This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json) Hash identifier: QhYqlBPuSjPTEFqAqJO0SMbaAT+USx6vLUJ8U8WZPXc= Subject key identifier: 3C:DB:97:3D:48:D0:8C:E7:61:A3:F3:08:AA:FB:6E:F0:1E:40:1D:D2 Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Certificate serial: 019BF91B9421271275F2011C9F9B58CF9EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 07:01:32 +0000 Manifest this update: Mon 26 Jan 2026 07:01:32 +0000 Manifest next update: Tue 27 Jan 2026 07:01:32 +0000 Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=) 2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=) 3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=) 4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=) 5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=) 6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=) 7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=) 8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=) 9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: z8FafQjUi5yOSq2kb3Aahi2g1z5MPsneD6u4bpao1ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:94:21:27:12:75:f2:01:1c:9f:9b:58:cf:9e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a Validity Not Before: Jan 26 07:01:32 2026 GMT Not After : Jan 27 07:01:32 2026 GMT Subject: CN=3cdb973d48d08ce761a3f308aafb6ef01e401dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2c:ce:dc:09:91:4e:61:bf:59:24:12:8e:eb: 43:89:d5:45:c2:ce:78:ae:42:ef:57:f6:c7:8f:c1: 31:e8:60:d1:22:2d:e1:a2:3f:3f:a0:9b:e8:37:8a: 1c:11:43:80:2d:95:7a:d3:63:fe:f9:fa:63:cc:fd: fb:2d:f8:7f:7d:b1:35:40:be:c9:80:e4:d0:b4:97: 89:20:eb:1d:40:3b:6d:be:b0:e3:7d:b1:d8:d9:f1: e6:7b:ac:90:de:bb:67:94:c4:e2:e3:63:fe:97:ab: 4c:f0:eb:d2:3e:7b:9c:11:df:db:9b:0f:0c:b0:cc: f0:65:78:95:fd:23:6f:42:9b:2f:3e:0a:54:5a:0b: f6:5c:b5:82:ff:30:d8:42:b5:a8:d7:a3:eb:7d:36: 70:87:75:10:31:38:45:e2:98:1f:84:7c:12:52:17: 63:46:05:fd:7d:77:50:84:5c:2e:4d:01:a3:29:37: 94:59:17:74:26:ee:a6:45:d1:12:01:91:bd:59:50: aa:45:71:c7:4e:7b:00:08:13:d4:f3:a9:bb:75:44: 39:bd:ef:3a:76:74:56:1c:c2:e0:7b:2c:b3:46:3b: 48:c4:45:7c:66:0d:e5:ad:e4:ae:65:47:42:8b:06: 83:94:08:f8:d2:33:df:ff:65:71:05:ba:7c:44:18: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DB:97:3D:48:D0:8C:E7:61:A3:F3:08:AA:FB:6E:F0:1E:40:1D:D2 X509v3 Authority Key Identifier: keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:44:24:90:b7:2a:a8:b0:44:1d:31:b4:0f:f8:e5:5e:be:e4: 05:5b:d6:92:45:5b:61:51:1c:73:9a:c8:ab:bc:ea:86:f6:f6: ca:1d:2d:f3:c3:14:40:8b:2a:2b:6b:48:1f:7d:1d:c2:54:80: e6:1c:71:8f:c8:75:95:27:e6:ab:27:94:dd:ed:ab:63:f9:62: 2f:48:65:af:a8:ae:8f:94:7b:7d:08:c1:b5:c0:ac:79:84:11: 55:eb:35:ac:8d:a7:26:88:3a:38:8b:0d:72:17:c1:51:cc:ef: f4:61:d9:27:17:36:76:46:cc:96:d3:1e:d5:ca:ef:b8:74:c1: a3:94:bc:b2:05:7b:fc:d7:75:cb:e9:0c:5e:f6:1a:f0:49:cc: be:7f:8d:0b:a1:89:6a:ab:55:35:9c:85:6b:33:7d:14:a7:e8: 14:26:3d:aa:96:a7:c6:c3:83:0b:88:89:68:5a:c5:19:50:e3: c2:2a:a5:b8:55:8b:5c:5a:71:11:f8:5b:ed:9f:de:a5:1d:f9: a6:28:de:be:b2:d1:f8:98:5f:ff:49:66:d8:e2:6e:a8:16:91: 98:b3:63:5a:06:ec:96:2b:cb:db:a3:84:62:1e:b9:07:a9:6b: d3:e5:0a:b1:c3:4d:da:00:f4:6a:5d:6e:18:42:eb:ee:4f:0b: f2:2b:f0:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G5QhJxJ18gEcn5tYz57IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Yjc1YjY0ZDVkYTE3ZDcwYmJhYmQ4MTFhMzlhNjAyZGRh Zjk2M2EwHhcNMjYwMTI2MDcwMTMyWhcNMjYwMTI3MDcwMTMyWjAzMTEwLwYDVQQD EygzY2RiOTczZDQ4ZDA4Y2U3NjFhM2YzMDhhYWZiNmVmMDFlNDAxZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yzO3AmRTmG/WSQSjutDidVFws54 rkLvV/bHj8Ex6GDRIi3hoj8/oJvoN4ocEUOALZV602P++fpjzP37Lfh/fbE1QL7J gOTQtJeJIOsdQDttvrDjfbHY2fHme6yQ3rtnlMTi42P+l6tM8OvSPnucEd/bmw8M sMzwZXiV/SNvQpsvPgpUWgv2XLWC/zDYQrWo16PrfTZwh3UQMThF4pgfhHwSUhdj RgX9fXdQhFwuTQGjKTeUWRd0Ju6mRdESAZG9WVCqRXHHTnsACBPU86m7dUQ5ve86 dnRWHMLgeyyzRjtIxEV8Zg3lreSuZUdCiwaDlAj40jPf/2VxBbp8RBhAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzblz1I0IznYaPzCKr7bvAeQB3SMB8GA1UdIwQY MBaAFKm3W2TV2hfXC7q9gRo5pgLdr5Y6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUt OWIxMTgwNGVjZDM5LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kYTg1ZTctYTQ1Mi00YjFkLWI1YWUtOWIxMTgwNGVjZDM5 LzEvcWJkYlpOWGFGOWNMdXIyQkdqbW1BdDJ2bGpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0QkkLcq qLBEHTG0D/jlXr7kBVvWkkVbYVEcc5rIq7zqhvb2yh0t88MUQIsqK2tIH30dwlSA 5hxxj8h1lSfmqyeU3e2rY/liL0hlr6iuj5R7fQjBtcCseYQRVes1rI2nJog6OIsN chfBUczv9GHZJxc2dkbMltMe1crvuHTBo5S8sgV7/Nd1y+kMXvYa8EnMvn+NC6GJ aqtVNZyFazN9FKfoFCY9qpanxsODC4iJaFrFGVDjwiqluFWLXFpxEfhb7Z/epR35 pijevrLR+Jhf/0lm2OJuqBaRmLNjWgbslivL26OEYh65B6lr0+UKscNN2gD0al1u GELr7k8L8ivwag== -----END CERTIFICATE-----Generated at Mon Jan 26 12:34:44 2026 by rpki-client