This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json) Hash identifier: KDwBxjlxe28FsrcK8MXruzXMEIfmA4Ut1eDef04fsuQ= Subject key identifier: D7:B6:44:94:AA:9F:23:2B:A7:98:2E:FD:DF:6D:E8:12:84:3A:A5:A7 Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019BF5077D90E22F557C037C8A9B5A09F5F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 12:01:07 +0000 Manifest this update: Sun 25 Jan 2026 12:01:07 +0000 Manifest next update: Mon 26 Jan 2026 12:01:07 +0000 Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=) 2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=) 3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: YzoEAuOh79KOQxH/Ws0J86df3VK63VanjxRTVETJhDM=) 4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:7d:90:e2:2f:55:7c:03:7c:8a:9b:5a:09:f5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Jan 25 12:01:07 2026 GMT Not After : Jan 26 12:01:07 2026 GMT Subject: CN=d7b64494aa9f232ba7982efddf6de812843aa5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:b0:de:09:c1:79:7f:26:09:98:b6:30:d6: 27:48:b3:62:05:82:d7:ce:6a:e7:34:7b:ae:ac:7a: 24:4f:dd:3c:b8:f7:39:40:81:7a:6e:15:4b:27:ba: 00:c8:9a:19:22:58:fe:87:93:59:38:ee:2c:88:6a: ac:58:4d:3d:a6:c3:c3:38:e5:ca:ec:3a:52:f1:16: 65:e1:7d:fc:e5:9b:9d:e2:f8:3a:92:b6:08:20:17: 6c:59:0e:98:19:06:71:01:9f:7a:14:ff:e0:e3:95: f0:ca:a4:3a:81:7d:e8:c6:55:c9:d8:82:da:41:ea: 06:09:19:26:2d:ed:66:eb:89:ff:cc:54:80:a2:24: 25:2b:2c:8e:cb:46:1a:08:5f:7e:ff:90:24:68:a5: 85:ac:d7:0a:8b:12:c6:11:35:3b:9f:4e:91:31:55: f5:0b:a1:83:08:03:cc:95:31:57:dc:0e:b4:b1:00: 04:88:6c:52:a8:bc:8a:c9:48:44:73:5b:02:54:66: 10:79:05:6d:8e:74:f5:81:7f:eb:ad:86:db:f2:7b: 22:e4:d7:2b:5d:ba:f5:ad:41:9f:5c:cc:1c:15:bf: 39:d1:b9:88:a4:37:c8:19:cc:0a:d5:1a:08:a4:85: 6d:69:e3:5a:c2:ac:3b:d9:4f:8f:cc:e4:3c:7d:ac: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:44:94:AA:9F:23:2B:A7:98:2E:FD:DF:6D:E8:12:84:3A:A5:A7 X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a3:fe:ee:0b:43:60:a8:84:30:7d:9c:4a:40:e7:b2:d6:23: 2d:86:29:97:e4:c6:79:0c:e2:36:12:91:15:06:d2:1d:e7:1a: 69:cb:52:eb:a8:67:ea:38:a0:ee:e0:bc:91:29:16:59:8f:b7: 42:b5:84:90:11:86:80:5c:24:c6:53:4e:ed:03:19:90:62:5a: b4:f5:a4:cb:f0:2e:18:07:68:cb:71:66:14:a8:23:fa:8c:49: d7:e2:38:08:08:1f:59:45:1b:9a:82:00:31:a9:19:97:6f:7c: 85:c3:50:59:84:1b:c2:91:fa:96:15:84:b6:09:17:ec:0e:fb: d1:65:69:4e:e0:66:01:39:aa:1e:82:4a:87:42:e6:b6:09:3e: ab:85:15:60:87:16:58:9f:81:7a:a7:be:d8:2e:f1:42:6f:0b: 3b:06:22:9d:22:56:1e:97:e9:2a:22:a5:2a:cc:bc:45:41:da: ad:97:48:38:67:d5:26:8a:f9:8a:95:02:22:d6:61:0b:eb:d7: ca:0b:30:84:45:6d:fd:cb:ce:9e:c4:5d:59:f4:22:2b:75:a5: b8:bb:08:5e:7d:ee:a4:17:59:26:24:82:94:ed:f1:af:8f:cd: 79:1f:c3:30:1b:bf:46:f1:97:0b:a7:b5:bc:0a:a5:dd:9b:67: d3:b2:d5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B32Q4i9VfAN8iptaCfX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjYwMTI1MTIwMTA3WhcNMjYwMTI2MTIwMTA3WjAzMTEwLwYDVQQD EyhkN2I2NDQ5NGFhOWYyMzJiYTc5ODJlZmRkZjZkZTgxMjg0M2FhNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8mw3gnBeX8mCZi2MNYnSLNiBYLX zmrnNHuurHokT908uPc5QIF6bhVLJ7oAyJoZIlj+h5NZOO4siGqsWE09psPDOOXK 7DpS8RZl4X385Zud4vg6krYIIBdsWQ6YGQZxAZ96FP/g45XwyqQ6gX3oxlXJ2ILa QeoGCRkmLe1m64n/zFSAoiQlKyyOy0YaCF9+/5AkaKWFrNcKixLGETU7n06RMVX1 C6GDCAPMlTFX3A60sQAEiGxSqLyKyUhEc1sCVGYQeQVtjnT1gX/rrYbb8nsi5Ncr Xbr1rUGfXMwcFb850bmIpDfIGcwK1RoIpIVtaeNawqw72U+PzOQ8fayo9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe2RJSqnyMrp5gu/d9t6BKEOqWnMB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGaP+7gtD YKiEMH2cSkDnstYjLYYpl+TGeQziNhKRFQbSHecaactS66hn6jig7uC8kSkWWY+3 QrWEkBGGgFwkxlNO7QMZkGJatPWky/AuGAdoy3FmFKgj+oxJ1+I4CAgfWUUbmoIA MakZl298hcNQWYQbwpH6lhWEtgkX7A770WVpTuBmATmqHoJKh0Lmtgk+q4UVYIcW WJ+Beqe+2C7xQm8LOwYinSJWHpfpKiKlKsy8RUHarZdIOGfVJor5ipUCItZhC+vX ygswhEVt/cvOnsRdWfQiK3WluLsIXn3upBdZJiSClO3xr4/NeR/DMBu/RvGXC6e1 vAql3Ztn07LVXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:31 2026 by rpki-client