This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json) Hash identifier: Cq5ZGpQUaA/85YV6kTSSJlhK3dAiZQCQOYY2AtQHhvc= Subject key identifier: EB:3B:E8:EE:59:3C:84:A6:39:5F:8C:BE:EB:62:5B:9E:8A:1E:9E:F4 Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Certificate serial: 019BFC8A5C262BDC0104D59BA55083D71BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft Manifest number: 0140 Signing time: Mon 26 Jan 2026 23:01:24 +0000 Manifest this update: Mon 26 Jan 2026 23:01:24 +0000 Manifest next update: Tue 27 Jan 2026 23:01:24 +0000 Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=) 2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: jLXlKQRQXHyUmX7Y5h5PFML7P1Q25rKZDC5I9K5VVHk=) 3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=) 4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:5c:26:2b:dc:01:04:d5:9b:a5:50:83:d7:1b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91 Validity Not Before: Jan 26 23:01:24 2026 GMT Not After : Jan 27 23:01:24 2026 GMT Subject: CN=eb3be8ee593c84a6395f8cbeeb625b9e8a1e9ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:b4:2b:48:db:58:5e:fa:31:f1:8b:8b:34: f1:31:17:77:a6:99:04:07:9b:cf:24:b9:a2:99:b3: 44:83:0b:d6:ba:7a:f4:8e:f1:74:fc:ea:34:38:de: ee:1f:65:e0:6b:5f:a2:e3:d4:7f:26:87:f6:36:11: 04:6d:cf:06:8b:d6:8b:43:3d:7e:c7:10:c4:3b:54: d7:54:42:b9:9c:da:b4:68:b4:95:6e:64:bd:55:db: da:27:f6:95:fa:ed:5b:9c:97:b1:6f:a3:d1:bc:e9: c5:17:63:c8:47:ab:9e:36:41:73:ff:b4:4e:57:26: 29:18:75:e0:bb:de:25:d7:5b:85:23:42:0a:32:a5: b2:6b:0b:2c:76:d7:81:db:81:c5:31:3c:d9:c6:c3: f4:42:1a:20:48:30:c4:10:84:42:ff:16:19:28:3b: 33:2f:9c:1c:97:eb:94:74:42:9c:34:34:e0:dd:ca: f5:ba:71:91:e2:e8:06:c1:59:59:cb:1b:e7:3f:4c: c6:1a:4f:5c:cc:93:58:36:76:df:bd:91:ac:d0:cd: 21:c1:91:d8:a9:3b:1c:af:9b:9b:c1:38:b1:cc:95: 88:95:dc:ab:ec:72:76:a6:f9:2b:ca:f0:53:2e:b1: d8:c7:90:5a:d4:b0:db:42:ac:a2:a8:48:67:19:ad: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3B:E8:EE:59:3C:84:A6:39:5F:8C:BE:EB:62:5B:9E:8A:1E:9E:F4 X509v3 Authority Key Identifier: keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d0:d0:50:e8:c0:2f:a2:26:5d:a7:f7:f0:cc:51:0c:0b:f1: a5:15:a0:b5:25:fd:dc:87:e4:1f:35:60:01:65:2d:70:7c:87: ac:1a:e0:71:d2:97:eb:54:71:f0:7d:3b:56:61:3d:69:09:43: e5:9f:b9:c1:16:07:e8:63:87:9e:11:0d:67:f4:41:f0:ac:02: a3:e5:cf:0e:5b:ba:d7:4e:56:82:09:e5:99:8c:78:04:89:47: 5d:b1:68:25:8b:60:4f:a8:d9:50:9e:f1:8a:95:61:c7:6c:8d: 99:ca:b9:29:11:6e:1a:97:82:cc:e9:6f:28:12:d8:ae:57:b6: 6f:7f:2c:d9:b2:05:51:28:47:5a:45:93:e4:df:1b:4c:0d:6a: 95:07:f5:d1:de:35:fb:81:1e:b3:84:67:ba:cd:7d:34:0b:75: 78:e8:91:3f:24:0c:71:de:88:d9:0e:b9:f4:56:f8:06:12:79: 50:e4:29:b7:62:9a:07:8c:ea:6c:04:09:30:93:4d:4a:fb:08: 69:73:23:43:c6:65:ad:c7:e9:f1:d6:c5:c7:a0:35:79:05:0d: 40:de:9f:f5:15:38:23:f5:13:9d:3e:7d:37:ec:66:cd:16:87: 5a:5b:da:52:c5:b1:dd:83:d0:9c:11:c6:12:3f:03:02:c1:34: d6:cd:07:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ilwmK9wBBNWbpVCD1xuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi ZjBhOTEwHhcNMjYwMTI2MjMwMTI0WhcNMjYwMTI3MjMwMTI0WjAzMTEwLwYDVQQD EyhlYjNiZThlZTU5M2M4NGE2Mzk1ZjhjYmVlYjYyNWI5ZThhMWU5ZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOC0K0jbWF76MfGLizTxMRd3ppkE B5vPJLmimbNEgwvWunr0jvF0/Oo0ON7uH2Xga1+i49R/Jof2NhEEbc8Gi9aLQz1+ xxDEO1TXVEK5nNq0aLSVbmS9VdvaJ/aV+u1bnJexb6PRvOnFF2PIR6ueNkFz/7RO VyYpGHXgu94l11uFI0IKMqWyawssdteB24HFMTzZxsP0QhogSDDEEIRC/xYZKDsz L5wcl+uUdEKcNDTg3cr1unGR4ugGwVlZyxvnP0zGGk9czJNYNnbfvZGs0M0hwZHY qTscr5ubwTixzJWIldyr7HJ2pvkryvBTLrHYx5Ba1LDbQqyiqEhnGa0BNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs76O5ZPISmOV+MvutiW56KHp70MB8GA1UdIwQY MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2 LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNDQUOjA L6ImXaf38MxRDAvxpRWgtSX93IfkHzVgAWUtcHyHrBrgcdKX61Rx8H07VmE9aQlD 5Z+5wRYH6GOHnhENZ/RB8KwCo+XPDlu6105WggnlmYx4BIlHXbFoJYtgT6jZUJ7x ipVhx2yNmcq5KRFuGpeCzOlvKBLYrle2b38s2bIFUShHWkWT5N8bTA1qlQf10d41 +4Ees4Rnus19NAt1eOiRPyQMcd6I2Q659Fb4BhJ5UOQpt2KaB4zqbAQJMJNNSvsI aXMjQ8Zlrcfp8dbFx6A1eQUNQN6f9RU4I/UTnT59N+xmzRaHWlvaUsWx3YPQnBHG Ej8DAsE01s0HlA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:43 2026 by rpki-client