This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json) Hash identifier: xld8GuKQ+HqSPh1X/8HKcZhG4G6+GskFJtNBWewFAfE= Subject key identifier: 04:A0:A5:97:12:F9:08:E3:E1:BE:C8:38:5D:ED:81:56:1E:EC:B5:20 Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019BFA64DB6B65B00BCE5C331B9867675345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft Manifest number: 0981 Signing time: Mon 26 Jan 2026 13:01:12 +0000 Manifest this update: Mon 26 Jan 2026 13:01:12 +0000 Manifest next update: Tue 27 Jan 2026 13:01:12 +0000 Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=) 2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: wvvDVMkwzZ72MEZzv0HS45mcsVxa6dNWxOF4p864S+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:db:6b:65:b0:0b:ce:5c:33:1b:98:67:67:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Jan 26 13:01:12 2026 GMT Not After : Jan 27 13:01:12 2026 GMT Subject: CN=04a0a59712f908e3e1bec8385ded81561eecb520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:73:aa:2c:5e:4e:69:81:ae:2d:24:a0:5d: 5b:a0:36:9d:48:c8:5f:16:0b:9e:95:1b:6e:22:e7: 77:72:fb:0a:48:8b:bc:e7:7f:3e:f2:89:1b:af:6f: 8e:16:a9:36:79:3a:0a:95:52:c1:1c:18:9c:fc:00: 83:85:63:77:d4:ed:20:38:77:d7:a6:73:2a:d8:6b: 26:81:b0:2c:bc:f2:bc:59:df:9a:9e:66:e2:45:1b: 5c:2b:55:53:2d:a6:61:6f:26:94:6c:e4:5f:28:a8: 31:1b:63:db:c2:68:36:cb:95:e5:84:bb:71:db:94: 52:63:60:4b:99:a4:a4:91:2a:77:05:43:25:b7:92: 2d:a5:18:24:d0:07:15:96:d6:c4:98:c6:1b:28:c1: 92:59:fe:61:47:8a:e7:f7:5a:0b:40:ec:50:bd:95: cf:46:cc:24:89:fa:52:c9:fa:81:50:ac:38:3b:8e: 76:4c:7d:d2:e8:44:b4:aa:6b:0e:f3:81:83:a1:13: 08:ef:da:ba:94:5b:9e:d1:30:04:fa:ae:7c:e7:7e: 72:6f:ec:e8:38:9f:e8:a9:87:40:29:1d:91:c8:bc: b1:f6:9b:e0:6f:d1:8f:af:7c:c5:4c:cf:e5:20:3e: a2:89:32:43:c5:4a:b9:5c:dc:07:57:40:26:7e:ad: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A0:A5:97:12:F9:08:E3:E1:BE:C8:38:5D:ED:81:56:1E:EC:B5:20 X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:19:f8:ad:73:71:42:2c:5c:2a:84:1d:11:47:75:6f:e7:5b: 0b:18:6d:56:34:81:e0:33:bf:12:b5:ea:58:65:bb:26:b1:93: 2d:88:0f:b5:96:4a:52:c6:10:47:c8:66:b1:f4:ff:2b:4f:a7: 61:a1:0e:07:f0:b9:fe:ee:f7:b5:6f:36:19:5b:f0:d9:7e:f8: 33:9b:40:f7:db:cd:5d:1c:2f:9e:57:7e:7d:0e:ea:68:dd:12: c1:fa:7c:11:96:5a:5d:d0:70:84:9b:3d:78:47:57:02:01:bf: c3:d1:12:fd:b7:5b:74:6b:7f:d5:6f:b4:90:f7:99:87:5a:ca: 26:f0:9b:f9:4e:3f:c3:bf:bf:f6:1f:8b:0b:ee:d6:4c:12:c2: d7:aa:3b:60:2a:2c:98:37:72:7f:77:15:e9:7b:20:c9:b7:61: 45:52:03:92:27:5b:4f:80:ed:fe:5f:e4:69:7d:f6:79:f6:b4: 61:a9:4e:4c:7a:ff:37:f6:63:ae:4e:9e:ca:63:8b:20:b6:6b: a6:2d:c2:ab:1e:16:ed:94:4b:58:d6:5a:dc:37:3d:e8:bf:ab: 8b:09:9e:45:4b:bf:53:73:ed:91:30:1e:73:7f:ee:89:9b:db: 0d:96:c6:03:a9:e0:3e:10:02:f7:98:76:94:26:d6:ca:1f:a0: d8:fd:3c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZNtrZbALzlwzG5hnZ1NFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjYwMTI2MTMwMTEyWhcNMjYwMTI3MTMwMTEyWjAzMTEwLwYDVQQD EygwNGEwYTU5NzEyZjkwOGUzZTFiZWM4Mzg1ZGVkODE1NjFlZWNiNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sVzqixeTmmBri0koF1boDadSMhf FguelRtuIud3cvsKSIu8538+8okbr2+OFqk2eToKlVLBHBic/ACDhWN31O0gOHfX pnMq2GsmgbAsvPK8Wd+anmbiRRtcK1VTLaZhbyaUbORfKKgxG2Pbwmg2y5XlhLtx 25RSY2BLmaSkkSp3BUMlt5ItpRgk0AcVltbEmMYbKMGSWf5hR4rn91oLQOxQvZXP RswkifpSyfqBUKw4O452TH3S6ES0qmsO84GDoRMI79q6lFue0TAE+q58535yb+zo OJ/oqYdAKR2RyLyx9pvgb9GPr3zFTM/lID6iiTJDxUq5XNwHV0Amfq2dwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASgpZcS+Qjj4b7IOF3tgVYe7LUgMB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBn4rXNx QixcKoQdEUd1b+dbCxhtVjSB4DO/ErXqWGW7JrGTLYgPtZZKUsYQR8hmsfT/K0+n YaEOB/C5/u73tW82GVvw2X74M5tA99vNXRwvnld+fQ7qaN0Swfp8EZZaXdBwhJs9 eEdXAgG/w9ES/bdbdGt/1W+0kPeZh1rKJvCb+U4/w7+/9h+LC+7WTBLC16o7YCos mDdyf3cV6XsgybdhRVIDkidbT4Dt/l/kaX32efa0YalOTHr/N/Zjrk6eymOLILZr pi3Cqx4W7ZRLWNZa3Dc96L+riwmeRUu/U3PtkTAec3/uiZvbDZbGA6ngPhAC95h2 lCbWyh+g2P08Ow== -----END CERTIFICATE-----Generated at Mon Jan 26 21:53:41 2026 by rpki-client