This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json) Hash identifier: G3bql0jSI0jq4GwDWUJdYdtOnB0WZPU6BQBQlZOVI3w= Subject key identifier: 7D:CE:7C:2B:F0:EF:95:05:CA:AE:A9:BF:94:34:E8:BA:8A:BF:E1:C3 Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c Certificate serial: 019C4358CF9D091602F9F72F891CDB125086 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft Manifest number: 0E2E Signing time: Mon 09 Feb 2026 17:00:19 +0000 Manifest this update: Mon 09 Feb 2026 17:00:19 +0000 Manifest next update: Tue 10 Feb 2026 17:00:19 +0000 Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: 6HaKzaNh+aD0j9A0zFU8hRX9NT2v/eBY8zzAin+fgUo=) 2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:cf:9d:09:16:02:f9:f7:2f:89:1c:db:12:50:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c Validity Not Before: Feb 9 17:00:19 2026 GMT Not After : Feb 10 17:00:19 2026 GMT Subject: CN=7dce7c2bf0ef9505caaea9bf9434e8ba8abfe1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:12:e6:48:2d:3d:bd:51:9b:75:f1:c5:6a: 5a:f4:53:ee:4b:bb:e9:1a:e6:1a:76:a5:93:8a:c7: 6d:d9:5e:91:9b:78:f0:dd:5b:d7:bd:29:4d:3f:30: 14:06:d7:1f:dd:ae:06:27:63:b2:f9:6e:aa:d0:2f: 47:06:a5:33:aa:6f:e0:8c:92:ea:46:c3:f4:e9:36: e7:94:f6:15:ce:0f:5b:2a:ae:45:60:dc:91:e2:c3: 63:7a:a9:66:35:05:34:8b:3b:9a:f1:e2:44:2c:33: 15:6d:90:5c:44:98:03:ca:77:da:16:65:9d:17:58: ff:5f:81:12:45:f5:92:85:3e:eb:b7:f3:16:75:ff: c0:f7:5f:66:6e:de:b0:a4:dd:0e:d2:aa:37:13:74: 0c:04:fe:f2:73:bb:45:0e:a5:97:8a:8e:e6:b2:7c: 5d:c9:29:11:23:32:7b:9b:f6:56:31:5d:6a:90:d5: dd:4b:42:4d:ee:3e:15:53:1d:99:95:43:83:ab:48: b7:54:99:2a:3e:88:30:be:f3:f0:97:b9:e7:21:10: b5:14:02:ea:09:bf:ec:b1:fc:e1:df:d6:d3:bb:5a: 7e:17:4c:1c:5a:a8:15:ae:5b:48:25:15:c8:b8:58: 96:c6:2b:aa:48:44:5c:eb:b5:9a:3f:b8:4f:52:35: 1b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CE:7C:2B:F0:EF:95:05:CA:AE:A9:BF:94:34:E8:BA:8A:BF:E1:C3 X509v3 Authority Key Identifier: keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:5f:ed:29:79:40:30:1f:94:b2:6b:e1:3f:e0:e7:4e:1c:35: 1b:b8:c9:dc:a6:b0:01:77:52:d2:8b:78:cd:dc:50:11:46:4f: 32:28:35:2e:4a:ce:ea:7c:6a:d7:44:22:87:49:41:61:11:62: dd:cb:f0:88:97:65:c7:6d:e7:b9:75:82:66:e1:1b:66:3c:8c: 5c:dd:c2:60:23:3f:69:75:0b:f2:6f:88:6f:26:29:90:8a:ab: ed:d9:da:e7:6d:40:7a:fa:1c:c4:3d:5b:be:0b:a2:e6:3c:05: 38:2b:37:3b:ef:17:27:6c:46:31:c0:b6:04:5f:91:19:b5:09: 02:66:00:59:1e:73:9a:ac:75:e9:8b:93:4b:3c:86:a2:b6:ce: fd:5e:7c:0c:fa:9d:ee:4d:37:15:ff:70:2a:95:71:19:1b:c6: 61:aa:d9:25:b0:af:60:8e:95:76:6d:5e:82:b7:64:75:fb:fd: 11:46:39:02:8a:cc:31:41:12:fe:87:dc:8a:fe:ba:99:e2:7b: f6:2b:fe:44:e3:0a:f5:53:8d:38:c9:c8:09:d8:92:c5:5d:96: db:f4:e5:62:66:6c:49:4b:69:dd:87:64:c6:c2:8d:82:88:2e: a7:98:aa:dd:3c:c0:b2:23:bb:d3:95:c7:f9:53:41:54:08:df: 67:a8:5c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWM+dCRYC+fcviRzbElCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk NGUxMWMwHhcNMjYwMjA5MTcwMDE5WhcNMjYwMjEwMTcwMDE5WjAzMTEwLwYDVQQD Eyg3ZGNlN2MyYmYwZWY5NTA1Y2FhZWE5YmY5NDM0ZThiYThhYmZlMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL0S5kgtPb1Rm3XxxWpa9FPuS7vp GuYadqWTisdt2V6Rm3jw3VvXvSlNPzAUBtcf3a4GJ2Oy+W6q0C9HBqUzqm/gjJLq RsP06TbnlPYVzg9bKq5FYNyR4sNjeqlmNQU0izua8eJELDMVbZBcRJgDynfaFmWd F1j/X4ESRfWShT7rt/MWdf/A919mbt6wpN0O0qo3E3QMBP7yc7tFDqWXio7msnxd ySkRIzJ7m/ZWMV1qkNXdS0JN7j4VUx2ZlUODq0i3VJkqPogwvvPwl7nnIRC1FALq Cb/ssfzh39bTu1p+F0wcWqgVrltIJRXIuFiWxiuqSERc67WaP7hPUjUb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3OfCvw75UFyq6pv5Q06LqKv+HDMB8GA1UdIwQY MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcF/tKXlA MB+UsmvhP+DnThw1G7jJ3KawAXdS0ot4zdxQEUZPMig1LkrO6nxq10Qih0lBYRFi 3cvwiJdlx23nuXWCZuEbZjyMXN3CYCM/aXUL8m+IbyYpkIqr7dna521AevocxD1b vgui5jwFOCs3O+8XJ2xGMcC2BF+RGbUJAmYAWR5zmqx16YuTSzyGorbO/V58DPqd 7k03Ff9wKpVxGRvGYarZJbCvYI6Vdm1egrdkdfv9EUY5AorMMUES/ofciv66meJ7 9iv+ROMK9VONOMnICdiSxV2W2/TlYmZsSUtp3YdkxsKNgogup5iq3TzAsiO705XH +VNBVAjfZ6hcOw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:59 2026 by rpki-client