This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json) Hash identifier: WD09tZk1/UtcG0ExeyvapfAF8SPIbr7+QQ9olUeQydY= Subject key identifier: 08:C7:1C:AD:2A:E1:CC:F7:0A:51:CD:AE:88:74:5F:6A:3C:15:26:1E Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Certificate serial: 019C413446DD7D4FF886DAA491B7D58CE441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft Manifest number: 1748 Signing time: Mon 09 Feb 2026 07:01:10 +0000 Manifest this update: Mon 09 Feb 2026 07:01:10 +0000 Manifest next update: Tue 10 Feb 2026 07:01:10 +0000 Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: yhr6HdmFAV8/Jsrk5lljH+QXoCY1Gpy7FpuByxtiBUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:46:dd:7d:4f:f8:86:da:a4:91:b7:d5:8c:e4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212 Validity Not Before: Feb 9 07:01:10 2026 GMT Not After : Feb 10 07:01:10 2026 GMT Subject: CN=08c71cad2ae1ccf70a51cdae88745f6a3c15261e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:1a:72:cf:cd:d1:3d:ab:3e:65:92:38:b6: bb:58:36:67:7d:bc:08:cd:48:82:59:1c:c0:79:83: 6b:66:26:b4:21:36:38:05:66:6c:88:0a:20:2b:ca: ba:5d:61:36:98:d3:8e:71:bf:5e:bc:54:4b:c8:c2: af:f8:98:ed:98:11:6b:8d:32:9b:d0:03:09:35:26: 57:2f:84:cb:04:a0:a6:12:be:24:67:9a:a4:53:93: b6:06:a3:b6:37:db:71:18:eb:9f:ce:4d:5d:9e:9b: 7c:d2:6c:19:dc:cd:d6:57:b0:69:84:39:3a:f3:d4: 13:27:94:72:18:75:a5:86:c3:2e:33:9b:38:72:5c: 23:91:20:70:b7:4f:e6:e2:60:a9:7f:77:00:c7:81: 3b:80:50:11:72:5f:21:33:3f:c3:f5:2e:7a:4f:a9: 5d:f5:17:27:cd:00:42:da:5d:66:f4:bc:a9:d9:5a: 21:ba:cc:d3:bb:66:42:78:df:23:76:40:b6:88:e1: b2:f7:db:e7:22:21:da:ab:c9:89:fe:35:c8:0b:3d: 47:ae:5c:67:31:e1:f3:eb:9d:d6:35:24:18:2e:e9: 52:39:64:17:91:1b:2d:a9:01:2b:3b:7b:c7:2e:93: 4c:18:d1:12:5e:40:0e:ee:37:11:fd:2a:37:e9:c6: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:1C:AD:2A:E1:CC:F7:0A:51:CD:AE:88:74:5F:6A:3C:15:26:1E X509v3 Authority Key Identifier: keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:c5:ac:c1:d2:ef:01:37:2c:fc:13:23:82:2a:4a:c8:51: 93:3f:38:37:24:1b:45:0b:14:03:73:6f:93:86:b7:2f:8e:9e: a9:52:6c:3e:09:dc:9e:af:3a:59:b7:66:b6:09:b6:9e:d0:7b: 37:e4:94:02:49:72:da:9f:92:59:c1:45:4f:7e:15:e5:f3:67: 50:25:9b:a9:c9:36:7d:e4:e6:8b:4a:3c:63:a2:fd:a5:01:2d: c1:85:bf:9e:be:59:c1:85:40:98:64:9a:27:d0:d2:9c:72:5c: 06:7b:ba:98:dc:47:b3:b9:cc:8a:bf:0a:36:22:5c:e5:fc:a5: c9:78:30:3b:be:5e:d7:ba:ed:47:b4:04:75:5f:97:4a:22:ba: cd:2d:33:21:24:7d:5a:84:57:e9:69:b5:c5:81:44:fa:90:75: 30:8e:c4:27:8f:7d:18:d6:6c:37:84:56:05:56:63:c1:43:aa: bb:0e:b6:e5:cc:6b:0f:fe:f7:ff:18:d8:86:ed:f4:99:7e:3e: 83:fd:cb:c6:3b:28:3e:cc:dc:0f:bc:0f:45:26:95:cf:7d:f0: 06:75:82:65:c4:e2:b8:e3:bb:dd:97:8b:5a:88:03:70:6a:f8: d2:89:cd:8c:bd:04:0c:ed:93:7b:2c:d0:41:28:1f:0e:3d:86: 88:5a:9b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNEbdfU/4htqkkbfVjORBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi Y2QyMTIwHhcNMjYwMjA5MDcwMTEwWhcNMjYwMjEwMDcwMTEwWjAzMTEwLwYDVQQD EygwOGM3MWNhZDJhZTFjY2Y3MGE1MWNkYWU4ODc0NWY2YTNjMTUyNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTMacs/N0T2rPmWSOLa7WDZnfbwI zUiCWRzAeYNrZia0ITY4BWZsiAogK8q6XWE2mNOOcb9evFRLyMKv+JjtmBFrjTKb 0AMJNSZXL4TLBKCmEr4kZ5qkU5O2BqO2N9txGOufzk1dnpt80mwZ3M3WV7BphDk6 89QTJ5RyGHWlhsMuM5s4clwjkSBwt0/m4mCpf3cAx4E7gFARcl8hMz/D9S56T6ld 9RcnzQBC2l1m9Lyp2VohuszTu2ZCeN8jdkC2iOGy99vnIiHaq8mJ/jXICz1Hrlxn MeHz653WNSQYLulSOWQXkRstqQErO3vHLpNMGNESXkAO7jcR/So36cYZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjHHK0q4cz3ClHNroh0X2o8FSYeMB8GA1UdIwQY MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFrFrMHS 7wE3LPwTI4IqSshRkz84NyQbRQsUA3Nvk4a3L46eqVJsPgncnq86Wbdmtgm2ntB7 N+SUAkly2p+SWcFFT34V5fNnUCWbqck2feTmi0o8Y6L9pQEtwYW/nr5ZwYVAmGSa J9DSnHJcBnu6mNxHs7nMir8KNiJc5fylyXgwO75e17rtR7QEdV+XSiK6zS0zISR9 WoRX6Wm1xYFE+pB1MI7EJ499GNZsN4RWBVZjwUOquw625cxrD/73/xjYhu30mX4+ g/3LxjsoPszcD7wPRSaVz33wBnWCZcTiuOO73ZeLWogDcGr40onNjL0EDO2TeyzQ QSgfDj2GiFqbzw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:46 2026 by rpki-client