This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json) Hash identifier: /HNBnm3XO276U+5nI5eugIgIWr5w+MmR/BYC949wXNE= Subject key identifier: C7:B9:FB:7D:F0:9D:41:BA:EE:EA:2A:DE:EF:50:19:F5:49:45:1E:F8 Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595 Certificate serial: 019BFCC16E2AD02630E9F1287F43656EF53B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft Manifest number: 0CF8 Signing time: Tue 27 Jan 2026 00:01:33 +0000 Manifest this update: Tue 27 Jan 2026 00:01:33 +0000 Manifest next update: Wed 28 Jan 2026 00:01:33 +0000 Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: atUm1o/7CL61q6kHApr3o/grv2tDWXH+GomIM+jZRNI=) 2: TaElX9hisZ5XrROOglyTLI-d0fw.roa (hash: FeglI4bS4YwdcMyJ/Aqxz6zLx/NMHHbKBPa39hMUKnM=) 3: xdOptcLghP-Uvz4M-klrTMY4ES4.roa (hash: Slwt7gL42EyfqojCKzhTPCC7jAxxoAR7bu6b3w09Sxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:6e:2a:d0:26:30:e9:f1:28:7f:43:65:6e:f5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595 Validity Not Before: Jan 27 00:01:33 2026 GMT Not After : Jan 28 00:01:33 2026 GMT Subject: CN=c7b9fb7df09d41baeeea2adeef5019f549451ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:55:db:e9:1f:08:e3:f8:c3:7c:82:c0:f1: 0e:8e:1e:79:04:3a:af:47:83:0a:15:fb:ea:bd:a9: 8d:23:77:b5:11:41:61:a8:17:70:9b:47:75:ed:6e: 81:30:3b:33:11:99:e7:f2:67:17:f6:64:cb:14:fd: 4e:90:4f:72:cb:98:a5:a1:18:ea:dd:d3:7d:c0:67: 9d:b7:f5:16:81:1c:97:2b:48:2a:fa:33:61:e5:0c: 21:ec:9c:48:ac:07:62:38:8d:ae:be:aa:be:fd:ff: bf:ec:84:46:5a:a3:77:3f:9a:95:cc:da:a4:f8:6f: 24:a5:f7:ea:bc:6b:45:00:b0:f8:05:42:9d:56:68: 9d:c6:9b:51:1d:8d:87:f5:d8:d2:94:51:eb:ce:e2: d3:74:c2:cd:7b:e8:f9:90:c0:77:2c:af:37:13:da: fc:85:b5:98:69:67:4c:8c:23:cc:f1:12:df:c7:7d: 83:50:4c:48:d9:c6:9f:67:05:c9:d7:7e:21:a3:62: 83:81:5d:78:2f:ec:6c:68:99:3b:fd:bb:37:91:19: cf:ce:b8:72:ad:cf:81:df:d4:3d:8d:6f:4b:64:2b: 49:7b:3b:f5:58:a2:b0:bd:ff:10:a4:d2:5a:b6:8a: 41:4b:e7:48:49:fb:58:86:bc:74:78:05:c2:12:72: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:FB:7D:F0:9D:41:BA:EE:EA:2A:DE:EF:50:19:F5:49:45:1E:F8 X509v3 Authority Key Identifier: keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:78:f4:61:86:b2:f3:d4:44:be:e6:9b:a1:6d:29:03:d1: 04:58:ff:61:00:97:a2:0e:d9:ca:ad:57:c4:af:d2:22:b1:b3: 59:11:9a:da:5c:e2:13:bd:0e:48:f2:a1:71:f5:8e:eb:48:bd: d2:26:10:dc:98:c5:ae:1d:fd:1b:f0:1b:67:f1:ca:fa:3f:01: df:27:c7:2e:7e:cd:67:a7:24:4b:18:d3:c8:8c:34:77:4b:5d: 5c:e2:46:f4:d1:17:20:88:f2:5c:a0:0b:0a:68:8e:e0:8c:1d: 1c:a7:24:04:67:8a:d9:d2:d5:6e:8f:6f:71:4d:e6:1a:b6:70: 04:c6:03:10:fb:41:b6:3b:47:9c:26:97:22:37:7e:20:d1:03: 82:c1:93:bc:13:83:2d:81:3e:d1:33:dd:90:0b:d8:1e:ad:8f: c3:74:ca:5e:77:1f:54:92:c3:51:1c:e3:d2:ba:4c:30:c6:63: b6:96:ca:df:c1:db:b0:bd:bd:17:a2:af:46:ac:06:29:94:b5: e7:3b:20:3b:8c:3d:cd:bd:a0:6f:50:74:33:e7:22:c5:84:a7: ed:ee:0e:f6:ef:5b:28:55:b7:f3:e7:13:f2:87:90:1b:d6:aa: 7a:2d:52:a5:f9:81:83:7a:29:30:57:8a:f2:1f:ec:16:90:1f: ba:9b:aa:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wW4q0CYw6fEof0NlbvU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1 ZGQ1OTUwHhcNMjYwMTI3MDAwMTMzWhcNMjYwMTI4MDAwMTMzWjAzMTEwLwYDVQQD EyhjN2I5ZmI3ZGYwOWQ0MWJhZWVlYTJhZGVlZjUwMTlmNTQ5NDUxZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfhV2+kfCOP4w3yCwPEOjh55BDqv R4MKFfvqvamNI3e1EUFhqBdwm0d17W6BMDszEZnn8mcX9mTLFP1OkE9yy5iloRjq 3dN9wGedt/UWgRyXK0gq+jNh5Qwh7JxIrAdiOI2uvqq+/f+/7IRGWqN3P5qVzNqk +G8kpffqvGtFALD4BUKdVmidxptRHY2H9djSlFHrzuLTdMLNe+j5kMB3LK83E9r8 hbWYaWdMjCPM8RLfx32DUExI2cafZwXJ134ho2KDgV14L+xsaJk7/bs3kRnPzrhy rc+B39Q9jW9LZCtJezv1WKKwvf8QpNJatopBS+dISftYhrx0eAXCEnIMBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe5+33wnUG67uoq3u9QGfVJRR74MB8GA1UdIwQY MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwB49GGG svPURL7mm6FtKQPRBFj/YQCXog7Zyq1XxK/SIrGzWRGa2lziE70OSPKhcfWO60i9 0iYQ3JjFrh39G/AbZ/HK+j8B3yfHLn7NZ6ckSxjTyIw0d0tdXOJG9NEXIIjyXKAL CmiO4IwdHKckBGeK2dLVbo9vcU3mGrZwBMYDEPtBtjtHnCaXIjd+INEDgsGTvBOD LYE+0TPdkAvYHq2Pw3TKXncfVJLDURzj0rpMMMZjtpbK38HbsL29F6KvRqwGKZS1 5zsgO4w9zb2gb1B0M+cixYSn7e4O9u9bKFW38+cT8oeQG9aqei1SpfmBg3opMFeK 8h/sFpAfupuqfw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:49 2026 by rpki-client