This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json) Hash identifier: lRYC4DSbmbffuYUeFQDHfYRDseVBsqhJ95Z/+S7Y9JA= Subject key identifier: B8:CE:21:D6:8E:B9:B8:16:53:F0:E3:F7:86:72:81:0B:C8:55:BE:12 Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Certificate serial: 019BFC533DB4E897E8DCAE4E9F7936F405AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft Manifest number: 01F7 Signing time: Mon 26 Jan 2026 22:01:12 +0000 Manifest this update: Mon 26 Jan 2026 22:01:12 +0000 Manifest next update: Tue 27 Jan 2026 22:01:12 +0000 Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=) 2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: nmKLi8xk/Sa2Wo0DeWZy7L5BMhFi/jB6O02tJMigZ7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:3d:b4:e8:97:e8:dc:ae:4e:9f:79:36:f4:05:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Validity Not Before: Jan 26 22:01:12 2026 GMT Not After : Jan 27 22:01:12 2026 GMT Subject: CN=b8ce21d68eb9b81653f0e3f78672810bc855be12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:31:c3:d3:da:4e:86:f8:63:f0:eb:7b:73: 0e:6b:97:bf:6a:d4:84:63:f2:45:26:73:9d:81:1f: a9:ba:ff:79:da:ce:5f:22:3f:4b:7d:6e:71:cb:9a: f1:d1:63:68:b0:52:a8:db:ec:de:89:0d:a4:46:ae: 8b:2a:53:7d:7f:2f:3a:a4:de:c1:a5:f0:7f:f2:79: fa:4e:08:fb:cd:69:3d:7e:4d:1f:84:c7:69:12:7f: c8:8c:07:bd:d7:71:de:40:ce:37:2c:16:f8:b5:2d: e8:f7:02:07:95:19:3d:d8:ee:96:7d:c4:9d:33:95: 2e:a1:79:d9:87:ef:1c:18:93:39:1d:c4:23:4f:a4: 74:17:fc:53:82:70:82:87:1e:e3:4b:1d:39:34:c2: ae:62:75:64:b6:71:12:d5:41:2b:f5:f0:9e:37:bf: 2e:78:92:7f:b1:4c:09:85:5a:8b:8b:3d:e3:75:e3: a6:2a:3f:19:0a:05:0e:16:24:54:09:0a:02:9e:76: 41:e0:ca:28:db:7c:16:c0:a3:46:81:a3:31:8c:60: 32:5a:17:8c:4b:e3:42:5f:03:e8:ad:b1:39:ef:55: cc:d4:1c:c7:5d:3c:1f:25:37:f0:e0:79:2c:b2:60: 25:45:bf:43:2e:51:78:46:6f:33:dd:9c:3c:d6:c2: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CE:21:D6:8E:B9:B8:16:53:F0:E3:F7:86:72:81:0B:C8:55:BE:12 X509v3 Authority Key Identifier: keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:25:02:96:9e:ef:79:d6:26:a5:84:cf:e7:ae:10:e1:93:76: 47:c8:c2:b7:18:3b:ac:53:83:ff:c1:f1:db:19:58:28:63:05: 11:bc:ae:da:9c:fa:39:de:e4:6d:54:74:57:fe:58:bc:6e:2c: 86:73:c0:6f:f1:00:d9:da:cd:c7:53:cc:fd:90:78:73:d1:ab: ea:c9:71:98:c1:f5:ad:dc:45:6c:a4:3c:54:66:16:ff:12:bf: a6:17:a8:50:83:b7:a6:36:f0:8e:cd:fa:2a:d6:98:c6:30:f7: 9b:b2:fb:2d:97:9a:05:54:4a:c2:7d:25:f0:0f:f5:ac:43:ee: 18:99:2a:e6:1a:f5:44:05:11:12:2a:d0:8e:ad:5b:61:82:42: cf:88:d9:f0:b2:48:64:06:5a:4f:01:49:a1:67:9d:8b:3e:31: a5:1b:2a:21:87:02:78:3f:fa:85:c9:cb:6f:ed:5d:2b:42:38: 5b:5e:c3:05:d1:d1:c9:da:00:ac:5c:aa:29:f5:58:8d:fe:a1: f8:bc:0b:c0:42:c9:1b:23:d6:1e:73:93:50:06:c1:2c:17:b1: 55:5a:d3:d3:38:1a:ac:e4:86:d6:26:0d:67:c0:26:56:40:72: c0:ee:86:69:44:40:80:3b:dd:19:02:8d:f0:b9:8b:fa:ce:89: 2f:a5:77:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Uz206Jfo3K5On3k29AWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj MTI2MzcwHhcNMjYwMTI2MjIwMTEyWhcNMjYwMTI3MjIwMTEyWjAzMTEwLwYDVQQD EyhiOGNlMjFkNjhlYjliODE2NTNmMGUzZjc4NjcyODEwYmM4NTViZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjwxw9PaTob4Y/Dre3MOa5e/atSE Y/JFJnOdgR+puv952s5fIj9LfW5xy5rx0WNosFKo2+zeiQ2kRq6LKlN9fy86pN7B pfB/8nn6Tgj7zWk9fk0fhMdpEn/IjAe913HeQM43LBb4tS3o9wIHlRk92O6WfcSd M5UuoXnZh+8cGJM5HcQjT6R0F/xTgnCChx7jSx05NMKuYnVktnES1UEr9fCeN78u eJJ/sUwJhVqLiz3jdeOmKj8ZCgUOFiRUCQoCnnZB4Moo23wWwKNGgaMxjGAyWheM S+NCXwPorbE571XM1BzHXTwfJTfw4HkssmAlRb9DLlF4Rm8z3Zw81sLlpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjOIdaOubgWU/Dj94ZygQvIVb4SMB8GA1UdIwQY MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiUClp7v edYmpYTP564Q4ZN2R8jCtxg7rFOD/8Hx2xlYKGMFEbyu2pz6Od7kbVR0V/5YvG4s hnPAb/EA2drNx1PM/ZB4c9Gr6slxmMH1rdxFbKQ8VGYW/xK/pheoUIO3pjbwjs36 KtaYxjD3m7L7LZeaBVRKwn0l8A/1rEPuGJkq5hr1RAUREirQjq1bYYJCz4jZ8LJI ZAZaTwFJoWediz4xpRsqIYcCeD/6hcnLb+1dK0I4W17DBdHRydoArFyqKfVYjf6h +LwLwELJGyPWHnOTUAbBLBexVVrT0zgarOSG1iYNZ8AmVkBywO6GaURAgDvdGQKN 8LmL+s6JL6V3kg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:20 2026 by rpki-client