This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json) Hash identifier: ixrELJpUmWWIysyB9HGcQZAb0QoY0uIYto3yuA1k2vU= Subject key identifier: 36:B3:FF:6A:48:CD:77:2B:9A:B6:40:7A:88:1B:93:F9:8D:15:34:CC Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6 Certificate serial: 019BFEAF3D414D7546D6CE6DF8DE30382788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft Manifest number: 076E Signing time: Tue 27 Jan 2026 09:00:55 +0000 Manifest this update: Tue 27 Jan 2026 09:00:55 +0000 Manifest next update: Wed 28 Jan 2026 09:00:55 +0000 Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: PB7NS3pspiXzugHUIULULuLtE80xvoE3AnkU73E8yBU=) 2: WB6JPDHCA8x04ovSojhszaBWT9g.roa (hash: QAX0HjBycS9/LbaCCjqJQ2UJOnAIxeZiVHraC3/UYyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:3d:41:4d:75:46:d6:ce:6d:f8:de:30:38:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6 Validity Not Before: Jan 27 09:00:55 2026 GMT Not After : Jan 28 09:00:55 2026 GMT Subject: CN=36b3ff6a48cd772b9ab6407a881b93f98d1534cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5e:92:76:6d:69:b3:c8:2d:88:65:04:55:1e: 4d:3c:38:5d:c5:06:fc:3a:e6:4c:1b:07:e6:6e:b0: 0c:32:e7:c9:00:f7:82:4a:ba:d3:59:39:df:a8:d0: 50:44:75:af:f0:0f:f6:e9:f0:93:de:4b:aa:51:6b: 34:d6:47:12:79:cd:55:99:c3:42:26:eb:f1:2a:c9: ad:4b:45:9a:42:df:ef:67:df:6b:50:25:af:3a:fa: 8d:52:e9:e5:85:30:7f:d9:0e:fd:48:83:64:a9:02: 26:af:5d:00:4b:8d:6b:82:54:62:03:31:f0:27:c6: 70:d0:b2:02:2e:12:ae:85:83:ff:f2:4e:94:d0:98: 54:76:8b:4c:ab:d8:3b:69:65:65:47:ad:b7:c8:59: c5:b8:db:5c:68:d2:76:cf:8f:6e:f1:e8:89:20:cc: d3:16:7d:26:96:c7:82:12:2e:e6:02:c4:e0:c2:d4: a4:8e:e5:d4:8c:25:a8:2d:b1:fb:41:be:fd:89:69: a3:2a:c8:58:c0:6b:7f:41:7a:4f:5a:16:f3:a8:ca: 63:09:db:66:7e:ff:07:42:95:90:44:78:99:29:aa: 47:2e:c2:11:b1:63:95:f9:84:bb:1a:67:a5:30:51: f6:a9:38:98:44:18:dd:8d:04:52:06:8a:b5:7a:af: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B3:FF:6A:48:CD:77:2B:9A:B6:40:7A:88:1B:93:F9:8D:15:34:CC X509v3 Authority Key Identifier: keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:8e:12:df:00:60:37:c2:85:6a:93:ff:cb:41:1b:30:d3:8d: 4a:39:58:90:32:72:ae:88:82:b4:3f:2a:36:cb:2a:e9:03:d6: d2:72:c2:8f:4e:cf:8f:22:9b:b8:72:91:0d:7e:40:0d:c3:00: f9:6e:96:90:63:92:c6:5b:0e:2b:7c:7f:3b:13:b4:93:b1:fa: 9b:e5:37:06:ca:b4:80:12:67:61:fa:6d:c2:bd:bf:61:ca:7d: d8:f5:f0:ef:3c:a5:2a:b9:2e:57:4e:09:f3:fd:0e:47:82:50: 54:86:96:21:da:a8:5b:1a:66:94:18:a3:5f:6f:a9:f5:83:e4: bd:e4:c0:f9:c6:88:8e:3b:6f:77:8f:59:c1:96:94:c7:11:2f: 5e:b4:2b:2c:9f:41:82:24:99:53:7a:67:a5:b9:df:e8:75:b8: fa:a1:c5:59:f1:ee:ed:d0:13:63:2a:98:9f:0e:4c:31:06:93: ff:b3:2d:c3:33:64:ed:a3:7f:43:71:af:0e:d6:95:b8:e7:98: 6b:33:b8:23:9c:58:a0:ca:8e:76:2c:93:5e:ca:f2:f7:f0:ae: 55:ca:59:33:b8:95:d0:14:2b:6b:c6:47:0f:fe:27:90:aa:80: 70:b0:3e:d9:15:5b:ee:b8:d6:01:46:ea:5b:a0:93:fb:18:ca: aa:11:49:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+rz1BTXVG1s5t+N4wOCeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk MzA4YTYwHhcNMjYwMTI3MDkwMDU1WhcNMjYwMTI4MDkwMDU1WjAzMTEwLwYDVQQD EygzNmIzZmY2YTQ4Y2Q3NzJiOWFiNjQwN2E4ODFiOTNmOThkMTUzNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V6Sdm1ps8gtiGUEVR5NPDhdxQb8 OuZMGwfmbrAMMufJAPeCSrrTWTnfqNBQRHWv8A/26fCT3kuqUWs01kcSec1VmcNC JuvxKsmtS0WaQt/vZ99rUCWvOvqNUunlhTB/2Q79SINkqQImr10AS41rglRiAzHw J8Zw0LICLhKuhYP/8k6U0JhUdotMq9g7aWVlR623yFnFuNtcaNJ2z49u8eiJIMzT Fn0mlseCEi7mAsTgwtSkjuXUjCWoLbH7Qb79iWmjKshYwGt/QXpPWhbzqMpjCdtm fv8HQpWQRHiZKapHLsIRsWOV+YS7GmelMFH2qTiYRBjdjQRSBoq1eq9YgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaz/2pIzXcrmrZAeogbk/mNFTTMMB8GA1UdIwQY MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt N2I1Zjk4MTU1ZmU2LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2 LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA044S3wBg N8KFapP/y0EbMNONSjlYkDJyroiCtD8qNssq6QPW0nLCj07PjyKbuHKRDX5ADcMA +W6WkGOSxlsOK3x/OxO0k7H6m+U3Bsq0gBJnYfptwr2/Ycp92PXw7zylKrkuV04J 8/0OR4JQVIaWIdqoWxpmlBijX2+p9YPkveTA+caIjjtvd49ZwZaUxxEvXrQrLJ9B giSZU3pnpbnf6HW4+qHFWfHu7dATYyqYnw5MMQaT/7MtwzNk7aN/Q3GvDtaVuOeY azO4I5xYoMqOdiyTXsry9/CuVcpZM7iV0BQra8ZHD/4nkKqAcLA+2RVb7rjWAUbq W6CT+xjKqhFJBw== -----END CERTIFICATE-----Generated at Tue Jan 27 18:49:35 2026 by rpki-client