This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft File: hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft (raw, json) Hash identifier: OGT0QX9sTWqSNwAss0nDlzq+16HGOXNC4DsFQMR2czw= Subject key identifier: 6B:D4:DF:E7:24:84:FA:7F:8B:A7:56:E9:67:11:61:36:50:28:56:48 Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019BC2D16042C13E1C978F97F76DC3C2106C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft Manifest number: 17CF Signing time: Thu 15 Jan 2026 18:01:00 +0000 Manifest this update: Thu 15 Jan 2026 18:01:00 +0000 Manifest next update: Fri 16 Jan 2026 18:01:00 +0000 Files and hashes: 1: Xt9gim6uGZAO-XoH9YVT_sjrnmc.roa (hash: EDOq5gPDJvJThydl2Ogu3GFdpWlVfncejE+dMuzQn70=) 2: c06039lKyV_J6xBbo-T4U-OvKpY.roa (hash: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow=) 3: hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl (hash: bqzUFuNu0HXGL+4nIz360NAU1Vt/Sy7In0FX4IR8ar0=) 4: oEY0i9r3K2XzpeIqb_uHhC_ZJf8.roa (hash: eStOq03pWfBN0BFsIv2si494zM3pBol5A5EHh+T2UJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:d1:60:42:c1:3e:1c:97:8f:97:f7:6d:c3:c2:10:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Jan 15 18:01:00 2026 GMT Not After : Jan 16 18:01:00 2026 GMT Subject: CN=6bd4dfe72484fa7f8ba756e96711613650285648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:34:e2:71:f5:6b:10:ad:2f:37:5d:39:9d: b4:44:1f:a7:77:8c:f4:5a:7a:74:84:66:79:3f:fd: 44:5c:91:e8:ee:ad:b1:72:c4:aa:5c:5e:4d:23:a4: 69:d1:6e:fd:d0:e6:ab:77:97:c6:70:d0:98:e1:e6: 05:b4:88:66:5e:ac:6b:95:6c:28:8f:d3:a6:6a:ab: 72:e9:60:a2:af:5c:c2:aa:ad:8a:c7:27:33:44:e2: 68:51:bc:a6:fe:1a:19:67:c8:3f:1f:c9:e4:1f:df: 1c:bc:f7:3e:2e:36:50:c5:a2:aa:f9:02:d0:20:29: 1b:8f:7e:43:fc:03:04:73:87:a8:53:48:8b:37:24: d0:59:3e:12:7a:b8:8f:d9:76:de:1d:b0:c7:e9:e1: 28:43:76:aa:15:24:fb:99:c3:fc:7d:f4:b5:f7:ca: 62:b4:7c:e9:53:c3:c6:9f:0e:7c:56:a6:e8:19:5d: 66:26:46:45:9a:ed:70:f6:b4:7b:91:7c:6e:ab:36: 2a:e4:b8:08:a3:3f:a1:f1:85:dd:03:39:53:50:42: ec:55:9d:81:56:e5:d7:91:f3:21:86:f3:1e:aa:20: 53:ed:93:1e:de:16:c2:73:d3:c9:0c:f4:68:4d:52: 8d:fd:ba:d0:e4:ec:ea:f6:5c:c7:40:ec:70:37:60: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:DF:E7:24:84:FA:7F:8B:A7:56:E9:67:11:61:36:50:28:56:48 X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:42:ba:c3:4f:68:67:e3:89:fa:b2:fb:50:ff:63:94:d9:b8: 3f:95:14:c1:f1:25:b0:fc:38:9a:fe:14:47:11:00:6e:04:64: c4:ae:ae:c1:00:b8:c7:5d:4a:91:83:6a:f7:2e:7c:a2:79:e4: c8:c0:08:ed:36:d0:b6:5d:e9:7d:af:f3:e0:fd:b1:49:26:14: 60:88:b6:f3:fe:ef:80:20:f2:f4:ec:03:ff:dc:43:de:d3:9d: 3b:47:7e:6a:72:dd:b2:b0:1a:65:9f:0d:df:77:f4:80:2f:6e: a4:8e:05:37:20:b5:8c:d9:fe:b7:f8:58:3e:5d:73:83:19:62: 3e:6d:2f:31:d8:cc:2e:38:9c:7b:9d:f0:a6:14:8a:ab:fa:52: 25:6a:6c:72:b1:8d:6d:bf:cf:80:68:ab:a7:f4:d5:19:b5:8c: a8:02:3e:32:cc:7d:c0:ce:ed:f7:13:1b:74:41:0f:85:91:ad: 09:fd:e6:98:cf:02:d3:64:b0:77:a0:14:c1:76:17:df:fa:9c: 5d:09:e5:20:ba:1a:41:15:ee:8b:7d:ef:3b:d0:ac:34:25:74: e4:39:ee:65:43:e5:a4:3c:a0:42:f6:14:96:78:0f:34:c2:13: ac:68:46:a9:b8:2c:a4:02:a1:33:fc:48:9a:0b:69:18:2b:c3: aa:15:7f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvC0WBCwT4cl4+X923DwhBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjYwMTE1MTgwMTAwWhcNMjYwMTE2MTgwMTAwWjAzMTEwLwYDVQQD Eyg2YmQ0ZGZlNzI0ODRmYTdmOGJhNzU2ZTk2NzExNjEzNjUwMjg1NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrM04nH1axCtLzddOZ20RB+nd4z0 Wnp0hGZ5P/1EXJHo7q2xcsSqXF5NI6Rp0W790Oard5fGcNCY4eYFtIhmXqxrlWwo j9Omaqty6WCir1zCqq2KxyczROJoUbym/hoZZ8g/H8nkH98cvPc+LjZQxaKq+QLQ ICkbj35D/AMEc4eoU0iLNyTQWT4SeriP2XbeHbDH6eEoQ3aqFST7mcP8ffS198pi tHzpU8PGnw58VqboGV1mJkZFmu1w9rR7kXxuqzYq5LgIoz+h8YXdAzlTUELsVZ2B VuXXkfMhhvMeqiBT7ZMe3hbCc9PJDPRoTVKN/brQ5Ozq9lzHQOxwN2BTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvU3+ckhPp/i6dW6WcRYTZQKFZIMB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkK6w09o Z+OJ+rL7UP9jlNm4P5UUwfElsPw4mv4URxEAbgRkxK6uwQC4x11KkYNq9y58onnk yMAI7TbQtl3pfa/z4P2xSSYUYIi28/7vgCDy9OwD/9xD3tOdO0d+anLdsrAaZZ8N 33f0gC9upI4FNyC1jNn+t/hYPl1zgxliPm0vMdjMLjice53wphSKq/pSJWpscrGN bb/PgGirp/TVGbWMqAI+Msx9wM7t9xMbdEEPhZGtCf3mmM8C02Swd6AUwXYX3/qc XQnlILoaQRXui33vO9CsNCV05DnuZUPlpDygQvYUlngPNMITrGhGqbgspAKhM/xI mgtpGCvDqhV/ug== -----END CERTIFICATE-----Generated at Fri Jan 16 02:44:56 2026 by rpki-client