This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json) Hash identifier: I3kM8ChoKYHav2/SFNubWgNnd7QugMyq4OedADGWFPA= Subject key identifier: 42:50:0C:92:BA:DC:C0:E0:31:86:66:F5:B1:B1:86:0C:0D:F0:B7:59 Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30 Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930 Certificate serial: 019BFE78820DAE2E2A778B860E8F1131D4C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 08:01:09 +0000 Manifest this update: Tue 27 Jan 2026 08:01:09 +0000 Manifest next update: Wed 28 Jan 2026 08:01:09 +0000 Files and hashes: 1: BvmjN1Ei-RdZ5XU4wyESLuA_jUA.roa (hash: ELi50YRUe877yWFfXU+gVz/inLW8fniMz5ZEj37kHhM=) 2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: AEw6MZYIuBTTsyKiMuJgoPoQMCVSD6hWxatBrSpqK7k=) 3: yxoyiq6u244VKW72oii9uUiHB5w.roa (hash: jfOnDIC+Hn7PQuMw02CvW0H07qmgRK5GNbtZKtIIp2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:82:0d:ae:2e:2a:77:8b:86:0e:8f:11:31:d4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930 Validity Not Before: Jan 27 08:01:09 2026 GMT Not After : Jan 28 08:01:09 2026 GMT Subject: CN=42500c92badcc0e0318666f5b1b1860c0df0b759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:5f:4f:bb:d3:73:62:59:d3:34:7a:3d:e4: ae:88:36:34:ef:10:25:2d:4e:1e:53:36:f2:e8:66: 5d:a4:7f:ca:0c:a4:f4:cc:c5:17:b8:73:6a:38:e1: 03:c7:a2:f8:4b:14:61:2f:78:64:68:87:e8:cc:95: 41:3a:02:6e:0c:e8:74:73:2c:76:24:04:f4:71:a7: 4e:f7:74:1a:19:a6:10:65:4c:f0:62:dd:a2:db:2f: 12:06:88:3e:52:fb:e7:ed:a8:e6:a8:22:54:95:98: e1:ee:5e:6c:04:4e:45:0e:7d:38:37:33:fe:85:1c: fb:30:19:fb:45:82:33:37:bf:f2:78:0e:d8:dc:2c: 3a:53:e0:30:e1:f3:76:e9:1d:52:65:e6:b5:59:ae: 60:b5:f9:a4:e6:2b:2b:09:0f:05:2b:b9:6a:47:7f: 03:dd:03:93:6f:6d:0a:d3:5d:d0:23:c1:3a:e0:93: 73:7b:b8:22:76:a4:ce:df:cb:c1:09:76:b2:44:1b: 95:34:d8:27:32:da:67:ea:50:07:7f:43:13:ba:b2: 43:af:6d:b6:25:c4:47:35:04:a6:ad:a9:8a:df:4e: a8:ca:37:f7:98:eb:be:f3:92:a1:1d:6d:41:0a:69: 17:89:31:4e:b0:31:ba:35:2d:06:45:85:00:37:57: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:0C:92:BA:DC:C0:E0:31:86:66:F5:B1:B1:86:0C:0D:F0:B7:59 X509v3 Authority Key Identifier: keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:19:ca:82:52:32:5c:c7:c2:fa:b1:72:44:8f:f7:96:82:69: c7:09:ae:45:9b:ea:91:61:d8:e9:22:3a:28:1c:71:05:94:eb: 47:07:36:0a:ae:57:68:c6:d0:f4:94:52:b9:43:0c:61:fb:58: 45:2a:8f:d0:66:3e:8c:3c:1e:77:e2:eb:5d:ac:9b:99:31:39: d5:d3:b5:c0:d1:d9:d0:3c:db:0a:62:3d:e3:51:f9:8c:57:5f: 0c:90:ef:cd:7a:16:13:8c:77:81:66:ec:ce:3f:93:b6:92:8c: 7e:7e:28:d2:a1:10:d4:74:66:6b:f7:26:e6:1d:af:60:c3:11: c0:b8:6b:66:14:43:56:8f:b1:31:e2:fe:e1:8b:ff:7a:7c:cd: b6:1b:ba:c1:04:47:63:f7:2c:28:4a:e7:b5:17:b7:16:8e:76: 25:e2:00:c0:74:36:66:44:74:d3:0f:2d:13:75:94:a6:fa:62: 2f:29:f9:fd:91:17:58:f9:48:65:66:99:d6:92:4d:e8:93:07: 57:58:8e:82:55:2a:96:02:23:e3:6b:48:95:51:57:0d:9a:21: 82:fd:92:88:f6:5a:5b:db:ce:41:77:21:f6:a7:d8:22:e1:ae: 6b:18:8a:07:f5:17:84:5e:81:ec:67:6e:48:70:ad:25:c4:bc: 0c:b8:0b:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eIINri4qd4uGDo8RMdTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzA1YzZlNTgyOTRhZDBlZDUxNjJmYTg0MjlkYTUxNjU2 NTM5MzAwHhcNMjYwMTI3MDgwMTA5WhcNMjYwMTI4MDgwMTA5WjAzMTEwLwYDVQQD Eyg0MjUwMGM5MmJhZGNjMGUwMzE4NjY2ZjViMWIxODYwYzBkZjBiNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylBfT7vTc2JZ0zR6PeSuiDY07xAl LU4eUzby6GZdpH/KDKT0zMUXuHNqOOEDx6L4SxRhL3hkaIfozJVBOgJuDOh0cyx2 JAT0cadO93QaGaYQZUzwYt2i2y8SBog+Uvvn7ajmqCJUlZjh7l5sBE5FDn04NzP+ hRz7MBn7RYIzN7/yeA7Y3Cw6U+Aw4fN26R1SZea1Wa5gtfmk5isrCQ8FK7lqR38D 3QOTb20K013QI8E64JNze7gidqTO38vBCXayRBuVNNgnMtpn6lAHf0MTurJDr222 JcRHNQSmramK306oyjf3mOu+85KhHW1BCmkXiTFOsDG6NS0GRYUAN1eCbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJQDJK63MDgMYZm9bGxhgwN8LdZMB8GA1UdIwQY MBaAFKgwXG5YKUrQ7VFi+oQp2lFlZTkwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzIt MDJkYjhiNzdkMDg3LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzItMDJkYjhiNzdkMDg3 LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBnKglIy XMfC+rFyRI/3loJpxwmuRZvqkWHY6SI6KBxxBZTrRwc2Cq5XaMbQ9JRSuUMMYftY RSqP0GY+jDwed+LrXaybmTE51dO1wNHZ0DzbCmI941H5jFdfDJDvzXoWE4x3gWbs zj+TtpKMfn4o0qEQ1HRma/cm5h2vYMMRwLhrZhRDVo+xMeL+4Yv/enzNthu6wQRH Y/csKErntRe3Fo52JeIAwHQ2ZkR00w8tE3WUpvpiLyn5/ZEXWPlIZWaZ1pJN6JMH V1iOglUqlgIj42tIlVFXDZohgv2SiPZaW9vOQXch9qfYIuGuaxiKB/UXhF6B7Gdu SHCtJcS8DLgLyQ== -----END CERTIFICATE-----Generated at Tue Jan 27 15:29:23 2026 by rpki-client