This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json) Hash identifier: +9YGAK5ejAqhlRPm+EsCpQRnDR38y2vW51TFwuHjeos= Subject key identifier: C8:3D:64:58:75:AE:16:BB:B9:47:56:38:40:2C:65:F7:C1:51:F8:E8 Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Certificate serial: 019C44D98105AAC0B6F37A22CF21F8A4FE14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft Manifest number: 1813 Signing time: Tue 10 Feb 2026 00:00:30 +0000 Manifest this update: Tue 10 Feb 2026 00:00:30 +0000 Manifest next update: Wed 11 Feb 2026 00:00:30 +0000 Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: tZh2WDgy6Ck6VeY5HVAI7B7alY0tchhBbsvawj44+zA=) 2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:81:05:aa:c0:b6:f3:7a:22:cf:21:f8:a4:fe:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102 Validity Not Before: Feb 10 00:00:30 2026 GMT Not After : Feb 11 00:00:30 2026 GMT Subject: CN=c83d645875ae16bbb9475638402c65f7c151f8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ea:f8:2a:0e:63:5a:95:2c:41:b6:7f:af:ac: a4:d2:79:d4:9c:22:00:84:49:69:bc:a6:15:16:62: 1a:aa:f9:0f:44:9a:7a:0e:36:3c:42:67:2d:01:cd: ac:01:37:20:c8:a5:42:53:ad:b9:cf:e9:f8:0b:72: c0:7d:05:4f:e4:71:d0:08:4b:a6:34:4b:ac:d9:cc: a9:e7:8e:42:6d:63:56:51:ce:3e:e4:d1:1e:b8:8e: 85:bc:0d:a2:95:34:2b:fe:9a:3f:02:5d:07:cb:ba: 38:88:ef:c3:3f:45:52:16:ad:7e:07:17:e6:0d:ad: bd:68:73:ce:b8:54:9a:23:6a:47:46:a2:f5:70:29: 47:3f:5d:19:d1:d9:e4:8f:ca:11:78:cd:dd:40:73: a7:30:c7:76:e4:30:77:12:e3:02:f5:ba:b5:b4:04: e1:2c:51:dd:56:6b:af:f1:f9:4f:58:0b:ce:c0:df: aa:27:cf:c9:ab:94:f0:15:07:fd:7f:ca:ad:c6:1f: b2:a4:df:e9:0d:ed:c0:a0:a1:cd:6b:8b:a8:e6:86: 3c:cb:7c:47:d9:b0:c6:da:88:25:f4:7b:c0:22:bc: 54:00:ac:8d:a2:e8:8f:e7:1e:5e:5b:ad:a9:33:d3: 77:86:b9:45:7d:10:a0:c8:0a:31:da:a5:c9:f2:46: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:64:58:75:AE:16:BB:B9:47:56:38:40:2C:65:F7:C1:51:F8:E8 X509v3 Authority Key Identifier: keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:96:e9:e1:69:73:6d:76:69:0f:ec:e7:d1:09:47:ab:1e:ea: b4:a9:c4:bc:17:dd:dc:48:2e:ec:94:29:08:39:94:6b:69:d7: 3c:3c:0d:bc:81:eb:aa:86:00:54:4b:ae:d8:07:97:89:3d:b4: 21:9a:be:35:69:98:9d:04:8f:ad:c1:3e:88:e9:12:04:aa:5f: 44:ec:fb:9b:3d:60:3f:ad:c8:4d:ad:54:26:2f:38:4a:f1:b6: 9f:d0:d7:9d:48:91:67:04:4f:0b:39:e3:d1:ab:79:00:69:3f: 93:30:15:ad:f2:0e:1c:9c:b0:6d:41:c2:47:64:34:4a:44:a4: 05:f7:5e:62:1f:a9:f6:e6:48:41:10:ec:52:b1:3a:73:6b:92: 8e:7a:e2:dc:26:ce:01:fd:6d:3b:ab:d1:25:fe:3f:ff:72:1d: 77:5f:01:c0:e3:9d:1c:b9:b7:5c:18:ba:83:23:5a:de:58:00: 78:15:1d:40:d9:2c:04:c2:a5:30:1a:31:d6:6b:3d:09:ca:7a: 4d:ba:2f:70:fb:8e:4d:c4:45:7d:01:db:04:fc:5f:6d:b2:39: cd:fd:aa:80:4c:27:63:d9:be:91:d0:1c:cb:24:e8:94:fc:11: 68:75:03:27:34:25:66:62:f1:29:73:c9:aa:73:de:cf:6f:b2: 40:e7:b2:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2YEFqsC283oizyH4pP4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl NDExMDIwHhcNMjYwMjEwMDAwMDMwWhcNMjYwMjExMDAwMDMwWjAzMTEwLwYDVQQD EyhjODNkNjQ1ODc1YWUxNmJiYjk0NzU2Mzg0MDJjNjVmN2MxNTFmOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+r4Kg5jWpUsQbZ/r6yk0nnUnCIA hElpvKYVFmIaqvkPRJp6DjY8QmctAc2sATcgyKVCU625z+n4C3LAfQVP5HHQCEum NEus2cyp545CbWNWUc4+5NEeuI6FvA2ilTQr/po/Al0Hy7o4iO/DP0VSFq1+Bxfm Da29aHPOuFSaI2pHRqL1cClHP10Z0dnkj8oReM3dQHOnMMd25DB3EuMC9bq1tATh LFHdVmuv8flPWAvOwN+qJ8/Jq5TwFQf9f8qtxh+ypN/pDe3AoKHNa4uo5oY8y3xH 2bDG2ogl9HvAIrxUAKyNouiP5x5eW62pM9N3hrlFfRCgyAox2qXJ8kYc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMg9ZFh1rha7uUdWOEAsZffBUfjoMB8GA1UdIwQY MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt ZTU2ZTczODM4MGRlLzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5bp4Wlz bXZpD+zn0QlHqx7qtKnEvBfd3Egu7JQpCDmUa2nXPDwNvIHrqoYAVEuu2AeXiT20 IZq+NWmYnQSPrcE+iOkSBKpfROz7mz1gP63ITa1UJi84SvG2n9DXnUiRZwRPCznj 0at5AGk/kzAVrfIOHJywbUHCR2Q0SkSkBfdeYh+p9uZIQRDsUrE6c2uSjnri3CbO Af1tO6vRJf4//3Idd18BwOOdHLm3XBi6gyNa3lgAeBUdQNksBMKlMBox1ms9Ccp6 TbovcPuOTcRFfQHbBPxfbbI5zf2qgEwnY9m+kdAcyyTolPwRaHUDJzQlZmLxKXPJ qnPez2+yQOeycg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:43 2026 by rpki-client