This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: 3pSM23xF57aHD0M4bDPC8e69nAG/t7zldXGUxyD+Vkk= Subject key identifier: E4:84:05:6B:4C:B9:A9:06:09:4F:A6:5C:77:03:78:50:23:86:C5:F0 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019BFB0A03FBC4911929FB091E9A6AFDE294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 16:01:35 +0000 Manifest this update: Mon 26 Jan 2026 16:01:35 +0000 Manifest next update: Tue 27 Jan 2026 16:01:35 +0000 Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=) 2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=) 3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: 8/yAMsbVmcY3YgmC8EhTekhzq7ge5Wd4AwThUOkWPc4=) 4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=) 5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=) 6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=) 7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=) 8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=) 9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=) 10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=) 11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=) 12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=) 13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:03:fb:c4:91:19:29:fb:09:1e:9a:6a:fd:e2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 26 16:01:35 2026 GMT Not After : Jan 27 16:01:35 2026 GMT Subject: CN=e484056b4cb9a906094fa65c770378502386c5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:21:f7:f9:8f:a3:81:44:2d:4b:ff:8d:10: 22:29:a1:03:93:3d:bc:f9:d7:37:6f:07:3b:eb:ae: ae:1a:d4:8c:bf:bf:6f:07:b1:1f:03:20:18:76:48: 9b:91:dd:03:d2:cc:70:54:86:0a:24:0f:e8:e5:c3: 6b:22:08:8d:5e:96:64:ae:78:f5:55:df:e7:35:0c: ee:93:28:b0:09:d1:1d:b1:27:1c:cc:e3:93:2b:44: ca:41:77:8e:f9:1a:78:0a:88:df:93:88:e3:d4:cf: 3b:50:58:8f:87:29:e0:15:91:1e:60:23:f4:0e:8e: 90:42:18:e8:74:0b:38:c9:84:4f:40:2a:d2:17:c6: 16:01:17:72:9b:41:53:f4:57:53:c5:0c:d6:13:9c: e9:c9:63:e7:9f:45:8f:5c:5d:ad:98:9b:a7:02:8e: 2c:80:49:f0:32:32:84:7f:b2:f8:a0:97:ae:bd:48: 16:67:ac:76:df:d2:93:48:d8:49:55:fd:64:e2:f4: 32:bd:54:54:32:b0:ed:20:fc:7b:ad:1f:61:62:67: fc:69:c4:2d:7b:f9:68:4a:a8:82:46:06:f1:e0:48: bf:60:24:9c:a9:e6:dd:a9:c2:f4:0d:fb:ce:fb:fd: cd:e9:82:27:4f:1f:06:39:59:6d:95:db:ce:52:2e: ce:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:84:05:6B:4C:B9:A9:06:09:4F:A6:5C:77:03:78:50:23:86:C5:F0 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b3:5d:9f:b5:9a:d2:62:d8:6c:fb:c0:0f:b1:13:ed:f6:93: 28:3b:be:a9:c4:b6:59:e3:7b:90:3d:63:aa:6b:dc:eb:0b:a9: 98:1c:5c:f6:68:2f:a8:b9:8e:6e:0f:59:c7:c8:7a:a5:80:89: 27:00:86:b6:da:4a:5f:c7:e3:ff:ce:26:3d:03:07:37:92:00: 46:d3:29:08:aa:7b:ec:0c:c8:7d:22:3b:33:74:99:2c:5a:f5: f6:e8:2a:92:9f:5d:7f:9d:16:97:c8:5e:50:f8:69:d0:bd:08: 84:74:f0:9c:e6:42:f5:b2:5e:85:1f:1f:da:c5:08:20:05:22: 7a:6b:1f:6f:62:13:f0:ca:33:e6:12:34:a4:6f:3a:81:7b:80: 7a:80:95:08:3e:a6:6d:19:3a:8f:8f:d6:98:8f:89:3b:5e:94: 51:cf:53:67:71:71:5f:2d:e9:50:56:6e:be:b3:c4:a7:15:2e: cb:d8:eb:0b:a4:47:45:b7:f1:6f:26:9a:0b:ee:e3:23:c2:5a: 7f:be:30:9f:16:04:50:b2:17:49:7f:eb:4a:f4:36:3e:5b:83: 1c:54:6a:c0:e0:87:8c:cc:8f:6d:01:d6:89:1e:24:4f:2f:a4: d3:f5:89:0d:63:bf:35:0d:86:1c:67:f2:4b:44:ee:e2:28:cf: bb:a9:8a:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CgP7xJEZKfsJHppq/eKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTI2MTYwMTM1WhcNMjYwMTI3MTYwMTM1WjAzMTEwLwYDVQQD EyhlNDg0MDU2YjRjYjlhOTA2MDk0ZmE2NWM3NzAzNzg1MDIzODZjNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnYh9/mPo4FELUv/jRAiKaEDkz28 +dc3bwc7666uGtSMv79vB7EfAyAYdkibkd0D0sxwVIYKJA/o5cNrIgiNXpZkrnj1 Vd/nNQzukyiwCdEdsScczOOTK0TKQXeO+Rp4Cojfk4jj1M87UFiPhyngFZEeYCP0 Do6QQhjodAs4yYRPQCrSF8YWARdym0FT9FdTxQzWE5zpyWPnn0WPXF2tmJunAo4s gEnwMjKEf7L4oJeuvUgWZ6x239KTSNhJVf1k4vQyvVRUMrDtIPx7rR9hYmf8acQt e/loSqiCRgbx4Ei/YCScqebdqcL0DfvO+/3N6YInTx8GOVltldvOUi7OOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSEBWtMuakGCU+mXHcDeFAjhsXwMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7Ndn7Wa 0mLYbPvAD7ET7faTKDu+qcS2WeN7kD1jqmvc6wupmBxc9mgvqLmObg9Zx8h6pYCJ JwCGttpKX8fj/84mPQMHN5IARtMpCKp77AzIfSI7M3SZLFr19ugqkp9df50Wl8he UPhp0L0IhHTwnOZC9bJehR8f2sUIIAUiemsfb2IT8Moz5hI0pG86gXuAeoCVCD6m bRk6j4/WmI+JO16UUc9TZ3FxXy3pUFZuvrPEpxUuy9jrC6RHRbfxbyaaC+7jI8Ja f74wnxYEULIXSX/rSvQ2PluDHFRqwOCHjMyPbQHWiR4kTy+k0/WJDWO/NQ2GHGfy S0Tu4ijPu6mKwQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:15:20 2026 by rpki-client