This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json) Hash identifier: 3JZWWVzxOt+Ewhtqjy2K+Pny1MAVGU1cZc2f6eGwjxs= Subject key identifier: 88:6A:EE:60:F3:8D:8A:27:6D:39:75:8B:29:9E:BF:B7:5E:66:2A:A2 Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Certificate serial: 019BB1DE0C1B866C1BF207644C5103D71FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft Manifest number: 1419 Signing time: Mon 12 Jan 2026 11:01:17 +0000 Manifest this update: Mon 12 Jan 2026 11:01:17 +0000 Manifest next update: Tue 13 Jan 2026 11:01:17 +0000 Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: j4CfEQoj2IES0lB4+GYMKvoU6oD/mMuUB931sMSNXTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:de:0c:1b:86:6c:1b:f2:07:64:4c:51:03:d7:1f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Validity Not Before: Jan 12 11:01:17 2026 GMT Not After : Jan 13 11:01:17 2026 GMT Subject: CN=886aee60f38d8a276d39758b299ebfb75e662aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cb:74:4f:5e:49:4a:d6:1b:df:9a:b1:5e:60: f3:91:34:5f:df:e6:19:02:d1:f0:b5:8f:ee:05:df: 2b:97:0e:fa:d2:7c:3f:d2:7d:8a:86:2e:96:3c:d4: f1:02:ec:b3:a4:fd:0c:45:d7:81:7a:c4:ae:13:a3: 31:60:0f:e0:16:92:a6:fa:31:95:9e:2c:53:3d:d7: 11:b8:a7:3a:37:a3:d4:6c:be:2e:ac:38:af:d9:8a: a0:13:37:a0:f5:91:1f:4a:a1:3d:6a:a1:6f:c7:9f: 74:07:59:de:b5:41:ef:c1:1d:d3:a7:99:7b:4f:de: 40:41:58:e7:95:1b:70:06:2c:88:64:72:8f:07:68: e6:47:15:8d:2f:c1:09:ea:28:57:07:ad:f7:b3:f6: bd:ce:7a:0a:54:9d:0c:fd:b8:91:8e:15:af:f7:86: b2:c6:fe:99:43:a3:fb:c1:df:6a:2d:c3:fb:62:e7: 14:ee:3a:08:40:a3:bb:88:c4:c2:c7:b8:1c:ab:73: 43:4a:70:f4:7b:ea:46:5d:59:95:97:ec:fc:70:22: 34:cf:25:cf:18:b5:94:31:4b:52:7c:80:27:71:92: 1d:34:3d:bb:b3:83:04:1e:33:a9:9f:d7:43:13:92: 48:da:c4:0e:74:7d:91:77:7e:fd:7c:52:8b:7a:ab: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6A:EE:60:F3:8D:8A:27:6D:39:75:8B:29:9E:BF:B7:5E:66:2A:A2 X509v3 Authority Key Identifier: keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ec:dc:c1:e1:4b:ff:7f:ac:58:77:a0:0e:5e:99:bf:bc:4e: b5:2b:f1:cc:d1:2e:37:d5:56:c7:e6:7f:81:54:2d:ba:df:60: b8:a9:1a:0e:b9:a6:1b:78:5f:23:ca:b6:cf:19:26:8c:c3:95: 2e:8b:bc:a4:b9:11:03:88:07:ed:4d:07:99:c9:b4:16:bb:9f: 58:2a:43:a1:5c:3d:41:a8:2e:68:16:e1:2f:e4:c5:24:2e:f7: 60:8d:a9:91:5d:53:f3:78:1a:92:16:62:ee:58:90:45:63:f6: 4b:31:05:9b:4f:8d:d5:f7:61:69:7d:a6:76:8e:fc:2c:71:50: 18:65:3a:c0:2b:cd:0a:13:8e:99:9a:67:4b:49:65:4c:c3:e5: f6:ae:74:5f:30:59:54:7f:01:00:6f:a6:9c:e1:5b:e3:6d:be: ed:7d:ea:fe:a3:99:b2:ee:81:fa:2f:74:a4:89:de:20:a6:cb: 10:9f:c3:05:73:87:f0:27:4a:a4:bf:ae:0e:db:8d:a4:9b:c9: a7:fd:9e:18:c8:75:0f:19:94:cc:65:9a:8f:b6:25:99:7b:e3: a5:00:78:49:41:65:bc:8c:e0:dd:b1:05:6a:92:0e:43:bd:54: 0a:b2:ed:80:9e:23:db:e2:d2:4a:3a:1e:90:5c:8b:fd:09:95: be:a7:00:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZux3gwbhmwb8gdkTFED1x/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDBhNWY0ZThmN2UxM2M3Y2I1MzVjNjRmNzllMjBiM2Yw MWQ2MjQwHhcNMjYwMTEyMTEwMTE3WhcNMjYwMTEzMTEwMTE3WjAzMTEwLwYDVQQD Eyg4ODZhZWU2MGYzOGQ4YTI3NmQzOTc1OGIyOTllYmZiNzVlNjYyYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6st0T15JStYb35qxXmDzkTRf3+YZ AtHwtY/uBd8rlw760nw/0n2Khi6WPNTxAuyzpP0MRdeBesSuE6MxYA/gFpKm+jGV nixTPdcRuKc6N6PUbL4urDiv2YqgEzeg9ZEfSqE9aqFvx590B1netUHvwR3Tp5l7 T95AQVjnlRtwBiyIZHKPB2jmRxWNL8EJ6ihXB633s/a9znoKVJ0M/biRjhWv94ay xv6ZQ6P7wd9qLcP7YucU7joIQKO7iMTCx7gcq3NDSnD0e+pGXVmVl+z8cCI0zyXP GLWUMUtSfIAncZIdND27s4MEHjOpn9dDE5JI2sQOdH2Rd379fFKLeqt+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhq7mDzjYonbTl1iymev7deZiqiMB8GA1UdIwQY MBaAFKrQpfTo9+E8fLU1xk954gs/AdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMt YjdlZjA0MmM4NTdiLzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMtYjdlZjA0MmM4NTdi LzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOzcweFL /3+sWHegDl6Zv7xOtSvxzNEuN9VWx+Z/gVQtut9guKkaDrmmG3hfI8q2zxkmjMOV Lou8pLkRA4gH7U0Hmcm0FrufWCpDoVw9QaguaBbhL+TFJC73YI2pkV1T83gakhZi 7liQRWP2SzEFm0+N1fdhaX2mdo78LHFQGGU6wCvNChOOmZpnS0llTMPl9q50XzBZ VH8BAG+mnOFb422+7X3q/qOZsu6B+i90pIneIKbLEJ/DBXOH8CdKpL+uDtuNpJvJ p/2eGMh1DxmUzGWaj7YlmXvjpQB4SUFlvIzg3bEFapIOQ71UCrLtgJ4j2+LSSjoe kFyL/QmVvqcA9g== -----END CERTIFICATE-----Generated at Mon Jan 12 15:47:39 2026 by rpki-client