This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json) Hash identifier: EdotcQK/AXGvp2W3kaTZ+UhLLm057Pus6kiZ37abaZY= Subject key identifier: 6F:20:AC:69:17:08:14:2D:E2:E1:7B:07:D8:FD:08:22:2D:46:BE:E7 Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Certificate serial: 019B78A3F1817DC66D213475BB6BFE1500CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft Manifest number: 107F Signing time: Thu 01 Jan 2026 08:19:28 +0000 Manifest this update: Thu 01 Jan 2026 08:19:28 +0000 Manifest next update: Fri 02 Jan 2026 08:19:28 +0000 Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=) 2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=) 3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: /B+zfo2hsw5MGMmCmk7x1yhqXk4SiHS5HVqN232XEoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:f1:81:7d:c6:6d:21:34:75:bb:6b:fe:15:00:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214 Validity Not Before: Jan 1 08:19:28 2026 GMT Not After : Jan 2 08:19:28 2026 GMT Subject: CN=6f20ac691708142de2e17b07d8fd08222d46bee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:38:5f:e0:d8:83:f7:58:a4:e0:11:0b:ba: f9:52:f5:d9:da:4a:86:d4:33:5f:e2:b5:9a:f7:e8: d2:45:84:3d:88:53:42:b0:ee:ad:08:bd:6f:c0:ec: 2b:2a:3e:ba:0e:5d:83:71:d7:58:ea:d5:95:d6:4f: 54:b1:59:1b:b5:d4:83:97:5a:9f:bb:fb:da:ed:5b: 64:a9:8d:cd:b3:da:7c:91:cb:8a:37:a3:36:a2:ae: c2:bd:d8:5d:da:81:a4:eb:12:3b:03:89:7a:0b:6f: 09:d3:f8:38:ba:21:c0:b3:d0:9f:98:bf:0a:e1:dd: 62:ea:2a:32:33:f0:98:9a:04:89:32:3e:78:33:ce: 99:5c:a6:a5:d3:02:e8:1b:28:47:a6:58:79:a7:d0: 01:42:f2:10:59:05:19:0e:32:8e:27:64:42:8a:96: c3:7b:93:9b:c2:31:31:1e:e9:22:36:bf:4e:93:44: fb:a5:cb:f3:7c:13:07:6b:96:4a:63:5f:1e:75:61: 3d:5d:71:41:aa:5b:6b:36:d4:87:a9:97:37:e9:fd: ea:46:fe:a2:cf:56:48:28:c7:7f:c7:c4:2b:fd:5e: fe:fa:a8:7e:ac:94:68:b3:70:c4:cc:d1:0c:0b:1e: 14:34:97:a1:08:d3:a3:04:d8:37:69:0e:5f:a7:2c: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:20:AC:69:17:08:14:2D:E2:E1:7B:07:D8:FD:08:22:2D:46:BE:E7 X509v3 Authority Key Identifier: keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:15:ae:f8:56:e1:f1:e1:4a:8b:21:49:1a:44:a1:f2:47: ea:29:28:bc:e6:05:c7:e8:37:6a:b8:72:05:0f:a7:75:dc:64: 8f:05:f2:bb:5d:fa:35:7a:b8:8b:83:f7:c7:04:45:14:66:8e: 40:ae:8d:5a:47:ce:ad:26:31:22:ef:fc:6c:32:f4:bc:05:37: ca:4f:9c:a9:69:75:3d:e6:1e:7b:3a:46:19:a9:fa:4e:bc:63: 54:61:a6:3b:7b:3d:2d:53:39:30:33:47:23:30:33:3a:fe:19: bb:c9:a1:83:4e:a6:b9:cb:c0:db:3b:7a:83:38:a5:9f:0b:30: 5e:f6:1e:85:0f:74:ba:16:fa:fb:75:e1:a4:e8:f6:4d:b0:cb: f2:b6:dd:5a:bf:d1:d5:7c:5a:63:79:f0:d6:d7:c8:10:a6:6c: c6:14:05:cf:3c:24:38:bd:63:ed:b5:fd:09:09:c9:ca:36:92: 1a:a7:92:47:b9:bd:e8:f7:5d:32:bf:e3:fd:b5:32:6d:13:de: 33:ef:0a:d2:7b:ca:67:98:0b:19:24:9e:bc:0b:2a:c8:b9:fd: aa:62:2d:98:49:c6:76:b8:03:03:5a:07:53:1e:58:49:d9:3a: ac:7f:a6:e1:d8:4c:f6:a0:ec:fe:02:65:07:f2:6c:c1:27:d1: 4a:c3:0e:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4o/GBfcZtITR1u2v+FQDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi YTMyMTQwHhcNMjYwMTAxMDgxOTI4WhcNMjYwMTAyMDgxOTI4WjAzMTEwLwYDVQQD Eyg2ZjIwYWM2OTE3MDgxNDJkZTJlMTdiMDdkOGZkMDgyMjJkNDZiZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcM4X+DYg/dYpOARC7r5UvXZ2kqG 1DNf4rWa9+jSRYQ9iFNCsO6tCL1vwOwrKj66Dl2DcddY6tWV1k9UsVkbtdSDl1qf u/va7VtkqY3Ns9p8kcuKN6M2oq7Cvdhd2oGk6xI7A4l6C28J0/g4uiHAs9CfmL8K 4d1i6ioyM/CYmgSJMj54M86ZXKal0wLoGyhHplh5p9ABQvIQWQUZDjKOJ2RCipbD e5ObwjExHukiNr9Ok0T7pcvzfBMHa5ZKY18edWE9XXFBqltrNtSHqZc36f3qRv6i z1ZIKMd/x8Qr/V7++qh+rJRos3DEzNEMCx4UNJehCNOjBNg3aQ5fpyyqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8grGkXCBQt4uF7B9j9CCItRr7nMB8GA1UdIwQY MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFUVrvhW 4fHhSoshSRpEofJH6ikovOYFx+g3arhyBQ+nddxkjwXyu136NXq4i4P3xwRFFGaO QK6NWkfOrSYxIu/8bDL0vAU3yk+cqWl1PeYeezpGGan6TrxjVGGmO3s9LVM5MDNH IzAzOv4Zu8mhg06mucvA2zt6gzilnwswXvYehQ90uhb6+3XhpOj2TbDL8rbdWr/R 1XxaY3nw1tfIEKZsxhQFzzwkOL1j7bX9CQnJyjaSGqeSR7m96PddMr/j/bUybRPe M+8K0nvKZ5gLGSSevAsqyLn9qmItmEnGdrgDA1oHUx5YSdk6rH+m4dhM9qDs/gJl B/JswSfRSsMOOg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:30:45 2026 by rpki-client