This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json) Hash identifier: kk9UtXgr2mx4f3tn8H1NQXhbBDZ2ADnmBnWPfU9HxXE= Subject key identifier: 23:E7:16:93:6D:FB:69:CA:BD:3D:57:ED:70:20:8C:81:BC:D9:B5:1E Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Certificate serial: 019BFA2DD669BD9FFEAF3FC4D27FEA1A07D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 12:01:06 +0000 Manifest this update: Mon 26 Jan 2026 12:01:06 +0000 Manifest next update: Tue 27 Jan 2026 12:01:06 +0000 Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=) 2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: INuuXWt1niffuosn+hO6hlgOz++ADwddJ6Fqc26q7+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:d6:69:bd:9f:fe:af:3f:c4:d2:7f:ea:1a:07:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44 Validity Not Before: Jan 26 12:01:06 2026 GMT Not After : Jan 27 12:01:06 2026 GMT Subject: CN=23e716936dfb69cabd3d57ed70208c81bcd9b51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:a1:87:6c:fc:ca:2b:30:cb:6f:85:43:28: 00:90:f6:63:f6:b5:12:ad:75:bc:23:c6:b8:0e:a4: e0:56:06:37:ad:ee:62:01:75:cf:2c:0f:95:06:52: 73:a8:b9:bb:34:c8:31:38:51:b2:d5:0f:d0:6b:fd: cd:9f:5c:c6:13:84:77:95:fe:a9:c6:60:9a:1f:a4: fa:88:f9:2d:49:13:b8:cf:e7:8c:17:fc:82:33:2b: 8d:27:52:b4:2e:b6:8e:cc:2e:11:c4:6f:18:7f:b3: e9:de:b3:ed:7d:f1:a3:14:35:4e:90:9b:3e:a4:da: 45:34:ad:af:75:26:48:8b:84:d1:61:da:b6:49:c8: ed:5b:ef:83:4c:66:15:fd:81:88:f3:51:b1:24:29: b3:36:5f:ad:43:29:43:c1:14:67:8c:ae:28:53:b3: 1c:bc:b6:9d:9e:27:a5:75:0f:ef:ec:ff:0f:83:76: d0:48:58:d9:42:7c:38:5d:30:e6:7b:4d:f8:51:0c: 0e:59:17:66:71:e4:91:18:0e:51:c1:3a:a9:8c:d8: dc:1d:16:7d:7a:29:e6:34:c5:a7:73:71:63:9c:f4: cb:cd:99:49:47:df:00:bc:db:17:11:23:63:8b:ac: be:a1:62:00:94:c9:17:7f:6b:08:af:5b:1f:f3:4a: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:16:93:6D:FB:69:CA:BD:3D:57:ED:70:20:8C:81:BC:D9:B5:1E X509v3 Authority Key Identifier: keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:2a:3f:f8:fc:f8:35:ac:aa:84:6e:a7:4f:37:5c:e9:fe: 22:e0:3b:08:0b:30:ec:d6:cc:88:36:02:3d:2b:7e:6a:bb:7b: 6f:6f:e8:eb:8d:db:22:99:47:18:7c:37:4f:e9:e7:e5:e7:0d: a7:32:b7:5c:3f:81:bc:73:49:19:9f:b7:68:f6:36:57:6f:73: 2f:4b:db:24:a4:62:45:b6:b5:64:fd:28:3f:82:24:71:17:ef: 4d:a3:22:e8:44:e6:44:c9:b3:02:f9:67:25:cb:d4:95:c8:d9: a6:dc:ce:a8:28:2a:cb:6e:71:04:2a:fa:f6:31:df:e8:54:b8: b1:0f:65:7f:67:e7:6e:ea:df:60:95:f8:7f:e2:3d:d2:09:18: a5:15:17:cc:9c:09:fc:b3:79:15:4c:8d:ae:4e:b2:64:2a:3e: 63:dd:f4:14:cb:77:6b:2a:92:cb:98:14:56:c2:f9:53:4a:a2: 25:db:34:6b:22:6a:de:69:9b:0a:d0:ff:e4:27:b9:8b:d0:af: bd:49:dd:04:ee:ce:98:51:62:13:e0:a5:8d:08:0b:de:b1:5b: 90:96:e9:68:d6:04:e4:f6:dd:71:f6:71:ee:f2:e2:2f:82:16: 94:91:bf:8d:9a:0e:bd:85:dc:d1:73:8c:e9:e5:c4:55:78:07: cd:9f:15:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LdZpvZ/+rz/E0n/qGgfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOGRmODY4ZjdkOWU5OGQ0ZmQ0MWU2ZGE1OTdhMjgzYzkx NDFiNDQwHhcNMjYwMTI2MTIwMTA2WhcNMjYwMTI3MTIwMTA2WjAzMTEwLwYDVQQD EygyM2U3MTY5MzZkZmI2OWNhYmQzZDU3ZWQ3MDIwOGM4MWJjZDliNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGahh2z8yiswy2+FQygAkPZj9rUS rXW8I8a4DqTgVgY3re5iAXXPLA+VBlJzqLm7NMgxOFGy1Q/Qa/3Nn1zGE4R3lf6p xmCaH6T6iPktSRO4z+eMF/yCMyuNJ1K0LraOzC4RxG8Yf7Pp3rPtffGjFDVOkJs+ pNpFNK2vdSZIi4TRYdq2ScjtW++DTGYV/YGI81GxJCmzNl+tQylDwRRnjK4oU7Mc vLadnieldQ/v7P8Pg3bQSFjZQnw4XTDme034UQwOWRdmceSRGA5RwTqpjNjcHRZ9 einmNMWnc3FjnPTLzZlJR98AvNsXESNji6y+oWIAlMkXf2sIr1sf80qj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPnFpNt+2nKvT1X7XAgjIG82bUeMB8GA1UdIwQY MBaAFEGN+Gj32emNT9QebaWXooPJFBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEt ZWU5YzM0NTJjYmFmLzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEtZWU5YzM0NTJjYmFm LzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD8qP/j8 +DWsqoRup083XOn+IuA7CAsw7NbMiDYCPSt+art7b2/o643bIplHGHw3T+nn5ecN pzK3XD+BvHNJGZ+3aPY2V29zL0vbJKRiRba1ZP0oP4IkcRfvTaMi6ETmRMmzAvln JcvUlcjZptzOqCgqy25xBCr69jHf6FS4sQ9lf2fnburfYJX4f+I90gkYpRUXzJwJ /LN5FUyNrk6yZCo+Y930FMt3ayqSy5gUVsL5U0qiJds0ayJq3mmbCtD/5Ce5i9Cv vUndBO7OmFFiE+CljQgL3rFbkJbpaNYE5PbdcfZx7vLiL4IWlJG/jZoOvYXc0XOM 6eXEVXgHzZ8VRw== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:03 2026 by rpki-client