This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json) Hash identifier: 705Q2+DX2RuHaOZHF0jqzNoLtK+WqDsq+sMr9amvG8Q= Subject key identifier: 83:2E:F0:94:D9:D6:ED:33:17:C8:CD:46:C0:6D:61:DB:E6:2D:84:FE Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Certificate serial: 019C4390CE5BD5BE81893C0D3AC35DC8E1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft Manifest number: 06DD Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: CaTSYTlklPzPsh9aXKnEhvNOdQk.roa (hash: Yu5TNxvfV86Q2+HBX8uXoTCoY5GYvgt5wYG6MqwG8M0=) 2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: tZBX/oZ4xczIC+JH+4bWtV0vtNbL1E3zCJsURTiCios=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ce:5b:d5:be:81:89:3c:0d:3a:c3:5d:c8:e1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=832ef094d9d6ed3317c8cd46c06d61dbe62d84fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:b2:f0:a1:07:53:ab:86:ab:de:84:4f:72: 91:23:12:6a:81:3c:40:53:58:e3:9b:0e:cb:08:6b: f6:91:a7:3f:1c:14:ca:4a:db:61:6b:3d:46:e2:b0: e4:8a:40:4e:5e:48:6f:8d:19:3e:a8:79:c3:f4:da: 55:47:42:ab:b0:d2:a6:f5:75:94:05:ad:47:cc:2d: 64:f2:3a:75:f7:2b:76:3c:6f:93:20:c8:a4:55:46: 8d:8d:d2:c7:ad:9e:7d:fe:2c:10:cc:5a:ea:bc:34: bd:e5:92:40:6a:58:82:29:61:2e:2e:3b:43:99:4e: 21:f7:25:b7:b3:57:11:46:43:9a:18:1c:52:11:d6: 0c:d5:59:d2:e2:cd:eb:94:9c:b8:21:14:94:76:38: eb:cc:86:85:68:b2:e9:f5:74:75:b4:aa:f1:69:64: 7e:6a:a0:03:7f:78:e0:9d:25:f7:77:db:69:96:aa: 57:f9:2c:f1:16:98:1a:52:b0:f8:9e:0f:c1:33:c3: f7:1e:a5:d0:8a:f2:85:1c:78:5d:74:03:11:ee:a5: 0b:45:bb:3e:83:7d:13:c2:08:a7:2c:ce:ca:cd:a9: 94:d6:6c:8c:46:4b:0c:23:fc:4d:59:59:90:e4:6d: 92:87:bc:08:26:ec:eb:f1:87:1f:d4:8a:e9:11:63: 11:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2E:F0:94:D9:D6:ED:33:17:C8:CD:46:C0:6D:61:DB:E6:2D:84:FE X509v3 Authority Key Identifier: keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9f:b9:25:f9:f3:05:83:63:15:3d:2d:27:b1:1e:84:aa:76: 1c:a3:7b:8f:76:d2:25:06:ef:86:2b:48:c6:4e:7a:bc:d9:a2: 9a:e9:f2:bb:71:dc:ee:23:da:5d:fd:ef:45:fe:ed:dd:1b:0a: 6c:ac:93:dd:e1:43:e5:d8:0c:3d:bc:ca:55:e4:14:8b:ce:b6: 24:9e:0d:f2:2d:55:67:4c:83:58:78:24:c5:a8:b1:ee:c9:74: cc:ef:44:c7:bb:63:86:95:a9:d9:32:a7:c5:36:c6:39:4f:d5: 9e:c9:17:02:18:c8:80:d7:d7:4c:ac:8a:9f:53:1f:ff:5f:82: 42:ba:b7:2a:3c:5c:ee:12:3c:09:da:e7:9f:dd:df:2a:29:01: 84:14:69:c5:00:95:a0:c9:e9:05:77:0e:a8:b8:17:cf:05:e0: eb:c3:0f:81:c0:fe:94:1d:90:eb:22:67:dd:40:6d:41:06:0d: d6:df:99:2a:0e:fc:91:dc:59:f5:75:dc:d3:68:49:72:95:6e: 42:38:11:90:24:6a:ad:fb:3b:79:eb:1d:ef:93:61:26:b7:64: 04:be:7b:32:f5:d8:c1:0f:46:f9:e9:99:be:ac:41:e7:24:c4: a7:c2:7f:f2:fa:1d:9c:dd:2a:38:e1:58:d1:d8:27:9d:cf:a0: 28:cf:43:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkM5b1b6BiTwNOsNdyOHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOThhODI2M2UwNjNiOGE3YmQzZDcxODBlN2E0YWE2NDk1 MzQ0MWMwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD Eyg4MzJlZjA5NGQ5ZDZlZDMzMTdjOGNkNDZjMDZkNjFkYmU2MmQ4NGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwKy8KEHU6uGq96ET3KRIxJqgTxA U1jjmw7LCGv2kac/HBTKStthaz1G4rDkikBOXkhvjRk+qHnD9NpVR0KrsNKm9XWU Ba1HzC1k8jp19yt2PG+TIMikVUaNjdLHrZ59/iwQzFrqvDS95ZJAaliCKWEuLjtD mU4h9yW3s1cRRkOaGBxSEdYM1VnS4s3rlJy4IRSUdjjrzIaFaLLp9XR1tKrxaWR+ aqADf3jgnSX3d9tplqpX+SzxFpgaUrD4ng/BM8P3HqXQivKFHHhddAMR7qULRbs+ g30TwginLM7KzamU1myMRksMI/xNWVmQ5G2Sh7wIJuzr8Ycf1IrpEWMRzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMu8JTZ1u0zF8jNRsBtYdvmLYT+MB8GA1UdIwQY MBaAFKuYqCY+BjuKe9PXGA56SqZJU0QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYt NzYyOGNiYWYwZWM4LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xMTlkMzQtNDA3YS00MjllLTkwNTYtNzYyOGNiYWYwZWM4 LzEvcTVpb0pqNEdPNHA3MDljWURucEtwa2xUUkJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5+5Jfnz BYNjFT0tJ7EehKp2HKN7j3bSJQbvhitIxk56vNmimunyu3Hc7iPaXf3vRf7t3RsK bKyT3eFD5dgMPbzKVeQUi862JJ4N8i1VZ0yDWHgkxaix7sl0zO9Ex7tjhpWp2TKn xTbGOU/VnskXAhjIgNfXTKyKn1Mf/1+CQrq3Kjxc7hI8Cdrnn93fKikBhBRpxQCV oMnpBXcOqLgXzwXg68MPgcD+lB2Q6yJn3UBtQQYN1t+ZKg78kdxZ9XXc02hJcpVu QjgRkCRqrfs7eesd75NhJrdkBL57MvXYwQ9G+emZvqxB5yTEp8J/8vodnN0qOOFY 0dgnnc+gKM9DIA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:22 2026 by rpki-client