This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json) Hash identifier: 36FfnpHZ0ffUAb55yx2bKKwINuERAWxZDdBmRO+Kzl8= Subject key identifier: CC:3D:11:16:F4:DC:5A:4F:A4:43:6A:EC:6A:BF:C9:F1:88:2C:D2:7F Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d Certificate serial: 019BFA2E493C937488A149000D92047E93D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft Manifest number: 0E81 Signing time: Mon 26 Jan 2026 12:01:35 +0000 Manifest this update: Mon 26 Jan 2026 12:01:35 +0000 Manifest next update: Tue 27 Jan 2026 12:01:35 +0000 Files and hashes: 1: BO14bA7PeRb0D7KQP3CWollCutc.roa (hash: KWBfGK/f5gpdRKkzCSVIg8eJkkTlP4Rw/G54X2xmAk8=) 2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: 7csUkvG5aO3VTa/bRHs55l1iqEm5nGieY3PWfCvJG+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:49:3c:93:74:88:a1:49:00:0d:92:04:7e:93:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d Validity Not Before: Jan 26 12:01:35 2026 GMT Not After : Jan 27 12:01:35 2026 GMT Subject: CN=cc3d1116f4dc5a4fa4436aec6abfc9f1882cd27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:4b:d3:15:37:b4:7b:b5:b0:c4:f3:f0:18: ac:58:3a:e3:fd:31:e7:42:ef:02:13:d3:d0:ab:fd: 76:15:19:8f:13:c2:1f:b3:41:cb:56:d1:ba:67:45: 1e:55:41:e1:76:22:4f:65:66:5f:e0:73:41:de:f4: 9a:87:6a:f4:60:47:2f:ed:82:8a:c8:ce:3e:1b:b2: 8e:ac:59:b6:ab:26:76:b8:80:e0:b0:da:df:ad:8c: 44:2b:32:c9:3f:ff:cf:fe:27:f6:06:4b:bb:2c:84: 94:03:46:02:2e:fc:56:11:ac:63:0b:6b:2f:fe:8c: 50:ca:2b:b8:10:ba:12:28:28:35:39:de:e8:47:c9: 58:c6:a0:66:33:e0:02:32:23:92:86:05:dd:9d:09: 2a:74:f0:5a:e3:e9:fb:74:69:86:14:65:83:f8:c3: bb:a1:ce:ec:e8:10:a0:c9:12:91:71:e5:b1:82:ce: 19:67:0c:fb:ac:4a:ba:5f:16:12:cf:ac:06:7e:f1: bf:98:0b:e3:3b:0c:d8:bb:51:8c:d6:a0:86:2c:48: 9a:97:ab:87:dd:87:1f:08:c3:49:ec:ac:ae:6f:e4: 5d:6d:ca:72:47:9d:f9:1c:36:9d:f9:35:38:b9:05: 7a:b8:f5:3f:db:67:17:4f:5f:50:35:22:c7:1a:1c: f2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:11:16:F4:DC:5A:4F:A4:43:6A:EC:6A:BF:C9:F1:88:2C:D2:7F X509v3 Authority Key Identifier: keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f0:b0:a8:82:84:db:35:ff:2d:a6:30:d0:4d:d4:f3:85:7b: bc:d2:c2:82:af:c1:07:43:9e:de:e7:ff:d8:da:a2:20:94:e5: 5c:46:92:2d:d6:5e:d0:3a:c1:69:43:68:f9:fd:f4:6f:6c:a4: 0e:02:e4:75:57:10:69:84:0f:3c:89:a2:05:77:6a:39:c3:f9: 06:00:89:aa:07:d2:39:d0:a5:3d:4c:3d:0b:2c:36:d4:e4:ed: 9d:1d:36:9e:17:74:b2:f7:0d:40:aa:88:14:87:38:47:1f:ed: 61:16:a8:29:e4:c4:cd:76:1c:14:3e:8c:72:5f:2c:0a:d8:0b: c4:fc:f8:60:27:b8:7e:b3:b8:d4:32:02:23:80:48:cf:77:96: 60:73:3f:d6:27:27:38:57:75:ee:75:80:96:d3:a5:57:a9:5d: 1d:70:63:52:66:fb:03:05:6c:81:bc:02:69:9f:b1:14:3d:70: 6f:9e:7a:07:32:9c:52:22:e3:91:f1:cf:1f:e8:19:9d:46:0b: e9:58:a1:2e:fe:95:9f:e2:de:8e:48:3f:be:81:10:7e:8f:68: e2:fe:ef:91:5c:ac:16:6f:d4:ef:28:aa:d9:7b:d3:c3:e6:67: 56:7e:3c:0a:27:4e:52:ba:58:9e:9d:26:16:b4:39:d2:e8:e7: 44:f0:26:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lkk8k3SIoUkADZIEfpPRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3 NzkxOWQwHhcNMjYwMTI2MTIwMTM1WhcNMjYwMTI3MTIwMTM1WjAzMTEwLwYDVQQD EyhjYzNkMTExNmY0ZGM1YTRmYTQ0MzZhZWM2YWJmYzlmMTg4MmNkMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK9L0xU3tHu1sMTz8BisWDrj/THn Qu8CE9PQq/12FRmPE8Ifs0HLVtG6Z0UeVUHhdiJPZWZf4HNB3vSah2r0YEcv7YKK yM4+G7KOrFm2qyZ2uIDgsNrfrYxEKzLJP//P/if2Bku7LISUA0YCLvxWEaxjC2sv /oxQyiu4ELoSKCg1Od7oR8lYxqBmM+ACMiOShgXdnQkqdPBa4+n7dGmGFGWD+MO7 oc7s6BCgyRKRceWxgs4ZZwz7rEq6XxYSz6wGfvG/mAvjOwzYu1GM1qCGLEial6uH 3YcfCMNJ7Kyub+RdbcpyR535HDad+TU4uQV6uPU/22cXT19QNSLHGhzy9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMw9ERb03FpPpENq7Gq/yfGILNJ/MB8GA1UdIwQY MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt NTZjOTRmMzI2ZGMyLzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPCwqIKE 2zX/LaYw0E3U84V7vNLCgq/BB0Oe3uf/2NqiIJTlXEaSLdZe0DrBaUNo+f30b2yk DgLkdVcQaYQPPImiBXdqOcP5BgCJqgfSOdClPUw9Cyw21OTtnR02nhd0svcNQKqI FIc4Rx/tYRaoKeTEzXYcFD6Mcl8sCtgLxPz4YCe4frO41DICI4BIz3eWYHM/1icn OFd17nWAltOlV6ldHXBjUmb7AwVsgbwCaZ+xFD1wb556BzKcUiLjkfHPH+gZnUYL 6VihLv6Vn+Lejkg/voEQfo9o4v7vkVysFm/U7yiq2XvTw+ZnVn48CidOUrpYnp0m FrQ50ujnRPAmvg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:24:34 2026 by rpki-client