This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json) Hash identifier: jbiST4B5jcOkoZjFA68azTzfURz1R2wfMgMrBkLyEo0= Subject key identifier: F8:30:4D:9A:D5:D2:98:08:84:0A:0F:B5:C4:08:2A:44:8B:02:5B:19 Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Certificate serial: 019BAF4B1B5BEC3CBFD38C70D501EF64CB34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 23:01:33 +0000 Manifest this update: Sun 11 Jan 2026 23:01:33 +0000 Manifest next update: Mon 12 Jan 2026 23:01:33 +0000 Files and hashes: 1: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: FL7BZk3EzNLHmcvmarW87GK8r2TOkbJQO2OLuNpMvAQ=) 2: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:1b:5b:ec:3c:bf:d3:8c:70:d5:01:ef:64:cb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Validity Not Before: Jan 11 23:01:33 2026 GMT Not After : Jan 12 23:01:33 2026 GMT Subject: CN=f8304d9ad5d29808840a0fb5c4082a448b025b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:4f:f5:58:83:1c:fb:60:da:aa:41:33:ad: bf:c5:2c:f6:7d:53:bf:59:d5:e0:f7:e8:13:b5:df: 67:3d:56:5d:04:00:ca:4b:f5:c0:15:82:b0:60:e8: e0:09:fe:52:b8:b5:ca:11:42:fc:e7:e0:6b:b1:7c: ae:e8:c5:7b:48:00:01:8a:0a:ff:fe:e0:db:e5:95: c8:08:41:70:bc:fe:ad:d4:df:c6:10:36:a8:1a:3a: 24:db:54:66:c0:84:9d:e2:80:bf:e5:b7:7c:36:36: d4:2d:ae:9c:a2:e0:f8:6d:7e:6d:3c:fd:e2:98:20: d6:41:f8:7d:b2:39:ab:f4:0d:6f:58:f3:33:5f:9c: de:07:5d:7d:ce:f2:2b:09:ba:1b:57:1c:d9:6f:f5: c7:dd:e4:ad:a7:84:94:ca:1b:65:d9:ee:00:fc:75: fe:f4:6a:09:3d:eb:38:bf:cb:6b:59:c4:73:92:84: 4d:0c:60:ae:0d:50:bc:2d:5a:3b:42:9c:5e:f9:38: a6:37:30:92:82:51:98:10:68:76:5f:e6:35:0a:e4: 34:e0:4f:e0:dc:d3:a1:cc:f4:7f:22:fb:19:50:ed: 24:5d:df:d4:d0:fb:3a:1b:b2:29:f7:df:63:b4:f0: 11:cc:58:b3:dc:02:a6:9b:02:f2:f1:db:4a:74:3d: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:30:4D:9A:D5:D2:98:08:84:0A:0F:B5:C4:08:2A:44:8B:02:5B:19 X509v3 Authority Key Identifier: keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dc:86:e5:c5:ab:d5:85:84:88:9d:7b:20:57:c8:e4:eb:de: b1:5d:b0:64:3e:5f:7b:0c:a1:c2:91:44:57:7e:c9:68:13:da: fa:ff:84:a2:4a:d9:91:d6:4b:3f:9c:fd:cc:63:57:64:4a:cf: a5:69:d5:93:e0:92:3f:86:46:da:1a:76:29:27:06:77:24:39: b6:0d:fd:ec:cb:4a:a1:1f:e5:97:e9:9d:1b:60:f6:14:28:79: 2d:00:f6:19:d2:12:ed:c6:93:21:d8:2e:43:60:96:36:35:f9: a2:37:c3:1b:c3:c8:df:11:80:81:d5:2b:58:9c:54:35:5d:d7: c8:42:34:bb:d0:a0:a5:d0:cb:4b:0f:7d:8e:b2:1a:91:b0:12: 0f:03:4a:32:1d:ce:41:e1:a6:a2:80:52:40:25:7c:6d:79:6d: 10:bb:bd:23:07:8d:1a:7c:f3:77:3e:f5:d9:fb:c1:0d:5b:f3: 5e:f3:5c:a8:b9:da:ba:ff:5f:16:a8:27:70:5e:e4:4c:e2:62: c4:b3:1d:32:2f:10:68:6e:70:a9:32:ec:cc:54:d2:76:c9:52: 31:bc:97:25:3f:38:78:40:79:ee:9e:4a:f8:c7:0e:3d:c2:e2: 98:ae:28:f0:7c:68:16:fa:d5:9c:37:36:e8:02:dc:c7:39:bb: e8:38:8b:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvSxtb7Dy/04xw1QHvZMs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl OTE4ZTMwHhcNMjYwMTExMjMwMTMzWhcNMjYwMTEyMjMwMTMzWjAzMTEwLwYDVQQD EyhmODMwNGQ5YWQ1ZDI5ODA4ODQwYTBmYjVjNDA4MmE0NDhiMDI1YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEFP9ViDHPtg2qpBM62/xSz2fVO/ WdXg9+gTtd9nPVZdBADKS/XAFYKwYOjgCf5SuLXKEUL85+BrsXyu6MV7SAABigr/ /uDb5ZXICEFwvP6t1N/GEDaoGjok21RmwISd4oC/5bd8NjbULa6couD4bX5tPP3i mCDWQfh9sjmr9A1vWPMzX5zeB119zvIrCbobVxzZb/XH3eStp4SUyhtl2e4A/HX+ 9GoJPes4v8trWcRzkoRNDGCuDVC8LVo7Qpxe+TimNzCSglGYEGh2X+Y1CuQ04E/g 3NOhzPR/IvsZUO0kXd/U0Ps6G7Ip999jtPARzFiz3AKmmwLy8dtKdD2TpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgwTZrV0pgIhAoPtcQIKkSLAlsZMB8GA1UdIwQY MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt ZmM1OWRlZGIxZDJiLzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtyG5cWr 1YWEiJ17IFfI5OvesV2wZD5fewyhwpFEV37JaBPa+v+EokrZkdZLP5z9zGNXZErP pWnVk+CSP4ZG2hp2KScGdyQ5tg397MtKoR/ll+mdG2D2FCh5LQD2GdIS7caTIdgu Q2CWNjX5ojfDG8PI3xGAgdUrWJxUNV3XyEI0u9CgpdDLSw99jrIakbASDwNKMh3O QeGmooBSQCV8bXltELu9IweNGnzzdz712fvBDVvzXvNcqLnauv9fFqgncF7kTOJi xLMdMi8QaG5wqTLszFTSdslSMbyXJT84eEB57p5K+McOPcLimK4o8HxoFvrVnDc2 6ALcxzm76DiLsw== -----END CERTIFICATE-----Generated at Mon Jan 12 03:15:53 2026 by rpki-client