This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json) Hash identifier: XARjCkRrT4nq6xgU1IJ8AxVUm+XgviP7qAHnPkW1VGU= Subject key identifier: 41:CC:31:AE:74:82:83:9B:E7:43:EC:4E:C2:75:38:92:36:4E:4A:48 Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Certificate serial: 019BFA9BF572C169A56606C83B06342F2CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft Manifest number: 0C1C Signing time: Mon 26 Jan 2026 14:01:23 +0000 Manifest this update: Mon 26 Jan 2026 14:01:23 +0000 Manifest next update: Tue 27 Jan 2026 14:01:23 +0000 Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=) 2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: qOJfPi8Nx3yRozNNzlV9cjbUV40ZRt5jOtFpjHMMR8E=) 3: yJnPYZA1yZSCQgYd_0lPnb8sfL4.roa (hash: ee1f7M50/x8p9bLR5E0wEJgtc9ejznbk546kHlNn9qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:f5:72:c1:69:a5:66:06:c8:3b:06:34:2f:2c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Validity Not Before: Jan 26 14:01:23 2026 GMT Not After : Jan 27 14:01:23 2026 GMT Subject: CN=41cc31ae7482839be743ec4ec2753892364e4a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3d:bd:97:53:09:cc:3c:a1:c9:56:c2:e4:33: d2:a4:a7:9b:8c:25:5d:aa:6b:ca:0d:6b:d1:7f:b1: d0:52:09:c9:2b:b3:c2:64:88:0b:75:aa:bc:7a:44: b0:f3:1f:9e:3a:c9:5a:6a:f5:67:88:27:31:d8:c0: df:05:0d:ef:22:1c:ed:82:58:db:e5:94:69:c7:b9: 97:5a:07:29:2b:66:0e:68:d8:8c:7f:d7:03:87:d1: 4f:cb:51:8e:33:81:e2:0b:0e:47:2c:14:7f:2e:b0: 4a:f1:5c:b6:1d:ba:03:ee:3b:ad:d8:37:55:96:7c: b8:e3:b0:4b:97:22:b8:3b:24:ad:80:41:56:57:a0: 37:30:b8:40:94:49:f2:98:55:f6:ec:11:27:ac:3b: 3c:bc:da:9b:c1:9c:c9:40:e2:62:6e:7b:6a:c3:92: 80:90:d7:41:e5:9d:cb:0f:fb:db:6e:05:f0:83:e8: 18:c9:b0:71:ca:68:12:d5:98:e4:88:b0:c5:78:9b: 50:b5:63:e7:64:78:74:48:a3:b6:d0:1b:b4:9b:f2: 47:01:68:07:3a:6a:e5:7b:62:9f:52:a6:f6:44:c3: 60:8e:3f:38:c7:50:5d:08:ee:33:dc:84:8a:35:8e: 4c:64:a0:be:69:90:f8:4f:31:e7:71:24:2c:36:bf: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CC:31:AE:74:82:83:9B:E7:43:EC:4E:C2:75:38:92:36:4E:4A:48 X509v3 Authority Key Identifier: keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:9e:ee:83:04:96:a8:77:b2:67:6b:31:46:aa:de:51:92: ca:94:74:38:61:97:30:a0:0a:f1:46:5a:0b:56:bc:2b:e7:44: b3:8b:c7:33:64:3d:71:a1:c0:7f:5c:10:f8:4d:38:42:67:d5: 35:2c:b5:f5:12:90:ee:5b:fd:dd:6a:f4:7b:0e:40:48:bd:65: a0:3b:7f:74:37:14:84:1e:a8:32:c5:ad:1c:25:4c:af:2a:44: 37:5f:c6:de:45:a7:36:44:7b:64:bd:c8:0c:4b:e0:67:04:6c: ab:61:84:3c:d7:df:62:d8:8a:bd:d6:a4:3e:e2:13:d0:9e:f3: 07:0e:fc:d3:a2:b7:fa:77:32:78:52:b3:ee:6e:45:90:c7:3c: 78:4c:1a:22:a4:38:29:b7:ff:a1:04:3d:8d:0c:bc:75:f0:50: b0:0d:67:f7:83:a4:e7:4e:9e:ae:60:36:5a:44:b0:56:2b:35: e4:b6:ed:09:d3:3c:de:8f:02:1f:10:28:07:bb:7b:0f:83:88: 59:9a:86:8d:e2:cd:50:a5:2a:c3:48:ee:d2:6b:ab:3f:0c:04: 95:2f:38:40:68:f7:31:ee:78:b1:2f:c3:cf:f6:4a:ef:64:2a: 37:54:66:a5:63:3a:98:51:eb:03:96:d5:2f:b4:29:de:84:ab: 91:c6:6b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/VywWmlZgbIOwY0Lyy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj ZWFjNzgwHhcNMjYwMTI2MTQwMTIzWhcNMjYwMTI3MTQwMTIzWjAzMTEwLwYDVQQD Eyg0MWNjMzFhZTc0ODI4MzliZTc0M2VjNGVjMjc1Mzg5MjM2NGU0YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z29l1MJzDyhyVbC5DPSpKebjCVd qmvKDWvRf7HQUgnJK7PCZIgLdaq8ekSw8x+eOslaavVniCcx2MDfBQ3vIhztgljb 5ZRpx7mXWgcpK2YOaNiMf9cDh9FPy1GOM4HiCw5HLBR/LrBK8Vy2HboD7jut2DdV lny447BLlyK4OyStgEFWV6A3MLhAlEnymFX27BEnrDs8vNqbwZzJQOJibntqw5KA kNdB5Z3LD/vbbgXwg+gYybBxymgS1ZjkiLDFeJtQtWPnZHh0SKO20Bu0m/JHAWgH Omrle2KfUqb2RMNgjj84x1BdCO4z3ISKNY5MZKC+aZD4TzHncSQsNr9H4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHMMa50goOb50PsTsJ1OJI2TkpIMB8GA1UdIwQY MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt OWJiYjQyZmE4Y2VkLzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFCe7oME lqh3smdrMUaq3lGSypR0OGGXMKAK8UZaC1a8K+dEs4vHM2Q9caHAf1wQ+E04QmfV NSy19RKQ7lv93Wr0ew5ASL1loDt/dDcUhB6oMsWtHCVMrypEN1/G3kWnNkR7ZL3I DEvgZwRsq2GEPNffYtiKvdakPuIT0J7zBw7806K3+ncyeFKz7m5FkMc8eEwaIqQ4 Kbf/oQQ9jQy8dfBQsA1n94Ok506ermA2WkSwVis15LbtCdM83o8CHxAoB7t7D4OI WZqGjeLNUKUqw0ju0murPwwElS84QGj3Me54sS/Dz/ZK72QqN1RmpWM6mFHrA5bV L7Qp3oSrkcZrWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 19:10:54 2026 by rpki-client