This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json) Hash identifier: E5W0WQmUqU9SQX6EKZ3NZH6Rnd0toadJOL9p6lMXxco= Subject key identifier: 0B:D9:06:7D:0C:3A:3E:9D:D5:CD:72:8B:32:5F:4F:66:6D:F0:E3:85 Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Certificate serial: 019BDF253CE540A47384CEBDB1137176A7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft Manifest number: 1571 Signing time: Wed 21 Jan 2026 06:01:58 +0000 Manifest this update: Wed 21 Jan 2026 06:01:58 +0000 Manifest next update: Thu 22 Jan 2026 06:01:58 +0000 Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=) 2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: pKkcEBrziG4RUyzw6VSSCh519EFKM9qJOJZL4yghNDo=) 3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=) 4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:25:3c:e5:40:a4:73:84:ce:bd:b1:13:71:76:a7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68 Validity Not Before: Jan 21 06:01:58 2026 GMT Not After : Jan 22 06:01:58 2026 GMT Subject: CN=0bd9067d0c3a3e9dd5cd728b325f4f666df0e385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:aa:6d:10:88:6c:4b:06:20:be:16:32:1e:e0: 9b:b8:6d:5a:0f:9b:39:3a:8e:2c:31:e8:e3:2f:c8: 76:f5:3b:1c:20:87:b5:81:fc:42:94:43:b5:cd:04: 11:45:34:01:a9:34:84:70:15:f6:9e:2a:68:7d:f9: 6f:b7:5a:22:9a:17:85:67:a6:2a:c3:6d:32:fc:20: cc:a4:e1:70:8e:86:bc:50:2e:0c:60:18:20:f9:db: 27:c4:a4:02:52:95:6b:2a:d2:19:14:1b:d1:b2:c9: b5:d7:b3:83:af:a7:e1:50:52:36:77:b4:55:d6:ce: 71:fb:91:61:ca:7e:1b:fd:47:3e:b2:e6:54:c2:9f: 21:eb:20:0d:66:7c:ea:66:bf:9d:7c:96:5c:6e:98: 94:71:93:90:9f:63:2b:8d:3e:6c:b6:5d:4c:97:c4: a2:67:9f:55:26:2d:aa:bc:41:28:60:54:75:3c:27: 88:c4:75:74:5a:99:7a:9a:cc:50:35:a0:29:19:d5: 13:7a:4c:da:59:b7:92:1f:e3:be:59:10:a1:88:59: d4:e2:94:0d:7f:de:a1:d3:78:9e:a7:5e:d7:10:70: 3d:ea:62:b4:10:ca:0b:ac:10:27:7f:16:a9:56:35: 3b:0a:48:82:4c:84:8e:95:70:47:20:45:ee:0c:13: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:06:7D:0C:3A:3E:9D:D5:CD:72:8B:32:5F:4F:66:6D:F0:E3:85 X509v3 Authority Key Identifier: keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cb:04:54:f4:6a:91:52:84:75:cc:6f:50:a7:bc:7c:b5:34: aa:6b:b2:00:4c:74:66:83:c2:0e:a4:e4:d3:31:5b:9b:cc:f7: d7:30:63:1b:4f:06:90:e9:c7:3c:ba:f7:6d:4b:90:c1:92:bb: 66:ec:fb:63:bf:fd:c0:d1:12:a1:6b:eb:30:ee:bf:8e:94:b6: 44:a7:94:df:63:00:22:49:e2:f0:b2:9f:57:d6:ad:16:a5:48: f5:1c:29:c3:b4:56:cf:9f:9c:ea:2f:8a:80:d0:2e:01:40:9f: 41:a6:f9:04:ea:b2:61:14:c3:14:a9:21:88:ee:27:46:af:cb: c8:4e:ec:0b:e3:25:80:55:21:9f:f9:20:08:d2:61:c7:14:ac: 13:cc:03:de:6b:c8:3a:fd:f3:ff:bc:e9:ca:23:c5:81:04:c4: c1:93:ed:b1:9d:03:bb:f3:84:22:c2:9e:b5:0e:0e:56:93:fd: f1:2f:ab:6d:3d:f2:1e:05:db:91:87:7a:a0:33:26:6d:74:24: 66:6d:71:34:ea:78:cf:f3:f9:12:8b:50:0f:de:d3:df:99:53: a8:27:72:e9:55:fb:25:67:75:bb:07:dc:fa:2e:df:a9:6b:68: cc:99:b3:d4:36:21:52:11:ad:1c:f3:63:58:93:77:ee:90:86: 35:0d:28:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJTzlQKRzhM69sRNxdqfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx MmFjNjgwHhcNMjYwMTIxMDYwMTU4WhcNMjYwMTIyMDYwMTU4WjAzMTEwLwYDVQQD EygwYmQ5MDY3ZDBjM2EzZTlkZDVjZDcyOGIzMjVmNGY2NjZkZjBlMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqptEIhsSwYgvhYyHuCbuG1aD5s5 Oo4sMejjL8h29TscIIe1gfxClEO1zQQRRTQBqTSEcBX2nipofflvt1oimheFZ6Yq w20y/CDMpOFwjoa8UC4MYBgg+dsnxKQCUpVrKtIZFBvRssm117ODr6fhUFI2d7RV 1s5x+5Fhyn4b/Uc+suZUwp8h6yANZnzqZr+dfJZcbpiUcZOQn2MrjT5stl1Ml8Si Z59VJi2qvEEoYFR1PCeIxHV0Wpl6msxQNaApGdUTekzaWbeSH+O+WRChiFnU4pQN f96h03iep17XEHA96mK0EMoLrBAnfxapVjU7CkiCTISOlXBHIEXuDBPBXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvZBn0MOj6d1c1yizJfT2Zt8OOFMB8GA1UdIwQY MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScsEVPRq kVKEdcxvUKe8fLU0qmuyAEx0ZoPCDqTk0zFbm8z31zBjG08GkOnHPLr3bUuQwZK7 Zuz7Y7/9wNESoWvrMO6/jpS2RKeU32MAIkni8LKfV9atFqVI9Rwpw7RWz5+c6i+K gNAuAUCfQab5BOqyYRTDFKkhiO4nRq/LyE7sC+MlgFUhn/kgCNJhxxSsE8wD3mvI Ov3z/7zpyiPFgQTEwZPtsZ0Du/OEIsKetQ4OVpP98S+rbT3yHgXbkYd6oDMmbXQk Zm1xNOp4z/P5EotQD97T35lTqCdy6VX7JWd1uwfc+i7fqWtozJmz1DYhUhGtHPNj WJN37pCGNQ0opw== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:20 2026 by rpki-client