This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json) Hash identifier: ikCL+lrHCk2bOe7JxBupKM0HnFxQuNx1EEFqXKCRUUU= Subject key identifier: 99:CE:76:A5:C3:DC:DA:6C:A2:12:1A:CB:C6:EE:27:C9:AD:75:E5:3C Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019C41D8AEFDF40670D8EBB7520054D192CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 10:00:45 +0000 Manifest this update: Mon 09 Feb 2026 10:00:45 +0000 Manifest next update: Tue 10 Feb 2026 10:00:45 +0000 Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=) 2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=) 3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: Q8sDDZfFKsFRnTMZ2aZTPAlnrnUjDFEXBEoiaGn7tug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ae:fd:f4:06:70:d8:eb:b7:52:00:54:d1:92:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Feb 9 10:00:45 2026 GMT Not After : Feb 10 10:00:45 2026 GMT Subject: CN=99ce76a5c3dcda6ca2121acbc6ee27c9ad75e53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:b6:32:48:ae:e6:10:67:ce:a4:1f:c6:7f: 92:12:39:92:52:85:b5:ed:90:94:5e:c8:cc:cc:c3: f2:45:7d:14:60:5e:53:26:0b:75:32:c3:2a:71:c6: 2d:7b:ad:3f:e5:b8:62:6c:8c:8e:73:22:a1:39:c7: ac:aa:4a:94:fe:32:37:42:f4:f7:d1:62:78:e5:87: d7:4e:4c:ba:52:ea:ef:71:23:0c:b4:ce:e3:15:64: 88:73:91:81:5d:cc:84:60:79:82:a6:d1:81:4a:54: 01:5e:d2:f5:0a:1c:1c:93:bb:ae:93:60:6f:73:f0: 41:47:91:1f:bc:8a:4f:f8:e6:63:34:2c:9e:3f:5c: 5b:5b:ab:8a:b4:c7:2e:12:33:97:9a:9c:0a:bd:0e: d0:ff:f9:bb:d0:26:11:d3:d7:d6:90:47:91:b1:43: 23:8d:e3:e6:c6:50:a3:4f:70:57:d4:c9:d1:a0:48: dc:e5:6a:36:17:ff:3b:fc:64:b0:33:42:42:03:e4: c1:85:c1:67:8d:f2:81:0a:69:41:a8:d2:ab:f6:c6: b1:fe:59:a2:35:c7:9d:5b:0c:b4:19:90:a9:02:76: 26:35:9d:9b:fa:72:49:4f:95:47:33:b4:84:54:63: a8:68:c5:60:6c:fa:06:7a:7c:f4:90:c6:d5:e6:18: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CE:76:A5:C3:DC:DA:6C:A2:12:1A:CB:C6:EE:27:C9:AD:75:E5:3C X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:43:ae:89:cd:67:94:39:05:ac:47:99:7d:18:7a:b8:2e:a1: b4:68:1a:7f:c1:fc:52:e4:88:2c:13:db:2d:60:ba:b4:0e:53: e5:e2:2d:11:b8:b4:da:ef:8c:0a:67:6b:fc:5c:35:7c:91:0a: 99:26:ae:ae:53:22:ff:d8:82:76:49:34:68:2a:f2:05:28:15: b0:85:e7:b1:ac:62:dc:f0:26:e2:e0:7d:0b:87:6c:5f:a2:ed: eb:8a:1e:62:ad:c3:7d:6d:b5:c4:51:aa:a6:d8:ce:1b:ee:53: eb:cc:00:67:9d:86:da:e9:b1:f8:e3:e6:9b:29:c6:0b:6c:9a: 35:1f:55:f7:ba:59:9f:a4:3d:dc:31:e8:4b:90:24:3f:c5:9d: 75:b8:1b:03:8a:6e:e4:bb:8a:84:91:e9:6f:3c:cf:35:41:55: 92:ad:23:61:85:95:50:9f:7b:2d:4a:4f:81:df:f0:b3:a8:f1: ff:e4:9d:c1:57:25:44:23:ab:67:eb:89:a5:d2:60:fb:5b:ec: be:da:03:a5:e2:e8:41:82:a9:94:d8:45:66:33:6f:b9:27:d0: 6b:e8:14:69:bb:5d:46:4a:55:ac:fd:e0:95:fe:6a:86:27:41: 4d:e5:3e:42:18:bf:48:9b:79:08:1e:82:c5:e6:88:da:48:96: 3e:d7:b3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2K799AZw2Ou3UgBU0ZLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjYwMjA5MTAwMDQ1WhcNMjYwMjEwMTAwMDQ1WjAzMTEwLwYDVQQD Eyg5OWNlNzZhNWMzZGNkYTZjYTIxMjFhY2JjNmVlMjdjOWFkNzVlNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLS2Mkiu5hBnzqQfxn+SEjmSUoW1 7ZCUXsjMzMPyRX0UYF5TJgt1MsMqccYte60/5bhibIyOcyKhOcesqkqU/jI3QvT3 0WJ45YfXTky6UurvcSMMtM7jFWSIc5GBXcyEYHmCptGBSlQBXtL1Chwck7uuk2Bv c/BBR5EfvIpP+OZjNCyeP1xbW6uKtMcuEjOXmpwKvQ7Q//m70CYR09fWkEeRsUMj jePmxlCjT3BX1MnRoEjc5Wo2F/87/GSwM0JCA+TBhcFnjfKBCmlBqNKr9sax/lmi NcedWwy0GZCpAnYmNZ2b+nJJT5VHM7SEVGOoaMVgbPoGenz0kMbV5hi/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnOdqXD3NpsohIay8buJ8mtdeU8MB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0Ouic1n lDkFrEeZfRh6uC6htGgaf8H8UuSILBPbLWC6tA5T5eItEbi02u+MCmdr/Fw1fJEK mSaurlMi/9iCdkk0aCryBSgVsIXnsaxi3PAm4uB9C4dsX6Lt64oeYq3DfW21xFGq ptjOG+5T68wAZ52G2umx+OPmmynGC2yaNR9V97pZn6Q93DHoS5AkP8WddbgbA4pu 5LuKhJHpbzzPNUFVkq0jYYWVUJ97LUpPgd/ws6jx/+SdwVclRCOrZ+uJpdJg+1vs vtoDpeLoQYKplNhFZjNvuSfQa+gUabtdRkpVrP3glf5qhidBTeU+Qhi/SJt5CB6C xeaI2kiWPtezlA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:17 2026 by rpki-client