This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json) Hash identifier: o5C007LFl+Z4OXWbWQ1MChexrTk1gQknUWwY0SMhZfU= Subject key identifier: A3:B2:C7:2F:DD:37:FD:27:95:90:CA:69:28:28:ED:5D:92:DF:95:4F Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc Certificate serial: 019B7FDE748BDD8606ED3FB4DB1F796BA1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft Manifest number: 174F Signing time: Fri 02 Jan 2026 18:00:43 +0000 Manifest this update: Fri 02 Jan 2026 18:00:43 +0000 Manifest next update: Sat 03 Jan 2026 18:00:43 +0000 Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=) 2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: 4C0sGwsCSVogjAqF+dnNVhHSRotHZ7kh87E7YcoSfvU=) 3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:74:8b:dd:86:06:ed:3f:b4:db:1f:79:6b:a1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc Validity Not Before: Jan 2 18:00:43 2026 GMT Not After : Jan 3 18:00:43 2026 GMT Subject: CN=a3b2c72fdd37fd279590ca692828ed5d92df954f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:98:95:83:65:5d:b1:52:b7:75:ee:af:77: 10:b7:5f:32:e3:21:5b:0d:48:ec:3e:36:bb:2f:e4: 0a:1b:5e:a3:93:dc:d8:9f:83:c5:fb:90:a3:06:d9: aa:58:cc:b9:30:7b:43:8c:82:03:9a:79:2e:fe:7a: b5:2a:ee:1b:57:03:8b:11:82:05:3f:8e:6b:18:8a: 73:a2:5d:fd:17:99:30:0c:aa:d3:57:29:42:61:92: dc:db:0a:55:01:5e:25:db:69:f2:75:b0:d3:8d:13: 4d:45:1d:5e:e0:3b:ec:47:c6:30:f1:70:ab:2c:3a: 84:e3:b4:71:e7:b7:b6:f8:4c:6c:76:a4:0e:71:25: ca:ad:72:84:d9:83:0e:3d:82:5c:dc:61:c2:f5:80: 8c:c2:56:27:8b:d8:93:e4:7e:83:7c:cd:4d:18:48: 68:76:c7:0b:dd:80:19:97:50:f6:a0:3d:45:0e:a7: a7:a3:91:68:b1:61:86:66:ab:b4:27:99:c9:af:ab: cd:9b:89:54:2d:2b:05:fc:ca:16:c9:ab:78:3b:ce: 5b:fe:0c:f7:37:ea:1b:9a:5a:3c:77:03:4c:dd:43: 5e:bd:71:f0:4b:a9:72:f1:56:95:f2:13:d0:02:1d: db:84:c8:46:63:05:2f:16:d8:b2:46:fe:12:39:5c: 27:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B2:C7:2F:DD:37:FD:27:95:90:CA:69:28:28:ED:5D:92:DF:95:4F X509v3 Authority Key Identifier: keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d9:50:6e:fe:dc:fe:6b:a5:bc:f7:80:eb:f0:b5:64:42:fa: 56:80:b3:5c:da:79:bb:01:13:2b:ff:ec:4b:81:f8:0e:10:f1: 0b:f4:d6:30:82:07:9a:6e:35:e4:97:45:a5:ad:86:1e:de:c7: ad:db:6e:9b:93:00:99:88:8d:ac:37:86:dc:21:ed:3b:75:f9: 6a:98:47:9c:07:7e:1e:80:c1:17:1d:c6:84:36:0d:4e:79:57: 90:23:d3:1f:ff:67:45:64:20:6f:eb:b6:10:20:77:d9:4b:83: 17:92:e7:8c:66:e4:85:64:89:fd:13:5e:e3:1b:83:53:81:84: 9e:89:18:34:7f:51:32:be:c5:dc:1e:39:8b:2f:21:30:72:8b: f3:11:5c:6c:69:09:37:13:3b:ed:1f:f2:24:fa:7b:9d:7b:cb: 33:f8:95:3f:a1:a9:0b:c2:b8:e7:1d:f5:19:4d:a7:d4:d1:b0: c1:82:23:22:e4:72:95:6a:5c:44:c6:4c:06:6b:c7:68:a1:c7: c4:75:66:06:10:cc:e0:8f:7e:d4:52:49:4e:92:1d:b8:16:30: 66:5d:af:fb:c3:32:73:63:cb:e9:0b:fa:c7:ad:3f:b8:e7:72: be:ed:c9:01:8b:af:ce:85:4e:e1:02:9a:e8:e8:a3:1d:fc:43: b4:44:e2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3nSL3YYG7T+02x95a6HhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl YjE5Y2MwHhcNMjYwMTAyMTgwMDQzWhcNMjYwMTAzMTgwMDQzWjAzMTEwLwYDVQQD EyhhM2IyYzcyZmRkMzdmZDI3OTU5MGNhNjkyODI4ZWQ1ZDkyZGY5NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJuYlYNlXbFSt3Xur3cQt18y4yFb DUjsPja7L+QKG16jk9zYn4PF+5CjBtmqWMy5MHtDjIIDmnku/nq1Ku4bVwOLEYIF P45rGIpzol39F5kwDKrTVylCYZLc2wpVAV4l22nydbDTjRNNRR1e4DvsR8Yw8XCr LDqE47Rx57e2+ExsdqQOcSXKrXKE2YMOPYJc3GHC9YCMwlYni9iT5H6DfM1NGEho dscL3YAZl1D2oD1FDqeno5FosWGGZqu0J5nJr6vNm4lULSsF/MoWyat4O85b/gz3 N+obmlo8dwNM3UNevXHwS6ly8VaV8hPQAh3bhMhGYwUvFtiyRv4SOVwnVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOyxy/dN/0nlZDKaSgo7V2S35VPMB8GA1UdIwQY MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9lQbv7c /mulvPeA6/C1ZEL6VoCzXNp5uwETK//sS4H4DhDxC/TWMIIHmm415JdFpa2GHt7H rdtum5MAmYiNrDeG3CHtO3X5aphHnAd+HoDBFx3GhDYNTnlXkCPTH/9nRWQgb+u2 ECB32UuDF5LnjGbkhWSJ/RNe4xuDU4GEnokYNH9RMr7F3B45iy8hMHKL8xFcbGkJ NxM77R/yJPp7nXvLM/iVP6GpC8K45x31GU2n1NGwwYIjIuRylWpcRMZMBmvHaKHH xHVmBhDM4I9+1FJJTpIduBYwZl2v+8Myc2PL6Qv6x60/uOdyvu3JAYuvzoVO4QKa 6OijHfxDtETi4Q== -----END CERTIFICATE-----Generated at Fri Jan 2 23:52:27 2026 by rpki-client