This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json) Hash identifier: +CNsNcwfZJdQYyZrt5piC1tsfyDGENcPzsXVs59iSc0= Subject key identifier: 61:64:7C:6A:2B:FA:E0:AB:B7:7B:D3:15:12:60:BA:55:1E:36:45:C6 Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2 Certificate serial: 019C41A1705B60714388992B5217E2C3E342 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:00:24 +0000 Manifest this update: Mon 09 Feb 2026 09:00:24 +0000 Manifest next update: Tue 10 Feb 2026 09:00:24 +0000 Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: B70hvqFW4l92qJ+a76ig+WG+MdJ85/bkUtW4BEJoqXQ=) 2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:70:5b:60:71:43:88:99:2b:52:17:e2:c3:e3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2 Validity Not Before: Feb 9 09:00:24 2026 GMT Not After : Feb 10 09:00:24 2026 GMT Subject: CN=61647c6a2bfae0abb77bd3151260ba551e3645c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:f4:1b:40:21:f5:74:68:2c:db:67:0b:9e: d9:b7:74:f3:99:e7:f4:6b:f4:8b:73:cc:b7:65:e7: ea:f7:9b:71:37:d2:19:51:ee:13:0b:60:d5:85:c8: cb:27:5a:a9:39:63:37:d1:83:5f:ba:64:e9:71:bf: 7d:b4:cc:2c:1f:2e:b1:84:8d:2e:e6:10:c5:6e:6f: 96:03:6e:ce:44:34:36:43:7d:17:c0:30:2c:d3:62: 20:2e:6b:1b:c1:8f:41:20:a5:d0:6e:29:23:01:c1: e2:84:a9:dd:f5:56:84:e7:7c:81:33:22:3f:c3:a2: 04:e9:bb:6b:4c:b5:c6:42:61:66:da:e9:4b:ae:95: 4f:78:3b:db:3b:49:29:c8:15:54:7f:dd:54:2e:7a: 7c:96:e4:1b:ad:9d:2a:0a:f7:5a:82:9f:65:06:99: 66:c6:aa:a6:5d:13:f3:38:2c:6b:04:6c:0d:be:ab: a1:47:40:7f:dd:b3:20:63:4a:29:e5:39:69:76:d4: 45:e7:24:ba:07:72:8f:f9:b7:3e:e5:b3:35:d8:e1: 58:2c:a0:f6:ba:dd:f0:89:26:64:11:d9:c1:e8:72: 99:03:44:36:40:59:30:6c:10:fb:fd:b5:b9:a1:8f: 52:60:55:43:d8:3f:90:ef:3c:a8:f8:39:0e:7e:6a: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:64:7C:6A:2B:FA:E0:AB:B7:7B:D3:15:12:60:BA:55:1E:36:45:C6 X509v3 Authority Key Identifier: keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5a:61:5a:27:13:48:21:7f:01:cd:5b:9c:50:93:19:86:60: f4:c5:92:87:04:74:05:45:60:c9:43:1f:fb:ef:11:84:86:ce: c1:3c:66:6b:98:f4:07:62:02:14:c9:26:6d:f8:ee:75:ef:56: d5:4c:8e:44:cf:bb:ac:41:16:0e:51:42:09:e2:7a:40:46:fd: e7:27:a6:96:f4:8f:73:8d:6f:4e:88:da:f5:08:66:c5:44:c3: da:54:45:9a:38:f7:13:6f:80:cb:cc:f3:0c:12:e8:9a:10:a9: fc:e1:b9:da:4a:f6:b6:11:db:eb:e6:5c:0a:2d:b2:24:08:a4: ed:08:06:65:13:6b:10:fb:db:04:cc:f7:f7:b1:d0:6e:90:06: 92:60:14:45:5e:8b:f4:53:15:9f:02:02:18:1b:63:2d:f9:8a: 0c:69:83:e4:1b:7c:23:31:2c:0c:c6:8a:4a:09:70:9e:8d:0f: 0b:b8:53:3d:a3:5a:3b:ec:99:7c:66:09:68:5f:d8:69:29:99: 19:0b:f6:bc:e2:d4:b3:a2:5f:3b:17:8c:b4:f1:3f:8a:78:e7: a1:7b:08:89:8a:a8:b6:f0:f4:5e:74:fa:a8:6c:a2:35:2e:e1: 50:91:9d:a5:b1:51:97:d5:82:d1:21:c4:2b:1f:a7:a7:27:57: 33:c9:b2:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXBbYHFDiJkrUhfiw+NCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj MzkzYjIwHhcNMjYwMjA5MDkwMDI0WhcNMjYwMjEwMDkwMDI0WjAzMTEwLwYDVQQD Eyg2MTY0N2M2YTJiZmFlMGFiYjc3YmQzMTUxMjYwYmE1NTFlMzY0NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ln0G0Ah9XRoLNtnC57Zt3Tzmef0 a/SLc8y3Zefq95txN9IZUe4TC2DVhcjLJ1qpOWM30YNfumTpcb99tMwsHy6xhI0u 5hDFbm+WA27ORDQ2Q30XwDAs02IgLmsbwY9BIKXQbikjAcHihKnd9VaE53yBMyI/ w6IE6btrTLXGQmFm2ulLrpVPeDvbO0kpyBVUf91ULnp8luQbrZ0qCvdagp9lBplm xqqmXRPzOCxrBGwNvquhR0B/3bMgY0op5TlpdtRF5yS6B3KP+bc+5bM12OFYLKD2 ut3wiSZkEdnB6HKZA0Q2QFkwbBD7/bW5oY9SYFVD2D+Q7zyo+DkOfmoJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFkfGor+uCrt3vTFRJgulUeNkXGMB8GA1UdIwQY MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFphWicT SCF/Ac1bnFCTGYZg9MWShwR0BUVgyUMf++8RhIbOwTxma5j0B2ICFMkmbfjude9W 1UyORM+7rEEWDlFCCeJ6QEb95yemlvSPc41vToja9QhmxUTD2lRFmjj3E2+Ay8zz DBLomhCp/OG52kr2thHb6+ZcCi2yJAik7QgGZRNrEPvbBMz397HQbpAGkmAURV6L 9FMVnwICGBtjLfmKDGmD5Bt8IzEsDMaKSglwno0PC7hTPaNaO+yZfGYJaF/YaSmZ GQv2vOLUs6JfOxeMtPE/injnoXsIiYqotvD0XnT6qGyiNS7hUJGdpbFRl9WC0SHE Kx+npydXM8myWg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:26 2026 by rpki-client