This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json) Hash identifier: /S8ck9B5S5f1i4eNiQBCJXFaf0UvfHVJAvURZXqVKI4= Subject key identifier: C2:BA:11:AF:3C:01:CA:82:BC:13:45:5D:7C:75:FE:73:59:B9:CF:35 Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Certificate serial: 019BFE0A37A6ED62BAF83D1E13A1204DEB54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 06:00:41 +0000 Manifest this update: Tue 27 Jan 2026 06:00:41 +0000 Manifest next update: Wed 28 Jan 2026 06:00:41 +0000 Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=) 2: AOsYF79xJ6mwpSoq_CsTPxIhIUc.roa (hash: eHh19EYVK7Y6kkFMfVMowI7crTkOBt+ZcdNlnXxLe2I=) 3: Lc1jl7QVxqLwMWxBrIVxsneb__U.roa (hash: E1vTmbk4SrydL0KXJtJee0AsNy8nI/ShD3+SVqKy/u4=) 4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: MIHgP6hHYeFzCvGByVPH9+YVRz2c2lT0iTo5UoTsgLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:37:a6:ed:62:ba:f8:3d:1e:13:a1:20:4d:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7 Validity Not Before: Jan 27 06:00:41 2026 GMT Not After : Jan 28 06:00:41 2026 GMT Subject: CN=c2ba11af3c01ca82bc13455d7c75fe7359b9cf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:60:bb:91:1a:c0:3b:31:af:4b:79:55:ca: 5c:ab:2d:a2:2e:dc:4e:a2:b5:0f:a5:6b:6a:07:c4: a3:04:b1:a8:d4:c8:cc:42:be:af:c2:bc:4a:70:6c: a4:4f:15:85:2f:ba:b2:58:45:ba:dd:20:66:09:de: 52:44:73:0d:45:9d:99:00:79:6c:fd:39:92:92:2f: 39:66:0c:58:29:66:38:36:e0:53:95:50:0a:48:43: 4e:28:c9:7a:18:c6:76:12:2d:ec:d9:eb:3a:6b:d4: 6c:d7:ca:29:31:02:1e:6f:94:13:a9:43:ef:a2:19: 7f:b4:e1:9d:32:f5:0e:b9:1b:02:83:40:65:ae:55: 71:3e:a5:e3:d6:0b:6b:6b:db:e5:62:35:d1:5b:50: 0a:f0:99:ad:58:98:82:93:e5:0b:f5:f1:68:6d:72: 7a:97:ee:6d:43:8f:34:0e:49:f3:de:d6:f2:7a:3a: 5e:01:e7:8d:44:e2:cb:83:80:0a:33:2f:31:b0:22: 62:22:53:eb:e4:c6:33:a3:f1:2e:ca:97:e8:03:af: 99:bf:43:91:01:e7:2c:8c:f9:b0:cb:e8:21:2e:90: 6d:d4:4f:b2:dd:38:0a:05:0a:ae:10:06:bc:24:0b: 6f:3c:c2:27:28:41:de:07:04:a2:00:ba:61:b7:2b: 2f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BA:11:AF:3C:01:CA:82:BC:13:45:5D:7C:75:FE:73:59:B9:CF:35 X509v3 Authority Key Identifier: keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:27:7e:bd:2b:0b:f2:fb:58:89:56:8d:72:3e:61:32:db:86: 99:93:a5:53:55:91:00:b0:86:81:3e:bf:a5:e6:2c:85:1e:6b: 74:a1:26:aa:ba:f6:71:3a:d0:b6:cc:37:65:1b:a8:74:2e:3f: b3:4f:06:be:08:3c:a7:d6:6c:c0:0e:13:8e:b1:b7:2a:cb:f1: b9:b0:81:46:bc:d7:07:14:5b:b3:4f:d4:89:c4:23:95:9a:18: 34:e9:e5:6a:3a:bd:f7:d6:23:a5:4c:7a:68:52:58:9b:a9:e6: fb:6e:be:68:e0:dd:12:77:fa:e1:3d:aa:5d:08:88:9f:19:0a: c5:d1:f6:90:4a:5a:a8:5a:d1:bc:27:b6:6d:da:0f:18:58:04: 23:51:7c:e2:2a:31:97:be:ed:3f:a3:7d:13:10:2b:01:6c:b8: a6:34:18:09:58:78:7d:7f:a7:64:80:49:e7:24:d9:10:ea:08: d7:cd:a5:53:b4:69:e3:6a:4c:df:01:a0:ab:9f:85:4a:d9:ce: 5d:cc:83:9e:55:d3:9d:76:1a:1b:f0:c1:27:1c:7f:a0:ad:50: 3f:61:72:a9:1a:1c:93:bf:a9:e3:c4:a1:d3:3b:45:9c:12:7a: 26:77:34:d7:a0:a8:42:0a:5a:bc:8f:06:d5:83:33:6d:1e:6d: 87:f6:55:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cjem7WK6+D0eE6EgTetUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3 NmFhYTcwHhcNMjYwMTI3MDYwMDQxWhcNMjYwMTI4MDYwMDQxWjAzMTEwLwYDVQQD EyhjMmJhMTFhZjNjMDFjYTgyYmMxMzQ1NWQ3Yzc1ZmU3MzU5YjljZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4dgu5EawDsxr0t5Vcpcqy2iLtxO orUPpWtqB8SjBLGo1MjMQr6vwrxKcGykTxWFL7qyWEW63SBmCd5SRHMNRZ2ZAHls /TmSki85ZgxYKWY4NuBTlVAKSENOKMl6GMZ2Ei3s2es6a9Rs18opMQIeb5QTqUPv ohl/tOGdMvUOuRsCg0BlrlVxPqXj1gtra9vlYjXRW1AK8JmtWJiCk+UL9fFobXJ6 l+5tQ480Dknz3tbyejpeAeeNROLLg4AKMy8xsCJiIlPr5MYzo/EuypfoA6+Zv0OR AecsjPmwy+ghLpBt1E+y3TgKBQquEAa8JAtvPMInKEHeBwSiALphtysv8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK6Ea88AcqCvBNFXXx1/nNZuc81MB8GA1UdIwQY MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2 LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWid+vSsL 8vtYiVaNcj5hMtuGmZOlU1WRALCGgT6/peYshR5rdKEmqrr2cTrQtsw3ZRuodC4/ s08Gvgg8p9ZswA4TjrG3KsvxubCBRrzXBxRbs0/UicQjlZoYNOnlajq999YjpUx6 aFJYm6nm+26+aODdEnf64T2qXQiInxkKxdH2kEpaqFrRvCe2bdoPGFgEI1F84iox l77tP6N9ExArAWy4pjQYCVh4fX+nZIBJ5yTZEOoI182lU7Rp42pM3wGgq5+FStnO XcyDnlXTnXYaG/DBJxx/oK1QP2FyqRock7+p48Sh0ztFnBJ6Jnc016CoQgpavI8G 1YMzbR5th/ZVhw== -----END CERTIFICATE-----Generated at Tue Jan 27 12:45:26 2026 by rpki-client