This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json) Hash identifier: J2cYj3WmwpCmf+2d1mx+LLc+CA1sTrGt1Rx+GqFrUa4= Subject key identifier: EE:CB:74:0A:EB:62:41:C4:5B:C5:54:20:BF:A1:A7:8C:00:B2:93:5C Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Certificate serial: 019BFE41C2E49F4B370D89D767DE9B9AFC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft Manifest number: 1830 Signing time: Tue 27 Jan 2026 07:01:21 +0000 Manifest this update: Tue 27 Jan 2026 07:01:21 +0000 Manifest next update: Wed 28 Jan 2026 07:01:21 +0000 Files and hashes: 1: GcXx7V4h4z9qV0rR6xIoEuG5UPs.roa (hash: y19juCHJkLHTZDZWVjPEXZFfP2PTvjivfjDw/XeOEOc=) 2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: jrD631o3Cw5xju0/ZGzf9eMSC9m+Xt3EMJYzntu/2vc=) 3: W7xXQepVYqOcN3HtIVDmtoxvm_U.roa (hash: 1dqGMvwgE4nyLDHC/icI0sBfdJkRLj5FLFOTHDIJ6Uo=) 4: WlAKMNPruSZgFaPvtYJyDu67Od0.roa (hash: 45tdzajp934hoCjwF+mGUtWY46Eoj3bjg9Xls4lMV3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:c2:e4:9f:4b:37:0d:89:d7:67:de:9b:9a:fc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a Validity Not Before: Jan 27 07:01:21 2026 GMT Not After : Jan 28 07:01:21 2026 GMT Subject: CN=eecb740aeb6241c45bc55420bfa1a78c00b2935c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:76:c1:a5:0f:fa:d2:2a:40:60:76:65:1d:46: 6c:cf:97:b9:64:30:be:4c:e2:84:d0:bb:42:e1:08: 84:f1:c1:70:7a:d3:21:1a:52:04:cd:af:e7:50:fc: 86:db:e2:66:67:21:99:22:f8:80:4a:ee:c7:6f:25: 66:21:a2:62:0a:58:cb:d7:8f:af:e9:40:2e:5e:84: 38:24:e3:20:fe:66:48:de:5b:f3:ba:a5:c5:9a:e0: 0a:ef:f2:8e:79:bc:4b:d2:c7:53:06:10:77:99:b3: 95:86:bc:a8:1a:cd:62:a0:35:6a:e3:9a:a1:d7:a1: c7:db:fc:71:85:94:63:b5:97:ee:3e:0a:af:71:a9: 53:15:32:13:b8:56:76:8f:95:f5:0a:1a:b3:ad:68: 11:2e:ea:22:67:6d:1d:b5:89:a1:db:5a:63:e9:75: 64:5f:75:56:53:14:e8:d5:9a:e0:e5:6b:f5:55:4b: b2:df:9a:77:6e:cd:e5:c9:4f:f0:ff:d7:9b:ba:fb: 0a:11:9d:9a:af:be:87:1c:99:45:44:90:9e:ae:aa: 56:db:f8:ed:1d:ce:18:6f:b5:a6:43:41:71:46:e8: 4f:1b:6b:d4:21:12:82:e5:48:15:72:15:01:1e:1f: 07:9d:ee:02:c1:bc:63:18:ae:43:2e:20:9b:bd:a2: 71:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CB:74:0A:EB:62:41:C4:5B:C5:54:20:BF:A1:A7:8C:00:B2:93:5C X509v3 Authority Key Identifier: keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:32:fb:56:18:83:77:2b:8d:4a:a3:7e:6f:62:31:17:93:7c: 26:21:66:06:c9:29:2c:da:bb:b8:93:a0:4e:27:f1:1d:79:f4: 85:6f:53:4c:f6:e6:8f:fb:59:36:bb:19:2f:33:23:ef:f9:96: 08:39:fd:cd:f5:e7:a0:f0:f8:78:9f:af:e1:a4:30:be:4c:a8: 23:66:92:00:0a:be:bc:cd:a2:7a:f9:9e:d8:c9:d7:ad:97:7e: 91:df:2d:e4:fa:e6:94:49:89:a9:10:a1:cc:0a:0a:68:71:2c: 08:b5:22:c3:a4:e6:5a:20:c8:c3:f6:78:9d:02:6c:b0:02:69: 3b:6d:f5:86:c6:f2:f6:85:b1:e5:7b:de:6b:67:c8:e9:7e:80: cb:28:32:93:b8:ea:f7:bc:a2:32:8c:12:e6:30:61:d5:8c:5b: 90:24:38:16:fb:39:45:c6:d4:b4:fb:e4:59:c7:35:f9:b6:47: 49:f0:cf:fb:c3:9f:ca:1e:88:09:f4:3b:c1:a6:34:7e:3e:86: f4:65:ae:3a:64:0b:73:b0:ae:be:32:34:13:95:ad:97:03:03: 66:19:e3:6e:03:3e:9d:8e:61:9a:cd:0e:4d:dd:78:cb:35:de: c0:d7:78:12:3d:41:3a:2d:fd:cc:16:31:66:28:12:b5:92:a3: af:8e:b3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QcLkn0s3DYnXZ96bmvxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1 ZmQxNmEwHhcNMjYwMTI3MDcwMTIxWhcNMjYwMTI4MDcwMTIxWjAzMTEwLwYDVQQD EyhlZWNiNzQwYWViNjI0MWM0NWJjNTU0MjBiZmExYTc4YzAwYjI5MzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3bBpQ/60ipAYHZlHUZsz5e5ZDC+ TOKE0LtC4QiE8cFwetMhGlIEza/nUPyG2+JmZyGZIviASu7HbyVmIaJiCljL14+v 6UAuXoQ4JOMg/mZI3lvzuqXFmuAK7/KOebxL0sdTBhB3mbOVhryoGs1ioDVq45qh 16HH2/xxhZRjtZfuPgqvcalTFTITuFZ2j5X1ChqzrWgRLuoiZ20dtYmh21pj6XVk X3VWUxTo1Zrg5Wv1VUuy35p3bs3lyU/w/9ebuvsKEZ2ar76HHJlFRJCerqpW2/jt Hc4Yb7WmQ0FxRuhPG2vUIRKC5UgVchUBHh8Hne4CwbxjGK5DLiCbvaJxoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7LdArrYkHEW8VUIL+hp4wAspNcMB8GA1UdIwQY MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDL7VhiD dyuNSqN+b2IxF5N8JiFmBskpLNq7uJOgTifxHXn0hW9TTPbmj/tZNrsZLzMj7/mW CDn9zfXnoPD4eJ+v4aQwvkyoI2aSAAq+vM2ievme2MnXrZd+kd8t5PrmlEmJqRCh zAoKaHEsCLUiw6TmWiDIw/Z4nQJssAJpO231hsby9oWx5Xvea2fI6X6Ayygyk7jq 97yiMowS5jBh1YxbkCQ4Fvs5RcbUtPvkWcc1+bZHSfDP+8Ofyh6ICfQ7waY0fj6G 9GWuOmQLc7CuvjI0E5WtlwMDZhnjbgM+nY5hms0OTd14yzXewNd4Ej1BOi39zBYx ZigStZKjr46zZQ== -----END CERTIFICATE-----Generated at Tue Jan 27 11:51:41 2026 by rpki-client