This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json) Hash identifier: d3mKj8W87AWDn84sjmjFxj1krW6VxUrJZdYEMP7eqoM= Subject key identifier: FE:03:1C:3D:11:28:1F:CB:2E:8D:B5:1F:06:8B:DC:AC:CC:18:9C:D3 Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Certificate serial: 019BFD65F086BCF58E76A5C73F2771B40DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft Manifest number: 177D Signing time: Tue 27 Jan 2026 03:01:14 +0000 Manifest this update: Tue 27 Jan 2026 03:01:14 +0000 Manifest next update: Wed 28 Jan 2026 03:01:14 +0000 Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=) 2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: ej7I8l0tG9WeJIpyK3YQqLJ5TdLHyATv99zJxnEdQjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:f0:86:bc:f5:8e:76:a5:c7:3f:27:71:b4:0d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Validity Not Before: Jan 27 03:01:14 2026 GMT Not After : Jan 28 03:01:14 2026 GMT Subject: CN=fe031c3d11281fcb2e8db51f068bdcaccc189cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:c6:ef:d0:d7:6c:79:16:8d:72:0a:7c:a5: 1a:d8:c2:6c:88:a6:88:e9:f3:7f:92:7d:3a:d2:17: 05:dc:ba:97:ef:6c:ce:fe:2e:12:52:95:6b:07:41: 97:a4:2b:c5:77:40:f2:cd:3f:e3:fc:43:4d:3e:34: 61:9b:c5:d1:a9:3c:87:a7:48:8b:a2:62:fa:d0:62: 7b:af:0f:e0:bf:69:f3:ba:57:79:3b:de:dc:4e:d0: da:54:a9:6b:38:0f:7b:97:cf:45:9c:a7:6e:22:11: e8:4b:cf:3b:6f:9a:82:fc:9b:d8:9f:16:9e:82:51: 8f:38:fb:c6:d2:62:fa:d1:2d:d5:bb:21:85:72:6a: 61:d6:29:a6:be:24:87:8b:6a:75:26:4e:38:fa:c8: a0:69:28:51:fd:f7:84:95:f6:01:14:86:76:86:47: e0:40:e8:f9:c4:f1:37:f0:be:d8:ea:8c:ca:dd:4c: 5e:4f:b8:5e:3e:e3:5d:9d:fc:b6:bb:2a:2d:1b:76: dc:c4:89:53:d0:aa:85:43:87:96:a9:cd:66:ca:76: 48:5c:80:8f:0d:5b:54:cb:7f:9b:b4:61:78:78:df: 46:33:42:67:42:85:02:a4:14:cf:7e:2a:d8:5b:75: 3c:a7:30:c5:68:59:a3:ca:18:aa:b6:64:d8:86:df: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:03:1C:3D:11:28:1F:CB:2E:8D:B5:1F:06:8B:DC:AC:CC:18:9C:D3 X509v3 Authority Key Identifier: keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8a:c7:3a:d7:30:ff:3e:2b:3e:70:f1:d5:21:2e:0e:c4:2f: 3d:ec:76:46:a9:f4:61:68:99:87:01:c4:87:b5:be:5a:25:29: aa:36:f6:cf:19:34:70:e1:c4:ec:23:c5:ab:40:ed:25:94:cb: cf:28:13:b0:8d:03:dd:b3:d0:9a:d2:8b:9d:63:e3:c8:13:89: af:b5:a9:99:5c:63:47:bc:ab:c8:41:94:a9:de:41:fa:fa:c4: 76:d1:12:02:06:41:e7:c9:ad:91:7d:4c:e9:f6:8a:3f:ac:f4: d7:9b:4c:a9:ca:af:a4:f5:b8:8e:ae:1c:c9:bb:4c:d8:1a:38: e4:66:7c:97:9f:30:e1:5c:03:f0:f4:cb:cf:86:f9:77:00:3c: 99:47:be:81:2b:c4:ce:2b:f7:15:85:71:bc:9e:a9:52:c2:fd: 7c:a6:60:58:fb:ee:73:6c:0a:c5:6a:a5:53:0a:31:81:06:c3: 8c:61:c0:fc:4e:37:01:83:eb:fd:b9:42:e7:a3:9a:36:95:74: 8a:97:9d:d2:51:5b:fc:75:56:9a:e8:71:81:15:86:d3:73:bc: 4a:6e:1a:ee:c6:00:c9:a3:d1:15:25:d0:84:af:4d:3b:e8:e4: 7e:9b:68:5f:ad:8e:34:59:26:3f:13:5f:f8:62:16:25:16:7c: e4:da:64:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZfCGvPWOdqXHPydxtA27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTM5ZjkzNTVkM2ViNzc4YjFiYjhlZTI3MjMzMjYwMTFh MTIyOWIwHhcNMjYwMTI3MDMwMTE0WhcNMjYwMTI4MDMwMTE0WjAzMTEwLwYDVQQD EyhmZTAzMWMzZDExMjgxZmNiMmU4ZGI1MWYwNjhiZGNhY2NjMTg5Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33G79DXbHkWjXIKfKUa2MJsiKaI 6fN/kn060hcF3LqX72zO/i4SUpVrB0GXpCvFd0DyzT/j/ENNPjRhm8XRqTyHp0iL omL60GJ7rw/gv2nzuld5O97cTtDaVKlrOA97l89FnKduIhHoS887b5qC/JvYnxae glGPOPvG0mL60S3VuyGFcmph1immviSHi2p1Jk44+sigaShR/feElfYBFIZ2hkfg QOj5xPE38L7Y6ozK3UxeT7hePuNdnfy2uyotG3bcxIlT0KqFQ4eWqc1mynZIXICP DVtUy3+btGF4eN9GM0JnQoUCpBTPfirYW3U8pzDFaFmjyhiqtmTYht/g0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4DHD0RKB/LLo21HwaL3KzMGJzTMB8GA1UdIwQY MBaAFKhTn5NV0+t3ixu47icjMmARoSKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2Ut NzFmNGM0N2Y1MDZlLzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2UtNzFmNGM0N2Y1MDZl LzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIrHOtcw /z4rPnDx1SEuDsQvPex2Rqn0YWiZhwHEh7W+WiUpqjb2zxk0cOHE7CPFq0DtJZTL zygTsI0D3bPQmtKLnWPjyBOJr7WpmVxjR7yryEGUqd5B+vrEdtESAgZB58mtkX1M 6faKP6z015tMqcqvpPW4jq4cybtM2Bo45GZ8l58w4VwD8PTLz4b5dwA8mUe+gSvE ziv3FYVxvJ6pUsL9fKZgWPvuc2wKxWqlUwoxgQbDjGHA/E43AYPr/blC56OaNpV0 iped0lFb/HVWmuhxgRWG03O8Sm4a7sYAyaPRFSXQhK9NO+jkfptoX62ONFkmPxNf +GIWJRZ85Npk+Q== -----END CERTIFICATE-----Generated at Tue Jan 27 09:59:18 2026 by rpki-client