This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json) Hash identifier: vWMY21ACt2YC1wpIJg4azEqcbDrE+wumDFMdb0He+UQ= Subject key identifier: 89:8A:FD:74:FE:97:3C:D1:3C:DA:AB:91:03:C6:0C:44:93:B6:91:CD Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Certificate serial: 019C427E0F34DE70D93D6F9ABE3E6B55B267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft Manifest number: 17A5 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: skrysGAoU7xL1mGe5SF8zsrI+zCaabGzKM3vU+m/xqo=) 2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0f:34:de:70:d9:3d:6f:9a:be:3e:6b:55:b2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=898afd74fe973cd13cdaab9103c60c4493b691cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:4f:5d:28:30:5d:9a:d7:af:91:e4:87:ae: 1a:ee:9e:cc:6a:ba:0f:e9:b6:c9:45:de:de:b1:3c: c5:c3:ff:65:6f:a1:a4:73:c5:49:8d:f4:86:74:3a: 14:f0:f8:50:5d:ed:f4:0d:2e:cd:5a:54:9c:d1:97: 5a:63:08:4d:b0:18:26:34:97:60:c9:72:3c:3d:78: 43:af:19:53:b8:5f:52:10:12:8e:17:d9:24:08:e9: d6:1b:93:dd:37:cf:4e:14:94:ce:47:56:0f:be:5b: 32:55:33:13:f5:bc:64:25:9b:83:6b:69:3c:51:0a: 46:e8:f4:21:16:25:a9:3f:22:68:f4:00:a2:30:72: 39:5c:ad:7c:a1:ed:e2:df:a5:30:1d:9a:d4:bf:18: bd:83:03:a6:4b:97:db:95:29:84:af:22:2e:cb:3a: c2:e8:1c:f8:98:ee:62:3d:8a:ac:5b:ab:fb:b5:21: 08:fa:08:d5:58:3f:4c:ab:ba:bc:ac:46:b6:6a:f2: a5:b5:43:29:9f:13:68:3f:f8:d9:63:aa:06:9d:3c: 85:1c:dc:bf:e1:1f:12:22:eb:cf:a3:a8:cd:54:9a: da:67:22:a1:e6:81:09:f2:84:c0:2c:62:93:41:0d: e0:e1:6d:15:af:91:00:90:c1:85:2b:8e:29:32:2e: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:FD:74:FE:97:3C:D1:3C:DA:AB:91:03:C6:0C:44:93:B6:91:CD X509v3 Authority Key Identifier: keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:ae:ee:57:08:9d:24:01:a1:7a:56:56:f2:fd:1a:5a:2c: a0:a0:92:30:fa:bf:6d:6a:0b:f9:e1:4c:f8:64:2e:fd:ee:1e: 48:b6:4a:d6:99:4b:b4:12:88:c8:73:cc:13:ad:39:19:ac:d6: 11:1d:c9:5e:4d:d9:7e:37:0f:17:00:32:50:3b:06:20:7d:63: 75:be:4e:93:05:1c:5a:47:b2:7c:d4:c9:bb:9e:73:80:a7:8a: f8:89:49:d8:4e:2d:a1:f3:60:4a:0d:d4:e3:c4:02:b1:2e:52: ff:a3:58:4e:03:17:42:03:5b:6b:ff:b3:20:63:21:57:63:23: 76:1f:d3:8a:63:50:39:05:1b:57:cf:19:99:85:5e:ee:cf:a0: 9d:fe:db:13:07:57:de:48:d4:5b:d1:01:57:76:17:d6:62:54: 9a:09:02:e6:5f:eb:6e:2e:cc:b2:bf:c6:c0:4b:15:30:e4:b0: 28:52:07:6c:21:c4:98:01:fe:99:20:11:eb:ba:1e:e4:5b:01: da:46:4d:03:8a:4e:5b:22:67:22:0b:f0:06:f0:bf:c6:33:e4: fd:f9:2f:db:56:7b:c6:00:7b:86:23:e1:71:ca:08:00:47:b2: e9:d4:c0:8f:1f:ce:dd:1a:25:cc:c4:48:b4:59:d8:f1:9a:32: 84:e5:52:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg803nDZPW+avj5rVbJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5M2UzN2ViOWNiMTk4MzI1ZDY1NjY3MzI4OTI1OGQyOGVi OWYzYjgwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD Eyg4OThhZmQ3NGZlOTczY2QxM2NkYWFiOTEwM2M2MGM0NDkzYjY5MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAystPXSgwXZrXr5Hkh64a7p7MaroP 6bbJRd7esTzFw/9lb6Gkc8VJjfSGdDoU8PhQXe30DS7NWlSc0ZdaYwhNsBgmNJdg yXI8PXhDrxlTuF9SEBKOF9kkCOnWG5PdN89OFJTOR1YPvlsyVTMT9bxkJZuDa2k8 UQpG6PQhFiWpPyJo9ACiMHI5XK18oe3i36UwHZrUvxi9gwOmS5fblSmEryIuyzrC 6Bz4mO5iPYqsW6v7tSEI+gjVWD9Mq7q8rEa2avKltUMpnxNoP/jZY6oGnTyFHNy/ 4R8SIuvPo6jNVJraZyKh5oEJ8oTALGKTQQ3g4W0Vr5EAkMGFK44pMi4TbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImK/XT+lzzRPNqrkQPGDESTtpHNMB8GA1UdIwQY MBaAFKk+N+ucsZgyXWVmcyiSWNKOufO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYt MzlmNzUzNzU3ODQ4LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNDYxZDItMjE4Mi00MDhlLTg2ZGYtMzlmNzUzNzU3ODQ4 LzEvcVQ0MzY1eXhtREpkWldaektKSlkwbzY1ODdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJGu7lcI nSQBoXpWVvL9GlosoKCSMPq/bWoL+eFM+GQu/e4eSLZK1plLtBKIyHPME605GazW ER3JXk3ZfjcPFwAyUDsGIH1jdb5OkwUcWkeyfNTJu55zgKeK+IlJ2E4tofNgSg3U 48QCsS5S/6NYTgMXQgNba/+zIGMhV2Mjdh/TimNQOQUbV88ZmYVe7s+gnf7bEwdX 3kjUW9EBV3YX1mJUmgkC5l/rbi7Msr/GwEsVMOSwKFIHbCHEmAH+mSAR67oe5FsB 2kZNA4pOWyJnIgvwBvC/xjPk/fkv21Z7xgB7hiPhccoIAEey6dTAjx/O3RolzMRI tFnY8ZoyhOVSZw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:19 2026 by rpki-client