This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: bKMqJm2tbEt+NHJUcJEMfgxdB2dlnNLj6aVhvWWR2W8= Subject key identifier: 0F:D1:81:CE:C4:E3:C1:8E:B1:6E:CE:9B:D2:0D:35:B9:C6:0A:BE:10 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019BF2E1FE26E1B93D92F64C7E51A2760268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 08E3 Signing time: Sun 25 Jan 2026 02:00:55 +0000 Manifest this update: Sun 25 Jan 2026 02:00:55 +0000 Manifest next update: Mon 26 Jan 2026 02:00:55 +0000 Files and hashes: 1: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 2: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 3: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 4: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: YBdD8rkUvdG/WTeZp2pYUUuuDqNzNWojr/WGhBPtmxQ=) 6: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 7: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 8: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 9: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 10: e-wh2r9wdch9AbYzWAb-amfpi3k.roa (hash: 7RxrmeOp+FYtmV6C/Huryp37MguNnmSBg7rxFRERF7A=) 11: k84WPUGfQIVIA_tiWGdJRtGMimg.roa (hash: hA5+KWMD6TuAOakxzUqUiHv7L3lZ8BGhQfo9wvlqG0s=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:fe:26:e1:b9:3d:92:f6:4c:7e:51:a2:76:02:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 25 02:00:55 2026 GMT Not After : Jan 26 02:00:55 2026 GMT Subject: CN=0fd181cec4e3c18eb16ece9bd20d35b9c60abe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:19:b6:15:40:ee:c0:a4:77:c9:bf:f4:4a:67: 9b:b4:56:0f:11:14:b9:15:af:7d:3c:54:94:55:77: a1:1e:cc:41:5d:52:c7:85:52:8b:26:d4:18:f3:f1: eb:64:e5:17:78:fb:22:e1:08:5c:09:f8:02:db:1f: 52:d3:24:7b:a5:3c:12:a0:f5:0c:41:68:97:b6:3c: 9e:46:f4:d1:57:1b:da:f5:1a:a8:de:08:aa:95:ce: 07:c5:46:77:06:b5:59:04:e6:1e:17:69:4b:84:17: d8:b5:f8:15:b9:51:46:b0:13:e4:e8:cb:94:2a:70: 15:d6:d3:a7:11:bc:20:4b:07:5d:1f:c5:c5:00:ad: d8:a0:48:f2:50:b9:fd:1c:0a:a5:a5:bb:8d:ce:41: 32:a8:66:44:c4:57:be:31:8a:86:59:cc:26:5d:4d: 9d:e8:a8:64:70:b9:02:3c:e7:5a:66:c8:da:e1:ac: df:fe:82:fb:5b:07:09:89:67:f5:f3:97:14:16:8b: 86:a1:5d:45:08:40:69:21:c7:83:40:cb:fc:4e:87: d9:3f:18:65:ba:77:f9:07:a9:f5:19:93:b5:a2:ec: b0:9c:59:59:30:52:62:4c:f9:e1:3a:23:37:52:81: 01:c3:f1:d5:bb:ad:75:cb:e6:17:1c:57:49:f3:9a: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D1:81:CE:C4:E3:C1:8E:B1:6E:CE:9B:D2:0D:35:B9:C6:0A:BE:10 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:27:14:07:d6:1c:c8:66:96:5d:29:62:f6:52:25:94:8d:75: 66:4a:a5:9b:29:6a:0b:a6:c8:18:ae:17:7f:10:0a:f5:0d:5b: 8a:2a:f0:b2:1a:40:96:ce:84:4e:83:26:1b:b9:5e:f5:79:75: d5:50:ab:23:fe:4a:d8:3d:0e:1c:cd:83:81:3c:c6:83:1b:4d: 64:7d:d1:e0:c2:33:e5:6f:ab:84:b9:aa:bc:99:d4:17:8b:c1: f7:9c:8f:6a:95:09:f1:cd:e3:25:44:b0:85:cc:3b:3a:73:c3: c7:5e:61:ac:97:32:98:f7:b5:65:ad:a9:a9:f2:6a:2c:52:15: b5:f4:af:00:5b:9d:ce:6a:d2:eb:87:d8:60:d8:ad:c3:26:e6: 7d:87:35:df:da:3a:99:34:45:d7:d9:07:7a:c2:ea:2e:dc:3e: 7f:bc:f5:8c:80:c1:38:f6:87:cb:a8:86:92:58:33:9a:2a:07: fe:13:2d:dd:4f:fa:a9:a6:d4:6d:78:67:b5:06:42:57:18:44: 1e:68:e7:fb:8f:22:a0:6a:ff:75:fb:1b:ae:f2:04:a2:da:5b: b4:27:68:be:7e:a7:46:70:4e:a0:7e:a2:fc:33:8b:8e:5a:80: 72:0c:cf:b5:52:b6:ec:2e:e9:8c:b2:5a:ab:c1:15:d4:14:54: 08:0a:ac:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4f4m4bk9kvZMflGidgJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTI1MDIwMDU1WhcNMjYwMTI2MDIwMDU1WjAzMTEwLwYDVQQD EygwZmQxODFjZWM0ZTNjMThlYjE2ZWNlOWJkMjBkMzViOWM2MGFiZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hm2FUDuwKR3yb/0SmebtFYPERS5 Fa99PFSUVXehHsxBXVLHhVKLJtQY8/HrZOUXePsi4QhcCfgC2x9S0yR7pTwSoPUM QWiXtjyeRvTRVxva9Rqo3giqlc4HxUZ3BrVZBOYeF2lLhBfYtfgVuVFGsBPk6MuU KnAV1tOnEbwgSwddH8XFAK3YoEjyULn9HAqlpbuNzkEyqGZExFe+MYqGWcwmXU2d 6KhkcLkCPOdaZsja4azf/oL7WwcJiWf185cUFouGoV1FCEBpIceDQMv8TofZPxhl unf5B6n1GZO1ouywnFlZMFJiTPnhOiM3UoEBw/HVu611y+YXHFdJ85qNLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/Rgc7E48GOsW7Om9INNbnGCr4QMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCcUB9Yc yGaWXSli9lIllI11ZkqlmylqC6bIGK4XfxAK9Q1biirwshpAls6EToMmG7le9Xl1 1VCrI/5K2D0OHM2DgTzGgxtNZH3R4MIz5W+rhLmqvJnUF4vB95yPapUJ8c3jJUSw hcw7OnPDx15hrJcymPe1Za2pqfJqLFIVtfSvAFudzmrS64fYYNitwybmfYc139o6 mTRF19kHesLqLtw+f7z1jIDBOPaHy6iGklgzmioH/hMt3U/6qabUbXhntQZCVxhE Hmjn+48ioGr/dfsbrvIEotpbtCdovn6nRnBOoH6i/DOLjlqAcgzPtVK27C7pjLJa q8EV1BRUCAqsYw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:31 2026 by rpki-client