This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json) Hash identifier: EKUvpaBTiZbhEb5J5nebSDG2eL7jDWB8o611dsKSWQs= Subject key identifier: 26:A9:3E:54:76:61:29:7F:40:57:D4:7D:54:0E:CB:14:EF:B0:60:E4 Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019C446BF24D3A300C5D9C2CE165FDD96529 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 22:00:50 +0000 Manifest this update: Mon 09 Feb 2026 22:00:50 +0000 Manifest next update: Tue 10 Feb 2026 22:00:50 +0000 Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: /v+2aXOCnYh4NzSk5pOwlASJNcxniVB7s6sALlr8DzU=) 2: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:f2:4d:3a:30:0c:5d:9c:2c:e1:65:fd:d9:65:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Feb 9 22:00:50 2026 GMT Not After : Feb 10 22:00:50 2026 GMT Subject: CN=26a93e547661297f4057d47d540ecb14efb060e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c2:39:54:28:39:c7:46:25:9d:71:52:d1:03: 03:56:0c:b4:6b:0c:a9:a2:77:bd:66:d7:20:26:3b: 62:89:ee:29:dc:39:f2:aa:8d:4e:5b:73:89:66:69: 53:b1:f7:43:19:ca:90:04:2d:ae:f3:df:59:35:f0: af:77:5f:99:49:ba:34:68:62:8c:8f:76:47:32:0c: 8b:58:5e:ca:20:82:4b:7e:08:75:17:f8:a6:d8:66: 35:46:49:2b:f3:02:9c:5d:d0:c6:46:9b:4b:05:ce: 92:d0:28:11:34:95:ab:f1:37:0e:d3:1c:14:52:01: fa:08:fe:76:ca:ad:32:82:ae:e9:29:ee:75:56:39: 63:07:2e:b3:f0:9a:89:31:5f:e5:9c:2a:e5:eb:f6: 23:e1:79:a7:12:18:b8:f4:8d:f5:17:05:2d:fe:c0: 6f:54:e3:18:91:9c:99:df:69:ee:3a:e4:f0:2a:09: fd:7c:98:c6:e1:f6:2e:88:4e:17:4d:55:03:06:22: dd:8e:d5:71:b0:6a:65:06:d0:c5:e4:5f:32:b1:e0: 8c:f8:08:2e:58:fc:c4:45:6d:e6:43:54:23:3c:c1: 93:fa:4a:5e:a3:6d:cb:e7:e4:75:33:fa:5b:2c:20: 34:94:9c:2e:2f:41:2b:bf:0a:a9:28:c5:ac:7c:cb: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A9:3E:54:76:61:29:7F:40:57:D4:7D:54:0E:CB:14:EF:B0:60:E4 X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:25:9d:27:00:7d:01:24:b5:03:ed:1d:22:6a:41:75:5a:14: 15:48:8b:67:11:36:75:9d:f3:a9:9b:7b:43:c8:25:e1:66:12: 03:54:06:29:51:91:86:a5:fb:02:4a:00:48:d2:ba:bc:5b:d5: d0:5a:fa:a0:74:4d:18:e3:eb:70:80:95:fb:74:cb:2e:21:38: 8f:00:55:ab:62:0a:c2:9a:2d:b0:2f:a2:70:cd:00:15:18:15: 53:fd:3c:dc:02:9e:52:ac:53:be:6d:75:d0:cd:c7:03:f5:bd: ab:69:f2:20:20:61:83:73:e2:7e:b5:e1:60:04:3f:f5:8b:96: 0d:32:50:1d:f3:d7:60:08:99:ad:46:cc:53:a0:01:21:12:9b: fe:ca:ae:f5:0b:ae:3c:cf:b8:e6:08:5a:44:73:d2:6d:ca:c5: 78:0e:c1:1d:ae:15:b0:6a:a6:3b:0e:ba:dc:e6:b2:da:f2:3c: 6c:d6:9c:fb:c3:14:7f:dc:47:58:13:9a:86:f2:f8:4f:77:04: c5:cd:fc:f9:73:ef:cc:bd:79:fa:a2:af:1b:49:e7:db:92:2a: 17:23:5c:b2:ac:e2:51:da:cb:f3:e4:21:0c:d0:1d:fa:61:b6: e9:d8:67:c9:24:a0:6d:a8:f3:00:88:b7:89:3a:4d:d0:b2:42: 96:c1:58:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa/JNOjAMXZws4WX92WUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjYwMjA5MjIwMDUwWhcNMjYwMjEwMjIwMDUwWjAzMTEwLwYDVQQD EygyNmE5M2U1NDc2NjEyOTdmNDA1N2Q0N2Q1NDBlY2IxNGVmYjA2MGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MI5VCg5x0YlnXFS0QMDVgy0awyp one9ZtcgJjtiie4p3Dnyqo1OW3OJZmlTsfdDGcqQBC2u899ZNfCvd1+ZSbo0aGKM j3ZHMgyLWF7KIIJLfgh1F/im2GY1Rkkr8wKcXdDGRptLBc6S0CgRNJWr8TcO0xwU UgH6CP52yq0ygq7pKe51VjljBy6z8JqJMV/lnCrl6/Yj4XmnEhi49I31FwUt/sBv VOMYkZyZ32nuOuTwKgn9fJjG4fYuiE4XTVUDBiLdjtVxsGplBtDF5F8yseCM+Agu WPzERW3mQ1QjPMGT+kpeo23L5+R1M/pbLCA0lJwuL0ErvwqpKMWsfMtiVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCapPlR2YSl/QFfUfVQOyxTvsGDkMB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCWdJwB9 ASS1A+0dImpBdVoUFUiLZxE2dZ3zqZt7Q8gl4WYSA1QGKVGRhqX7AkoASNK6vFvV 0Fr6oHRNGOPrcICV+3TLLiE4jwBVq2IKwpotsC+icM0AFRgVU/083AKeUqxTvm11 0M3HA/W9q2nyICBhg3PifrXhYAQ/9YuWDTJQHfPXYAiZrUbMU6ABIRKb/squ9Quu PM+45ghaRHPSbcrFeA7BHa4VsGqmOw663Oay2vI8bNac+8MUf9xHWBOahvL4T3cE xc38+XPvzL15+qKvG0nn25IqFyNcsqziUdrL8+QhDNAd+mG26dhnySSgbajzAIi3 iTpN0LJClsFYQA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:50 2026 by rpki-client