This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json) Hash identifier: K4W4bkCDfuEOXv7BYW7ru/QcIJesJRGbCDQCemVGc/Y= Subject key identifier: F2:EA:4B:5E:69:9E:68:77:A1:ED:A3:30:60:E2:45:D5:52:B1:24:B8 Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f Certificate serial: 019C4358D24F4CDC6ADDBF4E180E2848C3BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 17:00:20 +0000 Manifest this update: Mon 09 Feb 2026 17:00:20 +0000 Manifest next update: Tue 10 Feb 2026 17:00:20 +0000 Files and hashes: 1: UrVvZVnA9sxhDnytnq_6CJMVGDY.roa (hash: Eo7tDFpvsB5+kGHIClxenKJ/I8v5IPSf0jD2mkBbqy8=) 2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: qQLhBxx5iX0q7s2/9ig1xo316zqgGbVxsfXWelpbMoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d2:4f:4c:dc:6a:dd:bf:4e:18:0e:28:48:c3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f Validity Not Before: Feb 9 17:00:20 2026 GMT Not After : Feb 10 17:00:20 2026 GMT Subject: CN=f2ea4b5e699e6877a1eda33060e245d552b124b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:93:12:18:d8:fb:14:80:4c:00:4e:1e:fa: c9:b6:27:24:be:3d:09:51:6a:89:05:5b:95:05:29: 95:dd:98:ee:56:22:0d:82:b4:6f:42:70:d7:65:42: 9c:ac:74:72:42:3c:0f:7f:53:04:ce:ee:ca:eb:19: 5f:65:c8:c4:eb:e4:c0:b3:d6:8f:cd:65:da:d8:da: 62:5a:f7:f2:97:e4:aa:80:60:64:20:89:f9:3f:3e: 5b:bc:e4:8b:b1:c7:6c:df:ba:9f:07:01:f2:61:26: ba:c5:aa:24:dd:6b:ea:a5:d5:98:b7:d2:14:5b:52: ff:f0:6c:55:59:0b:c8:13:4c:1c:e2:05:4f:eb:73: fa:ee:d7:7a:fd:06:fe:c9:86:30:4b:c4:16:85:9c: 86:1f:1f:9e:94:ab:2f:8c:9b:50:6a:96:2a:d1:8f: fe:39:19:08:e9:17:4d:d9:59:6d:e6:fb:a1:e4:6d: 21:bf:a8:99:d2:32:2b:29:28:3e:51:05:8a:cb:11: 12:1e:4e:80:1b:98:b6:dc:4b:31:45:42:66:4c:01: 3a:a5:34:cb:5e:23:15:ae:ef:0f:b5:97:f6:75:af: 17:8e:3e:84:bf:dc:8a:e5:bc:b3:51:52:90:00:da: df:fd:c8:2f:97:0d:b6:18:14:16:2a:32:a9:80:41: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EA:4B:5E:69:9E:68:77:A1:ED:A3:30:60:E2:45:D5:52:B1:24:B8 X509v3 Authority Key Identifier: keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ac:37:1b:26:47:5d:02:8c:c0:66:f6:d1:4d:aa:31:5b:09: 8c:14:72:28:07:7e:74:86:6b:db:6c:2d:b3:0f:0f:d8:0c:db: ac:77:9f:46:3e:a0:d0:27:b9:14:7f:7c:90:a1:a2:a2:cb:c2: dd:20:62:40:de:50:e0:9e:85:1d:0b:ec:57:ce:da:c7:56:1f: 12:29:ce:22:c0:c6:ef:46:44:aa:a4:65:8a:89:fe:b7:06:25: 4b:20:3e:8b:8f:51:56:33:74:1f:93:28:cf:e7:9a:a7:65:d7: e5:5d:42:4c:3b:e4:12:3d:7a:39:a8:85:30:aa:e1:2e:c9:b4: 81:08:f3:9d:e9:1c:c0:5b:e1:25:ec:b3:36:d7:f2:f0:d7:61: a3:0c:bd:a6:c5:d7:8a:22:85:b1:dc:b7:1d:a4:19:8d:6a:d6: cb:5f:bd:17:12:86:22:38:9f:56:2d:80:e5:fa:aa:0c:8b:e9: 15:b4:bf:ea:25:c0:0f:79:5f:78:90:08:94:84:ce:d9:2c:b5: 80:b6:05:a3:f9:41:63:5e:88:92:83:70:f5:e8:5d:f4:ca:bb: 68:32:88:8c:f2:ed:57:3e:10:ed:a7:5a:37:4b:14:b4:40:ce: 06:1e:c7:7f:70:02:51:5f:91:e0:21:5b:c6:20:1c:fb:bf:0d: e0:98:0f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNJPTNxq3b9OGA4oSMO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDQ3MWE2NmY3OTA3MTA3ZTQ1MzQ3MTZiZmE0MjA4ZDQw Njk2OWYwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD EyhmMmVhNGI1ZTY5OWU2ODc3YTFlZGEzMzA2MGUyNDVkNTUyYjEyNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EeTEhjY+xSATABOHvrJtickvj0J UWqJBVuVBSmV3ZjuViINgrRvQnDXZUKcrHRyQjwPf1MEzu7K6xlfZcjE6+TAs9aP zWXa2NpiWvfyl+SqgGBkIIn5Pz5bvOSLscds37qfBwHyYSa6xaok3WvqpdWYt9IU W1L/8GxVWQvIE0wc4gVP63P67td6/Qb+yYYwS8QWhZyGHx+elKsvjJtQapYq0Y/+ ORkI6RdN2Vlt5vuh5G0hv6iZ0jIrKSg+UQWKyxESHk6AG5i23EsxRUJmTAE6pTTL XiMVru8PtZf2da8Xjj6Ev9yK5byzUVKQANrf/cgvlw22GBQWKjKpgEHh8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLqS15pnmh3oe2jMGDiRdVSsSS4MB8GA1UdIwQY MBaAFKhEcaZveQcQfkU0cWv6QgjUBpafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2Et YjhjMzMxYTg0OGFhLzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2EtYjhjMzMxYTg0OGFh LzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqw3GyZH XQKMwGb20U2qMVsJjBRyKAd+dIZr22wtsw8P2AzbrHefRj6g0Ce5FH98kKGiosvC 3SBiQN5Q4J6FHQvsV87ax1YfEinOIsDG70ZEqqRlion+twYlSyA+i49RVjN0H5Mo z+eap2XX5V1CTDvkEj16OaiFMKrhLsm0gQjznekcwFvhJeyzNtfy8Ndhowy9psXX iiKFsdy3HaQZjWrWy1+9FxKGIjifVi2A5fqqDIvpFbS/6iXAD3lfeJAIlITO2Sy1 gLYFo/lBY16IkoNw9ehd9Mq7aDKIjPLtVz4Q7adaN0sUtEDOBh7Hf3ACUV+R4CFb xiAc+78N4JgPRA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:04 2026 by rpki-client