This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json) Hash identifier: bv+LA0CdKw3VqlwavYyD/6VOjeLq+Md1MOZznU7ydFo= Subject key identifier: C8:CB:79:A6:57:CC:2E:A6:C3:75:3A:1C:46:4C:75:FD:A8:31:CE:82 Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Certificate serial: 019BF8AD35DC8BC89D8C239D339E93CA0724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft Manifest number: 0301 Signing time: Mon 26 Jan 2026 05:00:59 +0000 Manifest this update: Mon 26 Jan 2026 05:00:59 +0000 Manifest next update: Tue 27 Jan 2026 05:00:59 +0000 Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: BLu7H743VHHN15AH9jAoac8WA0XB5f4OS4eGLgQsP1A=) 2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:35:dc:8b:c8:9d:8c:23:9d:33:9e:93:ca:07:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Validity Not Before: Jan 26 05:00:59 2026 GMT Not After : Jan 27 05:00:59 2026 GMT Subject: CN=c8cb79a657cc2ea6c3753a1c464c75fda831ce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3d:15:2f:01:72:84:4b:e3:f6:f5:12:40:0a: 84:d4:f5:50:18:47:00:8b:f3:ea:b3:ca:d3:4d:4b: 9a:62:38:9c:d3:63:04:10:02:42:43:4b:30:51:77: c5:a6:87:4e:9b:7e:fa:f3:ef:80:3d:ec:32:3a:42: dc:b1:0a:96:f4:43:15:23:8a:f2:9e:70:01:e0:26: 78:ba:21:07:cf:9d:1f:85:d1:bb:a1:39:d6:f4:5f: 3a:38:dd:cb:27:a7:d0:77:a2:f0:20:dc:88:4b:0c: 09:27:6a:6b:ff:cd:2f:6a:8c:50:1d:03:ca:6b:75: d5:9e:a3:5c:fb:4c:df:9c:f3:42:92:88:2e:1c:f1: 72:00:99:5f:cf:2e:69:12:be:1c:80:66:fc:6f:ca: 2d:87:63:36:78:6a:7e:ec:a9:7c:fd:9d:fe:57:d2: d4:82:32:75:c8:af:29:16:c1:03:5a:4f:ca:a7:69: fc:fe:56:ee:22:a1:19:a9:39:e9:df:b8:6d:59:15: d6:aa:2a:77:ca:5a:85:c0:55:0e:39:7d:fe:ed:6f: 52:e7:f8:b6:11:6f:cb:9c:23:a5:66:71:b3:4e:cd: 44:71:62:d1:90:63:fd:6a:3a:18:24:ab:33:69:38: a9:45:35:44:6d:d7:1e:1c:e5:44:ba:03:89:5d:a3: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CB:79:A6:57:CC:2E:A6:C3:75:3A:1C:46:4C:75:FD:A8:31:CE:82 X509v3 Authority Key Identifier: keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c9:9d:f6:51:01:6e:e0:df:8c:00:45:55:d4:45:90:ee:e3: 01:d6:fa:1f:7b:c4:15:11:f1:0d:52:a3:aa:1b:11:6c:fc:40: f9:8b:33:5b:36:cd:74:44:1e:6c:49:55:a6:b9:e7:90:f2:18: 7d:ee:2a:d6:c6:9a:cd:8e:ec:49:12:ca:5b:14:c6:db:e3:e8: 08:72:98:bd:83:cb:3d:5d:db:27:dc:5c:09:00:db:e0:82:f3: 97:83:82:85:71:b0:30:77:1c:1c:d5:e2:0c:c8:76:88:ba:b7: a4:6a:e5:e8:ff:d7:b9:c4:2b:ba:35:f1:2e:d1:cc:b3:14:b2: 70:1f:ae:0c:80:ed:4a:6f:a1:6d:96:e8:6b:e6:d5:91:f4:b3: 49:b9:fd:d4:ca:4b:2b:7f:44:de:1d:38:51:05:18:46:97:5a: 02:3f:66:f4:77:80:b1:3a:92:e9:63:d9:53:41:7a:66:e2:79: 1f:f0:4b:dd:e0:be:fe:bd:4b:97:d8:3d:2c:3c:23:fc:8c:6b: c1:cd:8a:3d:49:27:c6:65:51:e2:37:cb:99:b1:ae:2b:85:3d: a0:3d:1b:16:61:e0:3a:53:b4:de:c5:5f:df:90:46:16:45:e2: b4:f8:92:e7:2f:68:e9:bd:09:64:cd:9d:eb:6d:ce:7f:f7:35: 97:2d:52:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTXci8idjCOdM56TygckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj N2RjZjQwHhcNMjYwMTI2MDUwMDU5WhcNMjYwMTI3MDUwMDU5WjAzMTEwLwYDVQQD EyhjOGNiNzlhNjU3Y2MyZWE2YzM3NTNhMWM0NjRjNzVmZGE4MzFjZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD0VLwFyhEvj9vUSQAqE1PVQGEcA i/Pqs8rTTUuaYjic02MEEAJCQ0swUXfFpodOm3768++APewyOkLcsQqW9EMVI4ry nnAB4CZ4uiEHz50fhdG7oTnW9F86ON3LJ6fQd6LwINyISwwJJ2pr/80vaoxQHQPK a3XVnqNc+0zfnPNCkoguHPFyAJlfzy5pEr4cgGb8b8oth2M2eGp+7Kl8/Z3+V9LU gjJ1yK8pFsEDWk/Kp2n8/lbuIqEZqTnp37htWRXWqip3ylqFwFUOOX3+7W9S5/i2 EW/LnCOlZnGzTs1EcWLRkGP9ajoYJKszaTipRTVEbdceHOVEugOJXaOeXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjLeaZXzC6mw3U6HEZMdf2oMc6CMB8GA1UdIwQY MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0 LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8md9lEB buDfjABFVdRFkO7jAdb6H3vEFRHxDVKjqhsRbPxA+YszWzbNdEQebElVprnnkPIY fe4q1saazY7sSRLKWxTG2+PoCHKYvYPLPV3bJ9xcCQDb4ILzl4OChXGwMHccHNXi DMh2iLq3pGrl6P/XucQrujXxLtHMsxSycB+uDIDtSm+hbZboa+bVkfSzSbn91MpL K39E3h04UQUYRpdaAj9m9HeAsTqS6WPZU0F6ZuJ5H/BL3eC+/r1Ll9g9LDwj/Ixr wc2KPUknxmVR4jfLmbGuK4U9oD0bFmHgOlO03sVf35BGFkXitPiS5y9o6b0JZM2d 623Of/c1ly1Ssw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:03 2026 by rpki-client