This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json) Hash identifier: k7VFVgpp8yknvw/ALNMN3Khj91ODDW8ITDZr0mFOgoE= Subject key identifier: 45:16:79:C9:AE:7C:FE:D9:2E:A5:70:2B:97:AC:CD:B1:6F:6B:2A:B1 Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09 Certificate serial: 019C42EADF2F61FA55F158F3B4EC58DD14F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft Manifest number: 0E91 Signing time: Mon 09 Feb 2026 15:00:14 +0000 Manifest this update: Mon 09 Feb 2026 15:00:14 +0000 Manifest next update: Tue 10 Feb 2026 15:00:14 +0000 Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: IqdZYtwL2s6yfBYGwpA4O7dbr8XMpsbRtgmpMovrfB4=) 2: jBBia4spWrLZ9kca7mX-CRNEOzY.roa (hash: qc1+ZFIzhBfFEWyuznbTHHa1NN9KaHansxKNqQ0bhSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:df:2f:61:fa:55:f1:58:f3:b4:ec:58:dd:14:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09 Validity Not Before: Feb 9 15:00:14 2026 GMT Not After : Feb 10 15:00:14 2026 GMT Subject: CN=451679c9ae7cfed92ea5702b97accdb16f6b2ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9f:05:c5:9a:17:05:c0:85:f7:02:bc:d5:bf: 11:4b:12:f6:47:22:b2:e4:b5:d7:ca:ca:3d:9b:19: a8:af:5e:fb:29:f3:ca:14:d2:ed:a5:e8:8c:b8:5d: 88:ce:f3:b4:ad:66:2f:0e:56:5c:1c:c6:07:96:33: 97:0e:af:5a:88:26:2b:0b:41:bc:ec:2e:ca:0b:00: 76:cd:01:46:32:55:a2:a5:70:1c:06:2d:c4:15:35: b8:e4:1a:ca:68:0a:4f:8b:12:11:6e:69:f5:4e:61: 50:e5:7a:98:83:bd:a4:9a:41:cf:8c:1a:82:a7:fe: 64:6d:4a:ba:bb:ef:5a:96:99:8a:45:3e:c2:d8:80: 62:b3:0c:5a:43:4c:00:07:4f:a1:08:50:23:53:7d: fe:af:92:a0:96:a7:f2:f3:b8:d7:f1:be:22:77:94: 4e:f4:e5:77:c9:9d:10:3d:71:47:50:d3:83:1f:c5: 93:12:d3:db:33:e7:e8:d1:37:5c:18:82:5b:1e:ae: 66:6b:c7:71:ce:96:bb:2b:91:67:ed:ee:6b:41:07: f9:0d:97:5e:a7:86:77:5f:b4:bd:57:90:fe:8e:96: f3:11:b6:59:f0:0c:c5:3c:48:d0:97:2b:43:55:16: 6d:18:ad:f2:d7:21:41:e9:3d:74:a1:fd:37:1b:f2: 86:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:16:79:C9:AE:7C:FE:D9:2E:A5:70:2B:97:AC:CD:B1:6F:6B:2A:B1 X509v3 Authority Key Identifier: keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:eb:6c:a4:13:17:6a:9a:81:22:3b:39:9a:a8:0c:2c:76:40: 28:f9:e7:6f:5d:83:7d:2c:8d:21:c4:cd:31:89:bd:a5:da:d7: 2a:41:2f:4f:3f:f4:2a:2c:48:fb:50:55:40:71:e4:e9:c5:8f: b3:5f:9d:ea:f8:86:d5:dc:4c:97:5f:4c:11:32:14:83:75:dd: 82:5b:1d:12:c9:8d:48:96:71:86:0a:27:6e:cb:c6:4e:91:ff: 43:04:f4:5c:d8:82:75:ec:c6:37:99:28:64:14:6e:72:ba:20: 9f:b4:c4:25:46:2f:1c:af:b8:b8:4e:0e:46:c5:3b:a3:d2:eb: 89:af:1c:be:f1:f0:59:9c:58:53:6a:7f:56:49:81:3d:27:7f: de:be:41:7d:bb:f3:f4:53:55:7d:b6:e9:b3:d0:c6:4d:ac:5c: cc:12:e5:1d:87:f1:68:4d:39:86:8e:cf:a8:5c:35:45:b9:f1: 9f:b9:ed:df:b4:ad:6f:00:dc:7d:7b:eb:89:b0:d7:e5:f4:3b: 5a:70:42:c8:21:25:64:47:8e:e4:6a:c4:ca:d4:aa:0b:22:a9: a4:99:ee:a9:10:77:5c:24:3d:6b:ef:5d:91:6c:28:14:1b:b1: 9c:c8:16:e9:30:be:cb:63:71:86:e2:22:73:55:7e:75:68:a1: 9c:30:89:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6t8vYfpV8VjztOxY3RT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMDU3NmY4NjNkZjdlMzIxYjFjYTUwNTBjZTJjMmRkMmZj YWRiMDkwHhcNMjYwMjA5MTUwMDE0WhcNMjYwMjEwMTUwMDE0WjAzMTEwLwYDVQQD Eyg0NTE2NzljOWFlN2NmZWQ5MmVhNTcwMmI5N2FjY2RiMTZmNmIyYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J8FxZoXBcCF9wK81b8RSxL2RyKy 5LXXyso9mxmor177KfPKFNLtpeiMuF2IzvO0rWYvDlZcHMYHljOXDq9aiCYrC0G8 7C7KCwB2zQFGMlWipXAcBi3EFTW45BrKaApPixIRbmn1TmFQ5XqYg72kmkHPjBqC p/5kbUq6u+9alpmKRT7C2IBiswxaQ0wAB0+hCFAjU33+r5Kglqfy87jX8b4id5RO 9OV3yZ0QPXFHUNODH8WTEtPbM+fo0TdcGIJbHq5ma8dxzpa7K5Fn7e5rQQf5DZde p4Z3X7S9V5D+jpbzEbZZ8AzFPEjQlytDVRZtGK3y1yFB6T10of03G/KGEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUWecmufP7ZLqVwK5eszbFvayqxMB8GA1UdIwQY MBaAFP0Fdvhj334yGxylBQziwt0vytsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEt NDAxNmY2YjQ0NWEwLzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEtNDAxNmY2YjQ0NWEw LzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAutspBMX apqBIjs5mqgMLHZAKPnnb12DfSyNIcTNMYm9pdrXKkEvTz/0KixI+1BVQHHk6cWP s1+d6viG1dxMl19METIUg3XdglsdEsmNSJZxhgonbsvGTpH/QwT0XNiCdezGN5ko ZBRucrogn7TEJUYvHK+4uE4ORsU7o9Lria8cvvHwWZxYU2p/VkmBPSd/3r5Bfbvz 9FNVfbbps9DGTaxczBLlHYfxaE05ho7PqFw1Rbnxn7nt37StbwDcfXvribDX5fQ7 WnBCyCElZEeO5GrEytSqCyKppJnuqRB3XCQ9a+9dkWwoFBuxnMgW6TC+y2NxhuIi c1V+dWihnDCJ+g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:18 2026 by rpki-client