This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json) Hash identifier: BIAJBQ0MKKsMpLdaJv13Zhm8ITvDPtc8jhYbO2twiWg= Subject key identifier: 26:88:83:13:BD:34:53:29:80:56:36:73:6A:4B:61:84:38:8F:0C:53 Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91 Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791 Certificate serial: 019BB4038EBEF9233C89F1C0CE28CFE8B8FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft Manifest number: 0745 Signing time: Mon 12 Jan 2026 21:01:30 +0000 Manifest this update: Mon 12 Jan 2026 21:01:30 +0000 Manifest next update: Tue 13 Jan 2026 21:01:30 +0000 Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: vKGKLh4e52OT+ONS5+FYWOGfnrnsRMpGA69luMHudwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b4:03:8e:be:f9:23:3c:89:f1:c0:ce:28:cf:e8:b8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791 Validity Not Before: Jan 12 21:01:30 2026 GMT Not After : Jan 13 21:01:30 2026 GMT Subject: CN=26888313bd345329805636736a4b6184388f0c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:78:33:e6:6d:3a:93:cc:6f:d2:a1:cf:13: c5:2a:c0:91:32:c7:55:7a:bb:95:f0:5d:57:85:d2: 61:08:c1:6d:17:82:52:43:7d:6d:80:c1:82:bb:18: 2b:99:ec:0c:23:62:f6:f3:bf:d1:ee:f3:26:32:0b: e4:21:8b:c3:63:1b:67:fb:cb:6b:78:f2:2b:19:90: b6:d8:0a:09:2b:17:ae:4c:25:9a:9a:61:df:7e:7a: b5:34:eb:d7:d9:22:00:4c:29:78:01:e4:3a:e3:c1: 57:b7:92:c4:79:89:7f:18:02:c2:d2:d3:23:97:17: 1c:d2:14:5a:6e:5b:3a:d0:f9:a1:3b:57:73:8d:cd: 0a:33:dd:3a:f5:c6:09:01:8e:3d:77:bc:d4:63:db: f5:c8:ac:e7:2e:70:1c:01:e5:f7:04:16:d8:e0:f8: cb:9d:9e:e7:8d:ff:a7:42:21:15:47:48:9b:01:48: 82:ec:5d:31:21:85:02:e1:c0:58:ed:01:f8:06:d1: c6:0c:97:a3:84:b3:44:70:53:41:49:de:4a:2b:d4: d7:01:6b:8c:5e:07:50:01:58:7e:0e:ae:1c:5e:cb: 00:c0:5e:dd:b5:9b:0b:10:47:5d:4f:6a:65:79:03: 01:92:06:43:13:44:d4:ff:c3:2c:d9:f1:2a:32:e7: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:88:83:13:BD:34:53:29:80:56:36:73:6A:4B:61:84:38:8F:0C:53 X509v3 Authority Key Identifier: keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:34:de:87:32:d9:6f:b6:9b:db:29:f2:f8:03:e0:80:3e:69: cc:24:25:d6:3c:2b:7e:c9:11:28:4f:91:75:c8:03:b9:bb:3a: 0c:73:90:81:db:57:47:77:52:5c:f9:f1:17:cd:3a:e9:ea:ca: de:8b:25:a2:4d:5d:38:61:3f:8e:42:9d:00:91:d7:f8:af:00: e2:c2:17:7d:58:f9:97:0e:3e:95:e4:e2:4c:0d:e2:89:4e:45: 58:18:7d:00:7d:f7:88:6b:35:02:19:ac:49:eb:8a:1d:fd:bb: 46:08:d4:7c:76:e2:de:fa:6b:3c:0e:f8:ff:17:47:cb:88:ae: 13:ed:f9:10:08:6b:5f:87:74:42:61:b4:75:aa:5b:d0:71:11: 8d:e7:1e:c8:ad:8d:40:a8:d6:b9:fa:ce:2c:2f:12:7b:12:a0: 97:45:0d:3d:d9:99:ed:69:c5:56:08:9d:2c:99:de:fc:9f:3c: 15:cc:90:0f:3a:a4:99:6f:8f:bf:e6:2e:49:39:a9:d1:3e:c5: 0a:ca:08:15:07:c2:a5:a5:5d:4f:25:35:f4:8a:fd:26:91:f4: de:17:2f:1a:f8:c0:bf:77:9d:56:11:02:a8:c3:13:2d:03:6f: 99:c8:d9:b7:d0:6b:20:da:ef:cf:6b:8a:14:da:a3:87:9e:22: 4f:74:a2:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu0A46++SM8ifHAzijP6Lj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1 MWQ3OTEwHhcNMjYwMTEyMjEwMTMwWhcNMjYwMTEzMjEwMTMwWjAzMTEwLwYDVQQD EygyNjg4ODMxM2JkMzQ1MzI5ODA1NjM2NzM2YTRiNjE4NDM4OGYwYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GV4M+ZtOpPMb9KhzxPFKsCRMsdV eruV8F1XhdJhCMFtF4JSQ31tgMGCuxgrmewMI2L287/R7vMmMgvkIYvDYxtn+8tr ePIrGZC22AoJKxeuTCWammHffnq1NOvX2SIATCl4AeQ648FXt5LEeYl/GALC0tMj lxcc0hRabls60PmhO1dzjc0KM9069cYJAY49d7zUY9v1yKznLnAcAeX3BBbY4PjL nZ7njf+nQiEVR0ibAUiC7F0xIYUC4cBY7QH4BtHGDJejhLNEcFNBSd5KK9TXAWuM XgdQAVh+Dq4cXssAwF7dtZsLEEddT2pleQMBkgZDE0TU/8Ms2fEqMuec5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCaIgxO9NFMpgFY2c2pLYYQ4jwxTMB8GA1UdIwQY MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4 LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDTehzLZ b7ab2yny+APggD5pzCQl1jwrfskRKE+RdcgDubs6DHOQgdtXR3dSXPnxF8066erK 3oslok1dOGE/jkKdAJHX+K8A4sIXfVj5lw4+leTiTA3iiU5FWBh9AH33iGs1Ahms SeuKHf27RgjUfHbi3vprPA74/xdHy4iuE+35EAhrX4d0QmG0dapb0HERjeceyK2N QKjWufrOLC8SexKgl0UNPdmZ7WnFVgidLJne/J88FcyQDzqkmW+Pv+YuSTmp0T7F CsoIFQfCpaVdTyU19Ir9JpH03hcvGvjAv3edVhECqMMTLQNvmcjZt9BrINrvz2uK FNqjh54iT3Si9Q== -----END CERTIFICATE-----Generated at Mon Jan 12 23:51:19 2026 by rpki-client