This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json) Hash identifier: 3UwIurxq4uHz9HxmnP+ndPUgPF8s/vE2beA4u/JmiBE= Subject key identifier: 65:A9:6E:B7:69:09:78:A1:B5:DE:BA:B2:23:CF:12:0D:B4:CC:3E:3C Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Certificate serial: 019BFA2DD9401B3CA0E308EAE5CE3EA84DEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft Manifest number: 17F7 Signing time: Mon 26 Jan 2026 12:01:07 +0000 Manifest this update: Mon 26 Jan 2026 12:01:07 +0000 Manifest next update: Tue 27 Jan 2026 12:01:07 +0000 Files and hashes: 1: 1-AAmQBvbizmeqxFRtgv0PZkdbaw.roa (hash: szjslYw6N3jLu7zRrYsKftErRAg7H6aZn8Z02fpRv1s=) 2: 2SpwrO6K0EQk8qayjEpp_xZ4_wg.roa (hash: /eCsd3Bhg9xFbAs/4U2EOV2JeWdYeKmfkwHyIef/wIk=) 3: BQI7xLWHF9ZNAK5nM3AaG90bJf4.roa (hash: tCWzvd6+gpJWA01AphfhvnpNLp2NN7klr1zWRXxTKKA=) 4: Iah6OtePYjsFUK1ItaCxT3f3zKY.roa (hash: 0NSq5x0ip6moKx2U8dB9ksLnbIPKXG3GFtAROl7MkCQ=) 5: LnMBUYRb2MAMHOeFTnomV7j2CZs.roa (hash: +pH1K3ZbwRmdoZFv5Vag+ZbNrNoIYDgpbvJxI73PilY=) 6: ZP3LCtKrBkzUel77FsVXywGgRk8.roa (hash: i1nVxawv2gpA1GeSUFY59H1040iN9e9Zdxt8Om5Sw0Y=) 7: bBojKVehlumh6Ast16SxahZ3K0s.roa (hash: 1tb0mGMov/yRUa9MAYEK5/9XOpWqU57O4jNArw90xkI=) 8: iycZ2loJdRjirtO_seZ634r8_x0.roa (hash: thC+/QzA8XYVNXPbLOpRmVtVajPX50NvJVqTRlkA1kA=) 9: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: XoEL0JAKdqo86LDKRe6J4dbHeL+KO/ito1M+SV+B+eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:d9:40:1b:3c:a0:e3:08:ea:e5:ce:3e:a8:4d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315 Validity Not Before: Jan 26 12:01:07 2026 GMT Not After : Jan 27 12:01:07 2026 GMT Subject: CN=65a96eb7690978a1b5debab223cf120db4cc3e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:c1:07:25:a0:69:89:65:07:0d:92:16:bb: 7a:fd:fe:6b:d1:bd:4c:33:cd:2d:a1:94:d6:a9:b6: 2e:26:58:74:d0:a9:4b:e7:39:c1:69:c3:a3:a4:26: f0:87:4b:49:07:25:27:62:91:97:73:1f:28:2a:fc: 91:3d:7f:c4:0d:bf:da:bd:fa:31:07:e7:23:1a:7f: e6:f8:20:00:c9:56:cc:f3:21:51:e3:0a:a8:c3:b8: b6:d0:41:67:7c:3c:4c:a6:33:49:3e:9c:77:ec:6a: f7:43:01:36:fe:2e:e5:10:4f:75:4c:4d:9c:22:50: 38:4c:f1:1f:77:70:50:2b:ef:50:21:2f:10:40:de: 56:c3:40:97:c6:b6:32:23:fe:02:e2:02:9b:d6:3e: b3:0e:82:10:8d:d4:68:b4:76:b6:8d:d8:20:c1:fd: 55:ab:de:4f:f2:ae:2c:e4:14:34:ab:e2:3c:d9:5e: 0a:0c:3c:c6:91:50:4a:20:0d:d5:e3:28:6e:0b:22: 60:32:54:68:b4:9f:3b:f1:89:7e:d5:63:28:89:5a: 7e:9e:a1:f4:df:88:2d:5a:cd:14:4b:3c:d4:7e:a2: 65:75:71:99:d8:b0:25:c0:e2:d7:81:d8:7d:34:74: 16:94:7d:ed:57:55:4d:aa:4b:a5:48:7d:7e:f6:f8: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A9:6E:B7:69:09:78:A1:B5:DE:BA:B2:23:CF:12:0D:B4:CC:3E:3C X509v3 Authority Key Identifier: keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:a7:31:c9:bf:d2:21:c3:ae:e2:bf:6e:a0:8c:e1:6a:f1: bc:a8:03:c9:57:70:39:43:b9:f3:c7:44:27:11:a9:8d:2d:5b: ed:3e:b9:22:60:a7:54:1a:1b:7c:26:03:63:09:25:a9:08:23: 16:69:44:fa:02:44:10:ae:a7:6e:a7:14:91:05:17:11:15:db: 87:d2:6d:35:68:ab:9f:de:1d:3c:4a:31:2c:06:b0:d8:da:e3: 00:d3:19:89:4c:c9:b8:7f:7d:ff:7e:b8:34:8a:10:f1:dc:3c: 87:d9:75:45:4d:07:f9:18:3e:f3:fa:82:f8:13:fc:ce:ea:55: c3:0d:3f:eb:b9:18:f9:49:96:2b:d7:79:38:cb:ef:2a:77:0b: 0c:46:90:43:14:aa:c7:26:42:fa:ce:6e:10:16:f7:09:44:58: a5:ae:2b:0b:c9:a4:f2:92:63:f2:a7:0c:2a:d6:a5:20:0e:bc: b7:d3:4d:a7:37:a9:28:97:aa:6e:e3:6b:ef:d8:52:87:fd:51: b4:29:a3:5e:3e:83:8b:d7:84:24:0b:ab:33:de:ed:64:81:47: 69:ac:0d:9e:8c:63:39:f8:79:aa:6e:2b:7f:87:85:c5:09:43: fe:93:7e:49:93:d5:37:4c:5d:80:59:f6:34:ad:60:27:de:44: c0:ed:5d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LdlAGzyg4wjq5c4+qE3rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3 NWQzMTUwHhcNMjYwMTI2MTIwMTA3WhcNMjYwMTI3MTIwMTA3WjAzMTEwLwYDVQQD Eyg2NWE5NmViNzY5MDk3OGExYjVkZWJhYjIyM2NmMTIwZGI0Y2MzZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9HBByWgaYllBw2SFrt6/f5r0b1M M80toZTWqbYuJlh00KlL5znBacOjpCbwh0tJByUnYpGXcx8oKvyRPX/EDb/avfox B+cjGn/m+CAAyVbM8yFR4wqow7i20EFnfDxMpjNJPpx37Gr3QwE2/i7lEE91TE2c IlA4TPEfd3BQK+9QIS8QQN5Ww0CXxrYyI/4C4gKb1j6zDoIQjdRotHa2jdggwf1V q95P8q4s5BQ0q+I82V4KDDzGkVBKIA3V4yhuCyJgMlRotJ878Yl+1WMoiVp+nqH0 34gtWs0USzzUfqJldXGZ2LAlwOLXgdh9NHQWlH3tV1VNqkulSH1+9vj1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWpbrdpCXihtd66siPPEg20zD48MB8GA1UdIwQY MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt MzNkNzI4NDMzYzExLzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvKnMcm/ 0iHDruK/bqCM4WrxvKgDyVdwOUO588dEJxGpjS1b7T65ImCnVBobfCYDYwklqQgj FmlE+gJEEK6nbqcUkQUXERXbh9JtNWirn94dPEoxLAaw2NrjANMZiUzJuH99/364 NIoQ8dw8h9l1RU0H+Rg+8/qC+BP8zupVww0/67kY+UmWK9d5OMvvKncLDEaQQxSq xyZC+s5uEBb3CURYpa4rC8mk8pJj8qcMKtalIA68t9NNpzepKJeqbuNr79hSh/1R tCmjXj6Di9eEJAurM97tZIFHaawNnoxjOfh5qm4rf4eFxQlD/pN+SZPVN0xdgFn2 NK1gJ95EwO1dpg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:56:12 2026 by rpki-client