This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json) Hash identifier: 4lKxqJ4H3ARenZZLUroD13TqyRkB7xNEA2PhubDbsHc= Subject key identifier: E8:A8:E5:76:BC:69:66:74:B9:F7:D5:0C:8D:92:D2:86:FA:F9:20:2D Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c Certificate serial: 019BFA2D77C823892CBCE29937CBD7B72A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft Manifest number: 0F0C Signing time: Mon 26 Jan 2026 12:00:42 +0000 Manifest this update: Mon 26 Jan 2026 12:00:42 +0000 Manifest next update: Tue 27 Jan 2026 12:00:42 +0000 Files and hashes: 1: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: hEfemxkRBo3kHIyAgh9Dm9JCZilgRhrz7HgI4ftDoQ8=) 2: oLlYP-c7d1IiKVSrcUMhwmbY61s.roa (hash: AU8NC+uYOmw2IhzeeedIVabaHATngMqK3THaOWJcgZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:77:c8:23:89:2c:bc:e2:99:37:cb:d7:b7:2a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c Validity Not Before: Jan 26 12:00:42 2026 GMT Not After : Jan 27 12:00:42 2026 GMT Subject: CN=e8a8e576bc696674b9f7d50c8d92d286faf9202d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:02:cc:0c:d7:2d:e1:8f:b4:cb:0d:81:83: 13:fc:7f:91:14:e7:74:4f:48:5e:50:83:43:3b:51: bd:c3:72:f2:96:e2:18:9d:12:dc:8d:13:d3:65:fd: ce:ec:bd:24:78:87:9c:4f:a5:60:9c:d8:5e:7c:43: 1f:7b:70:53:15:8b:b2:2d:43:c5:60:8d:12:5a:05: e0:a6:92:d2:3b:eb:b5:e8:c9:ca:cc:85:a7:66:90: 40:06:cc:0d:8c:32:1d:d3:77:e1:17:73:76:a4:27: 64:09:dc:b6:4d:d5:4c:75:18:91:73:0d:3a:cf:6f: ab:22:56:f1:48:78:81:d2:aa:f4:c4:23:02:bc:bb: 1c:ca:31:d1:3c:0b:33:ab:6c:d0:bd:dd:fe:1d:c5: a7:6a:15:ae:fc:58:fc:62:44:af:57:a1:61:37:50: 34:81:bd:fb:6c:97:ae:d1:1f:64:de:dd:2c:26:f7: 5f:ca:59:02:a4:ac:d5:75:a1:4b:31:5f:2a:28:c7: e0:5d:d9:15:63:d2:eb:61:7c:cd:a5:fd:e2:3e:8c: a5:df:48:26:6c:e8:86:92:4b:e5:bc:1d:a5:1e:56: b9:8b:6a:69:b5:0d:a9:c9:5e:a2:60:ab:57:10:31: 67:2c:a3:d3:23:2a:a9:42:4c:55:05:72:72:96:11: 43:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:E5:76:BC:69:66:74:B9:F7:D5:0C:8D:92:D2:86:FA:F9:20:2D X509v3 Authority Key Identifier: keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f4:31:fd:03:44:97:98:49:62:58:3d:d5:f9:b6:14:52:1a: 0d:f5:2c:c8:24:ee:82:56:a8:9f:51:9d:3d:22:17:32:3b:2d: ef:4b:ea:37:9d:dd:6f:e3:2e:64:32:20:46:97:6b:49:6a:c8: 71:5e:21:95:de:cc:95:dd:ff:a4:74:0e:7e:97:93:bc:45:5a: 93:d8:ac:27:9e:a7:dd:dc:7c:a3:e0:08:40:76:52:b2:3a:d4: 8f:ac:d7:cb:1c:7a:a1:7e:9c:36:d7:c6:f0:39:ab:a2:90:2f: 66:7e:79:5d:68:70:5a:9b:67:ea:7e:6d:0e:14:58:60:8c:80: 74:a0:e6:49:5b:60:53:47:67:c4:c5:15:f9:a4:79:3f:c3:c5: 6a:95:2d:dd:6c:f7:40:43:a3:87:2c:82:c4:f2:45:20:87:00: b9:33:d0:73:a6:bc:82:48:9e:63:25:5b:63:0e:bd:1a:4c:b6: 76:3e:4e:b4:88:5a:37:a5:a4:44:a2:45:7e:c8:d5:01:36:99: 80:4f:1f:70:9b:6b:ab:03:bf:f0:ae:4b:ce:bd:db:47:29:cf: 55:01:1d:83:10:79:9e:ec:ca:44:43:5f:b7:45:28:b8:72:1c: 90:97:24:1e:78:28:4c:11:4f:dd:14:c5:43:11:a0:58:27:da: 38:05:1f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LXfII4ksvOKZN8vXtyouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1 ODJiNmMwHhcNMjYwMTI2MTIwMDQyWhcNMjYwMTI3MTIwMDQyWjAzMTEwLwYDVQQD EyhlOGE4ZTU3NmJjNjk2Njc0YjlmN2Q1MGM4ZDkyZDI4NmZhZjkyMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FcCzAzXLeGPtMsNgYMT/H+RFOd0 T0heUINDO1G9w3LyluIYnRLcjRPTZf3O7L0keIecT6VgnNhefEMfe3BTFYuyLUPF YI0SWgXgppLSO+u16MnKzIWnZpBABswNjDId03fhF3N2pCdkCdy2TdVMdRiRcw06 z2+rIlbxSHiB0qr0xCMCvLscyjHRPAszq2zQvd3+HcWnahWu/Fj8YkSvV6FhN1A0 gb37bJeu0R9k3t0sJvdfylkCpKzVdaFLMV8qKMfgXdkVY9LrYXzNpf3iPoyl30gm bOiGkkvlvB2lHla5i2pptQ2pyV6iYKtXEDFnLKPTIyqpQkxVBXJylhFDCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOio5Xa8aWZ0uffVDI2S0ob6+SAtMB8GA1UdIwQY MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2 LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvQx/QNE l5hJYlg91fm2FFIaDfUsyCTuglaon1GdPSIXMjst70vqN53db+MuZDIgRpdrSWrI cV4hld7Mld3/pHQOfpeTvEVak9isJ56n3dx8o+AIQHZSsjrUj6zXyxx6oX6cNtfG 8DmropAvZn55XWhwWptn6n5tDhRYYIyAdKDmSVtgU0dnxMUV+aR5P8PFapUt3Wz3 QEOjhyyCxPJFIIcAuTPQc6a8gkieYyVbYw69Gky2dj5OtIhaN6WkRKJFfsjVATaZ gE8fcJtrqwO/8K5Lzr3bRynPVQEdgxB5nuzKRENft0UouHIckJckHngoTBFP3RTF QxGgWCfaOAUfbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:48:00 2026 by rpki-client