This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json) Hash identifier: Uhg/QEX8u1R32J3vr9PYOzNQrNA8dDz/DQl70V2NDhI= Subject key identifier: 74:54:A8:C6:A1:E9:B9:59:15:79:D9:E6:4C:5D:68:33:23:C5:CE:0D Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944 Certificate serial: 019BAF4B6D9E5FBC5C8606E3C1CCD4D0FCA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft Manifest number: 170F Signing time: Sun 11 Jan 2026 23:01:54 +0000 Manifest this update: Sun 11 Jan 2026 23:01:54 +0000 Manifest next update: Mon 12 Jan 2026 23:01:54 +0000 Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=) 2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: Vf9jYTQXXeEFKd8CFUh1WjrARrEgEE/9wh5CQEjdfTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:6d:9e:5f:bc:5c:86:06:e3:c1:cc:d4:d0:fc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944 Validity Not Before: Jan 11 23:01:54 2026 GMT Not After : Jan 12 23:01:54 2026 GMT Subject: CN=7454a8c6a1e9b9591579d9e64c5d683323c5ce0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:12:57:50:2c:35:03:1e:ce:4f:06:41:c6: aa:3c:04:9f:0d:03:a8:71:57:9c:2b:c1:2f:30:2f: cf:97:56:d4:f3:b1:25:33:82:df:68:f4:f5:02:ef: 4c:d9:26:d6:63:63:b9:35:4e:49:ff:90:4e:2e:8e: 7f:3b:2c:b2:43:a1:3e:80:a8:91:48:96:93:da:4c: 38:34:dd:45:bb:b3:37:a6:e9:ee:3e:67:0f:37:66: b4:95:55:a2:95:f6:8c:32:9c:19:b0:0d:2c:1a:56: 5b:3a:26:33:61:c9:25:b0:71:c6:05:09:c3:29:4e: 81:ce:3b:47:17:88:88:f2:f0:bc:95:08:34:2d:2a: ff:3c:4d:0d:06:49:a9:6d:7d:02:13:18:b1:3f:34: 84:0a:87:81:76:95:08:c9:69:0a:ee:a5:cc:41:83: b6:94:91:80:c1:89:32:88:ed:6b:f3:06:18:2d:15: b7:3a:fb:b6:20:d3:e2:01:e1:91:f8:04:e4:fb:94: 47:16:75:5e:28:47:5c:bb:63:88:99:8c:0e:ea:88: 71:58:c3:6c:b7:de:b2:da:4c:9c:58:5a:86:35:dc: 69:c6:be:19:8b:47:73:d0:cf:60:c7:5a:23:d7:e2: 64:99:37:35:fa:0d:71:46:9a:a7:45:c5:f9:ab:48: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:54:A8:C6:A1:E9:B9:59:15:79:D9:E6:4C:5D:68:33:23:C5:CE:0D X509v3 Authority Key Identifier: keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:38:4c:e0:52:d4:88:13:4d:4b:b0:53:aa:48:02:95:fd:f5: 00:0a:4c:57:ff:80:14:a3:30:b9:f4:7e:47:f5:78:6d:75:46: f8:bc:4c:38:74:4e:f7:fe:67:5a:34:4d:09:6a:fd:98:26:53: 27:eb:02:a4:50:e1:4e:2b:a3:c3:51:0d:01:4d:2a:f8:8d:ef: ae:83:5f:7c:4a:a9:93:a7:91:c5:ec:d6:71:09:0d:be:d0:8b: 06:59:d7:d3:46:89:6b:07:2a:f5:72:df:1a:fa:34:f4:f6:85: 44:06:9c:6d:55:c0:cf:c2:d5:53:bf:c1:ea:11:d6:02:a2:1f: b5:6a:e4:de:c8:24:64:71:c9:5a:ec:b1:2c:37:e0:46:f2:0c: fb:c2:7e:cc:91:79:c1:2b:b7:97:a2:77:78:4c:37:97:37:16: 1f:de:a1:94:c2:83:a5:7c:52:3e:7b:22:47:39:2e:cc:90:a7: 6c:c5:60:38:7f:d0:66:1d:a9:b0:00:27:ff:68:d7:4b:0c:dd: 5d:75:f4:ee:e8:29:d3:92:2d:0e:14:ea:35:58:db:f0:42:44: fd:28:93:a3:b6:19:ed:50:c5:c3:4d:be:a5:c9:c6:6e:12:ec: 5e:d1:8f:d5:77:65:0c:e7:eb:30:b0:8e:d3:eb:2d:1f:e9:bf: dc:67:d5:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvS22eX7xchgbjwczU0PyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj NDc5NDQwHhcNMjYwMTExMjMwMTU0WhcNMjYwMTEyMjMwMTU0WjAzMTEwLwYDVQQD Eyg3NDU0YThjNmExZTliOTU5MTU3OWQ5ZTY0YzVkNjgzMzIzYzVjZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlgSV1AsNQMezk8GQcaqPASfDQOo cVecK8EvMC/Pl1bU87ElM4LfaPT1Au9M2SbWY2O5NU5J/5BOLo5/OyyyQ6E+gKiR SJaT2kw4NN1Fu7M3punuPmcPN2a0lVWilfaMMpwZsA0sGlZbOiYzYcklsHHGBQnD KU6BzjtHF4iI8vC8lQg0LSr/PE0NBkmpbX0CExixPzSECoeBdpUIyWkK7qXMQYO2 lJGAwYkyiO1r8wYYLRW3Ovu2INPiAeGR+ATk+5RHFnVeKEdcu2OImYwO6ohxWMNs t96y2kycWFqGNdxpxr4Zi0dz0M9gx1oj1+JkmTc1+g1xRpqnRcX5q0hHjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRUqMah6blZFXnZ5kxdaDMjxc4NMB8GA1UdIwQY MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5 LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazhM4FLU iBNNS7BTqkgClf31AApMV/+AFKMwufR+R/V4bXVG+LxMOHRO9/5nWjRNCWr9mCZT J+sCpFDhTiujw1ENAU0q+I3vroNffEqpk6eRxezWcQkNvtCLBlnX00aJawcq9XLf Gvo09PaFRAacbVXAz8LVU7/B6hHWAqIftWrk3sgkZHHJWuyxLDfgRvIM+8J+zJF5 wSu3l6J3eEw3lzcWH96hlMKDpXxSPnsiRzkuzJCnbMVgOH/QZh2psAAn/2jXSwzd XXX07ugp05ItDhTqNVjb8EJE/SiTo7YZ7VDFw02+pcnGbhLsXtGP1XdlDOfrMLCO 0+stH+m/3GfVzQ== -----END CERTIFICATE-----Generated at Mon Jan 12 05:32:01 2026 by rpki-client