This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json) Hash identifier: qqa4pNAXztiYTnYo5nR6o4j091tnf2yS9A1V7YMMK9g= Subject key identifier: BA:EF:FF:70:51:EA:69:B4:05:97:2B:A0:F0:52:6B:90:E8:3E:14:8D Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb Certificate serial: 019C4390A3F1B8906C3C1D092E870EA14DE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft Manifest number: 0C86 Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: aOoriFzngYM0v24ZxbwtqShvx0DwVxUk1TKzNVOFzPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a3:f1:b8:90:6c:3c:1d:09:2e:87:0e:a1:4d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=baefff7051ea69b405972ba0f0526b90e83e148d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:f0:86:67:9c:94:17:55:5a:e6:ba:30:df: a9:cf:67:ea:15:e9:34:91:12:e7:56:01:2f:b0:bd: b5:a4:71:cb:ab:77:dc:0e:9d:bd:6f:2f:d4:1d:9d: 68:78:39:ec:c7:dd:3b:13:d5:f5:67:e1:8e:60:d3: e9:71:67:cf:96:a9:2d:04:aa:b7:66:55:7e:44:c2: fe:9a:d5:f6:08:76:fa:1d:14:6e:22:54:5e:69:6a: 24:67:67:08:c5:e5:a6:31:34:35:0d:f9:99:ec:c2: b2:5d:d9:c9:dd:a3:c7:46:57:ad:7c:4f:29:d1:2f: 12:eb:53:da:31:d6:f8:a2:bf:6d:d8:92:c8:d3:b2: 61:7e:dd:c7:a3:34:0c:5d:e6:51:9b:f5:85:60:cb: 3d:bc:22:76:0f:0b:74:ef:aa:45:77:e8:a1:c0:0d: 50:c3:dc:f9:a0:19:4b:30:b3:c7:f3:be:7d:c0:6c: 53:d0:df:25:51:55:9a:63:8e:5c:59:85:3d:16:92: 66:18:a4:dc:0b:22:d1:3f:65:27:0e:10:77:82:21: 2b:f4:96:42:9f:63:e3:53:29:1c:34:4a:f1:ba:78: 7c:53:74:ae:e4:9b:d9:96:bb:ce:87:79:93:69:4a: 31:30:2d:ee:a5:2b:3a:e0:23:77:b5:5c:7b:da:51: b7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:FF:70:51:EA:69:B4:05:97:2B:A0:F0:52:6B:90:E8:3E:14:8D X509v3 Authority Key Identifier: keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ab:af:84:dd:55:ca:f7:61:66:83:75:90:e7:ca:f4:d3:5b: d4:b9:2e:64:cf:1a:9c:ee:22:28:13:ff:7c:ec:eb:d6:82:cf: bf:2c:b9:de:6d:99:5c:84:a9:c0:1e:ec:fc:b7:b2:12:e4:ba: c5:ef:98:0e:ca:76:33:fb:24:c6:24:ac:81:c3:b2:9b:22:99: 9d:37:47:8b:31:19:83:04:48:cc:10:11:c0:65:52:a8:fd:5c: 54:08:61:e4:22:28:7e:bf:d8:b9:db:26:c6:d4:2b:ea:5d:50: 3e:47:c4:ab:ef:e3:35:0c:98:0c:74:63:72:20:a9:78:e1:1e: 03:ed:88:c1:5b:33:c6:70:8b:48:65:c6:48:0f:84:b6:e5:1d: 34:f6:2f:3b:c3:ee:50:e6:3c:4b:57:d1:7b:d1:c9:f5:da:1b: 62:fe:1a:8b:ae:9a:b5:78:13:a9:8b:ed:ba:b9:a7:00:52:c1: 08:7f:9d:38:8c:8d:b3:2f:a4:45:4c:46:16:34:a5:8e:2a:9b: 96:08:fd:e4:5e:24:4f:59:ef:69:51:37:a1:20:38:b2:cd:fe: 42:b0:de:e7:c8:97:c3:3a:59:8a:4d:c1:b6:3c:b2:5c:d4:b4: df:48:ed:33:4b:e4:44:aa:9b:5f:b9:3c:f7:8b:cb:17:dc:16: f5:ac:32:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKPxuJBsPB0JLocOoU3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy ZjZhY2IwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD EyhiYWVmZmY3MDUxZWE2OWI0MDU5NzJiYTBmMDUyNmI5MGU4M2UxNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYPwhmeclBdVWua6MN+pz2fqFek0 kRLnVgEvsL21pHHLq3fcDp29by/UHZ1oeDnsx907E9X1Z+GOYNPpcWfPlqktBKq3 ZlV+RML+mtX2CHb6HRRuIlReaWokZ2cIxeWmMTQ1DfmZ7MKyXdnJ3aPHRletfE8p 0S8S61PaMdb4or9t2JLI07Jhft3HozQMXeZRm/WFYMs9vCJ2Dwt076pFd+ihwA1Q w9z5oBlLMLPH8759wGxT0N8lUVWaY45cWYU9FpJmGKTcCyLRP2UnDhB3giEr9JZC n2PjUykcNErxunh8U3Su5JvZlrvOh3mTaUoxMC3upSs64CN3tVx72lG3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrv/3BR6mm0BZcroPBSa5DoPhSNMB8GA1UdIwQY MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6uvhN1V yvdhZoN1kOfK9NNb1LkuZM8anO4iKBP/fOzr1oLPvyy53m2ZXISpwB7s/LeyEuS6 xe+YDsp2M/skxiSsgcOymyKZnTdHizEZgwRIzBARwGVSqP1cVAhh5CIofr/Yudsm xtQr6l1QPkfEq+/jNQyYDHRjciCpeOEeA+2IwVszxnCLSGXGSA+EtuUdNPYvO8Pu UOY8S1fRe9HJ9dobYv4ai66atXgTqYvturmnAFLBCH+dOIyNsy+kRUxGFjSljiqb lgj95F4kT1nvaVE3oSA4ss3+QrDe58iXwzpZik3BtjyyXNS030jtM0vkRKqbX7k8 94vLF9wW9awyHw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:18:00 2026 by rpki-client