This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json) Hash identifier: t5o8Gedg6peYz5tqxwudJEF8WucWFpVCZmmcXUeuSrw= Subject key identifier: 13:D4:A8:2F:35:E5:7E:F5:78:4C:9B:6E:64:D8:CE:E7:B7:A0:4D:5A Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Certificate serial: 019C420F9F048B55D7F684CA21C6D4B63050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft Manifest number: 0521 Signing time: Mon 09 Feb 2026 11:00:45 +0000 Manifest this update: Mon 09 Feb 2026 11:00:45 +0000 Manifest next update: Tue 10 Feb 2026 11:00:45 +0000 Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: nfL35fJVcCIzuMH5QD8knMILWtjYFLQ7QA/MQ0VerO4=) 2: iWvUwAU_qvWcuMvoIuoO-qPVv9c.roa (hash: FGFkjOVAlseZE4i4Gp+aJPkMH2fpBKQOFk0SOsvRbNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:9f:04:8b:55:d7:f6:84:ca:21:c6:d4:b6:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Validity Not Before: Feb 9 11:00:45 2026 GMT Not After : Feb 10 11:00:45 2026 GMT Subject: CN=13d4a82f35e57ef5784c9b6e64d8cee7b7a04d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:3e:68:48:93:b7:ee:5e:2c:8d:81:b6:02: 1c:d0:1d:2f:ec:85:3c:c5:15:ea:84:c4:3b:e5:d4: c8:d6:0c:1e:e0:82:7a:6d:7d:b3:db:ee:57:9c:a5: 95:27:0f:63:e8:1d:ec:66:53:5f:c0:1f:03:f6:96: e5:a4:8b:c4:8f:18:3c:92:79:27:e2:44:6d:12:14: b7:cd:7b:b2:e3:5b:2c:6d:62:4b:01:4d:f5:0b:18: 76:f2:23:71:fc:91:28:57:ae:ed:66:1b:a3:f7:fe: a5:f9:82:df:5e:1a:0e:60:e3:6e:7d:f5:59:be:d2: b4:5b:d8:e8:85:3e:fe:a7:a6:e5:e2:9a:07:9c:9a: 0b:c7:57:c8:c3:d5:c5:4d:50:53:ad:02:05:cb:77: 65:ac:42:d2:da:d2:03:e4:f1:d0:04:1a:9f:2e:ce: 90:7c:34:c3:58:22:a7:c8:2f:21:63:7b:ae:9f:af: 7d:6a:29:ac:d3:a0:6e:5b:22:61:37:0f:74:32:f6: 05:19:f4:e5:57:e9:3a:05:de:c9:57:76:b8:44:fc: 5c:21:92:1b:41:01:f0:14:99:90:5c:f4:ab:60:23: 00:08:f0:49:00:be:48:e3:22:98:7e:8f:e3:77:46: dd:52:d7:c0:a1:5a:b1:a3:a2:db:f5:5b:67:82:6b: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:A8:2F:35:E5:7E:F5:78:4C:9B:6E:64:D8:CE:E7:B7:A0:4D:5A X509v3 Authority Key Identifier: keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:a0:35:e2:ff:4c:8f:d4:09:9c:bd:ad:0f:30:19:3e:85:b1: d7:5c:e6:b3:2a:50:65:12:af:58:e4:a3:be:1b:be:11:aa:1e: 73:0d:09:9e:56:35:49:5e:8d:61:99:de:46:dc:49:9e:d6:04: 1d:ae:b6:77:57:f3:00:ed:d9:b0:4d:fd:50:7f:fd:1f:a6:1b: 36:ec:23:5a:0b:0d:ff:24:5c:e9:77:a5:1d:45:c4:d4:7c:84: c8:6e:04:d2:74:fc:47:aa:3e:b4:f3:66:18:68:76:b7:5a:c5: 1a:c6:82:2d:e7:39:97:a6:ce:b4:04:46:37:b2:18:45:71:bd: 1f:bd:d1:48:51:90:56:9d:fd:3e:dc:1b:00:43:d1:b0:f4:8d: 55:3e:aa:c6:4e:ae:4a:6f:4a:c6:4f:34:1f:12:07:cf:53:5c: a7:44:b8:d0:77:3b:73:7b:ec:42:19:e6:8f:ff:56:c5:0b:38: 09:95:02:35:46:a1:c2:d2:b7:f1:f3:a5:77:26:f6:2c:8f:fb: ef:12:f0:3d:aa:be:f5:71:ea:cc:72:40:56:8d:32:e1:67:de: 4f:87:22:0b:e3:b8:3f:16:4d:1a:9d:97:79:67:82:cd:32:d4: 08:39:85:20:ef:c7:38:8f:e7:15:23:32:1b:24:7b:27:8d:ca: ba:8b:1b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD58Ei1XX9oTKIcbUtjBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj ODg2NTYwHhcNMjYwMjA5MTEwMDQ1WhcNMjYwMjEwMTEwMDQ1WjAzMTEwLwYDVQQD EygxM2Q0YTgyZjM1ZTU3ZWY1Nzg0YzliNmU2NGQ4Y2VlN2I3YTA0ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys4+aEiTt+5eLI2BtgIc0B0v7IU8 xRXqhMQ75dTI1gwe4IJ6bX2z2+5XnKWVJw9j6B3sZlNfwB8D9pblpIvEjxg8knkn 4kRtEhS3zXuy41ssbWJLAU31Cxh28iNx/JEoV67tZhuj9/6l+YLfXhoOYONuffVZ vtK0W9johT7+p6bl4poHnJoLx1fIw9XFTVBTrQIFy3dlrELS2tID5PHQBBqfLs6Q fDTDWCKnyC8hY3uun699aims06BuWyJhNw90MvYFGfTlV+k6Bd7JV3a4RPxcIZIb QQHwFJmQXPSrYCMACPBJAL5I4yKYfo/jd0bdUtfAoVqxo6Lb9Vtngmv1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPUqC815X71eEybbmTYzue3oE1aMB8GA1UdIwQY MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0 LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2KA14v9M j9QJnL2tDzAZPoWx11zmsypQZRKvWOSjvhu+Eaoecw0JnlY1SV6NYZneRtxJntYE Ha62d1fzAO3ZsE39UH/9H6YbNuwjWgsN/yRc6XelHUXE1HyEyG4E0nT8R6o+tPNm GGh2t1rFGsaCLec5l6bOtARGN7IYRXG9H73RSFGQVp39PtwbAEPRsPSNVT6qxk6u Sm9Kxk80HxIHz1Ncp0S40Hc7c3vsQhnmj/9WxQs4CZUCNUahwtK38fOldyb2LI/7 7xLwPaq+9XHqzHJAVo0y4WfeT4ciC+O4PxZNGp2XeWeCzTLUCDmFIO/HOI/nFSMy GyR7J43KuosbFA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:43 2026 by rpki-client