This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json) Hash identifier: /PehFc4VD0s5emTLVez4OzT9xtfPnBm9+vy3/YAMMDg= Subject key identifier: 58:C6:2F:F5:0F:C6:45:81:43:7A:B9:19:7A:42:3D:59:37:DA:2F:C9 Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Certificate serial: 019BAF139D07589A90440FFC2A8330A6CE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft Manifest number: 06B3 Signing time: Sun 11 Jan 2026 22:00:56 +0000 Manifest this update: Sun 11 Jan 2026 22:00:56 +0000 Manifest next update: Mon 12 Jan 2026 22:00:56 +0000 Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: th0ieiC1S5CbevLaH7foV17KDHyKi2wmAjeAq0aIRRI=) 2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:13:9d:07:58:9a:90:44:0f:fc:2a:83:30:a6:ce:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822 Validity Not Before: Jan 11 22:00:56 2026 GMT Not After : Jan 12 22:00:56 2026 GMT Subject: CN=58c62ff50fc64581437ab9197a423d5937da2fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:6a:a2:38:82:27:c9:b3:eb:eb:c6:b9:b3: 07:c8:d1:ea:c5:3b:8c:6e:14:7b:df:60:af:03:63: ba:64:50:c2:36:17:3f:00:c1:a9:ba:f7:da:fc:08: e3:e6:ea:a3:8d:f1:05:7d:33:ee:fb:98:2d:e2:2f: 9a:6b:b3:bb:00:27:31:81:f7:5b:5a:d5:17:5c:92: 9d:27:34:ad:03:23:f1:5c:69:36:b4:3a:14:c6:24: 39:72:25:cd:b3:c5:c8:6f:7b:95:ef:38:19:2e:2d: 0e:1e:5a:df:b3:56:d0:29:de:97:3c:d8:fa:4f:1d: 18:77:99:e1:fc:46:92:05:97:3c:d8:dd:a1:83:38: dd:8d:8b:b0:99:9f:75:7e:b3:ff:c2:01:1c:20:a7: b4:16:ad:f6:27:cb:56:9a:78:2d:9c:18:3d:66:99: cb:b6:93:70:82:06:f6:96:8e:36:69:68:99:68:14: c3:f0:d9:44:9e:bf:0d:cb:d0:18:23:96:67:4e:63: a8:a4:16:29:68:13:31:7d:fb:0a:4a:35:79:fc:37: fe:d7:09:a5:44:b5:04:dc:6b:c1:77:5e:e1:59:8f: 35:1a:2e:ae:5e:d3:2c:df:06:c2:3f:e7:0e:e2:58: c0:7d:a8:0c:dd:1c:62:c0:e2:fb:91:d6:f6:87:ca: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C6:2F:F5:0F:C6:45:81:43:7A:B9:19:7A:42:3D:59:37:DA:2F:C9 X509v3 Authority Key Identifier: keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bb:99:b9:65:32:49:e6:3f:ca:eb:6c:df:d3:8f:48:6c:c2: 2d:11:ab:8d:40:5f:a7:e0:79:3f:20:fc:8a:64:73:10:30:88: e0:ff:e9:5a:c5:2f:9e:9e:5a:b6:71:bf:4d:97:12:3b:f9:a2: 42:89:1a:11:9c:d2:3d:93:9e:b4:4f:6a:69:f9:db:93:0c:72: 3b:39:63:34:3b:98:cd:ab:ef:4b:75:8d:b6:51:b6:88:13:f6: 37:e9:91:a0:c9:fd:ee:4a:5f:b2:43:f6:40:54:99:3f:a3:69: 30:2a:26:6e:41:01:49:59:c0:76:a2:43:16:10:be:cc:ec:5c: 9d:c7:1b:d8:36:7b:a7:a5:5f:e5:5b:66:88:f6:d3:39:dc:e2: 75:1f:f1:fe:6b:be:3c:ad:06:bf:21:a4:0f:68:2c:8e:23:8b: bb:bc:e2:bd:76:89:f0:95:1a:0d:84:c5:29:03:f9:9f:2a:6b: ff:ec:b6:c2:b0:4f:03:de:ed:d5:91:05:20:f7:28:44:57:55: d1:db:80:0c:74:99:cf:e2:00:cf:f3:f1:2c:48:b0:71:18:85: 25:20:3e:55:16:5f:46:66:bf:aa:51:39:64:1a:47:ea:1c:57: 28:fa:03:63:8d:3b:6e:63:29:e1:45:62:42:6e:e0:ba:7b:ed: 51:8e:fc:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvE50HWJqQRA/8KoMwps51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx NjE4MjIwHhcNMjYwMTExMjIwMDU2WhcNMjYwMTEyMjIwMDU2WjAzMTEwLwYDVQQD Eyg1OGM2MmZmNTBmYzY0NTgxNDM3YWI5MTk3YTQyM2Q1OTM3ZGEyZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYxqojiCJ8mz6+vGubMHyNHqxTuM bhR732CvA2O6ZFDCNhc/AMGpuvfa/Ajj5uqjjfEFfTPu+5gt4i+aa7O7ACcxgfdb WtUXXJKdJzStAyPxXGk2tDoUxiQ5ciXNs8XIb3uV7zgZLi0OHlrfs1bQKd6XPNj6 Tx0Yd5nh/EaSBZc82N2hgzjdjYuwmZ91frP/wgEcIKe0Fq32J8tWmngtnBg9ZpnL tpNwggb2lo42aWiZaBTD8NlEnr8Ny9AYI5ZnTmOopBYpaBMxffsKSjV5/Df+1wml RLUE3GvBd17hWY81Gi6uXtMs3wbCP+cO4ljAfagM3RxiwOL7kdb2h8o0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjGL/UPxkWBQ3q5GXpCPVk32i/JMB8GA1UdIwQY MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACruZuWUy SeY/yuts39OPSGzCLRGrjUBfp+B5PyD8imRzEDCI4P/pWsUvnp5atnG/TZcSO/mi QokaEZzSPZOetE9qafnbkwxyOzljNDuYzavvS3WNtlG2iBP2N+mRoMn97kpfskP2 QFSZP6NpMCombkEBSVnAdqJDFhC+zOxcnccb2DZ7p6Vf5VtmiPbTOdzidR/x/mu+ PK0GvyGkD2gsjiOLu7zivXaJ8JUaDYTFKQP5nypr/+y2wrBPA97t1ZEFIPcoRFdV 0duADHSZz+IAz/PxLEiwcRiFJSA+VRZfRma/qlE5ZBpH6hxXKPoDY407bmMp4UVi Qm7gunvtUY78Sw== -----END CERTIFICATE-----Generated at Mon Jan 12 05:31:53 2026 by rpki-client