This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json) Hash identifier: MHi7zkJcJwZOkkdAcjhwefYZXIb2Bif+CBe86IhYetY= Subject key identifier: 1E:B0:E8:87:E1:71:1A:16:AA:8F:98:72:CC:E4:2E:E0:6F:83:EB:CA Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Certificate serial: 019BD959B8B4AA020575CD0B0DC5835F308E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft Manifest number: 17DB Signing time: Tue 20 Jan 2026 03:01:34 +0000 Manifest this update: Tue 20 Jan 2026 03:01:34 +0000 Manifest next update: Wed 21 Jan 2026 03:01:34 +0000 Files and hashes: 1: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=) 2: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: u8m2oNrgkugh+4+Rk8+MnWIWoAFO2haXU0Z6vS7Nt9o=) 3: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:59:b8:b4:aa:02:05:75:cd:0b:0d:c5:83:5f:30:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c Validity Not Before: Jan 20 03:01:34 2026 GMT Not After : Jan 21 03:01:34 2026 GMT Subject: CN=1eb0e887e1711a16aa8f9872cce42ee06f83ebca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:3f:25:a1:08:6c:f2:ee:4d:8e:4f:83:68: 35:df:e0:60:d9:ce:d8:ad:f7:9e:90:17:7e:6b:b6: 82:86:71:f3:41:73:9e:74:f8:78:0b:a2:92:23:f2: 2e:b5:0f:5d:98:5f:56:8f:d3:6d:50:d2:4b:e5:64: 87:ec:99:5a:58:9e:1f:1c:b7:6e:2c:97:e4:fc:f8: 48:8a:0b:4a:49:16:4f:84:ab:be:a7:01:d0:e6:9b: be:b9:ad:64:7a:d0:e8:92:53:67:e2:d3:23:d8:05: ff:c9:81:f3:72:f8:13:63:56:f9:a5:d2:56:cb:a3: 09:53:d2:65:c4:90:53:f0:31:0f:ea:49:55:2e:a0: c8:8e:a0:f8:90:24:59:e1:ca:d8:ce:df:0f:8d:db: c3:cd:25:ec:af:6e:e2:39:c0:50:ee:66:db:8c:42: 69:37:20:d7:51:04:7d:b3:aa:70:80:ed:b5:58:c2: 38:9a:c3:fc:01:b2:02:d9:d5:80:c0:60:be:98:ca: 4a:bc:48:d4:07:3a:a9:e9:c7:77:6c:14:1f:ce:2d: aa:69:48:fe:64:1a:19:a7:f4:48:b8:aa:d3:50:39: 6d:d5:7a:bb:7d:81:16:4c:8d:57:ee:4c:f4:8e:c4: 93:2a:6a:c0:a5:d9:ff:0f:30:3f:f7:df:b0:a3:77: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B0:E8:87:E1:71:1A:16:AA:8F:98:72:CC:E4:2E:E0:6F:83:EB:CA X509v3 Authority Key Identifier: keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:e3:e6:f9:f2:8a:b4:7d:62:70:d3:ad:41:23:81:97:58:ba: d8:fc:1b:ae:2a:dc:5b:5d:0f:3b:38:27:2f:f2:bf:a9:61:1f: aa:39:9f:90:e0:cb:6e:75:8d:f4:ce:56:61:12:1b:ba:02:b9: 0e:30:f7:1a:26:c9:67:87:fa:0d:7e:81:44:cc:c0:d1:2c:9c: f8:d6:8f:80:1d:72:a9:db:e5:96:35:b7:fa:50:f9:c9:be:45: cf:27:72:90:6c:a2:1d:81:c0:31:7c:76:80:0f:4a:8b:8b:47: f9:42:08:cf:ec:d0:9b:29:cb:5a:e1:3c:09:3d:93:2a:c4:41: 6f:c3:10:d9:27:49:5b:ae:29:9a:e3:a5:d8:d5:ba:5a:cb:bd: f6:f8:8f:f0:52:06:da:f0:ce:90:56:f7:de:56:6c:ce:f8:e8: 58:02:24:7f:f6:13:68:da:3d:6f:da:f2:80:e9:7e:a6:db:fb: 96:39:f1:31:75:81:11:34:da:b2:25:ec:02:63:8a:f7:2d:c0: c0:18:0d:b8:7c:5e:4d:52:64:4e:e2:6c:d3:b2:c6:3c:12:75: f0:98:09:20:f0:f9:8c:1d:65:31:d7:9e:fa:e0:0b:d2:8c:c4: a8:a8:af:28:be:d6:21:62:d8:95:64:aa:ee:da:45:8f:a1:31: 2b:1f:bc:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWbi0qgIFdc0LDcWDXzCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm NGNlM2MwHhcNMjYwMTIwMDMwMTM0WhcNMjYwMTIxMDMwMTM0WjAzMTEwLwYDVQQD EygxZWIwZTg4N2UxNzExYTE2YWE4Zjk4NzJjY2U0MmVlMDZmODNlYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+I/JaEIbPLuTY5Pg2g13+Bg2c7Y rfeekBd+a7aChnHzQXOedPh4C6KSI/IutQ9dmF9Wj9NtUNJL5WSH7JlaWJ4fHLdu LJfk/PhIigtKSRZPhKu+pwHQ5pu+ua1ketDoklNn4tMj2AX/yYHzcvgTY1b5pdJW y6MJU9JlxJBT8DEP6klVLqDIjqD4kCRZ4crYzt8PjdvDzSXsr27iOcBQ7mbbjEJp NyDXUQR9s6pwgO21WMI4msP8AbIC2dWAwGC+mMpKvEjUBzqp6cd3bBQfzi2qaUj+ ZBoZp/RIuKrTUDlt1Xq7fYEWTI1X7kz0jsSTKmrApdn/DzA/99+wo3dqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6w6IfhcRoWqo+YcszkLuBvg+vKMB8GA1UdIwQY MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUePm+fKK tH1icNOtQSOBl1i62PwbrircW10POzgnL/K/qWEfqjmfkODLbnWN9M5WYRIbugK5 DjD3GibJZ4f6DX6BRMzA0Syc+NaPgB1yqdvlljW3+lD5yb5FzydykGyiHYHAMXx2 gA9Ki4tH+UIIz+zQmynLWuE8CT2TKsRBb8MQ2SdJW64pmuOl2NW6Wsu99viP8FIG 2vDOkFb33lZszvjoWAIkf/YTaNo9b9rygOl+ptv7ljnxMXWBETTasiXsAmOK9y3A wBgNuHxeTVJkTuJs07LGPBJ18JgJIPD5jB1lMdee+uAL0ozEqKivKL7WIWLYlWSq 7tpFj6ExKx+8gg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:41 2026 by rpki-client