This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json) Hash identifier: yHWztqvnNaR6LQ6YBhpJ4G/7d6r8nl/tIWyRszkkSvA= Subject key identifier: 4E:6F:29:42:9A:27:C2:F2:50:2D:F0:E2:2D:4B:D2:63:16:2F:F3:DB Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56 Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056 Certificate serial: 019BFB0A34BEA783E21D9288A5FED7CEBBBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft Manifest number: 07D9 Signing time: Mon 26 Jan 2026 16:01:48 +0000 Manifest this update: Mon 26 Jan 2026 16:01:48 +0000 Manifest next update: Tue 27 Jan 2026 16:01:48 +0000 Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: 5hXLYVuQZHJ6bj9mpsZgj8yL48gBfJcgsoLYB37J09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:34:be:a7:83:e2:1d:92:88:a5:fe:d7:ce:bb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056 Validity Not Before: Jan 26 16:01:48 2026 GMT Not After : Jan 27 16:01:48 2026 GMT Subject: CN=4e6f29429a27c2f2502df0e22d4bd263162ff3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:c9:44:2d:70:ff:f4:e6:0e:72:a0:fb:e4: 13:e8:bd:ea:10:ef:ad:e1:d1:67:3a:86:13:12:e8: 4a:a7:18:ea:92:c9:97:15:8f:e2:8b:0b:ac:54:f2: c7:a0:af:3b:0c:ae:76:d0:f7:8c:fe:ee:66:9b:3f: ad:cd:b4:0d:1c:86:f9:17:99:f7:a2:5f:fe:33:41: a4:ea:84:a1:9c:cd:bf:5f:11:fd:08:ba:25:d5:4c: 30:d0:d9:3f:f1:0a:96:ca:1d:f1:6e:5f:61:92:28: 5b:57:f3:68:01:d4:c8:a7:45:3f:f2:8f:4f:d4:6d: 22:b6:09:9c:64:95:64:35:71:12:78:25:69:73:dd: 3b:d9:df:e4:f9:e9:0b:0e:43:0e:14:9e:fd:49:6c: cb:ac:a4:55:e2:dc:94:ac:3d:a0:0e:1d:e7:54:12: 28:7d:ba:a2:13:1d:99:e5:fa:9b:ba:34:10:ba:55: 67:f8:0e:8e:f1:da:f4:d2:c7:99:0a:52:0d:58:af: 64:de:6e:3e:db:83:2d:2e:fb:a9:44:ac:47:86:2b: 77:e0:ae:1b:3f:e3:10:4e:49:3d:7b:03:10:b9:5e: fe:c2:dd:57:4b:50:68:39:8f:bf:80:83:f4:7c:d3: 59:65:02:19:10:c6:54:8b:ad:0f:ce:31:3d:6c:c9: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:29:42:9A:27:C2:F2:50:2D:F0:E2:2D:4B:D2:63:16:2F:F3:DB X509v3 Authority Key Identifier: keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1d:b3:c9:d9:00:60:bb:e3:d5:19:0d:1b:f7:10:8d:90:ac: a2:14:d0:da:ea:68:de:b5:ca:70:30:fe:8c:db:c1:8c:17:58: 61:64:ce:8a:da:d3:86:7a:77:29:c4:e1:70:53:c1:f3:83:d4: 6e:00:c6:fb:3e:cd:b6:4c:f8:cc:b1:28:40:c1:5a:62:05:bf: e4:b0:20:65:2e:cf:79:5f:41:9d:ec:2b:7a:88:13:78:b9:4d: 11:28:1c:46:1d:77:12:0f:b3:10:f1:91:bb:25:8d:e2:19:88: e8:7b:e3:14:9c:af:bf:c3:85:9f:a8:81:d1:5a:63:e1:ef:9c: cc:c0:50:1d:08:0e:b0:cb:7f:1a:b1:4d:84:1e:51:cd:f0:86: 4c:9f:59:8f:30:7b:c4:5b:15:a9:61:a5:6c:e3:93:9e:4c:6c: 96:8c:bd:e0:a7:db:6e:cd:77:0a:5f:4d:6b:d7:bc:0d:35:f7: 73:89:27:e7:4d:0a:85:8c:c2:33:b4:c3:20:2e:7f:3c:92:c5: 21:0e:e9:3d:bb:aa:30:ef:a7:46:c0:71:c9:29:17:6c:23:58: fe:32:ef:73:4b:55:1d:38:63:fe:0b:23:75:6f:c5:f8:c7:ca: ef:40:39:1b:d6:ac:c1:78:37:b3:2e:7b:57:13:4f:0d:f9:7e: a1:72:04:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CjS+p4PiHZKIpf7Xzru6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODRiYjAxYWE1OGFlOTRiMTMyMGZkNGJlNDIxM2Y5MzE0 ZTkwNTYwHhcNMjYwMTI2MTYwMTQ4WhcNMjYwMTI3MTYwMTQ4WjAzMTEwLwYDVQQD Eyg0ZTZmMjk0MjlhMjdjMmYyNTAyZGYwZTIyZDRiZDI2MzE2MmZmM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdzJRC1w//TmDnKg++QT6L3qEO+t 4dFnOoYTEuhKpxjqksmXFY/iiwusVPLHoK87DK520PeM/u5mmz+tzbQNHIb5F5n3 ol/+M0Gk6oShnM2/XxH9CLol1Uww0Nk/8QqWyh3xbl9hkihbV/NoAdTIp0U/8o9P 1G0itgmcZJVkNXESeCVpc9072d/k+ekLDkMOFJ79SWzLrKRV4tyUrD2gDh3nVBIo fbqiEx2Z5fqbujQQulVn+A6O8dr00seZClINWK9k3m4+24MtLvupRKxHhit34K4b P+MQTkk9ewMQuV7+wt1XS1BoOY+/gIP0fNNZZQIZEMZUi60PzjE9bMmkiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5vKUKaJ8LyUC3w4i1L0mMWL/PbMB8GA1UdIwQY MBaAFECEuwGqWK6UsTIP1L5CE/kxTpBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZjE3OWEtN2I4Ni00Yzc5LTkzMzkt ZDFiNjQ4YTRmZDBlLzEvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81ZjE3OWEtN2I4Ni00Yzc5LTkzMzktZDFiNjQ4YTRmZDBl LzEvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB2zydkA YLvj1RkNG/cQjZCsohTQ2upo3rXKcDD+jNvBjBdYYWTOitrThnp3KcThcFPB84PU bgDG+z7Ntkz4zLEoQMFaYgW/5LAgZS7PeV9BnewreogTeLlNESgcRh13Eg+zEPGR uyWN4hmI6HvjFJyvv8OFn6iB0Vpj4e+czMBQHQgOsMt/GrFNhB5RzfCGTJ9ZjzB7 xFsVqWGlbOOTnkxsloy94Kfbbs13Cl9Na9e8DTX3c4kn500KhYzCM7TDIC5/PJLF IQ7pPbuqMO+nRsBxySkXbCNY/jLvc0tVHThj/gsjdW/F+MfK70A5G9aswXg3sy57 VxNPDfl+oXIEDA== -----END CERTIFICATE-----Generated at Tue Jan 27 01:19:06 2026 by rpki-client