This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json) Hash identifier: 92WnOuiUUVSAJiONmRU0yAr6NkYeb8pspgvbj884OWU= Subject key identifier: 9C:B0:5E:70:18:C7:E5:96:E2:0B:41:B5:38:D5:68:CA:ED:61:F6:DB Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019BAC128DD65C9752C8D0BC114348D0BA3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft Manifest number: 17CC Signing time: Sun 11 Jan 2026 08:00:55 +0000 Manifest this update: Sun 11 Jan 2026 08:00:55 +0000 Manifest next update: Mon 12 Jan 2026 08:00:55 +0000 Files and hashes: 1: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (hash: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA=) 2: 9wbcMUG4q75E7YjhGVXHnPYT7YM.roa (hash: nEsfQpZm0sg/MSPEMCxg0Fs6SfpSZuGJLTA7MHD7Ovo=) 3: GyN2brNi0SyVzTIfSD630KlULEk.roa (hash: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0=) 4: ISRSOffwnKTjPj1MMPFnE5hHe8s.roa (hash: TPD3Y1wSPDIQC6GIJIQVVQh3HSBeVb1LhJHakT+NdHs=) 5: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: cvEB7XQ+yCGOP9T0TpJc9MDXhj5xjIk1hRptQNoHfrE=) 6: eCjUaVvd2TzPMik8La5MP22VoHk.roa (hash: Bq46bPN3NBrsqsVZrKvTGDlSLbSVDSpMcjedcme4yis=) 7: mVZSMnEwaUiuqzT2Cbxb2epJs_M.roa (hash: 5EFB79XZ5ehmWzZUsd/dU3RMk+g34oEVWVIFqYihGfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:12:8d:d6:5c:97:52:c8:d0:bc:11:43:48:d0:ba:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 11 08:00:55 2026 GMT Not After : Jan 12 08:00:55 2026 GMT Subject: CN=9cb05e7018c7e596e20b41b538d568caed61f6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3d:c6:b4:a0:c4:bb:c9:4c:13:26:4a:ad:12: ba:97:dc:7a:07:ce:0a:6b:8d:dc:b5:83:b9:fa:c9: 64:d2:99:49:b0:4e:de:42:f9:e9:b0:6a:6b:53:bd: 12:83:ba:ac:cb:2e:81:f3:7b:c8:2e:61:30:d1:1b: b6:a8:d9:67:2e:b8:2e:f9:33:fb:33:59:02:ec:83: 49:00:ee:b0:0b:98:bd:35:d2:62:e6:53:ae:d4:f7: 5a:22:b9:50:63:49:f8:78:eb:1a:19:3f:7b:e3:94: 31:7b:f1:44:b9:2b:01:0a:38:9e:37:6a:af:e3:f7: e3:f7:96:c6:93:80:21:21:cb:36:5f:64:fe:f3:77: 8a:eb:b1:90:51:b3:79:e2:6d:77:77:ba:d7:9e:69: 70:3c:11:25:cd:5b:fc:0b:d6:52:df:79:cc:b9:9a: 27:8d:c9:bb:43:ff:66:d4:6c:e8:52:42:d4:20:0e: 4f:87:b4:2c:c1:ae:1f:bc:09:31:f6:83:3c:bf:8c: ec:26:67:86:01:74:45:2e:8c:b2:6e:0d:0a:ce:68: 2d:19:87:74:18:71:07:a1:2b:35:a1:19:56:d7:e5: 5f:d9:4a:39:bc:f8:17:6a:cb:0c:dc:55:eb:f9:b6: 6d:49:98:0e:74:8a:09:f1:4c:46:8f:f1:cb:63:70: 1f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B0:5E:70:18:C7:E5:96:E2:0B:41:B5:38:D5:68:CA:ED:61:F6:DB X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:a2:c7:d9:f0:90:1d:2c:4d:57:5b:93:16:f7:62:2a:e2: 5a:97:cc:23:80:79:13:db:79:70:ec:eb:0f:80:f4:0b:6f:17: b4:82:d7:59:6b:9c:68:53:31:ff:ac:7f:51:6c:18:af:e9:a2: bd:e5:8c:4a:ce:a3:b3:29:c0:8f:ac:79:a0:62:74:b7:76:c2: f6:90:94:d9:7f:c8:79:a3:74:1b:f4:50:3a:fa:d1:6c:8d:b5: 9b:ed:86:a5:a2:5c:3b:4d:8c:af:51:d3:22:49:26:ba:2c:32: ec:e9:7f:4d:78:dd:78:af:c1:3c:42:8e:df:67:0a:11:fc:18: 1f:a4:99:5d:35:a6:25:ca:c5:48:a3:b8:ed:16:da:4c:47:48: f5:32:24:f6:90:16:a3:59:8d:7a:b1:b4:20:fd:ee:b2:e7:c6: 34:95:c0:4f:0c:e8:9b:c8:4a:64:f5:7d:9e:39:bf:97:ff:d7: 51:c5:2b:52:80:b6:0c:52:be:00:bc:6a:9c:3c:a6:60:0b:96: 6f:21:59:d0:e9:5a:df:00:ba:cd:76:14:65:02:58:07:80:bc: 14:b9:2a:9e:28:8a:9a:91:79:a0:75:db:1f:db:49:e3:ce:27: f3:c1:2a:2a:4d:ff:e0:6a:54:2d:0a:47:61:57:ce:49:8f:f6: f1:4b:a8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZusEo3WXJdSyNC8EUNI0Lo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTExMDgwMDU1WhcNMjYwMTEyMDgwMDU1WjAzMTEwLwYDVQQD Eyg5Y2IwNWU3MDE4YzdlNTk2ZTIwYjQxYjUzOGQ1NjhjYWVkNjFmNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz3GtKDEu8lMEyZKrRK6l9x6B84K a43ctYO5+slk0plJsE7eQvnpsGprU70Sg7qsyy6B83vILmEw0Ru2qNlnLrgu+TP7 M1kC7INJAO6wC5i9NdJi5lOu1PdaIrlQY0n4eOsaGT9745Qxe/FEuSsBCjieN2qv 4/fj95bGk4AhIcs2X2T+83eK67GQUbN54m13d7rXnmlwPBElzVv8C9ZS33nMuZon jcm7Q/9m1GzoUkLUIA5Ph7Qswa4fvAkx9oM8v4zsJmeGAXRFLoyybg0KzmgtGYd0 GHEHoSs1oRlW1+Vf2Uo5vPgXassM3FXr+bZtSZgOdIoJ8UxGj/HLY3AfNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJywXnAYx+WW4gtBtTjVaMrtYfbbMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2iix9nw kB0sTVdbkxb3YiriWpfMI4B5E9t5cOzrD4D0C28XtILXWWucaFMx/6x/UWwYr+mi veWMSs6jsynAj6x5oGJ0t3bC9pCU2X/IeaN0G/RQOvrRbI21m+2GpaJcO02Mr1HT Ikkmuiwy7Ol/TXjdeK/BPEKO32cKEfwYH6SZXTWmJcrFSKO47RbaTEdI9TIk9pAW o1mNerG0IP3usufGNJXATwzom8hKZPV9njm/l//XUcUrUoC2DFK+ALxqnDymYAuW byFZ0Ola3wC6zXYUZQJYB4C8FLkqniiKmpF5oHXbH9tJ484n88EqKk3/4GpULQpH YVfOSY/28UuokA== -----END CERTIFICATE-----Generated at Sun Jan 11 15:15:19 2026 by rpki-client