This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json) Hash identifier: a5gg1ULOzBCbLeyLvxlN3OIPDskRGIOD5pgg5+AW2t0= Subject key identifier: 23:28:02:A0:4D:97:4B:B3:0B:2B:1C:FA:4F:79:D9:09:D5:C1:FB:F6 Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2 Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2 Certificate serial: 019C42B40FF8DD727661ACF7047E0BDAC865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft Manifest number: 02A0 Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: FCnleckg8ntZEPTdypzWFa+9nOlzXa+weYCu5EPxu88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0f:f8:dd:72:76:61:ac:f7:04:7e:0b:da:c8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2 Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=232802a04d974bb30b2b1cfa4f79d909d5c1fbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:8f:af:00:8f:ed:dd:32:05:05:95:2e:6b: f5:37:14:c8:80:29:de:1c:bd:64:3c:20:71:3f:0c: 52:38:7a:1d:4a:04:12:e6:40:10:c0:69:13:87:86: a8:1a:21:58:8d:5a:2a:32:a5:86:70:c6:77:6e:c7: 85:d4:9c:dc:93:69:1e:ff:7f:fe:61:7e:98:5d:7e: 68:73:33:84:be:be:ce:55:48:15:be:6e:70:76:c2: 45:77:98:74:67:b3:49:cf:ae:53:dd:4a:d4:5f:fd: fe:6a:18:1e:d9:ae:cd:57:e3:61:95:a7:d2:78:af: 8d:32:1f:0c:b7:d0:2b:32:44:1e:22:0e:06:95:5a: d0:dd:15:e2:6a:ce:c5:52:00:e4:85:27:37:24:52: 23:2e:68:c7:41:fc:b6:01:53:55:42:7e:b4:ed:8f: b9:3d:76:9a:4d:df:5e:e5:0d:f9:15:56:95:aa:5e: 4c:2b:b0:a2:0d:23:52:01:e0:7e:24:2b:ab:f1:79: 73:1c:e2:c4:b2:8b:ac:d7:4a:b7:f2:74:e6:0c:98: 5f:50:1c:29:3a:76:23:a8:38:bb:0e:d7:83:65:79: 14:ed:c6:3c:2b:4d:48:d1:ef:4b:d9:90:29:29:e4: f4:e8:35:4b:67:36:6d:b1:6b:c7:32:8f:21:5f:76: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:28:02:A0:4D:97:4B:B3:0B:2B:1C:FA:4F:79:D9:09:D5:C1:FB:F6 X509v3 Authority Key Identifier: keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:55:ec:04:36:52:51:cd:3b:e8:6d:f8:9e:35:45:12:2e:b7: 24:f0:f6:0a:98:ab:88:22:de:81:e8:8d:ec:b6:ab:97:76:dd: 7d:a2:bf:ef:dd:3a:41:83:f3:2d:94:78:c4:82:82:15:a1:68: 78:d0:2f:97:01:cd:a8:1c:77:24:b3:89:71:6c:fe:ed:64:c7: dd:65:8d:8d:35:0a:f0:26:98:1e:69:df:23:07:0c:4f:82:ec: d2:5d:4b:1e:d5:6a:37:e9:f2:ae:58:73:18:49:cb:d1:e5:d9: 8e:17:c3:8a:6c:ae:10:6e:45:3a:7f:95:d3:4e:1e:e0:bd:fc: 72:07:f3:94:d8:b6:4f:b7:88:df:37:63:ca:cc:31:b7:5b:ae: bd:a1:a7:25:f6:c9:58:77:4a:6f:47:e2:49:59:57:9d:0b:2b: c3:7f:f4:e9:2d:fe:3e:4e:9f:0f:d3:8d:2d:b0:5f:bd:67:ba: 75:ba:37:57:a0:17:66:55:bf:1c:f5:9a:1d:d5:9f:37:6b:ff: fa:57:ad:a3:1a:61:33:39:dd:5b:91:99:54:b7:81:ce:ce:0d: 20:b7:70:d1:0a:2b:b2:26:cb:d3:52:a4:8f:71:31:e6:79:0e: 90:88:f0:ff:f5:c4:20:80:90:63:9a:fc:56:ee:2b:0c:2c:aa: e2:30:a1:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtA/43XJ2Yaz3BH4L2shlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2YxNjZhZmIzZjEwMmZiMTI1NDNiOTI3MDk3Yzk2YjZi YTlkYzIwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD EygyMzI4MDJhMDRkOTc0YmIzMGIyYjFjZmE0Zjc5ZDkwOWQ1YzFmYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmePrwCP7d0yBQWVLmv1NxTIgCne HL1kPCBxPwxSOHodSgQS5kAQwGkTh4aoGiFYjVoqMqWGcMZ3bseF1Jzck2ke/3/+ YX6YXX5oczOEvr7OVUgVvm5wdsJFd5h0Z7NJz65T3UrUX/3+ahge2a7NV+NhlafS eK+NMh8Mt9ArMkQeIg4GlVrQ3RXias7FUgDkhSc3JFIjLmjHQfy2AVNVQn607Y+5 PXaaTd9e5Q35FVaVql5MK7CiDSNSAeB+JCur8XlzHOLEsous10q38nTmDJhfUBwp OnYjqDi7DteDZXkU7cY8K01I0e9L2ZApKeT06DVLZzZtsWvHMo8hX3YCkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMoAqBNl0uzCysc+k952QnVwfv2MB8GA1UdIwQY MBaAFEN/Fmr7PxAvsSVDuScJfJa2up3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYTExYTctMjQyNi00MjhlLTlkODct MDNlMWQzNTEzYzE0LzEvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mYTExYTctMjQyNi00MjhlLTlkODctMDNlMWQzNTEzYzE0 LzEvUTM4V2F2c19FQy14SlVPNUp3bDhscmE2bmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1XsBDZS Uc076G34njVFEi63JPD2CpiriCLegeiN7Larl3bdfaK/7906QYPzLZR4xIKCFaFo eNAvlwHNqBx3JLOJcWz+7WTH3WWNjTUK8CaYHmnfIwcMT4Ls0l1LHtVqN+nyrlhz GEnL0eXZjhfDimyuEG5FOn+V004e4L38cgfzlNi2T7eI3zdjyswxt1uuvaGnJfbJ WHdKb0fiSVlXnQsrw3/06S3+Pk6fD9ONLbBfvWe6dbo3V6AXZlW/HPWaHdWfN2v/ +letoxphMzndW5GZVLeBzs4NILdw0QorsibL01Kkj3Ex5nkOkIjw//XEIICQY5r8 Vu4rDCyq4jChgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:47 2026 by rpki-client