This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json) Hash identifier: v0sNVSfuuisordJ+0d9562VDpzbQ9Yrn2SHc+RDy26M= Subject key identifier: F0:E4:0A:13:A6:85:8F:26:29:96:6C:0D:D9:1B:46:AD:E7:6D:F7:17 Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50 Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250 Certificate serial: 019C4321F730C95FC5CB48A6724762D8E0BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:25 +0000 Manifest this update: Mon 09 Feb 2026 16:00:25 +0000 Manifest next update: Tue 10 Feb 2026 16:00:25 +0000 Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: x4dYIK/6mptH9EOLRGH0PY8DCn5j8IVb5OZQ1vgoH30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f7:30:c9:5f:c5:cb:48:a6:72:47:62:d8:e0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250 Validity Not Before: Feb 9 16:00:25 2026 GMT Not After : Feb 10 16:00:25 2026 GMT Subject: CN=f0e40a13a6858f2629966c0dd91b46ade76df717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:fa:69:87:eb:2d:09:73:c6:8b:e9:9d:36: 20:79:fe:96:c3:f4:4f:2b:48:f3:4c:47:54:b1:28: 61:6e:7a:e1:c6:35:73:e4:1d:d4:06:f9:14:a5:37: 10:5e:03:95:d7:b6:01:fd:13:1e:4f:70:28:13:d4: 70:05:d1:37:37:19:57:84:db:d8:b3:5f:6e:c6:5a: 17:80:e4:c1:dd:be:0d:75:d1:d9:97:04:ee:d1:1d: ec:52:df:9a:93:ea:3f:00:5c:2c:fb:5f:96:ff:82: b1:19:39:20:3f:38:ab:6e:e5:07:41:f0:60:7f:f4: 18:c0:78:4a:3b:af:c0:40:b0:ba:71:3f:bc:a6:ce: ae:9f:bd:c0:c3:7c:f7:28:ce:08:c3:df:f3:b9:45: 25:e3:36:e2:0e:fc:f3:b0:f4:d1:dc:3b:d4:8a:0c: 73:b2:e2:97:fb:06:85:d6:35:9d:2e:f3:fc:66:15: a0:24:a1:31:ec:46:92:08:28:e0:b5:8e:a2:e7:85: 25:fe:bf:a1:dc:57:17:bb:06:03:b0:5b:f6:a8:02: 03:e3:3c:23:74:5c:b5:bf:f0:e8:cf:50:82:d4:a2: f6:ca:a2:c1:75:92:b3:5a:7c:18:e8:8e:28:02:44: 61:a4:06:a0:11:55:2d:e0:ec:2a:a4:ae:05:7e:e9: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E4:0A:13:A6:85:8F:26:29:96:6C:0D:D9:1B:46:AD:E7:6D:F7:17 X509v3 Authority Key Identifier: keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:83:9b:0a:6a:3f:97:ab:2b:ee:2c:fa:32:00:a3:c7:86:7c: 65:73:1e:cd:42:0e:26:6d:96:d0:e1:29:7e:09:df:d9:82:a2: 9e:df:3f:83:1a:0e:07:ef:06:2d:de:71:9e:27:5c:5f:ea:3b: 5b:73:99:3d:a9:6d:41:e0:95:47:6a:f7:02:34:ae:75:23:61: fe:c7:09:16:31:91:73:18:cb:bb:3d:f9:b9:da:bc:ad:dc:6d: cb:6e:94:2d:cb:25:39:d0:bd:9d:96:06:ff:f8:07:d3:ae:77: 1f:0a:30:08:18:28:bc:7e:ab:ec:8b:a7:3f:77:2c:3c:ac:8c: 9c:e7:35:24:94:02:bf:94:70:a9:99:2a:0f:55:6a:56:f2:7f: b5:13:db:91:c2:c1:15:12:e6:59:0b:96:79:ef:26:88:ba:e5: c5:b2:8b:c2:02:6c:3e:3e:54:6e:78:95:8e:e4:ea:ab:d9:1a: ad:c0:5d:45:ff:c6:29:69:46:9d:f6:15:8c:8b:e5:a8:03:56: 4a:0b:eb:0e:d1:62:bb:88:31:7d:e7:ed:07:83:33:6a:d1:02: 59:ff:bb:5a:00:6c:77:98:49:7d:8a:21:cc:b5:2e:dd:10:5b: 4f:f0:04:18:ef:ab:90:9e:4d:1d:cc:1a:d1:9d:4b:f7:00:24: 95:a9:a6:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfcwyV/Fy0imckdi2OC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxN2VkNDFmMGFkZmRmMTlhNzE2MTRlMzkwNGMwZjA4NDk5 NzkyNTAwHhcNMjYwMjA5MTYwMDI1WhcNMjYwMjEwMTYwMDI1WjAzMTEwLwYDVQQD EyhmMGU0MGExM2E2ODU4ZjI2Mjk5NjZjMGRkOTFiNDZhZGU3NmRmNzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngf6aYfrLQlzxovpnTYgef6Ww/RP K0jzTEdUsShhbnrhxjVz5B3UBvkUpTcQXgOV17YB/RMeT3AoE9RwBdE3NxlXhNvY s19uxloXgOTB3b4NddHZlwTu0R3sUt+ak+o/AFws+1+W/4KxGTkgPzirbuUHQfBg f/QYwHhKO6/AQLC6cT+8ps6un73Aw3z3KM4Iw9/zuUUl4zbiDvzzsPTR3DvUigxz suKX+waF1jWdLvP8ZhWgJKEx7EaSCCjgtY6i54Ul/r+h3FcXuwYDsFv2qAID4zwj dFy1v/Doz1CC1KL2yqLBdZKzWnwY6I4oAkRhpAagEVUt4OwqpK4FfumEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDkChOmhY8mKZZsDdkbRq3nbfcXMB8GA1UdIwQY MBaAFEF+1B8K398ZpxYU45BMDwhJl5JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEt NmVhODkxZThjZmM3LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEtNmVhODkxZThjZmM3 LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4ObCmo/ l6sr7iz6MgCjx4Z8ZXMezUIOJm2W0OEpfgnf2YKint8/gxoOB+8GLd5xnidcX+o7 W3OZPaltQeCVR2r3AjSudSNh/scJFjGRcxjLuz35udq8rdxty26ULcslOdC9nZYG //gH0653HwowCBgovH6r7IunP3csPKyMnOc1JJQCv5RwqZkqD1VqVvJ/tRPbkcLB FRLmWQuWee8miLrlxbKLwgJsPj5UbniVjuTqq9karcBdRf/GKWlGnfYVjIvlqANW SgvrDtFiu4gxfeftB4MzatECWf+7WgBsd5hJfYohzLUu3RBbT/AEGO+rkJ5NHcwa 0Z1L9wAklammww== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:55 2026 by rpki-client