This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json) Hash identifier: zJFX45UilfQw3fz0Ih4GReKDz/b9yHfDS3dGtx4VQb8= Subject key identifier: 94:C4:96:43:81:17:A8:CB:25:8E:03:21:6E:E7:A7:01:F9:21:4F:74 Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193 Certificate serial: 019C41D8A1265F035B59A5A895A84CDDB9FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft Manifest number: 0880 Signing time: Mon 09 Feb 2026 10:00:41 +0000 Manifest this update: Mon 09 Feb 2026 10:00:41 +0000 Manifest next update: Tue 10 Feb 2026 10:00:41 +0000 Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: lJgLsW0JLvoaJFAT/NwnoCaq3EJWXa5RzyF0wRjtmMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a1:26:5f:03:5b:59:a5:a8:95:a8:4c:dd:b9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193 Validity Not Before: Feb 9 10:00:41 2026 GMT Not After : Feb 10 10:00:41 2026 GMT Subject: CN=94c496438117a8cb258e03216ee7a701f9214f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3a:96:0a:e4:c6:55:9f:06:3a:e7:34:24:d7: 75:b6:1e:fe:f7:39:2c:29:79:51:ef:d1:74:e4:73: 35:14:93:40:98:a0:00:9a:6a:39:28:fc:0c:33:81: 95:69:54:cc:99:04:a1:db:e4:24:dd:f8:53:42:5e: b2:5b:b5:30:35:9c:02:85:e1:19:55:e6:0c:02:54: 68:3c:bd:ef:f9:c8:98:aa:37:4a:42:8a:0c:7a:c6: ea:45:01:ca:42:dc:d9:17:af:70:8b:a2:5d:1f:61: 43:8f:0d:4b:5a:00:8a:1f:20:62:db:ba:00:f6:97: ef:0d:3a:30:da:a6:e4:48:a1:cd:9c:45:8a:46:8f: 0d:e2:8a:8a:e6:38:b2:20:ea:6b:e3:1f:a4:90:74: 7e:ae:a3:de:f8:23:aa:73:27:8e:d6:93:f0:4f:2d: 34:0b:d6:5a:3a:b9:a1:5c:27:4d:fa:ae:81:14:32: 25:02:be:69:5b:83:9f:25:36:0e:85:86:40:78:a6: ae:5c:c0:04:e9:7f:55:19:b7:df:14:ba:85:04:69: a2:1f:b6:6e:d9:01:95:1d:9c:f1:66:49:1e:cc:dd: f5:66:c4:dd:f6:c7:48:62:98:dd:99:28:d0:2c:ff: 27:08:f9:d8:2c:d0:b1:3c:36:70:19:ca:01:16:b2: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:96:43:81:17:A8:CB:25:8E:03:21:6E:E7:A7:01:F9:21:4F:74 X509v3 Authority Key Identifier: keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:de:44:87:18:f7:c3:c8:3f:4d:54:38:57:80:13:b5:87:99: 41:49:a3:c0:98:23:ce:98:e3:f8:51:3c:67:b8:a2:2c:83:5b: 05:83:4e:bb:7d:3b:84:1b:c5:07:b3:22:b2:54:b7:5f:84:d3: 25:4f:30:1a:fd:26:7e:a7:94:dc:ac:00:15:08:c7:f9:09:0e: 19:4d:38:0b:15:44:68:f5:0c:e3:ff:b4:37:e0:f4:13:c2:93: 8c:0d:59:ed:30:d9:78:d9:d0:2e:10:22:f8:77:1d:07:50:e1: 43:73:51:a8:45:1a:b8:84:f5:86:88:42:c0:ef:a6:47:6e:bd: 5a:67:3c:4d:e4:59:e1:fb:bd:b2:eb:f8:4a:88:c1:6f:c5:86: d0:d1:fe:3d:c3:c3:e3:30:3a:b2:1c:b5:33:c9:ba:91:d0:30: 2a:09:a2:0a:57:30:c7:ec:8d:a1:37:15:fb:fe:a6:14:64:09: 52:53:0d:de:e7:4a:93:7e:2b:f7:67:56:00:1b:b4:57:bb:de: 7c:0e:bb:76:e0:6e:ef:c1:17:f4:60:3e:20:b5:57:83:42:e9: e2:c4:8e:34:51:c5:b5:e6:d0:78:b1:ec:a4:d3:f5:bc:58:4b: e8:67:ef:fc:b3:cb:fb:29:e8:9b:0c:66:fa:0a:22:e6:2f:30: 25:09:3a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KEmXwNbWaWolahM3bn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5 YWIxOTMwHhcNMjYwMjA5MTAwMDQxWhcNMjYwMjEwMTAwMDQxWjAzMTEwLwYDVQQD Eyg5NGM0OTY0MzgxMTdhOGNiMjU4ZTAzMjE2ZWU3YTcwMWY5MjE0Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zqWCuTGVZ8GOuc0JNd1th7+9zks KXlR79F05HM1FJNAmKAAmmo5KPwMM4GVaVTMmQSh2+Qk3fhTQl6yW7UwNZwCheEZ VeYMAlRoPL3v+ciYqjdKQooMesbqRQHKQtzZF69wi6JdH2FDjw1LWgCKHyBi27oA 9pfvDTow2qbkSKHNnEWKRo8N4oqK5jiyIOpr4x+kkHR+rqPe+COqcyeO1pPwTy00 C9ZaOrmhXCdN+q6BFDIlAr5pW4OfJTYOhYZAeKauXMAE6X9VGbffFLqFBGmiH7Zu 2QGVHZzxZkkezN31ZsTd9sdIYpjdmSjQLP8nCPnYLNCxPDZwGcoBFrJAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTElkOBF6jLJY4DIW7npwH5IU90MB8GA1UdIwQY MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq95Ehxj3 w8g/TVQ4V4ATtYeZQUmjwJgjzpjj+FE8Z7iiLINbBYNOu307hBvFB7MislS3X4TT JU8wGv0mfqeU3KwAFQjH+QkOGU04CxVEaPUM4/+0N+D0E8KTjA1Z7TDZeNnQLhAi +HcdB1DhQ3NRqEUauIT1hohCwO+mR269Wmc8TeRZ4fu9suv4SojBb8WG0NH+PcPD 4zA6shy1M8m6kdAwKgmiClcwx+yNoTcV+/6mFGQJUlMN3udKk34r92dWABu0V7ve fA67duBu78EX9GA+ILVXg0Lp4sSONFHFtebQeLHspNP1vFhL6Gfv/LPL+ynomwxm +goi5i8wJQk6wg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:38 2026 by rpki-client