This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json) Hash identifier: LoCuMJLpCsqWda2b4QtUEKPN9YaABbEZfknnRDelC6I= Subject key identifier: E3:4B:08:80:C1:5A:23:73:67:CD:F7:39:66:6B:30:56:9F:F1:E9:68 Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Certificate serial: 019BFAD29133CBE9BDD28B2A450D9FD37BD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft Manifest number: 171C Signing time: Mon 26 Jan 2026 15:01:02 +0000 Manifest this update: Mon 26 Jan 2026 15:01:02 +0000 Manifest next update: Tue 27 Jan 2026 15:01:02 +0000 Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=) 2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: p4YFsejN+nyi27oigG08c1It2k2q70DvoRxvI8DyOxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:91:33:cb:e9:bd:d2:8b:2a:45:0d:9f:d3:7b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e Validity Not Before: Jan 26 15:01:02 2026 GMT Not After : Jan 27 15:01:02 2026 GMT Subject: CN=e34b0880c15a237367cdf739666b30569ff1e968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:d8:f8:db:8d:a4:d8:94:8c:dc:56:b7:71: 30:91:b1:bf:23:c5:3a:34:00:7d:56:20:37:84:38: eb:ef:d6:72:33:07:69:a6:1a:74:36:88:90:c9:17: 74:d1:6c:30:c4:de:af:2f:38:75:10:39:f1:c6:82: 7c:49:9b:b7:51:22:25:8e:09:f4:1e:c4:84:e5:36: 29:83:07:f2:81:75:74:11:82:70:db:40:63:96:e3: 72:9f:33:82:b7:31:e8:4a:1b:92:84:89:7c:ea:53: b9:06:fb:53:7f:99:e8:84:d8:08:d4:a4:3b:3c:7e: d6:65:65:03:3d:ce:55:da:d2:4f:37:bc:02:45:0d: f0:51:18:ed:9f:f8:b2:a4:3d:30:62:5c:72:15:c0: bf:94:2c:c8:8c:8d:d1:cb:27:f7:61:fb:bd:fc:79: b6:7a:90:01:7e:5f:51:1b:4b:85:f1:21:c3:94:5d: 52:e4:f8:c5:20:aa:82:15:de:7b:5f:98:a3:40:da: 1c:5e:76:3b:26:35:33:ba:30:61:f7:e5:4d:d9:4b: 4f:81:ca:95:ab:e4:f5:f0:53:f2:d1:b9:ae:fd:51: 29:e6:49:c1:26:46:a7:70:42:d9:70:87:15:21:4a: 9b:cd:13:4d:20:c0:65:84:c8:3c:80:f5:70:df:cd: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:08:80:C1:5A:23:73:67:CD:F7:39:66:6B:30:56:9F:F1:E9:68 X509v3 Authority Key Identifier: keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:12:34:85:7a:d3:12:6a:78:ca:48:c2:61:5a:54:c5:2e:5a: 7c:ef:2c:d9:22:f2:0e:03:73:19:d7:da:52:6a:ba:ca:ba:e5: d9:80:78:ca:0b:ea:ca:c8:b1:41:d5:36:f3:a8:f8:43:e2:b6: 5f:74:fe:3d:86:a9:ae:4c:29:53:e4:4d:7e:7f:b3:af:ee:27: af:4e:b9:74:4b:fe:a0:4e:ca:65:2f:9e:92:51:71:66:28:49: 87:9d:85:f8:8f:32:91:4d:2e:98:2c:8c:db:18:cc:3f:82:7a: e4:4e:90:ff:42:7c:8f:cf:2c:91:ab:fb:f1:94:a1:ac:a4:5c: fe:7d:1f:f8:cf:dc:55:90:16:bc:6b:2f:a3:72:da:4e:e4:36: 86:d7:e5:aa:6f:c3:fd:13:1e:89:69:e8:da:5c:38:b1:08:a7: a6:36:65:0f:c4:bf:e0:71:58:59:ec:40:45:a0:cc:12:a9:49: cb:d1:01:16:94:c8:a0:6d:ab:fe:92:3d:63:94:9e:51:0e:32: 74:9d:ec:36:6e:9f:da:a7:59:ab:6c:12:0a:83:57:43:dc:f9: 78:16:50:03:c6:cb:cf:bb:77:d5:f2:08:3b:9a:0d:3e:c0:02: 6d:e1:99:cf:91:cc:d1:ab:7e:1f:31:0d:eb:e5:0d:fb:a6:1e: c3:7c:4b:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60pEzy+m90osqRQ2f03vVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2 YjgyNGUwHhcNMjYwMTI2MTUwMTAyWhcNMjYwMTI3MTUwMTAyWjAzMTEwLwYDVQQD EyhlMzRiMDg4MGMxNWEyMzczNjdjZGY3Mzk2NjZiMzA1NjlmZjFlOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrrY+NuNpNiUjNxWt3EwkbG/I8U6 NAB9ViA3hDjr79ZyMwdpphp0NoiQyRd00WwwxN6vLzh1EDnxxoJ8SZu3USIljgn0 HsSE5TYpgwfygXV0EYJw20BjluNynzOCtzHoShuShIl86lO5BvtTf5nohNgI1KQ7 PH7WZWUDPc5V2tJPN7wCRQ3wURjtn/iypD0wYlxyFcC/lCzIjI3Ryyf3Yfu9/Hm2 epABfl9RG0uF8SHDlF1S5PjFIKqCFd57X5ijQNocXnY7JjUzujBh9+VN2UtPgcqV q+T18FPy0bmu/VEp5knBJkancELZcIcVIUqbzRNNIMBlhMg8gPVw380tSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONLCIDBWiNzZ833OWZrMFaf8eloMB8GA1UdIwQY MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxI0hXrT Emp4ykjCYVpUxS5afO8s2SLyDgNzGdfaUmq6yrrl2YB4ygvqysixQdU286j4Q+K2 X3T+PYaprkwpU+RNfn+zr+4nr065dEv+oE7KZS+eklFxZihJh52F+I8ykU0umCyM 2xjMP4J65E6Q/0J8j88skav78ZShrKRc/n0f+M/cVZAWvGsvo3LaTuQ2htflqm/D /RMeiWno2lw4sQinpjZlD8S/4HFYWexARaDMEqlJy9EBFpTIoG2r/pI9Y5SeUQ4y dJ3sNm6f2qdZq2wSCoNXQ9z5eBZQA8bLz7t31fIIO5oNPsACbeGZz5HM0at+HzEN 6+UN+6Yew3xLSA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:02:23 2026 by rpki-client