This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json) Hash identifier: abS1ZjWVGsStZ628phU6BUJPTxtPxhbSnJi2aRPAGPg= Subject key identifier: FC:BF:E0:7C:FB:91:55:E3:C0:A1:16:54:E5:0C:65:9C:6F:EE:F5:DE Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019BE93A12160F82C94E6C5714D95ADF3226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft Manifest number: 08DE Signing time: Fri 23 Jan 2026 05:00:55 +0000 Manifest this update: Fri 23 Jan 2026 05:00:55 +0000 Manifest next update: Sat 24 Jan 2026 05:00:55 +0000 Files and hashes: 1: 3A7selqAvOAe0_qgDt52j-PXoUo.roa (hash: flK4+w82j1glwyv4wQLtf3SZZHY1VlIETMIP4anf5xE=) 2: 6lfGv8k68GhJfpCtD-OYR6WFhMM.roa (hash: hRZoZNE1zfUjpEY2IrJl4n+tjpdwbaQl0JLh8/g+Xrg=) 3: HCfgldAudjj-QJp0v9tfxs8SS7s.roa (hash: scE7gtW6qWeNCkYq9sEgw17dRXKm9IoFbwhoZjct248=) 4: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (hash: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc=) 5: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: a4YrAbXZ+UFalu8xye95N8S0wdoERqBbSvPxnVwcj18=) 6: SJIi9b7jF-tIX6-P-stvPvq18n8.roa (hash: Yf5kVhbDxCHqDvm6KWnDfz54gR5Gju/hz7Bu6PIbeGY=) 7: YkD_uNZixvFZy5o-FN9c3GrSt2c.roa (hash: HnHkeN+t+D68w5wvbHYNeze7wxX1WDFe/hvEfnU7xqg=) 8: bYPwb0EB-ZQ-8Y684GShPWjy1Hk.roa (hash: 0JCC1fOO6w53Jm25LczdyIlJEt6qyZ0R4CERFii4DMc=) 9: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (hash: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I=) 10: e-wh2r9wdch9AbYzWAb-amfpi3k.roa (hash: 7RxrmeOp+FYtmV6C/Huryp37MguNnmSBg7rxFRERF7A=) 11: k84WPUGfQIVIA_tiWGdJRtGMimg.roa (hash: hA5+KWMD6TuAOakxzUqUiHv7L3lZ8BGhQfo9wvlqG0s=) 12: z0cFxQ6JyNCpSf1atSyxLBogwYE.roa (hash: K3/YTrhSfyH3/M+a1W4qVz5OIXek2v5gDMUUGi2l+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:3a:12:16:0f:82:c9:4e:6c:57:14:d9:5a:df:32:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 23 05:00:55 2026 GMT Not After : Jan 24 05:00:55 2026 GMT Subject: CN=fcbfe07cfb9155e3c0a11654e50c659c6feef5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:a4:d6:07:b2:44:1c:79:21:34:45:04:23: 75:41:9e:ad:44:71:63:77:62:03:3d:4a:42:71:3d: 21:17:05:9b:b9:e1:ed:ce:4f:33:3a:4a:41:0b:87: 76:f3:ec:d9:e0:d8:c8:74:56:82:98:63:e1:6d:f2: e4:25:19:6a:57:65:b4:4d:9d:98:ec:1e:9d:b0:5a: cb:2e:a1:ff:b1:66:96:1f:63:33:2f:38:37:6d:d7: 4d:7c:24:53:0a:1b:5a:76:9e:fb:f9:ad:f1:b9:5b: e9:60:0e:55:93:e8:1f:05:a3:d7:a5:50:ad:74:c9: 3a:ab:dd:19:73:64:68:62:35:1f:5c:73:ec:28:8e: 83:5f:38:69:31:ec:b6:f3:16:f4:5e:6b:15:09:82: ee:44:42:4d:11:9c:e2:6a:43:63:a9:7b:e0:d2:7c: e1:5b:7b:c7:6b:6f:69:b0:3d:43:88:31:7b:f9:9e: 45:bf:3e:ca:51:fc:a7:4a:7b:11:c7:99:6a:0a:bc: 2b:8a:d3:28:53:e8:1c:d8:96:db:3f:ab:fd:6a:b5: d4:8a:c6:1a:cc:9e:9c:8a:66:64:de:bb:8e:2f:ac: b2:eb:e6:82:20:cd:92:b6:e7:c1:fe:e7:1d:12:19: 41:30:31:12:7c:43:c9:d2:d2:d3:03:35:2e:35:bc: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:E0:7C:FB:91:55:E3:C0:A1:16:54:E5:0C:65:9C:6F:EE:F5:DE X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6f:f5:bf:c8:04:f7:3b:40:34:2d:21:1c:85:59:0c:75:cd: ea:0e:be:de:12:6e:c5:61:42:0f:af:51:ed:aa:cd:b8:35:ce: d2:7c:cc:36:f9:18:59:96:f7:49:11:f7:4d:05:ea:65:66:30: 41:87:7c:b0:57:b4:7f:9c:95:01:b8:a1:a7:9c:c6:8b:e4:3e: e7:82:1d:31:92:76:1e:8e:c0:cc:b2:26:53:46:44:23:98:6d: f3:26:ea:05:15:d1:d9:52:97:b3:53:e2:79:57:72:ad:cc:3f: db:22:96:2c:50:01:ab:cc:9e:98:d6:72:2d:c1:40:c9:d1:11: f2:ee:c4:05:50:68:6c:7e:98:1d:04:a1:ad:05:69:7c:aa:0d: 3d:a8:4d:60:a1:d8:4a:10:af:2b:c9:0d:3e:96:39:d4:2c:e3: dc:88:14:eb:f7:50:ca:2e:d4:e4:3c:2e:07:86:49:e3:75:61: ad:31:73:ac:d8:4b:a4:2d:6e:e0:9e:67:5d:e8:1c:4a:89:5f: be:fa:e4:8e:6c:01:8f:e0:91:9f:4a:84:40:98:d7:c5:70:17: c9:1b:7f:e7:a0:59:7b:8e:23:9d:67:f7:7c:6a:8e:83:08:28: fb:f1:28:ee:0c:3a:19:94:29:a2:10:4b:d6:ac:cd:c5:11:9a: 07:d8:53:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvpOhIWD4LJTmxXFNla3zImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTIzMDUwMDU1WhcNMjYwMTI0MDUwMDU1WjAzMTEwLwYDVQQD EyhmY2JmZTA3Y2ZiOTE1NWUzYzBhMTE2NTRlNTBjNjU5YzZmZWVmNWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus2k1geyRBx5ITRFBCN1QZ6tRHFj d2IDPUpCcT0hFwWbueHtzk8zOkpBC4d28+zZ4NjIdFaCmGPhbfLkJRlqV2W0TZ2Y 7B6dsFrLLqH/sWaWH2MzLzg3bddNfCRTChtadp77+a3xuVvpYA5Vk+gfBaPXpVCt dMk6q90Zc2RoYjUfXHPsKI6DXzhpMey28xb0XmsVCYLuREJNEZziakNjqXvg0nzh W3vHa29psD1DiDF7+Z5Fvz7KUfynSnsRx5lqCrwritMoU+gc2JbbP6v9arXUisYa zJ6cimZk3ruOL6yy6+aCIM2StufB/ucdEhlBMDESfEPJ0tLTAzUuNbw6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy/4Hz7kVXjwKEWVOUMZZxv7vXeMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm/1v8gE 9ztANC0hHIVZDHXN6g6+3hJuxWFCD69R7arNuDXO0nzMNvkYWZb3SRH3TQXqZWYw QYd8sFe0f5yVAbihp5zGi+Q+54IdMZJ2Ho7AzLImU0ZEI5ht8ybqBRXR2VKXs1Pi eVdyrcw/2yKWLFABq8yemNZyLcFAydER8u7EBVBobH6YHQShrQVpfKoNPahNYKHY ShCvK8kNPpY51Czj3IgU6/dQyi7U5DwuB4ZJ43VhrTFzrNhLpC1u4J5nXegcSolf vvrkjmwBj+CRn0qEQJjXxXAXyRt/56BZe44jnWf3fGqOgwgo+/Eo7gw6GZQpohBL 1qzNxRGaB9hT9w== -----END CERTIFICATE-----Generated at Fri Jan 23 14:02:44 2026 by rpki-client