This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json) Hash identifier: 8a+911ueeaKh7vtjVigzisXUa5JxGo1B+1SuITVeh34= Subject key identifier: DB:5D:B0:26:12:70:70:E7:AC:DB:46:58:E7:6B:32:54:1F:41:57:04 Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80 Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980 Certificate serial: 019B8F51E7F1FB130E8D95CD1AFFCE8C7B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft Manifest number: 17B1 Signing time: Mon 05 Jan 2026 18:01:08 +0000 Manifest this update: Mon 05 Jan 2026 18:01:08 +0000 Manifest next update: Tue 06 Jan 2026 18:01:08 +0000 Files and hashes: 1: DTDpNUgnOeJ9l5YOOdGNUwDVEvA.roa (hash: uICgvpXBQ+aCzp7MGjB6t2q89M73IWkNxCB/z30mwEo=) 2: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: /JryW6VPF8pYpxCC+5yF7kKOv7udD3nGemAlBuJdaJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:51:e7:f1:fb:13:0e:8d:95:cd:1a:ff:ce:8c:7b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980 Validity Not Before: Jan 5 18:01:08 2026 GMT Not After : Jan 6 18:01:08 2026 GMT Subject: CN=db5db026127070e7acdb4658e76b32541f415704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:74:41:85:48:ef:c6:c4:69:37:34:34:9e: 97:49:17:1e:7e:7e:34:81:10:a5:ac:d7:13:6e:b1: 4f:cc:74:d2:31:60:4c:86:93:00:d2:a1:6b:3e:57: 47:98:5c:28:24:ee:2a:fe:fc:55:35:6c:8b:27:72: c5:51:e3:d4:24:54:9e:12:f8:16:bd:69:87:b3:b7: 54:98:b6:af:bb:ec:a4:a5:76:76:3e:fb:ab:fd:c8: 73:27:44:1f:d2:52:e6:73:c4:e1:d7:8d:f3:d8:25: 07:20:d9:71:8a:c9:5d:3f:d0:84:05:f9:21:06:6a: 8b:98:3e:37:af:56:98:ab:63:e7:b0:5e:ac:6e:0d: 01:eb:00:12:13:10:e9:8f:3c:32:36:5c:14:b7:6c: 48:ef:2d:25:a3:4d:59:ba:6f:b4:98:fb:a0:80:dc: ae:75:a1:4f:7b:c5:04:14:58:16:d9:f1:59:5d:d9: 22:ad:6f:75:4b:57:c6:df:95:87:8a:77:78:dd:16: ac:4b:bd:da:08:ea:bf:3b:57:69:ef:2b:77:22:b3: 24:79:07:aa:5e:a1:07:63:c5:98:24:98:e4:ce:b5: 19:95:7e:b7:f2:86:c1:e1:05:5f:80:32:b7:20:99: 39:5a:6e:8d:eb:ae:cd:47:63:79:1e:ec:df:94:30: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5D:B0:26:12:70:70:E7:AC:DB:46:58:E7:6B:32:54:1F:41:57:04 X509v3 Authority Key Identifier: keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:db:21:cb:7d:b8:41:94:f8:49:1f:c0:f7:70:88:fe:b5:0e: 34:ea:ba:31:c0:a8:f0:c6:e0:eb:b1:b4:a0:cf:65:b4:8d:6c: 8d:a1:3d:f0:ab:b4:4c:11:ed:da:ec:a0:86:b4:81:aa:42:3a: 43:f6:98:cd:71:97:c6:95:82:29:d8:56:ad:ed:35:dd:be:e2: 16:81:b7:ae:a2:f3:d5:8c:87:9e:1f:dd:ec:17:c0:67:dc:2b: 0e:26:04:0b:50:bf:31:b8:07:d4:75:1e:6a:96:66:6a:83:79: c6:63:55:43:9e:0a:e2:51:a0:01:15:37:ec:78:04:1b:a0:cd: 74:f3:47:53:1d:8b:df:e5:59:7f:69:4d:8c:84:fe:d7:df:1e: db:ed:a6:64:9f:26:22:a0:1b:2c:a8:66:ad:0d:e4:29:f0:2c: 45:bd:c7:fd:e0:e3:22:a1:12:38:9d:a9:03:51:1d:2b:7a:e0: 80:66:dd:e2:66:1d:33:44:3e:73:6e:43:d5:14:66:41:3c:2c: ac:53:5c:77:4b:3a:a3:42:f9:d9:7a:19:0a:4c:de:7b:b2:43: b2:e6:52:45:8d:0d:18:92:3f:09:03:e4:18:b8:01:04:3b:92: 04:2e:d3:46:03:2d:2d:66:68:31:ed:f9:6e:86:5c:0b:1a:a9: a8:6f:ad:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuPUefx+xMOjZXNGv/OjHuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh ZTk5ODAwHhcNMjYwMTA1MTgwMTA4WhcNMjYwMTA2MTgwMTA4WjAzMTEwLwYDVQQD EyhkYjVkYjAyNjEyNzA3MGU3YWNkYjQ2NThlNzZiMzI1NDFmNDE1NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqZ0QYVI78bEaTc0NJ6XSRcefn40 gRClrNcTbrFPzHTSMWBMhpMA0qFrPldHmFwoJO4q/vxVNWyLJ3LFUePUJFSeEvgW vWmHs7dUmLavu+ykpXZ2Pvur/chzJ0Qf0lLmc8Th143z2CUHINlxisldP9CEBfkh BmqLmD43r1aYq2PnsF6sbg0B6wASExDpjzwyNlwUt2xI7y0lo01Zum+0mPuggNyu daFPe8UEFFgW2fFZXdkirW91S1fG35WHind43RasS73aCOq/O1dp7yt3IrMkeQeq XqEHY8WYJJjkzrUZlX638obB4QVfgDK3IJk5Wm6N667NR2N5HuzflDC30wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtdsCYScHDnrNtGWOdrMlQfQVcEMB8GA1UdIwQY MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdshy324 QZT4SR/A93CI/rUONOq6McCo8Mbg67G0oM9ltI1sjaE98Ku0TBHt2uyghrSBqkI6 Q/aYzXGXxpWCKdhWre013b7iFoG3rqLz1YyHnh/d7BfAZ9wrDiYEC1C/MbgH1HUe apZmaoN5xmNVQ54K4lGgARU37HgEG6DNdPNHUx2L3+VZf2lNjIT+198e2+2mZJ8m IqAbLKhmrQ3kKfAsRb3H/eDjIqESOJ2pA1EdK3rggGbd4mYdM0Q+c25D1RRmQTws rFNcd0s6o0L52XoZCkzee7JDsuZSRY0NGJI/CQPkGLgBBDuSBC7TRgMtLWZoMe35 boZcCxqpqG+tbA== -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:47 2026 by rpki-client