This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json) Hash identifier: rh5hKExOpmOcZ7fE1LF0TNWOLGkWB0RBJVEQWBBlH0o= Subject key identifier: 05:BF:B0:87:FC:40:7F:36:3E:B0:11:63:E5:1C:12:C4:FD:2C:C6:99 Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Certificate serial: 019C41D84FBF3F32438F667F119B269E119E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft Manifest number: 141A Signing time: Mon 09 Feb 2026 10:00:20 +0000 Manifest this update: Mon 09 Feb 2026 10:00:20 +0000 Manifest next update: Tue 10 Feb 2026 10:00:20 +0000 Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: WZMjgwzp5qyCoflKadlyIK0G6aTln9stuTSOcK99dM8=) 2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4f:bf:3f:32:43:8f:66:7f:11:9b:26:9e:11:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f Validity Not Before: Feb 9 10:00:20 2026 GMT Not After : Feb 10 10:00:20 2026 GMT Subject: CN=05bfb087fc407f363eb01163e51c12c4fd2cc699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:bc:c7:de:36:5f:1f:96:01:72:cb:14:1d: 46:6d:c6:92:dc:11:fc:6b:6e:70:a2:97:33:20:48: 81:41:03:de:88:6e:d5:06:d9:0f:cd:20:b2:2b:a0: 85:09:ad:0f:bf:96:eb:98:7c:6c:5f:9c:fd:8d:57: 36:6c:1e:59:dd:d0:cb:c2:2d:3b:21:c3:e5:58:30: de:fd:c7:81:b0:01:ef:b6:de:c6:f9:48:f3:6c:2d: a7:65:2f:e6:60:51:cb:f3:b8:5b:7d:0f:3e:e5:85: 1e:a6:d1:d5:1a:7a:44:06:f8:98:08:be:1c:99:38: 90:e5:76:45:c1:50:66:34:3e:cb:ef:70:47:1d:82: 99:d5:03:67:95:60:02:f2:bc:c7:2f:2f:1f:42:2f: 2b:c0:bc:76:5e:34:d1:1f:1f:94:55:d7:23:3b:2c: c9:d9:88:ef:d6:a7:cd:b3:0b:79:ff:6f:cb:ac:80: 63:d4:11:0d:14:55:59:98:cf:3a:8d:d0:8d:6f:8f: 28:3f:7a:d6:ff:3a:f3:fb:87:a9:bf:55:d8:84:d5: f3:2f:b0:80:a8:51:98:d7:31:3e:39:77:48:a2:2c: 30:41:a2:8b:83:3c:4e:cc:f9:28:3b:d8:77:aa:91: 6b:e9:c2:67:f0:39:d1:49:f0:d9:3a:6f:2c:bd:6b: 6d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BF:B0:87:FC:40:7F:36:3E:B0:11:63:E5:1C:12:C4:FD:2C:C6:99 X509v3 Authority Key Identifier: keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:e0:62:12:3b:74:35:34:e9:f5:70:c9:e5:8e:65:26:f0:d7: 9a:b1:2a:4e:a5:5f:b2:bb:bc:d8:c0:ad:4f:5e:2b:14:73:13: 81:c1:0d:5c:56:f8:9a:4d:96:29:2b:5a:58:ff:b0:8a:c6:07: 6c:12:27:ba:f1:6f:0a:ef:ef:ec:a4:9d:d4:f5:e2:c4:6a:f6: ea:ef:02:f9:39:d1:3f:06:e5:b0:83:0e:ae:0a:e4:3c:be:a9: 64:35:17:71:38:88:f6:55:3f:49:f2:c1:d7:ca:94:09:04:60: 74:20:13:1b:6e:a4:4c:b9:55:95:7a:7b:bb:f4:79:1e:da:dc: 74:67:01:e8:66:e2:e1:54:b4:f7:b7:1f:5e:5f:7e:d2:df:bc: 39:ff:f7:5d:18:b2:67:20:20:bf:e4:76:1d:15:9e:ed:23:b7: 99:49:04:f3:ad:64:16:0c:df:a8:4f:9c:fa:4c:ae:f7:64:1b: 49:71:ff:33:be:bd:97:6c:1e:39:cc:09:9b:f5:68:81:55:0b: f6:7b:3c:67:8b:3f:05:b8:03:82:e7:df:1e:cb:2d:f0:d4:cf: ac:ae:30:54:11:a7:77:86:17:71:d1:71:4a:c5:ca:76:28:2f: 51:5f:20:0c:fe:3f:f5:0a:fc:16:a9:02:84:17:6a:11:92:9b: 63:0f:97:57 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxB2E+/PzJDj2Z/EZsmnhGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4 ODQyM2YwHhcNMjYwMjA5MTAwMDIwWhcNMjYwMjEwMTAwMDIwWjAzMTEwLwYDVQQD EygwNWJmYjA4N2ZjNDA3ZjM2M2ViMDExNjNlNTFjMTJjNGZkMmNjNjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn228x942Xx+WAXLLFB1GbcaS3BH8 a25wopczIEiBQQPeiG7VBtkPzSCyK6CFCa0Pv5brmHxsX5z9jVc2bB5Z3dDLwi07 IcPlWDDe/ceBsAHvtt7G+UjzbC2nZS/mYFHL87hbfQ8+5YUeptHVGnpEBviYCL4c mTiQ5XZFwVBmND7L73BHHYKZ1QNnlWAC8rzHLy8fQi8rwLx2XjTRHx+UVdcjOyzJ 2Yjv1qfNswt5/2/LrIBj1BENFFVZmM86jdCNb48oP3rW/zrz+4epv1XYhNXzL7CA qFGY1zE+OXdIoiwwQaKLgzxOzPkoO9h3qpFr6cJn8DnRSfDZOm8svWttEwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAW/sIf8QH82PrARY+UcEsT9LMaZMB8GA1UdIwQY MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2 LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0 MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+Bi Ejt0NTTp9XDJ5Y5lJvDXmrEqTqVfsru82MCtT14rFHMTgcENXFb4mk2WKStaWP+w isYHbBInuvFvCu/v7KSd1PXixGr26u8C+TnRPwblsIMOrgrkPL6pZDUXcTiI9lU/ SfLB18qUCQRgdCATG26kTLlVlXp7u/R5HtrcdGcB6Gbi4VS097cfXl9+0t+8Of/3 XRiyZyAgv+R2HRWe7SO3mUkE861kFgzfqE+c+kyu92QbSXH/M769l2weOcwJm/Vo gVUL9ns8Z4s/BbgDguffHsst8NTPrK4wVBGnd4YXcdFxSsXKdigvUV8gDP4/9Qr8 FqkChBdqEZKbYw+XVw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:32 2026 by rpki-client