This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json) Hash identifier: O9oFqz91GF+vhJRT7Qvjf3oYL7pJadFku1ant9ExvtM= Subject key identifier: DE:C3:B8:C0:93:1D:0E:8E:61:EB:28:C4:79:D4:8E:81:F9:2F:0C:03 Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228 Certificate serial: 019BFC532131F47AF3315BF653E610A1FD0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft Manifest number: 0982 Signing time: Mon 26 Jan 2026 22:01:04 +0000 Manifest this update: Mon 26 Jan 2026 22:01:04 +0000 Manifest next update: Tue 27 Jan 2026 22:01:04 +0000 Files and hashes: 1: 5D5H4157fnq095Zx28ueaKeKXYM.roa (hash: HGS6JRy2csmBENBtc74ury4ycHEpdmnQ0F2/7fuFltg=) 2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: C/TBcqV5wcY9npw37s2agOMepWQprRtS20EXTut+bLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:21:31:f4:7a:f3:31:5b:f6:53:e6:10:a1:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228 Validity Not Before: Jan 26 22:01:04 2026 GMT Not After : Jan 27 22:01:04 2026 GMT Subject: CN=dec3b8c0931d0e8e61eb28c479d48e81f92f0c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:ea:1e:ac:fe:f6:ac:63:0f:3f:5b:ce:85: 50:f3:e0:53:03:ae:92:55:21:52:72:2e:a4:60:77: 93:d6:08:bd:4a:54:86:57:1b:c2:6b:8d:61:50:91: e8:f2:fe:96:af:3a:51:fb:85:d2:7a:9c:4c:9f:c2: e0:e7:da:4f:23:89:14:8b:83:e3:60:31:af:a6:cd: 40:8a:39:93:47:27:37:3a:49:d0:5b:37:31:3b:ab: f2:81:59:1f:aa:b6:6a:89:9b:57:b3:7d:de:35:2d: 01:59:7e:a5:92:15:db:17:58:8f:de:4d:30:0c:94: 3a:35:d6:1c:2a:89:6c:7f:75:ae:b7:57:c2:50:29: 55:01:0a:cf:f7:07:77:aa:c3:84:aa:b6:89:9a:2c: f3:6f:6b:22:18:47:96:7e:43:8f:16:89:99:37:5e: 2b:e0:22:53:76:e5:c2:32:4c:45:66:64:c3:a8:a2: 46:94:67:2e:41:51:c4:1a:59:79:f8:e8:8a:31:99: f3:dd:b8:1b:37:16:b7:ca:9f:e6:be:2e:ed:8b:df: b5:89:25:dd:1f:2b:0b:33:94:7a:82:c5:fa:e4:2f: fd:77:8c:c1:72:5e:e7:95:d0:3e:c7:1f:00:bf:34: 82:ea:68:44:4e:5d:37:92:b1:4d:0b:5b:6c:e1:b9: 8a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C3:B8:C0:93:1D:0E:8E:61:EB:28:C4:79:D4:8E:81:F9:2F:0C:03 X509v3 Authority Key Identifier: keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6d:e2:fd:a8:2c:0e:c9:9e:35:3f:60:11:c4:34:e6:3c:74: c6:cf:b8:94:5a:7a:63:ea:93:e6:49:d7:57:41:8a:5f:90:0e: c8:a3:69:2d:7c:54:96:53:23:53:2f:d8:f5:18:b8:4e:2a:de: 2c:91:66:1c:84:da:a4:97:e7:9b:e5:1e:fc:cd:05:f1:2b:d7: 92:21:ed:4f:65:ca:35:b7:31:fe:45:8d:d3:8b:83:a6:d6:33: 77:79:9f:6a:2f:5a:28:d7:66:49:bb:e2:d7:10:ab:81:a2:d9: 31:65:5e:5e:f8:29:0c:e1:f8:4f:6d:bb:c3:4d:ef:00:dc:af: a1:ad:3a:83:a6:f2:a3:df:46:c1:6a:9d:5e:f0:30:b1:50:38: 47:4d:39:65:f5:79:19:00:d2:51:1a:10:0e:e0:c7:30:b5:43: e2:79:a0:0f:ea:06:ec:1f:cf:bf:dc:8e:ec:56:48:9f:3b:9d: 00:36:a5:e5:82:f0:4d:9c:ae:12:eb:89:9d:2c:ed:61:fa:d7: 4d:cb:fc:d8:e1:05:d1:98:d7:55:63:c9:c6:02:af:2a:2a:49: d5:a4:cf:27:b7:8c:1d:48:9f:b2:93:e4:33:49:56:ab:58:f4: 2d:b8:96:71:fd:78:cb:c2:76:8c:df:e1:e2:9f:66:2f:1c:4d: 72:a0:b8:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UyEx9HrzMVv2U+YQof0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh YWUyMjgwHhcNMjYwMTI2MjIwMTA0WhcNMjYwMTI3MjIwMTA0WjAzMTEwLwYDVQQD EyhkZWMzYjhjMDkzMWQwZThlNjFlYjI4YzQ3OWQ0OGU4MWY5MmYwYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcTqHqz+9qxjDz9bzoVQ8+BTA66S VSFSci6kYHeT1gi9SlSGVxvCa41hUJHo8v6WrzpR+4XSepxMn8Lg59pPI4kUi4Pj YDGvps1AijmTRyc3OknQWzcxO6vygVkfqrZqiZtXs33eNS0BWX6lkhXbF1iP3k0w DJQ6NdYcKolsf3Wut1fCUClVAQrP9wd3qsOEqraJmizzb2siGEeWfkOPFomZN14r 4CJTduXCMkxFZmTDqKJGlGcuQVHEGll5+OiKMZnz3bgbNxa3yp/mvi7ti9+1iSXd HysLM5R6gsX65C/9d4zBcl7nldA+xx8AvzSC6mhETl03krFNC1ts4bmKAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7DuMCTHQ6OYesoxHnUjoH5LwwDMB8GA1UdIwQY MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC23i/ags DsmeNT9gEcQ05jx0xs+4lFp6Y+qT5knXV0GKX5AOyKNpLXxUllMjUy/Y9Ri4Tire LJFmHITapJfnm+Ue/M0F8SvXkiHtT2XKNbcx/kWN04uDptYzd3mfai9aKNdmSbvi 1xCrgaLZMWVeXvgpDOH4T227w03vANyvoa06g6byo99GwWqdXvAwsVA4R005ZfV5 GQDSURoQDuDHMLVD4nmgD+oG7B/Pv9yO7FZInzudADal5YLwTZyuEuuJnSztYfrX Tcv82OEF0ZjXVWPJxgKvKipJ1aTPJ7eMHUifspPkM0lWq1j0LbiWcf14y8J2jN/h 4p9mLxxNcqC4eA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:42 2026 by rpki-client