This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json) Hash identifier: faRtp9YKHOMVbrWGFOrQ5eJsMS0obvV8AX9iEebMSt0= Subject key identifier: 52:87:B3:CC:AD:B6:C7:E4:F7:86:60:14:E8:5F:B5:F9:B6:49:8F:5D Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Certificate serial: 019C427E2500157B0559DDE3ADA9C8078B88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft Manifest number: 0DEC Signing time: Mon 09 Feb 2026 13:01:26 +0000 Manifest this update: Mon 09 Feb 2026 13:01:26 +0000 Manifest next update: Tue 10 Feb 2026 13:01:26 +0000 Files and hashes: 1: lUzKNBJg8UfPcme69tlyDaYrw7I.roa (hash: qrZuoQH6V4bS9GSWmYNEQuhGhYESYIo8galvFyCIozE=) 2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: j2MbgMVwPov579oBR6HYrXJHwSAt62JC1QQJp2FHt08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:25:00:15:7b:05:59:dd:e3:ad:a9:c8:07:8b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80 Validity Not Before: Feb 9 13:01:26 2026 GMT Not After : Feb 10 13:01:26 2026 GMT Subject: CN=5287b3ccadb6c7e4f7866014e85fb5f9b6498f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a6:db:38:90:aa:45:a5:2d:76:29:44:49:84: 22:94:d2:d2:7c:da:b5:35:2b:91:af:a0:50:ef:2f: 4f:40:ec:47:06:d8:2d:df:ec:e0:0b:f6:9b:ca:e7: 04:1f:5d:19:d7:97:74:6f:1b:d7:08:ff:6a:51:66: bb:e0:54:80:df:f7:d4:b7:c3:d7:f5:ad:33:ef:a4: bc:e2:d7:dd:dd:03:59:1c:40:b9:ba:9a:88:10:36: 67:eb:f3:9e:a9:62:90:f0:19:47:99:2d:3c:d2:47: ed:57:d3:16:3f:1b:39:1c:27:96:c8:c3:70:13:70: f4:b8:f5:cc:ad:18:cf:a0:9c:41:ea:0f:af:ee:62: 15:42:8b:b3:94:9d:37:83:90:11:da:50:b2:6d:4c: f8:73:8f:c5:94:9b:a2:97:2a:fb:97:e0:ec:63:88: 22:a1:09:fd:98:d5:c2:15:76:9b:72:3d:d3:db:36: 90:30:ea:bf:b6:af:a5:be:27:f1:df:ba:38:5b:d9: 92:f6:a9:a5:4b:72:0a:c1:2d:31:f0:2d:99:50:85: 09:36:0b:31:ad:d1:f1:3c:a8:5c:78:26:d9:cb:23: 7a:d7:79:17:73:f5:23:ec:8c:7b:1e:65:66:80:dc: b7:ec:06:d7:c6:13:e4:42:60:76:57:a1:fd:5f:e2: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:B3:CC:AD:B6:C7:E4:F7:86:60:14:E8:5F:B5:F9:B6:49:8F:5D X509v3 Authority Key Identifier: keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:81:09:f2:64:0b:e6:24:ce:3f:8d:f6:23:25:74:bd:8c:39: de:90:dd:d8:0c:b0:ae:15:ad:8e:e9:8d:70:a5:50:64:a9:4f: dd:2e:f7:72:ef:b2:27:bd:39:95:ab:2a:d7:9e:f5:30:cf:d0: f3:c3:d1:e2:55:53:8c:48:02:61:5a:e4:57:d3:f6:06:de:58: 7f:d4:44:db:f5:3d:a9:e5:76:ab:9d:42:d0:6d:05:33:12:ee: 22:29:4b:73:ba:8b:3d:9f:5c:d4:0c:d8:83:9b:11:f4:61:f1: bf:35:63:0a:8f:09:87:3b:b0:16:1a:c5:32:f2:75:2d:48:6b: ce:f9:e8:cb:ed:81:03:a5:08:f9:84:aa:84:c5:05:52:e5:bb: b7:82:b8:a0:f3:56:01:50:3f:5e:8d:bf:be:d8:f1:0b:fe:b7: a8:fe:6f:c8:11:de:4b:be:13:b7:62:61:18:5e:b5:21:cb:3a: 78:a7:24:c9:6f:3b:61:f6:e7:dc:27:f4:26:c6:6e:a5:f1:fa: 58:2a:fb:c3:83:47:d3:dc:8a:81:b9:e6:0a:55:7b:8e:5d:d4: 95:58:d7:cb:6b:7d:70:5d:25:b4:b8:15:e2:46:89:48:86:f1: 50:f5:07:06:b6:bc:bf:e6:d5:67:a5:a2:83:f9:32:a8:39:16: 20:ec:fc:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfiUAFXsFWd3jranIB4uIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZjQ5MWYyMTBjNTdiZjQ2ZmI1MmQ0YWYyMmU3ZWNmNmY0 Y2RhODAwHhcNMjYwMjA5MTMwMTI2WhcNMjYwMjEwMTMwMTI2WjAzMTEwLwYDVQQD Eyg1Mjg3YjNjY2FkYjZjN2U0Zjc4NjYwMTRlODVmYjVmOWI2NDk4ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8abbOJCqRaUtdilESYQilNLSfNq1 NSuRr6BQ7y9PQOxHBtgt3+zgC/abyucEH10Z15d0bxvXCP9qUWa74FSA3/fUt8PX 9a0z76S84tfd3QNZHEC5upqIEDZn6/OeqWKQ8BlHmS080kftV9MWPxs5HCeWyMNw E3D0uPXMrRjPoJxB6g+v7mIVQouzlJ03g5AR2lCybUz4c4/FlJuilyr7l+DsY4gi oQn9mNXCFXabcj3T2zaQMOq/tq+lvifx37o4W9mS9qmlS3IKwS0x8C2ZUIUJNgsx rdHxPKhceCbZyyN613kXc/Uj7Ix7HmVmgNy37AbXxhPkQmB2V6H9X+KHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKHs8yttsfk94ZgFOhftfm2SY9dMB8GA1UdIwQY MBaAFKj0kfIQxXv0b7UtSvIufs9vTNqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2Et MzMwYjhhZDQyNGJkLzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84ZmJmNWMtZWY1MS00ZmQwLTlkM2EtMzMwYjhhZDQyNGJk LzEvcVBTUjhoREZlX1J2dFMxSzhpNS16MjlNMm9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoEJ8mQL 5iTOP432IyV0vYw53pDd2AywrhWtjumNcKVQZKlP3S73cu+yJ705lasq1571MM/Q 88PR4lVTjEgCYVrkV9P2Bt5Yf9RE2/U9qeV2q51C0G0FMxLuIilLc7qLPZ9c1AzY g5sR9GHxvzVjCo8JhzuwFhrFMvJ1LUhrzvnoy+2BA6UI+YSqhMUFUuW7t4K4oPNW AVA/Xo2/vtjxC/63qP5vyBHeS74Tt2JhGF61Ics6eKckyW87Yfbn3Cf0JsZupfH6 WCr7w4NH09yKgbnmClV7jl3UlVjXy2t9cF0ltLgV4kaJSIbxUPUHBra8v+bVZ6Wi g/kyqDkWIOz8MQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:53 2026 by rpki-client