This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft File: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft (raw, json) Hash identifier: pe/EIWlfG/vCA2ZVKDj++PlwsqAsvgqupKZevCwWdQQ= Subject key identifier: 1D:9D:BF:ED:4A:C3:D3:AF:54:9B:08:7F:9C:44:78:46:EE:89:36:6C Authority key identifier: 40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04 Certificate issuer: /CN=40c3d37be435a9c33f1c63e50d0d6464ed161004 Certificate serial: 019BFEE61183E4061B8352C0A7EE4468AFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft Manifest number: 1748 Signing time: Tue 27 Jan 2026 10:00:49 +0000 Manifest this update: Tue 27 Jan 2026 10:00:49 +0000 Manifest next update: Wed 28 Jan 2026 10:00:49 +0000 Files and hashes: 1: QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl (hash: 97h4lP8tAgNeR1wVoqfrkNlYX9anM8xF9MCTYDlQj3w=) 2: bgpTMrzfW7CHzYzGyELGTZfYatA.roa (hash: 8Ca3eykdBAqM1JLqwTpF6Ihh+Qzj9biCwnw8ueEG7vM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:e6:11:83:e4:06:1b:83:52:c0:a7:ee:44:68:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40c3d37be435a9c33f1c63e50d0d6464ed161004 Validity Not Before: Jan 27 10:00:49 2026 GMT Not After : Jan 28 10:00:49 2026 GMT Subject: CN=1d9dbfed4ac3d3af549b087f9c447846ee89366c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:29:fe:7d:c8:98:4a:12:c4:e1:dc:39:6d: 03:3e:85:1b:4f:ed:98:5d:39:f2:ca:dd:db:03:e1: 60:0b:19:c8:63:3f:2c:a6:dc:94:25:70:15:77:55: 1b:d3:b2:87:3d:3f:d6:76:67:37:9b:62:b8:99:55: 18:34:99:f9:1f:27:68:f8:34:66:76:ee:52:5d:4a: 2e:53:ba:95:d5:41:6d:c9:4c:38:83:fd:0a:b4:7f: 8c:e7:3c:e2:02:40:5f:63:80:74:6c:59:d2:0c:e7: bf:b0:44:4b:d3:1a:70:83:e3:e0:4b:80:be:4c:93: 26:00:4d:b4:43:ed:c3:8b:32:7e:ed:43:77:de:16: 1c:f3:66:4c:e8:ba:ae:b5:c6:5a:2d:50:7e:e0:b7: 31:4c:2e:6a:3f:98:cf:e5:a8:05:3a:e4:bf:64:ca: 61:79:79:54:b4:64:ab:99:a9:d6:62:ca:74:b7:75: 38:b0:02:b5:93:01:b6:92:58:85:d1:24:c4:c6:d6: 63:02:37:4d:89:54:38:0c:fe:1c:92:b9:47:9b:e4: 3d:f0:05:49:55:d6:20:33:30:e6:b7:e6:8c:8d:0f: a0:50:c4:90:44:2a:37:05:75:b6:63:4b:8d:e2:e6: 7a:49:17:1c:95:8c:d1:6f:c3:ef:40:8a:ad:6e:de: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:BF:ED:4A:C3:D3:AF:54:9B:08:7F:9C:44:78:46:EE:89:36:6C X509v3 Authority Key Identifier: keyid:40:C3:D3:7B:E4:35:A9:C3:3F:1C:63:E5:0D:0D:64:64:ED:16:10:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7e3c7f-2184-403d-80cf-6e4b3c92a827/1/QMPTe-Q1qcM_HGPlDQ1kZO0WEAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c8:ac:c8:84:41:75:4d:1b:40:12:58:f3:f6:53:2f:e0:5a: 2c:0e:9a:d6:50:22:b7:e6:08:f6:93:d7:fe:47:cc:b0:21:f7: 84:1e:09:6d:03:3c:96:d6:d1:52:05:9f:e1:01:c3:ce:70:31: 9c:cc:99:17:3a:6e:32:45:68:61:a9:db:be:c5:9d:03:86:73: 3e:df:61:10:a4:bd:f0:c9:64:df:06:93:5d:40:bc:f6:75:bc: 03:09:8d:cc:47:0b:a5:f5:09:79:e3:29:43:a1:6c:4e:e8:61: 61:6b:e0:d7:9d:20:22:e5:18:a1:ba:15:8c:a2:6a:8e:1a:7d: d2:e7:ed:72:fb:33:49:0f:6a:4b:b5:2e:1f:d2:c0:07:c9:73: 32:a5:38:99:da:37:a3:8d:62:e3:be:16:3e:ff:81:e1:36:c0: 64:d9:2f:c6:7c:5a:2b:41:87:38:57:64:59:56:c2:56:fd:53: 49:59:17:6c:59:18:ca:01:db:c8:e9:e1:23:fc:59:1c:b1:dd: a7:41:93:48:33:be:3c:59:d3:11:15:79:24:3a:68:9c:ff:66: fc:be:4d:a7:55:14:81:7f:a6:9b:b3:ac:bf:94:ee:14:de:66: 40:73:ac:67:ca:2f:0e:2d:cd:b8:88:13:9b:5c:95:e2:79:c8: b1:d8:13:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+5hGD5AYbg1LAp+5EaK/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYzNkMzdiZTQzNWE5YzMzZjFjNjNlNTBkMGQ2NDY0ZWQx NjEwMDQwHhcNMjYwMTI3MTAwMDQ5WhcNMjYwMTI4MTAwMDQ5WjAzMTEwLwYDVQQD EygxZDlkYmZlZDRhYzNkM2FmNTQ5YjA4N2Y5YzQ0Nzg0NmVlODkzNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoYp/n3ImEoSxOHcOW0DPoUbT+2Y XTnyyt3bA+FgCxnIYz8sptyUJXAVd1Ub07KHPT/Wdmc3m2K4mVUYNJn5Hydo+DRm du5SXUouU7qV1UFtyUw4g/0KtH+M5zziAkBfY4B0bFnSDOe/sERL0xpwg+PgS4C+ TJMmAE20Q+3DizJ+7UN33hYc82ZM6LqutcZaLVB+4LcxTC5qP5jP5agFOuS/ZMph eXlUtGSrmanWYsp0t3U4sAK1kwG2kliF0STExtZjAjdNiVQ4DP4ckrlHm+Q98AVJ VdYgMzDmt+aMjQ+gUMSQRCo3BXW2Y0uN4uZ6SRcclYzRb8PvQIqtbt71rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2dv+1Kw9OvVJsIf5xEeEbuiTZsMB8GA1UdIwQY MBaAFEDD03vkNanDPxxj5Q0NZGTtFhAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2Yt NmU0YjNjOTJhODI3LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83ZTNjN2YtMjE4NC00MDNkLTgwY2YtNmU0YjNjOTJhODI3 LzEvUU1QVGUtUTFxY01fSEdQbERRMWtaTzBXRUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8isyIRB dU0bQBJY8/ZTL+BaLA6a1lAit+YI9pPX/kfMsCH3hB4JbQM8ltbRUgWf4QHDznAx nMyZFzpuMkVoYanbvsWdA4ZzPt9hEKS98Mlk3waTXUC89nW8AwmNzEcLpfUJeeMp Q6FsTuhhYWvg150gIuUYoboVjKJqjhp90uftcvszSQ9qS7UuH9LAB8lzMqU4mdo3 o41i474WPv+B4TbAZNkvxnxaK0GHOFdkWVbCVv1TSVkXbFkYygHbyOnhI/xZHLHd p0GTSDO+PFnTERV5JDponP9m/L5Np1UUgX+mm7Osv5TuFN5mQHOsZ8ovDi3NuIgT m1yV4nnIsdgTvw== -----END CERTIFICATE-----Generated at Tue Jan 27 17:22:20 2026 by rpki-client