This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json) Hash identifier: xx3y9NsfW+LuX0xvqIVYWfFZSyxeP+JyLOuDnVCeLNs= Subject key identifier: FD:73:87:E5:69:4D:69:F4:C0:0A:1D:11:72:D4:BD:36:A1:DB:3B:22 Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019BDEB7520A20572B30F4740F0960FFC9DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft Manifest number: 17DB Signing time: Wed 21 Jan 2026 04:01:54 +0000 Manifest this update: Wed 21 Jan 2026 04:01:54 +0000 Manifest next update: Thu 22 Jan 2026 04:01:54 +0000 Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: ILLi5CjFTkVakt5oeTXwHpKaLkwPDzCCvas+VnrWtJM=) 2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=) 3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=) 4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b7:52:0a:20:57:2b:30:f4:74:0f:09:60:ff:c9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Jan 21 04:01:54 2026 GMT Not After : Jan 22 04:01:54 2026 GMT Subject: CN=fd7387e5694d69f4c00a1d1172d4bd36a1db3b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:19:cd:39:51:30:c0:92:e7:4c:55:f9:7e: 3e:92:31:9d:82:d2:d4:56:1a:89:24:cc:be:df:7c: 7b:86:eb:28:18:00:be:2d:fc:02:7d:98:f8:7f:cc: 57:58:46:c2:ff:64:3e:91:6d:d5:96:82:a6:f4:3d: 62:f3:d3:27:eb:75:c2:9a:7b:78:95:4e:8b:b4:ef: c9:e1:3e:a0:7e:e4:25:4c:d4:7c:c0:a1:72:1e:8e: 86:f5:b3:ef:63:cc:96:85:e5:07:d1:63:da:14:16: b4:75:eb:47:76:7e:32:2e:8d:84:33:74:ae:e8:0d: 4f:86:e8:40:3f:67:48:84:37:a8:19:49:2d:d1:a8: c2:f0:38:9c:6d:ff:e3:a1:4b:c6:29:c7:f3:1c:a9: 77:77:ed:82:34:c0:1d:34:b4:fe:6a:dc:0b:6d:ae: 0a:49:fc:2b:d3:23:f0:96:23:2a:9c:a3:bf:4d:0f: 11:7d:6e:f8:10:1c:6a:dc:1c:2f:87:ca:fb:7c:87: 82:00:a9:19:9b:b1:f2:f1:f4:4c:17:18:66:54:c3: b4:4e:1a:42:75:9a:e1:22:23:e3:42:d3:44:55:36: 7a:82:53:0e:79:d5:6d:98:d4:f3:a2:f8:b0:6c:79: 34:55:d9:e6:20:56:2a:91:3d:a8:5e:e3:ae:87:d4: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:73:87:E5:69:4D:69:F4:C0:0A:1D:11:72:D4:BD:36:A1:DB:3B:22 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c2:40:b6:30:71:26:66:c7:5c:33:a2:97:bf:51:86:b7:78: 01:43:8f:56:50:e9:d4:80:60:95:0f:74:bf:86:f9:30:f9:cf: b0:20:f3:0f:bf:d6:5a:bf:69:0c:35:dc:ac:d9:89:d5:40:19: 38:18:c0:c6:38:27:33:44:fb:83:b8:17:d3:92:9f:1b:0d:53: aa:08:0e:68:6b:67:eb:72:a1:c8:b9:d9:4d:9b:8a:43:bc:94: 50:2d:8b:33:ee:ae:6f:d8:e0:01:77:db:b4:46:fe:8b:a1:44: eb:6a:bb:c8:a5:84:f8:17:78:d2:23:70:f8:77:cd:b3:1c:07: 04:50:a9:32:47:2f:af:b9:de:5e:c3:68:24:9c:3c:cc:96:64: e4:dd:6a:6c:9c:e6:a8:dd:04:0c:f5:98:96:08:a2:31:84:32: b2:3e:66:e9:3f:5f:41:7f:38:d1:74:7a:f3:b1:12:30:75:e8: a8:a6:d5:c2:8a:21:7b:5a:04:cc:12:bb:3e:c7:0a:d0:e6:1b: ef:45:9e:35:85:d0:0a:17:d9:81:02:c8:4f:64:4b:65:7d:eb: 91:22:2a:98:ae:c6:7b:60:da:08:b1:11:87:06:59:9b:96:df: c9:48:e4:a4:0a:64:ef:34:6c:f0:ca:21:6d:b8:f6:fd:2f:fd: b1:69:36:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvet1IKIFcrMPR0Dwlg/8ncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjYwMTIxMDQwMTU0WhcNMjYwMTIyMDQwMTU0WjAzMTEwLwYDVQQD EyhmZDczODdlNTY5NGQ2OWY0YzAwYTFkMTE3MmQ0YmQzNmExZGIzYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ekZzTlRMMCS50xV+X4+kjGdgtLU VhqJJMy+33x7husoGAC+LfwCfZj4f8xXWEbC/2Q+kW3VloKm9D1i89Mn63XCmnt4 lU6LtO/J4T6gfuQlTNR8wKFyHo6G9bPvY8yWheUH0WPaFBa0detHdn4yLo2EM3Su 6A1PhuhAP2dIhDeoGUkt0ajC8Dicbf/joUvGKcfzHKl3d+2CNMAdNLT+atwLba4K Sfwr0yPwliMqnKO/TQ8RfW74EBxq3Bwvh8r7fIeCAKkZm7Hy8fRMFxhmVMO0ThpC dZrhIiPjQtNEVTZ6glMOedVtmNTzoviwbHk0VdnmIFYqkT2oXuOuh9SSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1zh+VpTWn0wAodEXLUvTah2zsiMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMJAtjBx JmbHXDOil79Rhrd4AUOPVlDp1IBglQ90v4b5MPnPsCDzD7/WWr9pDDXcrNmJ1UAZ OBjAxjgnM0T7g7gX05KfGw1TqggOaGtn63KhyLnZTZuKQ7yUUC2LM+6ub9jgAXfb tEb+i6FE62q7yKWE+Bd40iNw+HfNsxwHBFCpMkcvr7neXsNoJJw8zJZk5N1qbJzm qN0EDPWYlgiiMYQysj5m6T9fQX840XR687ESMHXoqKbVwoohe1oEzBK7PscK0OYb 70WeNYXQChfZgQLIT2RLZX3rkSIqmK7Ge2DaCLERhwZZm5bfyUjkpApk7zRs8Moh bbj2/S/9sWk2Lg== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:25 2026 by rpki-client