This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json) Hash identifier: V9QaxaKLE4O5nbhA2la+lR/ynbn9XAi8zZ1w+UQujXk= Subject key identifier: 06:68:59:C6:A1:18:D7:ED:FA:0D:98:9F:9B:8D:8B:5D:22:19:82:E2 Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c Certificate serial: 019C420F3B62D7FBB26008D95C8A3AC2B087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft Manifest number: 0D85 Signing time: Mon 09 Feb 2026 11:00:20 +0000 Manifest this update: Mon 09 Feb 2026 11:00:20 +0000 Manifest next update: Tue 10 Feb 2026 11:00:20 +0000 Files and hashes: 1: qBBRB8HmJZEtxi-niy9T8cyyncw.roa (hash: cgLv9kyCGCoNq0/R+t8v8q6At3djIYgfHJi87YrPrCE=) 2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: 7BiDQ3A/UdtnK7X7vT/N1DEcxgEEMirBUdfDT9sxkOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:3b:62:d7:fb:b2:60:08:d9:5c:8a:3a:c2:b0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c Validity Not Before: Feb 9 11:00:20 2026 GMT Not After : Feb 10 11:00:20 2026 GMT Subject: CN=066859c6a118d7edfa0d989f9b8d8b5d221982e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:15:bc:96:06:d0:f9:d9:f0:47:34:79:79:1d: 04:c1:f1:df:a5:2f:f2:aa:98:09:84:d3:35:cf:c9: b8:ca:05:56:26:39:f7:88:86:c7:90:2f:65:33:a3: e1:ca:2e:8e:6f:95:90:3f:8c:28:39:5b:16:3c:9e: ea:e9:3f:16:09:17:65:b2:97:fa:41:b4:bd:c9:f8: d3:61:30:e2:0e:62:b8:13:9e:23:a0:21:e4:cb:1a: 67:c9:8a:b4:5f:05:d6:1f:6f:e1:91:39:9d:55:ab: 46:c8:3c:73:8e:33:33:11:29:7d:62:b1:c4:6e:d9: fd:52:29:b8:ad:58:07:00:c4:12:42:25:8a:fe:1c: 22:a3:13:7e:28:93:d8:0f:8e:7a:d5:07:19:54:38: e4:e2:5c:4c:9b:9d:26:ec:08:a1:33:30:de:70:fb: fa:3a:d2:5a:5d:35:8a:61:3c:cb:21:d1:f7:55:93: 75:07:c2:4f:05:ed:8b:30:3d:8b:90:a6:a0:dd:cf: 8a:66:18:80:f2:d8:c5:1f:29:45:65:e3:57:6e:ac: 0e:7e:43:92:92:88:42:02:07:e1:9f:9a:35:e9:49: 4f:25:a0:b7:98:fa:1f:d8:2e:2c:35:f8:ff:cf:e1: c7:f1:32:df:c9:73:73:a8:03:e3:ac:f2:90:eb:8a: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:68:59:C6:A1:18:D7:ED:FA:0D:98:9F:9B:8D:8B:5D:22:19:82:E2 X509v3 Authority Key Identifier: keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:95:f9:da:c5:f5:01:0f:8f:09:07:f6:eb:7f:1f:90:2a:22: 38:61:9d:ee:d4:fe:5a:4c:32:71:a9:25:9d:d7:02:f6:a3:94: a5:d5:43:dc:18:31:a7:13:36:f9:d9:ce:3f:69:b4:ab:9b:48: 69:c4:62:d1:f9:9a:4d:de:e4:9b:3d:00:1a:4e:ad:ee:26:ae: ad:1d:d0:ca:13:54:bc:cb:8a:ac:5f:ba:13:6a:ef:3e:fd:d5: 36:0a:a2:b4:7f:d7:aa:bd:d4:46:92:30:8f:b8:b8:52:56:cf: cb:f1:6e:a4:02:c1:68:72:b6:07:04:ce:3b:b6:96:dd:02:44: 01:11:7b:7d:f9:7e:4d:32:df:fe:1e:88:ba:d3:21:5e:3b:48: 4e:59:9a:96:0d:f1:bf:f6:85:da:54:7b:6a:29:4c:16:b6:0e: 03:cf:8c:36:82:0a:c6:35:30:c6:f6:ff:45:88:aa:0d:54:86: 96:c5:db:a9:9a:e6:c3:af:d5:8d:b0:1c:cf:c6:4a:86:9e:ba: d3:d5:3f:98:cf:af:6b:47:1d:02:a4:a0:7e:c4:9f:e4:1b:a7: 72:6d:35:db:fb:cc:05:3b:00:84:44:36:37:8f:ca:91:86:ab: 6b:9c:84:03:31:dc:df:d9:56:80:92:8d:f1:ce:bb:c8:ba:3b: 35:11:97:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzti1/uyYAjZXIo6wrCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi MDkzM2MwHhcNMjYwMjA5MTEwMDIwWhcNMjYwMjEwMTEwMDIwWjAzMTEwLwYDVQQD EygwNjY4NTljNmExMThkN2VkZmEwZDk4OWY5YjhkOGI1ZDIyMTk4MmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BW8lgbQ+dnwRzR5eR0EwfHfpS/y qpgJhNM1z8m4ygVWJjn3iIbHkC9lM6Phyi6Ob5WQP4woOVsWPJ7q6T8WCRdlspf6 QbS9yfjTYTDiDmK4E54joCHkyxpnyYq0XwXWH2/hkTmdVatGyDxzjjMzESl9YrHE btn9Uim4rVgHAMQSQiWK/hwioxN+KJPYD4561QcZVDjk4lxMm50m7AihMzDecPv6 OtJaXTWKYTzLIdH3VZN1B8JPBe2LMD2LkKag3c+KZhiA8tjFHylFZeNXbqwOfkOS kohCAgfhn5o16UlPJaC3mPof2C4sNfj/z+HH8TLfyXNzqAPjrPKQ64rcJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZoWcahGNft+g2Yn5uNi10iGYLiMB8GA1UdIwQY MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt NTlkNDRlZjdlNGZmLzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpX52sX1 AQ+PCQf2638fkCoiOGGd7tT+WkwycaklndcC9qOUpdVD3BgxpxM2+dnOP2m0q5tI acRi0fmaTd7kmz0AGk6t7iaurR3QyhNUvMuKrF+6E2rvPv3VNgqitH/Xqr3URpIw j7i4UlbPy/FupALBaHK2BwTOO7aW3QJEARF7ffl+TTLf/h6IutMhXjtITlmalg3x v/aF2lR7ailMFrYOA8+MNoIKxjUwxvb/RYiqDVSGlsXbqZrmw6/VjbAcz8ZKhp66 09U/mM+va0cdAqSgfsSf5Buncm012/vMBTsAhEQ2N4/KkYara5yEAzHc39lWgJKN 8c67yLo7NRGXmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:59 2026 by rpki-client