This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json) Hash identifier: fyy53WUbFOunTBDGCuM4IVwvZTmcm0gYOJMvG7Gx9e4= Subject key identifier: C1:49:4E:5D:72:35:C9:79:4C:F4:C3:E8:2C:6A:BD:24:5F:C3:53:CF Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Certificate serial: 019BB6CE203AB9593CABBCE98CBEC6F5FBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft Manifest number: 137E Signing time: Tue 13 Jan 2026 10:02:00 +0000 Manifest this update: Tue 13 Jan 2026 10:02:00 +0000 Manifest next update: Wed 14 Jan 2026 10:02:00 +0000 Files and hashes: 1: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: Eqvd4tfssVSc57AKSVz3NePdWQ9Zy0EL+QMG7KX4K6o=) 2: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (hash: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:ce:20:3a:b9:59:3c:ab:bc:e9:8c:be:c6:f5:fb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Validity Not Before: Jan 13 10:02:00 2026 GMT Not After : Jan 14 10:02:00 2026 GMT Subject: CN=c1494e5d7235c9794cf4c3e82c6abd245fc353cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:dc:8e:c6:38:b5:9c:cf:34:ec:f1:62:6d: 0b:1c:7b:dd:05:07:f0:b5:4c:51:85:7c:c5:23:06: 78:ac:1e:7f:b2:07:7d:d3:b0:8b:fd:99:86:81:2a: fc:ef:25:22:d5:2f:ee:29:de:c2:90:3b:f7:88:7e: 98:44:f3:b4:b0:54:e4:56:9a:d2:8b:7d:75:1a:65: 11:d1:e7:ed:89:8e:7d:6b:f6:09:ad:62:d4:0d:dc: c3:52:49:0d:bb:ab:d5:82:c9:39:83:63:52:dc:50: 1d:1e:6d:db:e4:71:69:ca:83:4b:a0:c6:78:36:96: 12:37:e0:ba:a3:1a:be:22:b5:ce:8e:2f:09:e0:a7: f5:79:f0:d2:db:bf:16:78:29:48:a1:78:16:6e:e9: 58:20:25:96:f9:86:23:66:8d:54:b2:84:71:11:f5: 7f:c7:b5:a9:ed:9e:9e:f2:1d:2b:9b:2e:0f:a1:44: 81:43:52:d6:95:d5:ec:4b:33:de:6c:d8:8e:31:fb: 4e:13:7a:54:cf:ee:9f:ea:9a:95:e3:04:ec:81:5a: ee:41:1a:aa:59:65:68:4f:37:39:98:b0:2c:ed:86: 74:25:4f:85:e2:e1:81:c5:52:46:3c:4c:58:79:08: 8b:43:4d:0c:b9:3b:7e:bc:33:52:1f:54:2f:45:c3: c0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:49:4E:5D:72:35:C9:79:4C:F4:C3:E8:2C:6A:BD:24:5F:C3:53:CF X509v3 Authority Key Identifier: keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ce:94:45:1f:e2:99:36:a3:d2:53:fb:e5:7a:62:24:03:40: ea:6e:2d:30:e3:11:1e:3f:c2:c8:0e:90:cd:cc:f2:c5:3b:5c: 01:b6:8f:82:e0:94:4b:f2:cd:a1:a1:d5:49:54:65:82:2e:cf: f6:7f:6c:aa:f3:47:af:66:9c:d4:37:2c:06:af:bd:e5:ac:2b: 2f:73:44:8e:3e:bc:b3:21:df:ef:b9:a0:e0:74:5b:56:c1:09: f1:96:d7:44:e7:e7:aa:1f:a8:ec:d5:d2:5c:67:3f:da:dc:c5: 97:9f:38:ec:2a:8a:a1:d6:d4:22:8c:e8:b4:5b:32:9d:9f:df: 5d:61:ee:4a:8b:5d:0b:f5:eb:61:ae:79:2f:ec:97:40:f8:cc: be:4a:76:78:be:2f:4f:f5:c1:53:58:24:80:2b:25:d4:d4:ed: 4b:92:f6:11:d2:8b:d2:02:aa:43:61:f9:02:76:45:ee:fe:c9: 09:81:d1:8a:e4:a4:c8:7f:02:ba:49:84:2c:56:ac:c1:f3:94: 9e:ac:48:61:cb:ce:a5:af:3d:ea:c1:1a:70:80:f5:eb:be:a3: ff:37:44:e3:05:c1:23:76:46:6c:98:71:6f:44:03:8c:55:c6: ee:65:25:b7:26:5e:c9:74:2d:10:03:5d:a7:e6:94:56:0b:67: 24:ad:97:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2ziA6uVk8q7zpjL7G9fvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3 OTRhYTcwHhcNMjYwMTEzMTAwMjAwWhcNMjYwMTE0MTAwMjAwWjAzMTEwLwYDVQQD EyhjMTQ5NGU1ZDcyMzVjOTc5NGNmNGMzZTgyYzZhYmQyNDVmYzM1M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooPcjsY4tZzPNOzxYm0LHHvdBQfw tUxRhXzFIwZ4rB5/sgd907CL/ZmGgSr87yUi1S/uKd7CkDv3iH6YRPO0sFTkVprS i311GmUR0eftiY59a/YJrWLUDdzDUkkNu6vVgsk5g2NS3FAdHm3b5HFpyoNLoMZ4 NpYSN+C6oxq+IrXOji8J4Kf1efDS278WeClIoXgWbulYICWW+YYjZo1UsoRxEfV/ x7Wp7Z6e8h0rmy4PoUSBQ1LWldXsSzPebNiOMftOE3pUz+6f6pqV4wTsgVruQRqq WWVoTzc5mLAs7YZ0JU+F4uGBxVJGPExYeQiLQ00MuTt+vDNSH1QvRcPAGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFJTl1yNcl5TPTD6CxqvSRfw1PPMB8GA1UdIwQY MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4 LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs6URR/i mTaj0lP75XpiJANA6m4tMOMRHj/CyA6QzczyxTtcAbaPguCUS/LNoaHVSVRlgi7P 9n9sqvNHr2ac1DcsBq+95awrL3NEjj68syHf77mg4HRbVsEJ8ZbXROfnqh+o7NXS XGc/2tzFl5847CqKodbUIozotFsynZ/fXWHuSotdC/XrYa55L+yXQPjMvkp2eL4v T/XBU1gkgCsl1NTtS5L2EdKL0gKqQ2H5AnZF7v7JCYHRiuSkyH8CukmELFaswfOU nqxIYcvOpa896sEacID1676j/zdE4wXBI3ZGbJhxb0QDjFXG7mUltyZeyXQtEANd p+aUVgtnJK2X/w== -----END CERTIFICATE-----Generated at Tue Jan 13 14:35:54 2026 by rpki-client