This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json) Hash identifier: 3rQn1yDFjjHXfApLA/hAQp0tJyS24RtMPebb9pBCpYE= Subject key identifier: C0:37:87:53:82:2A:34:BE:66:09:7D:26:18:10:F0:37:B8:DB:D1:DD Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Certificate serial: 019BF87620062CB360EBF86322573203E468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft Manifest number: 1346 Signing time: Mon 26 Jan 2026 04:00:49 +0000 Manifest this update: Mon 26 Jan 2026 04:00:49 +0000 Manifest next update: Tue 27 Jan 2026 04:00:49 +0000 Files and hashes: 1: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=) 2: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: vz9/xgDWVGoSgfZG6dBkGPjsme5M5p4aubFu65dnp1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:20:06:2c:b3:60:eb:f8:63:22:57:32:03:e4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Validity Not Before: Jan 26 04:00:49 2026 GMT Not After : Jan 27 04:00:49 2026 GMT Subject: CN=c0378753822a34be66097d261810f037b8dbd1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:43:bd:10:0a:80:9b:6f:12:77:15:ed:1b: f9:3a:cf:80:e1:c0:81:af:de:40:4a:0c:67:8a:e3: 13:89:69:20:79:30:22:15:8f:65:cd:e8:47:03:e5: fb:8e:7b:89:9c:6e:5e:59:73:45:ec:af:1f:12:8c: 76:69:3e:61:bf:50:aa:46:28:f3:7b:0e:20:5a:c8: 01:8b:61:1d:da:dd:64:b8:b2:9b:ba:99:28:9e:51: d4:4c:5c:66:ed:1f:b1:20:5d:8e:95:92:84:b0:52: 73:d1:28:79:0c:b2:ae:75:64:dd:c9:16:f3:b8:8e: 5a:46:ff:f5:c9:32:5b:d2:62:ed:48:80:41:ab:14: d3:ba:d0:cb:47:40:d0:c2:73:ab:1f:f5:74:41:ec: 69:9f:5e:19:b6:61:96:55:c3:81:35:da:5e:65:2b: 7b:2a:d5:9e:bb:18:11:84:3b:48:68:06:e8:d1:a9: fb:73:0e:25:f6:83:b7:98:69:46:bf:09:f7:3f:b4: c9:85:81:8e:7b:e9:04:9d:7b:96:ea:a3:3d:94:74: 6c:96:58:a8:b1:5f:17:55:36:b8:a0:fb:58:60:ca: 90:26:1f:d6:5d:26:cf:a3:f1:88:52:ca:03:fb:7d: 17:1f:c8:1b:27:26:d7:13:05:ce:1c:a2:64:9d:e2: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:37:87:53:82:2A:34:BE:66:09:7D:26:18:10:F0:37:B8:DB:D1:DD X509v3 Authority Key Identifier: keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7e:0d:4e:17:49:fa:05:ba:20:22:af:2f:3e:83:18:9b:3b: 0d:bb:bf:b4:53:55:d5:c4:c2:69:8e:17:61:36:6c:79:2e:02: 4c:69:1d:fa:93:5f:92:6e:53:62:d9:6a:e2:99:9a:3a:97:5e: 9f:36:52:3d:75:74:0a:fb:bd:57:44:e0:fd:78:e9:11:14:23: a2:72:c5:2b:79:88:79:7b:7c:ef:ff:94:c2:37:8c:d6:d2:dd: 0a:54:12:d2:28:2e:42:d7:0c:ba:aa:90:47:13:45:0f:c1:78: 03:92:a3:3a:a9:24:d2:64:db:96:27:90:c9:ef:d3:3b:d8:e6: a3:fc:d0:8d:58:32:77:05:a8:06:b6:22:0b:85:73:bc:36:ee: ce:d8:ec:ec:de:d2:a4:3b:e8:05:3b:cd:96:df:18:61:55:dd: dc:7e:1f:84:46:dd:35:6e:05:98:54:8b:7b:3a:01:11:16:1f: c6:8c:0c:e2:29:bb:ec:c1:7f:5e:76:b2:61:a7:72:27:05:a2: 6c:4f:ed:ab:34:c4:e9:78:dd:57:dc:19:f2:c9:14:19:cf:0c: cd:d9:19:88:08:24:c3:87:e7:46:32:4a:95:f4:52:5c:3f:1e: 76:f3:73:6a:97:1d:6c:16:ad:e8:b3:4e:15:1f:9c:99:c1:79: 37:02:3a:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4diAGLLNg6/hjIlcyA+RoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk NGU1OTIwHhcNMjYwMTI2MDQwMDQ5WhcNMjYwMTI3MDQwMDQ5WjAzMTEwLwYDVQQD EyhjMDM3ODc1MzgyMmEzNGJlNjYwOTdkMjYxODEwZjAzN2I4ZGJkMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwBDvRAKgJtvEncV7Rv5Os+A4cCB r95ASgxniuMTiWkgeTAiFY9lzehHA+X7jnuJnG5eWXNF7K8fEox2aT5hv1CqRijz ew4gWsgBi2Ed2t1kuLKbupkonlHUTFxm7R+xIF2OlZKEsFJz0Sh5DLKudWTdyRbz uI5aRv/1yTJb0mLtSIBBqxTTutDLR0DQwnOrH/V0Qexpn14ZtmGWVcOBNdpeZSt7 KtWeuxgRhDtIaAbo0an7cw4l9oO3mGlGvwn3P7TJhYGOe+kEnXuW6qM9lHRsllio sV8XVTa4oPtYYMqQJh/WXSbPo/GIUsoD+30XH8gbJybXEwXOHKJkneIOiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA3h1OCKjS+Zgl9JhgQ8De429HdMB8GA1UdIwQY MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4 LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf34NThdJ +gW6ICKvLz6DGJs7Dbu/tFNV1cTCaY4XYTZseS4CTGkd+pNfkm5TYtlq4pmaOpde nzZSPXV0Cvu9V0Tg/XjpERQjonLFK3mIeXt87/+UwjeM1tLdClQS0iguQtcMuqqQ RxNFD8F4A5KjOqkk0mTblieQye/TO9jmo/zQjVgydwWoBrYiC4VzvDbuztjs7N7S pDvoBTvNlt8YYVXd3H4fhEbdNW4FmFSLezoBERYfxowM4im77MF/XnayYadyJwWi bE/tqzTE6XjdV9wZ8skUGc8MzdkZiAgkw4fnRjJKlfRSXD8edvNzapcdbBat6LNO FR+cmcF5NwI67g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:50 2026 by rpki-client