This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json) Hash identifier: ZnEJgp71SX3NzdsN5QA4plghiWuwSF2odRbOL2ZLs5Y= Subject key identifier: 71:85:95:BC:1D:2A:CD:9B:89:7A:AC:2C:63:D5:57:11:81:46:99:CF Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Certificate serial: 019C4133C2EFFD661CCDA99AE01AF05C2603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft Manifest number: 0974 Signing time: Mon 09 Feb 2026 07:00:37 +0000 Manifest this update: Mon 09 Feb 2026 07:00:37 +0000 Manifest next update: Tue 10 Feb 2026 07:00:37 +0000 Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: yWe1EUN6a8LOt5m4rQkEY9FfTb/93OL1FsQLWAC0Onk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:c2:ef:fd:66:1c:cd:a9:9a:e0:1a:f0:5c:26:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a Validity Not Before: Feb 9 07:00:37 2026 GMT Not After : Feb 10 07:00:37 2026 GMT Subject: CN=718595bc1d2acd9b897aac2c63d55711814699cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5b:c0:11:dc:2f:db:db:3c:16:f1:86:7f:f9: 54:a7:89:04:4b:b9:25:b8:9d:97:15:a3:4c:ac:3d: ed:9c:19:43:8a:7e:89:88:a9:07:0c:64:d2:eb:09: e8:7f:fe:32:1d:4d:4b:9c:04:3d:d6:83:2f:12:91: 47:b4:e5:a2:9c:95:b7:0a:dc:7a:9e:e5:fe:66:d5: 10:f9:a3:8d:00:c1:cc:93:5f:a3:be:11:da:94:b4: f9:e9:e0:5b:7b:e6:b1:75:14:c9:17:9d:9e:8c:ca: aa:12:90:87:2e:00:32:9c:03:94:87:d2:97:82:c8: cc:2d:66:5b:d2:2b:3d:97:06:d6:3c:1f:57:e5:e1: 7e:7b:65:46:c2:e2:bd:94:5a:c4:ec:05:4b:c3:bb: 54:b3:0c:06:05:1a:15:22:0e:4e:bf:10:23:a2:88: d1:e6:e7:f4:e4:39:fe:da:33:85:d4:64:4a:b9:4b: 9c:18:a5:23:1d:a6:b5:08:f0:c7:6b:10:b8:39:09: a6:52:86:14:73:5c:eb:d3:11:14:8b:c8:96:59:83: a3:a9:d1:ee:b0:13:8b:0a:49:53:a9:c9:81:41:15: 35:1d:2c:72:72:e0:51:8f:8d:fa:a9:7a:23:5c:2b: a9:8b:a1:44:f6:83:ce:12:c3:30:50:55:d3:05:0b: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:85:95:BC:1D:2A:CD:9B:89:7A:AC:2C:63:D5:57:11:81:46:99:CF X509v3 Authority Key Identifier: keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d8:c9:82:80:b1:ff:33:85:06:3a:3a:65:33:27:77:94:6f: 13:01:d7:e9:a6:60:d4:ce:e6:49:bc:cb:64:c2:34:11:73:b0: b9:78:3e:49:6b:33:87:d2:50:c7:89:e6:f0:ff:4d:5f:26:45: ab:a8:32:e1:c3:b6:3b:f2:f0:c1:28:61:24:89:25:cd:8f:69: 3c:e7:bd:05:56:9d:5d:d2:ee:54:7f:e7:9b:a1:34:dc:fd:a5: ef:4f:30:4c:02:cb:93:d8:1b:b9:7d:85:a7:1f:b9:5e:d8:c5: b2:27:0c:db:ec:30:4c:93:6e:da:de:59:5f:f8:a6:47:b1:ef: 5c:22:38:5f:fd:b5:c2:ee:51:74:c6:e5:e9:ae:4a:76:98:39: 12:26:92:ee:90:9d:62:0c:cf:82:77:db:22:58:a2:3b:fc:1e: cc:38:3e:5d:a4:57:90:08:51:c6:98:df:b9:49:20:04:1b:e8: de:30:4e:11:6e:5f:0c:54:c3:5e:df:ec:87:c6:ac:9c:0b:9f: b9:f2:27:28:aa:5f:14:17:ea:d5:c1:0e:38:90:c7:21:c2:bc: 4e:82:a1:fb:b9:2c:ca:93:89:7a:fd:b8:f9:b9:3b:6f:72:2f: 26:81:df:96:a1:97:74:58:50:8d:48:0f:31:ee:41:21:ee:12: 6a:12:08:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM8Lv/WYczama4BrwXCYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwYmZkMjZmMGIyZDEzNjk5YzM1NmVjMzhiOTZjNmE4MjVk MjFiNmEwHhcNMjYwMjA5MDcwMDM3WhcNMjYwMjEwMDcwMDM3WjAzMTEwLwYDVQQD Eyg3MTg1OTViYzFkMmFjZDliODk3YWFjMmM2M2Q1NTcxMTgxNDY5OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllvAEdwv29s8FvGGf/lUp4kES7kl uJ2XFaNMrD3tnBlDin6JiKkHDGTS6wnof/4yHU1LnAQ91oMvEpFHtOWinJW3Ctx6 nuX+ZtUQ+aONAMHMk1+jvhHalLT56eBbe+axdRTJF52ejMqqEpCHLgAynAOUh9KX gsjMLWZb0is9lwbWPB9X5eF+e2VGwuK9lFrE7AVLw7tUswwGBRoVIg5OvxAjoojR 5uf05Dn+2jOF1GRKuUucGKUjHaa1CPDHaxC4OQmmUoYUc1zr0xEUi8iWWYOjqdHu sBOLCklTqcmBQRU1HSxycuBRj436qXojXCupi6FE9oPOEsMwUFXTBQvoSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGFlbwdKs2biXqsLGPVVxGBRpnPMB8GA1UdIwQY MBaAFEC/0m8LLRNpnDVuw4uWxqgl0htqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDIt NTA5M2M1MmUwMmNlLzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMTViNGQtNmNlYi00MDk4LWJmZDItNTA5M2M1MmUwMmNl LzEvUUxfU2J3c3RFMm1jTlc3RGk1YkdxQ1hTRzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNjJgoCx /zOFBjo6ZTMnd5RvEwHX6aZg1M7mSbzLZMI0EXOwuXg+SWszh9JQx4nm8P9NXyZF q6gy4cO2O/LwwShhJIklzY9pPOe9BVadXdLuVH/nm6E03P2l708wTALLk9gbuX2F px+5XtjFsicM2+wwTJNu2t5ZX/imR7HvXCI4X/21wu5RdMbl6a5Kdpg5EiaS7pCd YgzPgnfbIliiO/wezDg+XaRXkAhRxpjfuUkgBBvo3jBOEW5fDFTDXt/sh8asnAuf ufInKKpfFBfq1cEOOJDHIcK8ToKh+7ksypOJev24+bk7b3IvJoHflqGXdFhQjUgP Me5BIe4SahIIsA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:42 2026 by rpki-client