This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json) Hash identifier: pkMhtU/9/+Cphik7xViS5h8o52gFvpUPs12zuFUZv2k= Subject key identifier: 50:5C:D7:38:2E:F9:9E:65:42:47:2A:D5:EF:62:C5:D3:62:15:B1:EB Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Certificate serial: 019BAF141B77128790E258CF6CC36233C3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft Manifest number: 17C3 Signing time: Sun 11 Jan 2026 22:01:29 +0000 Manifest this update: Sun 11 Jan 2026 22:01:29 +0000 Manifest next update: Mon 12 Jan 2026 22:01:29 +0000 Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=) 2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: 6Rbao4XnfjWz69BUJD86EklEnTfrnIgr+suRymy/u3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:14:1b:77:12:87:90:e2:58:cf:6c:c3:62:33:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Validity Not Before: Jan 11 22:01:29 2026 GMT Not After : Jan 12 22:01:29 2026 GMT Subject: CN=505cd7382ef99e6542472ad5ef62c5d36215b1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5b:cb:da:15:2c:7b:21:4d:aa:31:84:4e:1a: ee:7e:53:3e:52:e1:6a:e9:bc:d8:83:51:d1:2f:f7: b1:7a:3a:1c:c5:6e:9f:c8:93:a4:c0:dc:0b:cf:8c: 16:ae:5a:d3:17:17:78:79:be:fd:5c:f1:b4:69:0f: b2:ce:d4:d5:8e:43:55:cc:de:6e:26:08:0b:85:8d: 3d:96:4c:44:f6:d3:9e:5b:05:67:b4:db:7c:ae:fc: 1f:13:95:d2:7b:b3:80:6e:5c:d8:64:2b:bb:62:74: 2d:e0:9e:0b:5c:08:d2:50:9d:97:4e:23:a3:80:0a: b2:dc:17:c5:85:ff:2c:12:f5:a2:95:dd:5f:98:3c: 30:1c:af:97:b5:1c:e5:40:db:9f:15:74:cb:5b:8e: ab:a1:f1:a0:9a:66:ce:44:87:f9:0e:7f:46:d7:8b: b3:8d:f0:db:09:d8:82:b1:9c:66:d4:fd:84:de:38: 88:7f:7a:8f:9d:db:98:53:6d:77:bf:e0:3c:b4:af: fb:17:8f:de:30:b3:dc:8f:8b:21:37:24:a1:da:4c: 32:46:55:e8:68:39:db:57:65:2c:bd:1e:0e:a9:9a: af:26:89:c0:5d:82:b6:39:d8:0e:07:4a:ab:a7:f7: d6:2d:f8:b2:c1:3e:60:99:22:d7:b5:5b:b0:b3:d7: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5C:D7:38:2E:F9:9E:65:42:47:2A:D5:EF:62:C5:D3:62:15:B1:EB X509v3 Authority Key Identifier: keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:bd:81:8d:e9:97:63:33:85:cf:37:d5:44:90:dc:55:15:9c: 2f:ca:e5:47:2f:01:48:5d:f7:f2:54:a7:ec:55:bb:b5:e4:7a: e4:b4:f5:60:41:68:ad:8d:05:7e:18:21:21:21:fc:38:81:29: 08:fd:16:1a:af:52:61:6a:70:25:8b:56:71:bf:db:fb:bd:1b: 41:ee:39:ba:26:b6:1c:b6:1a:23:9a:7b:16:76:d8:1a:91:49: 09:66:02:28:96:1a:37:61:64:bd:63:6c:e6:c0:17:f5:2e:97: 72:4d:76:22:25:4d:a1:ad:1b:af:ad:3f:88:97:b3:a6:30:5a: fd:3c:bf:8a:b0:3b:17:59:89:a8:9e:5b:d2:2f:aa:33:5c:4a: 69:22:db:ad:4c:57:35:cd:16:48:ec:87:6f:f6:00:26:6b:f2: 3c:2a:c8:93:43:69:32:e2:06:f6:13:f7:63:f5:a2:fe:ec:5a: b9:c6:98:27:f6:12:f4:b5:d1:1d:65:31:1b:02:f8:0a:66:5d: 43:be:f8:aa:e9:0d:56:97:0a:27:39:3a:eb:b9:77:04:88:ee: 4b:a8:d3:fc:f9:12:1b:0b:9e:0b:35:dc:5e:68:5e:58:25:f9: 4a:9b:82:2a:66:7d:08:a8:9c:3c:e0:d2:77:28:39:4c:15:3e: c3:6e:60:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvFBt3EoeQ4ljPbMNiM8O+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy ODk3NmMwHhcNMjYwMTExMjIwMTI5WhcNMjYwMTEyMjIwMTI5WjAzMTEwLwYDVQQD Eyg1MDVjZDczODJlZjk5ZTY1NDI0NzJhZDVlZjYyYzVkMzYyMTViMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1vL2hUseyFNqjGEThruflM+UuFq 6bzYg1HRL/exejocxW6fyJOkwNwLz4wWrlrTFxd4eb79XPG0aQ+yztTVjkNVzN5u JggLhY09lkxE9tOeWwVntNt8rvwfE5XSe7OAblzYZCu7YnQt4J4LXAjSUJ2XTiOj gAqy3BfFhf8sEvWild1fmDwwHK+XtRzlQNufFXTLW46rofGgmmbORIf5Dn9G14uz jfDbCdiCsZxm1P2E3jiIf3qPnduYU213v+A8tK/7F4/eMLPcj4shNySh2kwyRlXo aDnbV2UsvR4OqZqvJonAXYK2OdgOB0qrp/fWLfiywT5gmSLXtVuws9dydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBc1zgu+Z5lQkcq1e9ixdNiFbHrMB8GA1UdIwQY MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4 LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb2BjemX YzOFzzfVRJDcVRWcL8rlRy8BSF338lSn7FW7teR65LT1YEForY0FfhghISH8OIEp CP0WGq9SYWpwJYtWcb/b+70bQe45uia2HLYaI5p7FnbYGpFJCWYCKJYaN2FkvWNs 5sAX9S6Xck12IiVNoa0br60/iJezpjBa/Ty/irA7F1mJqJ5b0i+qM1xKaSLbrUxX Nc0WSOyHb/YAJmvyPCrIk0NpMuIG9hP3Y/Wi/uxaucaYJ/YS9LXRHWUxGwL4CmZd Q774qukNVpcKJzk667l3BIjuS6jT/PkSGwueCzXcXmheWCX5SpuCKmZ9CKicPODS dyg5TBU+w25gpQ== -----END CERTIFICATE-----Generated at Mon Jan 12 03:27:17 2026 by rpki-client