This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json) Hash identifier: Ar9gRJI1lWMoFQFLeH3sB/SEJsVV/l+QTwNFU18B7Dw= Subject key identifier: 92:04:1E:8E:DF:68:CE:9A:10:AB:C5:E6:7E:52:58:2F:5F:DA:5B:2B Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Certificate serial: 019C4322F524F93F58063CFB96CD7D0F4823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:30 +0000 Manifest this update: Mon 09 Feb 2026 16:01:30 +0000 Manifest next update: Tue 10 Feb 2026 16:01:30 +0000 Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: zXw0OGpuA3YoeyThggmegd5ZUKIdMXO3CjnTufGPF/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:f5:24:f9:3f:58:06:3c:fb:96:cd:7d:0f:48:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78 Validity Not Before: Feb 9 16:01:30 2026 GMT Not After : Feb 10 16:01:30 2026 GMT Subject: CN=92041e8edf68ce9a10abc5e67e52582f5fda5b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:a1:f4:25:a5:e0:1e:5a:59:d9:8a:7e:05: b8:98:e3:90:e5:46:37:e4:65:e8:7b:b2:f6:9a:cf: 00:06:0a:94:91:c9:aa:2f:2a:da:75:d4:a4:dc:94: cc:fb:0d:29:c5:dc:e1:c2:ad:bc:b9:b1:8c:05:07: 82:b9:d8:6e:18:0f:ab:a7:88:5a:fc:23:44:a3:58: da:6a:db:cc:bf:d7:69:90:7e:1c:a7:47:44:ea:cb: 8e:b5:5b:41:3e:8e:ca:05:03:fc:b0:dd:ef:dc:d2: fd:99:8c:76:ad:27:88:5d:29:bb:07:df:77:9d:bb: f9:53:f1:0a:6c:49:5f:e1:f7:ed:f0:cf:a0:39:fa: 3a:28:c9:ba:8e:7a:24:d0:a6:5c:33:a1:80:14:e4: 50:a4:5c:31:3b:c2:b4:bf:45:5a:84:f4:af:01:92: 5f:36:92:51:b4:10:13:6e:04:ad:c9:97:3a:45:f0: ac:b1:15:b0:c8:67:33:ff:27:6c:02:13:ba:d2:2e: d2:cc:5d:e2:f7:34:67:31:96:ea:30:c4:27:39:ae: 26:60:c6:04:0d:7a:c8:1e:1a:e0:26:04:61:1c:c0: b1:24:4a:53:b0:fe:11:0a:05:00:43:1b:04:03:72: b5:78:90:9f:85:16:a0:bb:a3:37:72:72:03:6d:6c: a4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:1E:8E:DF:68:CE:9A:10:AB:C5:E6:7E:52:58:2F:5F:DA:5B:2B X509v3 Authority Key Identifier: keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4c:c5:9c:43:a7:81:31:72:aa:45:d8:58:50:39:67:ff:c3: ac:03:59:a4:46:12:9c:fc:94:cf:86:ad:2f:d2:d2:1c:41:54: 73:da:5e:0c:32:f9:27:09:01:92:90:91:62:de:14:0b:86:f6: d7:21:0c:21:ab:b4:5e:fa:78:06:76:bb:98:9c:48:df:66:26: b2:5b:90:af:9e:89:b8:ae:7f:33:08:d6:0d:0c:19:c4:36:c7: c2:9f:53:f4:cd:97:b4:f1:e2:5c:a0:67:74:02:2a:64:b3:56: 88:67:2d:58:aa:81:32:bf:de:d0:4b:77:4f:2a:d4:23:cd:2c: 3f:27:3f:88:a5:37:1e:01:89:46:22:c2:6a:5a:5b:10:4b:ec: 7e:41:19:50:72:19:f5:4a:5d:28:52:f9:0f:b3:6d:fe:26:96: be:7c:af:e2:7d:21:5f:c1:6c:48:5e:97:96:48:7a:ee:b2:2d: ef:d6:fa:1f:21:45:16:f4:5d:fe:20:e2:13:b5:e3:09:cc:68: 6d:1a:44:22:87:d2:da:cc:00:5f:2a:2f:5f:9d:92:b3:ba:44: 62:32:e2:40:a6:fa:6b:02:84:3d:20:08:c0:1f:54:95:7e:b1: c3:1d:11:ab:5b:12:91:63:39:39:80:3b:fe:02:bd:c1:9e:30: 60:c8:ba:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvUk+T9YBjz7ls19D0gjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YWIzYmY4MzYyNjVmMmFhYjhmOTE5YmU4Y2ZiNmViNzQ3 ZTVmNzgwHhcNMjYwMjA5MTYwMTMwWhcNMjYwMjEwMTYwMTMwWjAzMTEwLwYDVQQD Eyg5MjA0MWU4ZWRmNjhjZTlhMTBhYmM1ZTY3ZTUyNTgyZjVmZGE1YjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeCh9CWl4B5aWdmKfgW4mOOQ5UY3 5GXoe7L2ms8ABgqUkcmqLyraddSk3JTM+w0pxdzhwq28ubGMBQeCudhuGA+rp4ha /CNEo1jaatvMv9dpkH4cp0dE6suOtVtBPo7KBQP8sN3v3NL9mYx2rSeIXSm7B993 nbv5U/EKbElf4fft8M+gOfo6KMm6jnok0KZcM6GAFORQpFwxO8K0v0VahPSvAZJf NpJRtBATbgStyZc6RfCssRWwyGcz/ydsAhO60i7SzF3i9zRnMZbqMMQnOa4mYMYE DXrIHhrgJgRhHMCxJEpTsP4RCgUAQxsEA3K1eJCfhRagu6M3cnIDbWykowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIEHo7faM6aEKvF5n5SWC9f2lsrMB8GA1UdIwQY MBaAFEarO/g2Jl8qq4+Rm+jPtut0fl94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMt M2QyODZlODY1MWZjLzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMtM2QyODZlODY1MWZj LzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEzFnEOn gTFyqkXYWFA5Z//DrANZpEYSnPyUz4atL9LSHEFUc9peDDL5JwkBkpCRYt4UC4b2 1yEMIau0Xvp4Bna7mJxI32YmsluQr56JuK5/MwjWDQwZxDbHwp9T9M2XtPHiXKBn dAIqZLNWiGctWKqBMr/e0Et3TyrUI80sPyc/iKU3HgGJRiLCalpbEEvsfkEZUHIZ 9UpdKFL5D7Nt/iaWvnyv4n0hX8FsSF6Xlkh67rIt79b6HyFFFvRd/iDiE7XjCcxo bRpEIofS2swAXyovX52Ss7pEYjLiQKb6awKEPSAIwB9UlX6xwx0Rq1sSkWM5OYA7 /gK9wZ4wYMi64Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:49 2026 by rpki-client