This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json) Hash identifier: jh5fplXwt42/YA1vFhCaXSh4O5Ch8XuaSIIhW39lYzM= Subject key identifier: 93:0E:E1:E3:D9:8F:1E:D7:4B:A5:FA:7C:02:3A:06:DD:79:02:8B:AC Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Certificate serial: 019BFB0914E6D14C070ACEB68F4F818AC000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 16:00:34 +0000 Manifest this update: Mon 26 Jan 2026 16:00:34 +0000 Manifest next update: Tue 27 Jan 2026 16:00:34 +0000 Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: 6wXrKMDs0KZ6jpKi67dbHOPEDoISEZugNRv217AHB4I=) 2: dw6jrOHCvr8vEJ8EI53CbIWla-4.roa (hash: RtlekyDtmYYhtqPCal9yHYHp8kLr84QNk3nCsBWdbO0=) 3: l31vC9yj9tOcNEOiDfa6E5mFI5A.roa (hash: iMLRpeq0aUEWDn3LyfJLey3OSaLGqWRnQDkTV9RvDA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:14:e6:d1:4c:07:0a:ce:b6:8f:4f:81:8a:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4 Validity Not Before: Jan 26 16:00:34 2026 GMT Not After : Jan 27 16:00:34 2026 GMT Subject: CN=930ee1e3d98f1ed74ba5fa7c023a06dd79028bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:39:e9:6b:7e:e6:23:d5:90:6f:ea:26:f9: 61:d2:e9:d5:a1:41:ae:f8:f2:19:ec:f0:35:d1:70: db:6f:78:f4:5a:73:f7:7e:1d:73:46:a9:02:34:d8: 26:82:bb:d4:1d:a7:ed:34:58:89:fe:9a:63:78:42: 0d:dd:87:0c:19:60:7c:8e:8a:cc:1f:0c:91:ca:67: ac:fb:af:61:5c:fc:01:a8:0d:fe:a0:36:e1:64:f7: f3:89:4f:e0:1c:30:bb:1a:a6:c1:b4:2e:f4:99:cc: 43:5c:8a:8b:47:07:4f:95:d3:9b:b0:33:a9:e5:02: e7:c6:80:11:18:31:22:06:48:77:64:7b:44:0c:bf: 8a:3d:6c:84:71:d1:2a:db:17:2c:99:e0:48:79:ef: 1e:fe:40:42:c4:62:f6:33:1d:02:eb:0c:2f:37:e2: 73:78:01:a0:2e:64:8a:87:d0:8e:a0:a6:7a:3c:61: a4:a7:80:92:39:84:66:c8:bc:2c:61:db:07:b8:5f: 7c:a5:8b:f6:5e:25:38:dd:ed:29:b6:d1:fb:03:a3: a0:d6:fb:e4:67:04:f9:64:26:a8:5a:24:26:4b:a2: ae:89:3d:e4:df:0e:92:21:08:4f:20:45:87:45:df: 8c:b8:a7:d3:a5:e7:64:17:0e:de:cd:7c:73:70:fa: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:E1:E3:D9:8F:1E:D7:4B:A5:FA:7C:02:3A:06:DD:79:02:8B:AC X509v3 Authority Key Identifier: keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:34:3d:e4:7a:25:15:25:3d:e2:c4:63:bb:fc:c9:47:80:04: d0:fe:d6:2e:a1:68:49:3c:63:18:f9:c8:f0:c7:de:2e:bb:54: b1:d1:fe:57:b9:1c:a0:15:07:4b:b5:b1:ce:d2:2f:ef:46:48: f2:9e:b0:b5:47:56:c0:73:bb:1b:9b:dd:4a:b7:00:22:0a:56: 38:48:89:d2:99:f8:81:7d:dd:aa:c1:53:f7:f0:d7:cd:62:2c: 7b:02:66:4b:40:a2:97:64:3a:d8:cc:a9:ed:c0:42:da:5e:16: df:fc:68:28:fa:87:1a:8e:07:f8:fe:8d:9a:cb:1d:dc:24:c7: 8d:a2:ea:17:a0:e5:69:7e:29:62:97:f5:e7:12:97:fa:78:98: 2c:b9:10:ca:48:ea:99:9a:52:94:18:c7:97:be:2d:76:80:f1: 50:26:11:40:a2:14:1e:fe:a0:48:de:04:8e:5a:41:0d:f5:b0: d8:c8:7b:d3:0b:4a:d2:ac:f2:63:31:65:f6:ce:cc:ec:54:87: 04:df:ae:bb:cb:74:28:50:19:15:1b:b3:bb:a0:f7:35:eb:f7: 93:45:8e:7f:97:c5:54:ec:ce:26:11:07:6c:88:e7:a5:af:f1: 9e:40:57:5a:e9:22:8e:3b:c1:2e:c2:98:6e:00:db:11:26:42: 39:aa:68:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CRTm0UwHCs62j0+BisAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYjRjNzlhMjJhM2ZlOTg3ZWYzMTkwOGNkNDRmZjgxZTli MWFjZjQwHhcNMjYwMTI2MTYwMDM0WhcNMjYwMTI3MTYwMDM0WjAzMTEwLwYDVQQD Eyg5MzBlZTFlM2Q5OGYxZWQ3NGJhNWZhN2MwMjNhMDZkZDc5MDI4YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D856Wt+5iPVkG/qJvlh0unVoUGu +PIZ7PA10XDbb3j0WnP3fh1zRqkCNNgmgrvUHaftNFiJ/ppjeEIN3YcMGWB8jorM HwyRymes+69hXPwBqA3+oDbhZPfziU/gHDC7GqbBtC70mcxDXIqLRwdPldObsDOp 5QLnxoARGDEiBkh3ZHtEDL+KPWyEcdEq2xcsmeBIee8e/kBCxGL2Mx0C6wwvN+Jz eAGgLmSKh9COoKZ6PGGkp4CSOYRmyLwsYdsHuF98pYv2XiU43e0pttH7A6Og1vvk ZwT5ZCaoWiQmS6KuiT3k3w6SIQhPIEWHRd+MuKfTpedkFw7ezXxzcPr+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMO4ePZjx7XS6X6fAI6Bt15AousMB8GA1UdIwQY MBaAFEK0x5oio/6YfvMZCM1E/4Hpsaz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQt ZjI4ODEzN2NiNTAwLzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80YjkxMWMtM2Q0ZC00MmQ1LTkyMzQtZjI4ODEzN2NiNTAw LzEvUXJUSG1pS2pfcGgtOHhrSXpVVF9nZW14clBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTQ95Hol FSU94sRju/zJR4AE0P7WLqFoSTxjGPnI8MfeLrtUsdH+V7kcoBUHS7WxztIv70ZI 8p6wtUdWwHO7G5vdSrcAIgpWOEiJ0pn4gX3dqsFT9/DXzWIsewJmS0Cil2Q62Myp 7cBC2l4W3/xoKPqHGo4H+P6Nmssd3CTHjaLqF6DlaX4pYpf15xKX+niYLLkQykjq mZpSlBjHl74tdoDxUCYRQKIUHv6gSN4EjlpBDfWw2Mh70wtK0qzyYzFl9s7M7FSH BN+uu8t0KFAZFRuzu6D3Nev3k0WOf5fFVOzOJhEHbIjnpa/xnkBXWukijjvBLsKY bgDbESZCOapocg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:28 2026 by rpki-client