This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json) Hash identifier: ngyTY9l/psPqauF4JrCztaoW1nlxDyJefQNZz0715dU= Subject key identifier: 16:9F:C6:6F:7A:37:6E:FB:20:5F:EB:DC:17:A4:A0:20:BE:A0:F1:EC Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Certificate serial: 019C439047B8261C06783C87F9C9E9C06688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft Manifest number: 0BF9 Signing time: Mon 09 Feb 2026 18:00:54 +0000 Manifest this update: Mon 09 Feb 2026 18:00:54 +0000 Manifest next update: Tue 10 Feb 2026 18:00:54 +0000 Files and hashes: 1: J5ZOlJUFOltu4GqoVFNsLAc_Yhc.roa (hash: lcx5+pKS3s5wMnsyT5k7DP3iJe+El0QomD11K0ox374=) 2: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: PXIvhnsEjQKnMU9fEYFPfqDlGwzRtOcw+QPtcvqh+RY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:47:b8:26:1c:06:78:3c:87:f9:c9:e9:c0:66:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743 Validity Not Before: Feb 9 18:00:54 2026 GMT Not After : Feb 10 18:00:54 2026 GMT Subject: CN=169fc66f7a376efb205febdc17a4a020bea0f1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:76:c2:3c:4b:3b:e2:8e:56:dd:aa:d4:97: 62:02:f4:e8:94:56:44:57:25:89:e0:bf:29:05:c6: 89:87:45:27:1a:06:53:4f:77:8b:9b:4a:f9:3b:a9: aa:4a:52:00:0d:6d:77:37:4b:62:aa:09:e5:d6:78: c1:b7:8b:0e:07:91:65:84:24:28:94:ad:3c:a2:d2: 9b:ac:af:b3:57:70:48:47:d7:25:f9:c7:52:de:5f: 62:4b:08:fc:49:b7:48:2f:35:df:cf:49:11:b8:ff: 13:24:53:65:e6:0a:a9:3f:50:3e:da:51:4d:9e:67: eb:8f:9b:df:65:4b:0f:6c:6e:81:85:c1:01:19:c9: 5b:0a:78:62:55:87:92:7e:a9:a3:d0:a1:6e:16:01: b9:42:44:dc:b5:bc:8b:bf:0d:3a:32:23:a3:fa:a9: c2:25:04:f7:81:27:64:c9:03:cd:b9:88:5e:88:28: 6f:9c:5f:46:1d:84:8b:ae:c1:f4:57:b7:d9:8b:4c: 02:83:a1:ac:69:ef:7e:02:72:63:bf:90:12:77:a8: 27:fd:1d:2b:24:97:61:41:69:e3:48:3d:db:8a:8a: 85:57:c6:d6:f5:67:95:87:dd:9c:8b:2c:f3:82:27: 88:cd:0b:bf:92:cf:be:06:bb:21:c1:71:35:20:c5: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9F:C6:6F:7A:37:6E:FB:20:5F:EB:DC:17:A4:A0:20:BE:A0:F1:EC X509v3 Authority Key Identifier: keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:57:a8:16:3b:79:18:99:3f:54:68:61:2a:e1:56:65:14:90: 9d:06:ef:eb:9c:6e:68:e1:87:d5:04:f7:3f:cf:8b:04:7a:cb: 55:66:20:41:10:3c:a1:23:7d:5b:ef:23:f5:f4:4d:04:ce:b6: 00:e0:4e:3e:96:48:1d:54:1e:c9:37:df:08:99:06:6c:56:2e: 84:29:ea:3d:68:6c:0c:f9:cb:a0:f6:3a:c3:2b:cb:d5:db:3e: 6d:f6:a7:de:12:51:ec:01:be:fd:d4:d3:5e:43:25:6e:ab:47: 15:13:55:25:71:46:55:65:49:b1:46:83:00:8c:24:a1:ae:6e: 56:4c:c4:e7:18:b6:02:c1:b5:10:42:65:09:be:6c:7a:da:b9: 66:f0:b3:c2:47:a3:cf:d5:c3:d4:2e:55:a1:07:ec:f2:13:4b: 10:f6:5a:3a:24:86:1d:88:60:6c:cb:9f:3d:3c:f2:e9:11:d2: a1:9e:9a:85:8d:8c:59:f2:b8:c5:f8:1b:23:ed:25:1b:e0:08: 66:ff:d9:47:01:1b:df:c4:64:e7:b0:e7:75:18:a5:41:52:c2: b7:78:49:18:ec:fe:bf:e9:3f:2e:6e:04:8f:fa:46:b2:6f:49: d9:32:6c:a4:2e:39:81:db:cb:b4:4f:b2:27:64:61:e9:19:1f: 1c:0b:cd:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEe4JhwGeDyH+cnpwGaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl YTQ3NDMwHhcNMjYwMjA5MTgwMDU0WhcNMjYwMjEwMTgwMDU0WjAzMTEwLwYDVQQD EygxNjlmYzY2ZjdhMzc2ZWZiMjA1ZmViZGMxN2E0YTAyMGJlYTBmMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Eh2wjxLO+KOVt2q1JdiAvTolFZE VyWJ4L8pBcaJh0UnGgZTT3eLm0r5O6mqSlIADW13N0tiqgnl1njBt4sOB5FlhCQo lK08otKbrK+zV3BIR9cl+cdS3l9iSwj8SbdILzXfz0kRuP8TJFNl5gqpP1A+2lFN nmfrj5vfZUsPbG6BhcEBGclbCnhiVYeSfqmj0KFuFgG5QkTctbyLvw06MiOj+qnC JQT3gSdkyQPNuYheiChvnF9GHYSLrsH0V7fZi0wCg6Gsae9+AnJjv5ASd6gn/R0r JJdhQWnjSD3bioqFV8bW9WeVh92ciyzzgieIzQu/ks++BrshwXE1IMVyUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBafxm96N277IF/r3BekoCC+oPHsMB8GA1UdIwQY MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4 LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFeoFjt5 GJk/VGhhKuFWZRSQnQbv65xuaOGH1QT3P8+LBHrLVWYgQRA8oSN9W+8j9fRNBM62 AOBOPpZIHVQeyTffCJkGbFYuhCnqPWhsDPnLoPY6wyvL1ds+bfan3hJR7AG+/dTT XkMlbqtHFRNVJXFGVWVJsUaDAIwkoa5uVkzE5xi2AsG1EEJlCb5setq5ZvCzwkej z9XD1C5VoQfs8hNLEPZaOiSGHYhgbMufPTzy6RHSoZ6ahY2MWfK4xfgbI+0lG+AI Zv/ZRwEb38Rk57DndRilQVLCt3hJGOz+v+k/Lm4Ej/pGsm9J2TJspC45gdvLtE+y J2Rh6RkfHAvNeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:01 2026 by rpki-client