8:66:ED:F5:26:03:45:87:83:72:99:39:55:D1:DF:90:58 X509v3 Authority Key Identifier: keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e3:d7:83:a2:b3:45:36:4d:3a:b6:d0:dc:0d:b3:78:1a:38: 12:a5:d8:ce:6d:e8:c3:34:b9:e7:94:f8:85:dc:5a:d7:50:da: e7:5e:69:25:25:9e:43:76:61:68:05:d0:70:57:5b:fc:a7:12: 38:a0:84:b0:94:8b:85:2f:2b:7c:84:0d:7f:66:42:82:ee:2d: 18:19:3f:49:e1:b3:52:a5:97:dc:04:3e:53:0c:22:89:b0:22: bd:b6:c9:9e:36:4c:f9:7f:70:dd:57:73:08:52:bf:cb:09:bd: 9c:69:0f:f2:1e:55:00:a3:cb:96:9a:d4:31:a1:d9:9f:64:b5: 7e:79:f1:4b:b0:ac:4b:1c:92:05:36:f3:07:86:d5:dd:86:f2: e2:44:0d:0d:bc:0f:a5:f2:ba:13:c2:71:db:a0:0f:11:ce:e7: 7b:3d:48:26:3f:c9:ba:a8:f5:25:13:e8:58:7f:ba:f1:41:85: fc:dd:29:9d:b1:0b:bc:ee:a0:48:ba:e8:27:ac:e0:d5:90:75: ab:3b:ba:cc:41:7d:97:5a:d5:fe:b8:85:87:a5:0d:d7:79:2a: 67:93:a6:92:ba:e9:41:ec:ba:88:b4:9a:e2:93:79:59:c8:21: bc:0d:69:76:53:e7:f9:95:0b:f0:0f:54:c7:27:6e:93:e0:0d: 7c:12:95:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfulZ6V+lo4BoDNXgE9/r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzMwMzcxOTg2ZGY1ZDU2NGVlNjcwNzQ3MTdiNjZhMDJm ZjU3MTIwHhcNMjYwMjAyMTkwMDMxWhcNMjYwMjAzMTkwMDMxWjAzMTEwLwYDVQQD Eyg2YjE0YzNhODY2ZWRmNTI2MDM0NTg3ODM3Mjk5Mzk1NWQxZGY5MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnrkqow3nWSmfYEL9qE9veOZylC fV4a1fE7qPLe0hjgQoDzwdYfy6YL4UsT6qN54ABR4cUwbxDGvUPKoQ5JA2hN7FkO iS3tPbX2epyYqtIne9w7nXgtRjMzsgoUr0zTARb77kI/FSH503+WsZFigMke/vTs WPA1GF5JmJTTli4dS6IxhzbA7NoazQWJdJQgfh6BfZIBObzjWrn6Cs5iRbziVEFk SHQTcKxVt1Zk+L9vrnaDanwSGNLxOpTVZ4ngI5WRS8EELCJFOSDLDj4y0s2n4762 9OKnGcxJ741WCJ7THRGjPqNZUuViF+fytMZaUJU8HI4iKpAXlbTfYkkXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsUw6hm7fUmA0WHg3KZOVXR35BYMB8GA1UdIwQY MBaAFELDA3GYbfXVZO5nB0cXtmoC/1cSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzct YzI0NTRjZTI4ZDQ4LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84YmEwZGQtMmZiYi00YTZmLTlhMzctYzI0NTRjZTI4ZDQ4 LzEvUXNNRGNaaHQ5ZFZrN21jSFJ4ZTJhZ0xfVnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlePXg6Kz RTZNOrbQ3A2zeBo4EqXYzm3owzS555T4hdxa11Da515pJSWeQ3ZhaAXQcFdb/KcS OKCEsJSLhS8rfIQNf2ZCgu4tGBk/SeGzUqWX3AQ+UwwiibAivbbJnjZM+X9w3Vdz CFK/ywm9nGkP8h5VAKPLlprUMaHZn2S1fnnxS7CsSxySBTbzB4bV3Yby4kQNDbwP pfK6E8Jx26APEc7nez1IJj/Juqj1JRPoWH+68UGF/N0pnbELvO6gSLroJ6zg1ZB1 qzu6zEF9l1rV/riFh6UN13kqZ5OmkrrpQey6iLSa4pN5WcghvA1pdlPn+ZUL8A9U xyduk+ANfBKV9Q== -----END CERTIFICATE-----Generated at Tue Feb 3 06:27:39 2026 by rpki-client