This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json) Hash identifier: 5XRCp61F4b6bwK5Z7CdQfxsYEqVDiZJ7WviAnnFvJp8= Subject key identifier: 05:9A:CA:1A:5E:95:DF:F1:D6:88:28:4F:DB:E5:62:1E:FA:2A:03:9B Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Certificate serial: 019BFBE531BB50EB473A26DC22846A1CEB01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 20:01:00 +0000 Manifest this update: Mon 26 Jan 2026 20:01:00 +0000 Manifest next update: Tue 27 Jan 2026 20:01:00 +0000 Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: E1v4d2KEfqxIfUdw07gxoRXBP2ZTu7qMMRQzGN4IFSQ=) 2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=) 3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:31:bb:50:eb:47:3a:26:dc:22:84:6a:1c:eb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Validity Not Before: Jan 26 20:01:00 2026 GMT Not After : Jan 27 20:01:00 2026 GMT Subject: CN=059aca1a5e95dff1d688284fdbe5621efa2a039b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:3c:7f:c8:4a:7b:78:0b:89:d2:dd:3f:8b: f8:7b:fe:63:54:e2:de:56:02:a8:56:5e:d1:8b:b9: 24:b5:01:26:77:d9:36:6e:76:c1:bc:d9:d0:8f:c8: 92:85:77:3f:e8:4b:86:97:01:32:55:cf:26:82:d2: c2:b6:9f:e1:19:09:cd:4c:43:29:65:23:c1:8b:33: 52:b1:a4:59:40:6b:43:34:35:98:86:a8:4a:11:f6: f4:fa:12:5f:a9:fc:26:8e:14:93:db:75:c2:72:e1: 25:11:e7:56:26:4c:58:07:ce:5b:ff:fa:d7:41:f7: aa:bb:b0:85:37:e9:6a:c2:3c:a4:83:fa:10:87:c7: 63:ae:97:8d:31:ac:75:41:c4:c8:d2:5b:a9:ad:f0: 84:9b:ec:51:6d:a5:76:d7:f5:84:31:62:78:1c:f6: d7:80:ac:b5:a3:3a:fe:49:ce:cb:d4:2a:39:a9:b4: db:ce:a7:31:db:e4:a0:68:26:26:c0:4e:aa:e0:8c: b7:12:ac:1d:48:0c:08:c0:0a:81:89:73:1c:22:0a: f3:ad:91:6d:77:68:01:88:ec:12:30:d0:b3:31:31: 7a:59:3e:04:4c:13:30:ae:55:32:11:68:4f:09:5d: f9:bd:ec:49:2c:b6:e5:bd:1e:f9:48:f4:a1:7c:99: 75:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9A:CA:1A:5E:95:DF:F1:D6:88:28:4F:DB:E5:62:1E:FA:2A:03:9B X509v3 Authority Key Identifier: keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a3:a6:25:de:d3:3d:e0:a5:d3:d6:14:34:99:2b:83:8b:28: 9f:8d:bc:bf:33:fb:db:b7:07:b0:56:e3:0d:5e:ec:25:94:d5: 90:18:93:55:18:57:d2:91:a4:e8:11:e3:30:9a:76:61:ed:23: fd:ed:94:dc:d2:fd:76:70:50:ea:72:08:35:d3:c5:c7:45:f4: ab:3c:95:94:6e:cf:df:f5:2b:7f:33:52:c9:54:82:24:4c:e6: 79:d1:49:5f:46:47:27:8f:a0:5c:c6:b6:27:16:d1:3c:00:8a: 7e:6f:d8:7e:83:35:6e:00:08:b1:b7:23:c9:aa:bb:70:36:4c: 01:ac:75:75:25:28:ad:64:92:aa:83:b7:c0:55:61:94:80:2a: 7d:71:6a:2a:5c:c3:be:83:74:3e:1f:d2:76:0c:63:43:63:88: 92:f8:6f:5d:21:de:06:87:98:40:c5:43:4a:2e:4e:7a:a9:23: 5d:05:01:b5:da:30:a1:ee:03:47:9b:31:ff:32:61:ef:ed:44: 81:05:6d:27:6c:12:55:a6:bb:b9:6f:92:a5:03:1b:97:37:4b: ee:e6:71:10:a6:b1:aa:26:d8:58:30:e1:17:bd:06:16:ca:f3: eb:76:d9:1b:28:bd:3f:24:ab:22:cd:01:fd:f9:ef:9e:a4:fa: f1:e5:e5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75TG7UOtHOibcIoRqHOsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1 MmUyNTEwHhcNMjYwMTI2MjAwMTAwWhcNMjYwMTI3MjAwMTAwWjAzMTEwLwYDVQQD EygwNTlhY2ExYTVlOTVkZmYxZDY4ODI4NGZkYmU1NjIxZWZhMmEwMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFw8f8hKe3gLidLdP4v4e/5jVOLe VgKoVl7Ri7kktQEmd9k2bnbBvNnQj8iShXc/6EuGlwEyVc8mgtLCtp/hGQnNTEMp ZSPBizNSsaRZQGtDNDWYhqhKEfb0+hJfqfwmjhST23XCcuElEedWJkxYB85b//rX Qfequ7CFN+lqwjykg/oQh8djrpeNMax1QcTI0luprfCEm+xRbaV21/WEMWJ4HPbX gKy1ozr+Sc7L1Co5qbTbzqcx2+SgaCYmwE6q4Iy3EqwdSAwIwAqBiXMcIgrzrZFt d2gBiOwSMNCzMTF6WT4ETBMwrlUyEWhPCV35vexJLLblvR75SPShfJl1QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWayhpeld/x1ogoT9vlYh76KgObMB8GA1UdIwQY MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKOmJd7T PeCl09YUNJkrg4son428vzP727cHsFbjDV7sJZTVkBiTVRhX0pGk6BHjMJp2Ye0j /e2U3NL9dnBQ6nIINdPFx0X0qzyVlG7P3/UrfzNSyVSCJEzmedFJX0ZHJ4+gXMa2 JxbRPACKfm/YfoM1bgAIsbcjyaq7cDZMAax1dSUorWSSqoO3wFVhlIAqfXFqKlzD voN0Ph/SdgxjQ2OIkvhvXSHeBoeYQMVDSi5OeqkjXQUBtdowoe4DR5sx/zJh7+1E gQVtJ2wSVaa7uW+SpQMblzdL7uZxEKaxqibYWDDhF70GFsrz63bZGyi9PySrIs0B /fnvnqT68eXlsw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:00 2026 by rpki-client