This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json) Hash identifier: C161vIVGmVJBhU0mvbclQRQ937nEB+7QkA5nWNfPuB4= Subject key identifier: 9F:8B:2F:B9:47:F7:1C:90:37:7B:EA:0E:8D:14:E7:2D:9C:75:A5:6D Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019BF6F605680403221129500EB76A99EBFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:01:16 +0000 Manifest this update: Sun 25 Jan 2026 21:01:16 +0000 Manifest next update: Mon 26 Jan 2026 21:01:16 +0000 Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=) 2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=) 3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: GJKDOE1AeQVnh7sbXzC80045SX0cqvKSCordeb5Msrw=) 4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:05:68:04:03:22:11:29:50:0e:b7:6a:99:eb:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Jan 25 21:01:16 2026 GMT Not After : Jan 26 21:01:16 2026 GMT Subject: CN=9f8b2fb947f71c90377bea0e8d14e72d9c75a56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:b7:c8:4d:0a:19:0d:dc:98:b9:94:db:1d: 44:d4:ce:b3:de:ea:71:c4:b8:7a:ea:c4:e3:97:e8: 2b:71:5c:6b:02:66:66:0e:07:06:cf:79:86:92:4f: db:34:17:07:d4:13:19:ac:a1:62:28:c0:4e:b9:4c: 9d:f5:e2:b2:00:40:3a:9e:c4:27:e6:f0:4a:c2:cb: a6:1a:0f:c3:47:af:15:a3:f7:ca:e6:8a:74:1b:60: e9:3d:90:20:12:38:6f:48:01:52:ba:39:cc:87:9c: b9:b4:ee:6f:4b:12:22:40:7c:ca:f6:54:5f:bf:1a: 87:8d:20:dc:5a:8e:ce:16:52:57:e7:1c:17:db:b9: 1e:fc:e2:ff:65:b6:1c:a4:a9:5d:cc:71:de:0b:ec: f8:5b:c1:db:15:cb:aa:dc:0d:ef:0c:99:70:36:8b: 46:10:47:43:67:5f:4d:99:00:00:78:04:31:fa:78: ee:c9:7d:59:7d:fb:df:7b:30:67:ec:44:d6:20:d5: db:a4:22:5b:9f:f2:89:a9:60:46:ad:f6:b0:3b:21: 74:4e:7e:70:00:9e:05:de:25:8d:78:ec:90:72:9b: dc:53:7b:d5:60:d2:87:37:de:0d:16:17:bf:d3:c7: 51:52:20:65:a1:f2:3a:ee:53:41:30:2e:ab:53:2e: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:2F:B9:47:F7:1C:90:37:7B:EA:0E:8D:14:E7:2D:9C:75:A5:6D X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e8:76:94:ce:73:b5:1f:57:b7:8f:a6:44:4d:ca:1e:bb:f8: 8b:92:88:21:5c:94:5b:93:23:86:f6:6b:b0:ae:15:15:91:7b: 3e:b2:39:d3:23:64:ef:d3:2a:f9:2d:28:de:ce:cc:64:4d:43: 43:13:80:f5:d0:6a:0f:c0:ef:5c:39:c8:40:c8:e1:00:59:87: 7d:27:3f:70:ae:17:a0:42:f4:3a:fa:06:98:d0:96:31:8a:18: 13:ed:54:ad:5e:c5:2f:62:5c:82:07:10:50:f0:b9:67:bb:36: a4:47:e7:4e:26:f4:f7:84:7d:8e:a9:cd:88:91:67:df:b3:81: d0:ad:2c:87:df:23:c6:84:10:71:61:e4:5e:b5:06:3c:87:7e: 91:8d:68:31:5c:3a:b2:aa:89:a9:8a:c9:c2:4c:1a:b2:a5:b4: 60:cb:71:6d:8d:d2:15:8b:d6:28:4d:2a:2c:4e:0f:12:c3:c1: 32:f4:e3:fc:b5:a5:32:46:ec:7c:9b:96:99:e1:c6:70:51:90: 39:9d:f0:c7:5c:fc:e3:ee:1d:64:82:0b:cf:74:4f:9a:bf:7b: 77:03:b0:3e:af:f6:28:be:35:bf:c7:bf:5f:6c:ba:38:71:0a: 87:2d:a4:cc:fc:7c:16:e2:1e:8c:2d:ab:7d:eb:cb:39:f8:05: 0e:ce:55:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gVoBAMiESlQDrdqmev9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjYwMTI1MjEwMTE2WhcNMjYwMTI2MjEwMTE2WjAzMTEwLwYDVQQD Eyg5ZjhiMmZiOTQ3ZjcxYzkwMzc3YmVhMGU4ZDE0ZTcyZDljNzVhNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YW3yE0KGQ3cmLmU2x1E1M6z3upx xLh66sTjl+grcVxrAmZmDgcGz3mGkk/bNBcH1BMZrKFiKMBOuUyd9eKyAEA6nsQn 5vBKwsumGg/DR68Vo/fK5op0G2DpPZAgEjhvSAFSujnMh5y5tO5vSxIiQHzK9lRf vxqHjSDcWo7OFlJX5xwX27ke/OL/ZbYcpKldzHHeC+z4W8HbFcuq3A3vDJlwNotG EEdDZ19NmQAAeAQx+njuyX1ZffvfezBn7ETWINXbpCJbn/KJqWBGrfawOyF0Tn5w AJ4F3iWNeOyQcpvcU3vVYNKHN94NFhe/08dRUiBlofI67lNBMC6rUy6U5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+LL7lH9xyQN3vqDo0U5y2cdaVtMB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOh2lM5z tR9Xt4+mRE3KHrv4i5KIIVyUW5MjhvZrsK4VFZF7PrI50yNk79Mq+S0o3s7MZE1D QxOA9dBqD8DvXDnIQMjhAFmHfSc/cK4XoEL0OvoGmNCWMYoYE+1UrV7FL2JcggcQ UPC5Z7s2pEfnTib094R9jqnNiJFn37OB0K0sh98jxoQQcWHkXrUGPId+kY1oMVw6 sqqJqYrJwkwasqW0YMtxbY3SFYvWKE0qLE4PEsPBMvTj/LWlMkbsfJuWmeHGcFGQ OZ3wx1z84+4dZIILz3RPmr97dwOwPq/2KL41v8e/X2y6OHEKhy2kzPx8FuIejC2r fevLOfgFDs5Vog== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:30 2026 by rpki-client