This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft File: Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft (raw, json) Hash identifier: jlImmmydC2e9s0/1BhqYygj1KZ2jGQNpGQZk+Ne05FM= Subject key identifier: 01:0B:00:36:24:79:F4:3D:41:3C:FE:2F:36:3C:50:8B:6E:A8:20:3E Authority key identifier: 43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7 Certificate issuer: /CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7 Certificate serial: 019B77EDADE76F5E50C5305FAECAE912180D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft Manifest number: 17A8 Signing time: Thu 01 Jan 2026 05:00:23 +0000 Manifest this update: Thu 01 Jan 2026 05:00:23 +0000 Manifest next update: Fri 02 Jan 2026 05:00:23 +0000 Files and hashes: 1: Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl (hash: 4yZ9WrwJO2ZexgfHH6Da2p5u4pbj5IDujKc07tV+pzQ=) 2: tBcUVtef6rZ0kSSzgGFNQ0aGmXk.roa (hash: axGcXX34atfoTeccVW4HcK4Aoj164U97BqMvxhWQBsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:ed:ad:e7:6f:5e:50:c5:30:5f:ae:ca:e9:12:18:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=434421cf6a02b38af5b6bbca6dbd3764448b6cb7 Validity Not Before: Jan 1 05:00:23 2026 GMT Not After : Jan 2 05:00:23 2026 GMT Subject: CN=010b00362479f43d413cfe2f363c508b6ea8203e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:58:71:af:d4:c8:a2:60:e3:7c:ea:9e:41: e4:98:47:b0:51:fb:73:7f:0f:d4:f2:e5:ea:26:ea: b6:e3:57:5f:57:90:fa:ab:b8:91:c9:37:23:a4:1f: ab:d6:d7:88:4d:1a:b6:26:ed:70:e8:53:5c:f2:9a: 34:29:a6:8f:8a:f1:49:04:2c:55:fb:d0:0f:67:4d: 0e:fd:91:09:42:8f:e0:7a:f6:6d:3b:90:bd:59:e8: df:9b:2c:e4:39:14:58:7f:a0:9f:58:e5:4f:0a:af: 71:ac:79:35:05:59:f4:93:ed:9d:1b:2f:94:91:b6: 49:72:48:63:e2:81:d3:fd:4b:d5:dd:97:f7:92:4b: 1d:bf:dc:1a:c7:1e:ef:1c:d4:83:d6:7d:24:1f:a9: 86:2f:62:bf:b2:fc:30:fe:a1:d7:9f:dc:06:a2:3b: 5c:d2:1a:d0:cf:e7:5b:59:39:76:e5:ce:a1:55:f3: 4b:18:9b:b5:24:ab:ca:60:24:d5:9a:3f:b5:36:81: 44:2c:2e:be:cd:5e:4c:32:1d:87:26:2c:c6:24:54: 14:e2:98:21:70:e1:cc:44:11:a1:f8:6f:b6:45:4b: 03:0d:c9:48:54:fd:62:27:cb:5b:b4:e5:4e:53:29: 90:ad:d8:c1:d4:45:fa:99:84:69:ca:2e:38:43:f3: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0B:00:36:24:79:F4:3D:41:3C:FE:2F:36:3C:50:8B:6E:A8:20:3E X509v3 Authority Key Identifier: keyid:43:44:21:CF:6A:02:B3:8A:F5:B6:BB:CA:6D:BD:37:64:44:8B:6C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0Qhz2oCs4r1trvKbb03ZESLbLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3f151b-fb71-4f1b-bb09-539b329f995c/1/Q0Qhz2oCs4r1trvKbb03ZESLbLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:74:32:80:7b:b0:01:be:72:0d:a0:9d:38:bb:d7:2f:c9:c8: 14:92:70:6d:12:30:1d:70:81:01:7b:5b:42:52:cc:e7:ee:7d: a8:1c:f7:ac:76:8b:cf:f2:94:46:20:89:4f:25:88:a3:0a:be: 77:34:45:58:84:11:98:1e:1e:6d:fa:77:7d:53:1f:9d:2d:36: 19:9c:cd:0d:db:05:3e:f8:67:63:28:c8:6c:e2:77:63:f9:8a: 3f:8d:92:eb:5d:bf:84:54:e1:23:b9:33:07:68:d0:9f:ad:27: a8:84:72:df:76:2d:2b:d2:68:42:8b:6c:a2:60:ad:1d:df:94: f6:0a:22:ae:34:ca:36:27:ab:96:3e:ad:ee:7b:66:d4:0f:25: 2c:50:59:2c:20:97:fe:f4:3b:e0:32:b0:aa:5c:92:6a:b7:e2: 59:22:27:a0:4c:10:52:86:e6:49:67:fb:66:9c:7a:df:93:21: 96:62:63:72:e7:90:d8:2e:84:04:7f:1a:04:38:24:3a:39:7b: 34:a6:9c:83:e2:88:3c:94:2b:95:d3:2d:19:63:04:6c:ef:ad: 1e:ff:f4:f9:17:08:be:f3:63:70:f2:37:a9:12:eb:ff:96:cb: 5c:fb:91:31:a8:aa:0b:67:ee:06:7f:64:85:57:11:c4:87:ce: bd:dc:af:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt37a3nb15QxTBfrsrpEhgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNDQyMWNmNmEwMmIzOGFmNWI2YmJjYTZkYmQzNzY0NDQ4 YjZjYjcwHhcNMjYwMTAxMDUwMDIzWhcNMjYwMTAyMDUwMDIzWjAzMTEwLwYDVQQD EygwMTBiMDAzNjI0NzlmNDNkNDEzY2ZlMmYzNjNjNTA4YjZlYTgyMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3txYca/UyKJg43zqnkHkmEewUftz fw/U8uXqJuq241dfV5D6q7iRyTcjpB+r1teITRq2Ju1w6FNc8po0KaaPivFJBCxV +9APZ00O/ZEJQo/gevZtO5C9WejfmyzkORRYf6CfWOVPCq9xrHk1BVn0k+2dGy+U kbZJckhj4oHT/UvV3Zf3kksdv9waxx7vHNSD1n0kH6mGL2K/svww/qHXn9wGojtc 0hrQz+dbWTl25c6hVfNLGJu1JKvKYCTVmj+1NoFELC6+zV5MMh2HJizGJFQU4pgh cOHMRBGh+G+2RUsDDclIVP1iJ8tbtOVOUymQrdjB1EX6mYRpyi44Q/NzAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAELADYkefQ9QTz+LzY8UItuqCA+MB8GA1UdIwQY MBaAFENEIc9qArOK9ba7ym29N2REi2y3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTBRaHoyb0NzNHIxdHJ2S2JiMDNaRVNMYkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZjE1MWItZmI3MS00ZjFiLWJiMDkt NTM5YjMyOWY5OTVjLzEvUTBRaHoyb0NzNHIxdHJ2S2JiMDNaRVNMYkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZjE1MWItZmI3MS00ZjFiLWJiMDktNTM5YjMyOWY5OTVj LzEvUTBRaHoyb0NzNHIxdHJ2S2JiMDNaRVNMYkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXQygHuw Ab5yDaCdOLvXL8nIFJJwbRIwHXCBAXtbQlLM5+59qBz3rHaLz/KURiCJTyWIowq+ dzRFWIQRmB4ebfp3fVMfnS02GZzNDdsFPvhnYyjIbOJ3Y/mKP42S612/hFThI7kz B2jQn60nqIRy33YtK9JoQotsomCtHd+U9goirjTKNierlj6t7ntm1A8lLFBZLCCX /vQ74DKwqlySarfiWSInoEwQUobmSWf7Zpx635MhlmJjcueQ2C6EBH8aBDgkOjl7 NKacg+KIPJQrldMtGWMEbO+tHv/0+RcIvvNjcPI3qRLr/5bLXPuRMaiqC2fuBn9k hVcRxIfOvdyvYg== -----END CERTIFICATE-----Generated at Thu Jan 1 10:52:22 2026 by rpki-client