This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json) Hash identifier: ZW4DvH/bmtYcFqO7W6syOpiqru6yF6GeEPwGOFHaJDI= Subject key identifier: 84:EF:63:ED:39:2A:4B:DD:F6:9E:AE:FD:60:FA:AC:B7:35:39:C1:52 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019BFA9B8877103F8382C2B89922655F9ABA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft Manifest number: 145E Signing time: Mon 26 Jan 2026 14:00:55 +0000 Manifest this update: Mon 26 Jan 2026 14:00:55 +0000 Manifest next update: Tue 27 Jan 2026 14:00:55 +0000 Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: LllbLNOCH/pabozc1OjTC9O3UJgnVd3xoUqg0kioUU4=) 2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=) 3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=) 4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=) 5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=) 6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=) 7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:88:77:10:3f:83:82:c2:b8:99:22:65:5f:9a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 26 14:00:55 2026 GMT Not After : Jan 27 14:00:55 2026 GMT Subject: CN=84ef63ed392a4bddf69eaefd60faacb73539c152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b5:61:01:b9:65:7e:e6:d4:7c:68:ab:10:90: a5:07:12:9a:f8:76:dd:4a:e2:f1:49:2b:7b:2e:55: d2:f8:56:79:5b:19:12:2d:0c:74:90:d9:4a:33:46: 70:76:b2:75:a7:66:17:fb:0d:ae:05:de:05:aa:f6: 3c:f3:a4:64:22:53:8e:d5:14:9f:0d:a4:a9:ab:cf: ec:fc:50:95:22:97:54:ae:49:1f:9e:43:4a:8d:5a: e3:74:f5:f8:06:1d:61:30:37:56:4d:4c:7c:5a:0a: 10:f5:4a:b8:b1:cf:15:43:f9:6d:fb:bb:99:e9:13: 5a:13:fd:e3:3d:ec:99:70:94:3c:a5:77:45:5b:b2: d7:1c:b8:d0:d2:98:55:c4:e3:9a:8e:28:c2:8b:8a: 26:a7:fd:28:90:98:08:19:cc:ab:c2:ce:51:ac:e4: 95:54:a6:d8:5a:ec:51:a0:63:d0:54:7f:88:29:9f: f1:3d:c4:23:ec:8a:91:44:35:55:fe:a0:9f:13:8b: f4:a5:ae:88:6f:52:f4:c0:e4:11:54:ca:d9:63:91: 2a:b2:fa:18:12:5a:3c:30:dc:93:86:c0:a9:4f:bc: 62:70:c5:a6:46:89:bd:ff:e2:f0:2a:fc:2d:94:39: 20:f2:74:ea:2f:b1:2c:c6:ab:e9:ef:29:cf:56:83: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EF:63:ED:39:2A:4B:DD:F6:9E:AE:FD:60:FA:AC:B7:35:39:C1:52 X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a4:fb:8f:4c:07:4b:a0:37:87:42:6a:f9:f4:0c:b0:bd:b5: ae:da:48:39:af:49:fa:19:03:ce:80:06:2e:6e:15:e6:9a:97: 71:fe:4a:f0:37:6a:6d:65:ec:ef:8e:4f:68:41:8c:13:44:f0: 7f:18:36:0d:67:c1:92:ca:1b:09:a1:c7:36:44:08:f8:ae:c4: 5a:a1:e5:3d:a5:11:95:13:7b:36:02:f5:00:37:53:e2:dc:6a: 02:be:b2:ac:a2:f9:aa:f7:84:77:1e:48:e2:f3:81:44:10:d4: 4b:6f:48:4b:29:4a:0d:5c:0b:2e:1a:77:64:52:5c:a6:74:c7: b2:96:e4:ff:64:66:0c:f2:68:1e:ff:42:f1:94:1f:ad:6e:2d: 90:e3:85:02:1c:59:f0:4d:8d:d1:9e:a9:09:2c:fd:c4:d8:37: 6e:1a:e5:fa:9a:82:9c:d4:18:1a:7f:1a:c7:f9:69:d9:67:74: c3:ca:79:89:9c:46:5a:4f:e5:46:cd:84:45:92:19:5d:d9:41: 34:89:8a:76:28:55:bb:e8:45:71:df:fa:6f:64:65:5f:79:50: 03:cf:1f:bf:72:c6:00:e5:56:43:fd:8e:46:5a:00:bb:e8:13: 4c:a9:a7:2a:a8:b0:5e:5c:23:f2:0d:1c:45:d6:6f:d1:3c:75: 23:9d:35:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m4h3ED+DgsK4mSJlX5q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTI2MTQwMDU1WhcNMjYwMTI3MTQwMDU1WjAzMTEwLwYDVQQD Eyg4NGVmNjNlZDM5MmE0YmRkZjY5ZWFlZmQ2MGZhYWNiNzM1MzljMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVhAbllfubUfGirEJClBxKa+Hbd SuLxSSt7LlXS+FZ5WxkSLQx0kNlKM0ZwdrJ1p2YX+w2uBd4FqvY886RkIlOO1RSf DaSpq8/s/FCVIpdUrkkfnkNKjVrjdPX4Bh1hMDdWTUx8WgoQ9Uq4sc8VQ/lt+7uZ 6RNaE/3jPeyZcJQ8pXdFW7LXHLjQ0phVxOOajijCi4omp/0okJgIGcyrws5RrOSV VKbYWuxRoGPQVH+IKZ/xPcQj7IqRRDVV/qCfE4v0pa6Ib1L0wOQRVMrZY5EqsvoY Elo8MNyThsCpT7xicMWmRom9/+LwKvwtlDkg8nTqL7Esxqvp7ynPVoMDqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITvY+05Kkvd9p6u/WD6rLc1OcFSMB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqT7j0wH S6A3h0Jq+fQMsL21rtpIOa9J+hkDzoAGLm4V5pqXcf5K8DdqbWXs745PaEGME0Tw fxg2DWfBksobCaHHNkQI+K7EWqHlPaURlRN7NgL1ADdT4txqAr6yrKL5qveEdx5I 4vOBRBDUS29ISylKDVwLLhp3ZFJcpnTHspbk/2RmDPJoHv9C8ZQfrW4tkOOFAhxZ 8E2N0Z6pCSz9xNg3bhrl+pqCnNQYGn8ax/lp2Wd0w8p5iZxGWk/lRs2ERZIZXdlB NImKdihVu+hFcd/6b2RlX3lQA88fv3LGAOVWQ/2ORloAu+gTTKmnKqiwXlwj8g0c RdZv0Tx1I501Tg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:50 2026 by rpki-client