This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: QVNpX0ACqBfZ1INGzSWLZxXrOUnekUba7wCxF7pq3/A= Subject key identifier: 00:2C:8B:07:25:47:5C:98:B9:68:59:C9:E2:11:43:3D:9C:71:FC:E8 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019BFA9C2DB14E9C4EAF5E558BAA1F61534C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0E96 Signing time: Mon 26 Jan 2026 14:01:37 +0000 Manifest this update: Mon 26 Jan 2026 14:01:37 +0000 Manifest next update: Tue 27 Jan 2026 14:01:37 +0000 Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=) 2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=) 3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=) 4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: ejfNOwcNeq6BS2YRYrgyV0CGg57Kr2+e2khwtvqK3Js=) 6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=) 7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=) 8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=) 9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=) 10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=) 11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=) 12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:2d:b1:4e:9c:4e:af:5e:55:8b:aa:1f:61:53:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 26 14:01:37 2026 GMT Not After : Jan 27 14:01:37 2026 GMT Subject: CN=002c8b0725475c98b96859c9e211433d9c71fce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:a7:ba:5e:53:1b:16:12:93:12:77:ca:cb: 5b:5f:2d:27:29:6a:61:1a:99:d6:4f:97:19:37:d7: aa:f4:e9:2b:86:6c:27:a6:fc:46:1a:dd:9a:5f:e9: e2:f9:02:8f:7d:cf:ac:03:26:76:81:5d:b9:03:7b: eb:41:0a:a3:5f:ed:63:2d:88:a4:1b:d8:e7:a2:2f: 65:a3:85:66:cc:14:d6:b4:74:28:61:5e:21:e8:46: a7:b4:0c:2d:df:0c:e3:1d:58:41:2f:db:b2:6a:08: 7f:56:fd:c9:69:c8:a9:fe:c2:78:24:60:bf:f9:72: c6:20:ba:41:9f:cf:a0:19:5f:56:5c:7f:7a:75:22: 3a:b8:5f:03:92:b1:f5:90:5a:82:49:cf:ba:4c:ab: 4c:9f:91:95:88:8a:26:d1:34:68:74:9f:b7:96:4a: 6f:4f:00:93:8a:36:5a:34:73:25:85:03:89:d0:b5: fe:38:37:0b:a1:36:b5:ff:4e:47:23:80:fd:66:d9: f1:20:d3:dd:e1:20:05:d0:a2:2e:8f:92:57:12:a1: 13:f6:d0:62:54:1a:7f:83:c3:18:8e:16:9e:b5:ec: 5b:b0:12:1a:bc:4e:8c:54:a4:d2:66:44:45:33:2a: 42:48:70:6d:b5:a6:59:b7:d1:56:a1:43:13:84:5c: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2C:8B:07:25:47:5C:98:B9:68:59:C9:E2:11:43:3D:9C:71:FC:E8 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9e:ea:e9:8e:73:be:a5:fa:4d:9b:a3:da:8c:86:d6:f4:3b: 3b:f2:d9:2a:d0:f9:72:06:1d:8d:1e:a0:73:6b:b2:f0:19:2c: 33:62:4b:7e:e4:ef:10:fb:70:49:e3:f0:a7:f3:a2:1e:e2:c1: 50:2b:d4:be:c7:92:1e:f8:e1:dd:99:52:5c:4a:ff:44:28:b1: ad:a7:9b:80:eb:90:0e:73:94:57:8f:15:eb:11:cf:d8:af:1a: 08:f2:18:2f:dc:95:16:6d:a0:96:e0:4b:a2:e9:0b:da:78:c4: 09:db:e1:ba:32:64:97:e7:36:24:c8:d8:60:89:35:2f:ef:fe: 3d:7e:0e:86:ef:2c:42:87:ee:2e:5d:de:c8:82:5f:cf:35:44: 3e:f6:bf:f3:b9:0c:7b:b5:18:6b:c7:0e:f1:1b:43:8e:7c:03: 7f:15:3f:02:b5:f5:09:52:72:7e:f3:f9:92:e0:fd:90:47:c2: 47:bf:79:86:80:6f:34:24:19:d0:e8:24:e0:0c:76:df:79:b3: 58:1d:59:78:16:34:67:cb:68:55:ec:f0:1e:df:3e:01:01:09: b7:52:11:5d:6c:bf:aa:b2:e8:6d:cd:ee:29:1c:52:83:3f:88: c2:08:6c:76:93:c8:f4:5b:48:6c:63:9e:15:d6:d9:71:cc:97: 10:3f:9e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nC2xTpxOr15Vi6ofYVNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTI2MTQwMTM3WhcNMjYwMTI3MTQwMTM3WjAzMTEwLwYDVQQD EygwMDJjOGIwNzI1NDc1Yzk4Yjk2ODU5YzllMjExNDMzZDljNzFmY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l+nul5TGxYSkxJ3ystbXy0nKWph GpnWT5cZN9eq9OkrhmwnpvxGGt2aX+ni+QKPfc+sAyZ2gV25A3vrQQqjX+1jLYik G9jnoi9lo4VmzBTWtHQoYV4h6EantAwt3wzjHVhBL9uyagh/Vv3Jacip/sJ4JGC/ +XLGILpBn8+gGV9WXH96dSI6uF8DkrH1kFqCSc+6TKtMn5GViIom0TRodJ+3lkpv TwCTijZaNHMlhQOJ0LX+ODcLoTa1/05HI4D9ZtnxINPd4SAF0KIuj5JXEqET9tBi VBp/g8MYjhaetexbsBIavE6MVKTSZkRFMypCSHBttaZZt9FWoUMThFyJOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAsiwclR1yYuWhZyeIRQz2ccfzoMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ7q6Y5z vqX6TZuj2oyG1vQ7O/LZKtD5cgYdjR6gc2uy8BksM2JLfuTvEPtwSePwp/OiHuLB UCvUvseSHvjh3ZlSXEr/RCixraebgOuQDnOUV48V6xHP2K8aCPIYL9yVFm2gluBL oukL2njECdvhujJkl+c2JMjYYIk1L+/+PX4Ohu8sQofuLl3eyIJfzzVEPva/87kM e7UYa8cO8RtDjnwDfxU/ArX1CVJyfvP5kuD9kEfCR795hoBvNCQZ0Ogk4Ax233mz WB1ZeBY0Z8toVezwHt8+AQEJt1IRXWy/qrLobc3uKRxSgz+IwghsdpPI9FtIbGOe FdbZccyXED+eGw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:53 2026 by rpki-client