This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json) Hash identifier: TyEh0TvGYxLl+Xdxnnx1RK+V97mZ7dIyuWMNw1EJqaA= Subject key identifier: A0:12:2F:D0:53:21:63:0E:0A:E8:FD:0A:EF:EE:15:3B:B1:B1:33:DB Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0 Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0 Certificate serial: 019C435951863E1F74BFE9FE24F8560D35AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft Manifest number: 05B2 Signing time: Mon 09 Feb 2026 17:00:52 +0000 Manifest this update: Mon 09 Feb 2026 17:00:52 +0000 Manifest next update: Tue 10 Feb 2026 17:00:52 +0000 Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: DkjeZO2M5ztmgyI+xpUzXEL3w8hVwDew5V7McFZbSrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:51:86:3e:1f:74:bf:e9:fe:24:f8:56:0d:35:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0 Validity Not Before: Feb 9 17:00:52 2026 GMT Not After : Feb 10 17:00:52 2026 GMT Subject: CN=a0122fd05321630e0ae8fd0aefee153bb1b133db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:63:15:72:6e:24:cd:da:14:aa:87:1e:91:1b: d7:50:4d:73:41:d0:e3:54:ae:52:00:56:b2:31:8d: d3:03:f4:9f:8d:2d:12:eb:dc:21:c5:4e:38:43:e6: f1:ef:79:15:34:2e:44:16:56:85:c1:f0:24:a3:88: 0b:fe:b8:1d:32:6f:4c:6d:89:07:05:f4:81:19:a6: d7:ec:b2:05:51:01:ab:c1:a0:c8:91:5a:5b:c7:31: d7:fe:ba:4d:e0:b4:f1:17:8a:8a:9b:3a:63:a4:f7: cb:18:25:d9:f7:4a:6a:fd:fd:c7:d7:05:ec:3e:51: ad:ee:45:10:eb:5a:f3:7e:ad:d1:45:7c:82:d4:33: d9:59:ea:8b:88:b3:89:fd:e8:a1:a2:cc:4f:33:5b: da:8e:2a:b0:a3:d8:74:f6:0c:e7:33:8b:de:8c:0f: 39:cc:3e:09:b3:c3:d9:40:15:fd:8c:b0:13:a6:02: 9d:8a:42:9d:c2:ee:56:84:66:97:0b:47:84:f0:32: 75:43:e8:a5:88:f7:9e:7c:c5:25:08:9c:0f:42:24: a9:3d:fe:dd:4b:b1:94:43:ab:d7:59:b9:54:18:80: cf:62:de:fa:38:01:08:f1:c2:18:b6:35:25:cf:b5: fc:e5:30:2f:08:b3:b2:5b:61:b3:6c:66:6b:09:62: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:12:2F:D0:53:21:63:0E:0A:E8:FD:0A:EF:EE:15:3B:B1:B1:33:DB X509v3 Authority Key Identifier: keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7a:97:2d:51:3e:3a:57:28:2c:71:65:42:59:9e:c2:b5:02: eb:7d:c3:d3:d4:83:ce:7e:b2:95:9a:8d:3e:63:e2:fb:5c:e4: 3f:88:02:18:e5:f7:37:48:50:4c:6a:c7:48:ab:83:22:c2:63: 78:8b:8b:7e:b8:05:10:1f:cb:bb:fd:17:45:36:c9:df:82:e4: 96:e6:93:0f:df:a9:4e:be:3a:1d:31:a1:6c:a2:98:89:60:33: e2:a9:57:ca:77:86:18:c5:b8:b7:c5:19:c7:a9:18:27:fc:f5: 54:2b:9e:15:6e:3d:1f:ef:67:b5:3c:fc:71:60:4c:bc:1d:ec: 2b:6c:d2:52:25:f2:16:54:32:fa:93:43:5e:42:24:2d:40:50: 1d:d7:fc:9d:2e:c1:27:1c:2e:6c:01:cc:d9:3c:11:3f:6b:aa: 30:7c:54:40:23:23:64:e2:83:ce:61:f9:5c:bc:cd:5d:db:d6: 82:6b:d2:aa:d1:ca:d5:23:2d:f3:77:07:08:ba:4a:f8:27:8c: 36:97:fa:c7:3b:91:c2:a4:98:fe:9c:30:65:6f:39:fe:67:50: dd:37:ae:09:03:93:65:f5:97:e8:11:48:b1:eb:e0:5d:25:04: 65:37:38:56:e1:25:42:2c:0b:90:81:f9:5b:84:f4:b3:80:27: 00:9c:ed:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVGGPh90v+n+JPhWDTWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYTZlNjc5MjU4MjFlNGI4NzljODAzZWMwYTUyMjQ1Zjk2 NzNhZDAwHhcNMjYwMjA5MTcwMDUyWhcNMjYwMjEwMTcwMDUyWjAzMTEwLwYDVQQD EyhhMDEyMmZkMDUzMjE2MzBlMGFlOGZkMGFlZmVlMTUzYmIxYjEzM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WMVcm4kzdoUqocekRvXUE1zQdDj VK5SAFayMY3TA/SfjS0S69whxU44Q+bx73kVNC5EFlaFwfAko4gL/rgdMm9MbYkH BfSBGabX7LIFUQGrwaDIkVpbxzHX/rpN4LTxF4qKmzpjpPfLGCXZ90pq/f3H1wXs PlGt7kUQ61rzfq3RRXyC1DPZWeqLiLOJ/eihosxPM1vajiqwo9h09gznM4vejA85 zD4Js8PZQBX9jLATpgKdikKdwu5WhGaXC0eE8DJ1Q+iliPeefMUlCJwPQiSpPf7d S7GUQ6vXWblUGIDPYt76OAEI8cIYtjUlz7X85TAvCLOyW2GzbGZrCWJcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKASL9BTIWMOCuj9Cu/uFTuxsTPbMB8GA1UdIwQY MBaAFKqm5nklgh5Lh5yAPsClIkX5ZzrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjct NTEyZjU2NWFjMDExLzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjctNTEyZjU2NWFjMDEx LzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3qXLVE+ OlcoLHFlQlmewrUC633D09SDzn6ylZqNPmPi+1zkP4gCGOX3N0hQTGrHSKuDIsJj eIuLfrgFEB/Lu/0XRTbJ34LkluaTD9+pTr46HTGhbKKYiWAz4qlXyneGGMW4t8UZ x6kYJ/z1VCueFW49H+9ntTz8cWBMvB3sK2zSUiXyFlQy+pNDXkIkLUBQHdf8nS7B JxwubAHM2TwRP2uqMHxUQCMjZOKDzmH5XLzNXdvWgmvSqtHK1SMt83cHCLpK+CeM Npf6xzuRwqSY/pwwZW85/mdQ3TeuCQOTZfWX6BFIsevgXSUEZTc4VuElQiwLkIH5 W4T0s4AnAJztGw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:52 2026 by rpki-client