This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json) Hash identifier: BswLTOZTa4fd7Yey32ti1jqbzhFa/QOk+oDDZ0iWqKU= Subject key identifier: DE:F1:28:93:57:5A:C3:65:90:17:13:D3:CB:EC:5B:7B:A3:C4:32:70 Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf Certificate serial: 019C4246C6C3E9FB510C332F5E669974BD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft Manifest number: 0A61 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: WXDefoGzoUIZ3AxVVx77aC_MDc4.roa (hash: 0/oY/YwsoelOzPNcClAu/TuufBye/1HGrabd5S28VWg=) 2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: AIvI3V7Vngr2PzdgdPCbLJlar50Zl2kpWLCvXnxKVjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c6:c3:e9:fb:51:0c:33:2f:5e:66:99:74:bd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=def12893575ac365901713d3cbec5b7ba3c43270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:92:95:ea:39:db:92:a7:2f:5f:c0:19:93: 0c:4e:6e:2a:ff:4c:5a:ac:b2:f3:b3:0a:aa:df:13: 90:e8:71:fe:b4:35:bc:6e:69:48:4b:a4:c8:a7:44: 5d:3e:ad:59:82:31:17:16:d9:87:c1:b6:42:f3:79: 72:12:a7:7f:4d:6d:a0:26:54:65:ef:21:10:8f:44: cd:06:7f:bf:81:11:09:53:f8:1f:7e:d8:b7:2d:7f: 8d:ad:81:8c:1a:16:96:11:64:8d:07:64:07:d1:30: cb:ea:02:33:c2:0a:07:ac:f8:c6:e9:08:85:65:84: fb:33:1b:02:3b:9b:ae:41:1d:ae:03:a4:49:d5:b8: 08:be:38:32:a6:fb:02:9b:df:51:32:2a:6e:bd:5b: 29:6d:e5:10:50:0a:ee:f0:56:ed:6a:a6:54:7c:60: 01:2a:50:ef:16:99:f4:60:d1:4b:f6:f2:76:ed:7e: da:0f:55:4e:ff:22:37:a6:d3:b4:88:64:e6:96:5f: 0c:b3:37:b6:41:55:2c:b5:bb:1a:06:f2:1f:29:12: 48:63:ec:a2:25:88:b8:7d:77:f9:0d:d1:72:0f:2b: e4:a4:57:db:ff:9d:d3:77:29:5e:86:19:d3:dd:20: 89:6f:64:bf:81:6b:46:56:5d:86:9b:c1:4f:45:3d: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F1:28:93:57:5A:C3:65:90:17:13:D3:CB:EC:5B:7B:A3:C4:32:70 X509v3 Authority Key Identifier: keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e9:10:c3:be:d4:f9:57:58:ac:df:c6:79:fa:ca:aa:4a:54: ca:ff:9a:d5:b7:35:74:b8:95:81:f9:ff:b7:53:9f:aa:ef:11: 10:bc:dc:1f:56:ac:1c:3e:4b:da:03:54:c0:8a:43:8d:b6:22: 69:30:39:f0:74:76:36:b5:9b:2e:05:f7:0c:23:23:ca:8e:20: 90:00:c3:f0:26:4f:65:86:72:aa:ea:15:2f:57:fc:07:73:0e: e8:f2:f1:33:ec:1e:73:47:f2:99:8c:83:d1:77:97:69:87:2f: 02:a0:11:46:29:cf:8a:32:23:98:28:6e:d6:11:99:b0:e4:b6: 93:3a:3e:48:f9:54:64:01:24:86:f6:26:20:49:7a:0a:c2:9a: da:a0:0c:22:f9:8c:f1:e3:56:fb:5e:00:8e:45:63:54:72:1d: b0:37:42:69:3a:d3:7c:20:7b:1a:09:f4:2d:22:8a:b6:1d:0d: 91:45:73:42:f9:9b:0d:1d:3a:78:e7:63:70:c3:76:69:64:6d: 4b:26:8c:fa:b0:d6:e4:a6:10:79:64:17:dc:0b:64:eb:e3:72: e1:f1:8f:83:7a:a5:e4:e0:c6:aa:3e:ad:3a:76:aa:ed:c4:f9: c2:5c:ad:3f:e0:28:ca:f6:65:2a:05:0e:19:ca:73:05:97:b1: 05:5e:8a:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsbD6ftRDDMvXmaZdL0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzIyM2ZiMTk0MjExNWU0OGE5NzU0MjA3MjkyZDAwYTA4 MmVjZGYwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD EyhkZWYxMjg5MzU3NWFjMzY1OTAxNzEzZDNjYmVjNWI3YmEzYzQzMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV6Sleo525KnL1/AGZMMTm4q/0xa rLLzswqq3xOQ6HH+tDW8bmlIS6TIp0RdPq1ZgjEXFtmHwbZC83lyEqd/TW2gJlRl 7yEQj0TNBn+/gREJU/gffti3LX+NrYGMGhaWEWSNB2QH0TDL6gIzwgoHrPjG6QiF ZYT7MxsCO5uuQR2uA6RJ1bgIvjgypvsCm99RMipuvVspbeUQUAru8FbtaqZUfGAB KlDvFpn0YNFL9vJ27X7aD1VO/yI3ptO0iGTmll8Msze2QVUstbsaBvIfKRJIY+yi JYi4fXf5DdFyDyvkpFfb/53TdylehhnT3SCJb2S/gWtGVl2Gm8FPRT3rdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7xKJNXWsNlkBcT08vsW3ujxDJwMB8GA1UdIwQY MBaAFKrCI/sZQhFeSKl1QgcpLQCgguzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEt MWRhYTk1MWM3MWI3LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEtMWRhYTk1MWM3MWI3 LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOkQw77U +VdYrN/GefrKqkpUyv+a1bc1dLiVgfn/t1Ofqu8RELzcH1asHD5L2gNUwIpDjbYi aTA58HR2NrWbLgX3DCMjyo4gkADD8CZPZYZyquoVL1f8B3MO6PLxM+wec0fymYyD 0XeXaYcvAqARRinPijIjmChu1hGZsOS2kzo+SPlUZAEkhvYmIEl6CsKa2qAMIvmM 8eNW+14AjkVjVHIdsDdCaTrTfCB7Ggn0LSKKth0NkUVzQvmbDR06eOdjcMN2aWRt SyaM+rDW5KYQeWQX3Atk6+Ny4fGPg3ql5ODGqj6tOnaq7cT5wlytP+AoyvZlKgUO GcpzBZexBV6Kzg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:23 2026 by rpki-client