This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json) Hash identifier: irRM04UO0kSItGyKZJzcDKZminyyEgxcoqq4jbUZP+0= Subject key identifier: AD:70:E4:8C:0C:B6:91:2D:BE:2F:FD:25:0D:EF:C1:37:1A:40:58:F3 Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Certificate serial: 019C43591148533370391D890887039647CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: DEtrf8DnDvuzKfrrUo7nyTMJQZY.roa (hash: MIbxcgDVh37d8jCKphqH6GC0fLWYYb1ZT8Y0ieKO3pc=) 2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: x1b2CzHB+0+Vnmk/kR1jcbQSqlGlNLqg13z+yIi2omQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:11:48:53:33:70:39:1d:89:08:87:03:96:47:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=ad70e48c0cb6912dbe2ffd250defc1371a4058f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:01:1c:ce:2d:55:f8:c4:4f:b0:68:dc:ba: 4d:6a:ab:95:23:b1:1d:59:64:bf:92:a8:b4:4d:d3: 6c:9b:b2:cc:23:2b:ec:57:ac:09:df:3c:10:95:21: ce:4f:04:75:07:3e:e8:88:cf:fa:30:46:0d:fb:b4: fd:60:25:14:b4:a9:70:28:23:83:5e:d7:d3:f5:2e: 9b:4e:12:74:87:06:e5:3f:8c:7f:05:50:5b:cf:ab: cd:ad:a4:a6:35:32:e6:9e:92:e4:b4:fc:ab:87:8d: c5:a6:8b:7e:d0:fe:80:7b:10:19:c8:e9:d7:57:98: 83:c7:f3:bf:17:1c:1a:7a:1a:06:34:f7:57:c2:be: a2:d0:7b:b2:84:a9:b9:5b:15:ca:99:0f:f1:07:37: ad:3e:df:85:7d:05:6d:06:c2:73:d0:0b:73:d6:80: 06:dc:79:14:09:2a:28:13:0c:ec:09:44:ae:df:02: 2a:79:00:7a:e6:76:3c:a6:bb:da:9f:0e:98:3f:ff: 14:05:54:54:cb:ba:db:41:9f:42:3b:29:e9:46:44: df:1e:7e:f2:55:0c:64:f5:ba:a4:e2:ce:56:d6:ab: 3f:5c:a3:58:91:93:21:fe:8b:ba:b7:10:1e:32:d6: 86:85:43:0d:93:23:f4:bc:29:c0:b2:e2:8c:f8:15: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:E4:8C:0C:B6:91:2D:BE:2F:FD:25:0D:EF:C1:37:1A:40:58:F3 X509v3 Authority Key Identifier: keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:12:b6:e2:62:3b:58:61:06:1b:5a:50:8b:95:bd:e6:30: 1e:30:de:2a:08:ce:1e:83:31:54:70:cc:cc:4a:84:74:73:2c: c2:cf:91:ff:81:8d:4b:3a:48:37:f5:69:00:c6:3c:7a:a1:95: 8a:9e:5b:09:45:db:52:c2:0b:c6:d3:6c:03:51:ae:74:65:1d: a6:57:99:a1:89:c8:d0:88:15:70:e8:42:96:e5:79:ef:3a:ec: fa:98:e0:a3:d9:2e:d2:c1:2c:38:fc:8f:a5:ef:69:20:a6:5f: 26:fb:8b:69:fd:7d:76:bf:e3:61:2a:4a:38:61:16:49:f4:5d: b7:7a:8e:49:e7:ab:83:0e:32:67:b9:15:b7:07:b8:0a:97:a2: 1f:74:60:b2:f2:77:02:c2:ca:1f:bb:f4:be:a7:ed:9f:04:f7: 3a:f8:01:21:2a:52:4c:fe:1b:6a:65:9f:ab:3d:60:a0:be:ef: da:8a:b2:00:b5:8c:74:c3:1c:e3:c8:2e:fe:8e:60:95:f1:3e: 20:2a:12:24:e7:17:1b:f4:1b:9f:5c:7d:0b:b2:2b:2a:3b:f7: c7:a8:3a:b6:7b:35:4f:18:45:8d:b5:86:a7:0e:15:ff:05:2c: 35:99:3b:2f:6d:c0:ad:00:af:70:65:a5:d1:68:27:28:e1:ad: 7f:a3:51:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRFIUzNwOR2JCIcDlkfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0 M2Q3YmEwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD EyhhZDcwZTQ4YzBjYjY5MTJkYmUyZmZkMjUwZGVmYzEzNzFhNDA1OGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ABHM4tVfjET7Bo3LpNaquVI7Ed WWS/kqi0TdNsm7LMIyvsV6wJ3zwQlSHOTwR1Bz7oiM/6MEYN+7T9YCUUtKlwKCOD XtfT9S6bThJ0hwblP4x/BVBbz6vNraSmNTLmnpLktPyrh43Fpot+0P6AexAZyOnX V5iDx/O/FxwaehoGNPdXwr6i0HuyhKm5WxXKmQ/xBzetPt+FfQVtBsJz0Atz1oAG 3HkUCSooEwzsCUSu3wIqeQB65nY8prvanw6YP/8UBVRUy7rbQZ9COynpRkTfHn7y VQxk9bqk4s5W1qs/XKNYkZMh/ou6txAeMtaGhUMNkyP0vCnAsuKM+BWMiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1w5IwMtpEtvi/9JQ3vwTcaQFjzMB8GA1UdIwQY MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1 LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVsStuJi O1hhBhtaUIuVveYwHjDeKgjOHoMxVHDMzEqEdHMsws+R/4GNSzpIN/VpAMY8eqGV ip5bCUXbUsILxtNsA1GudGUdpleZoYnI0IgVcOhCluV57zrs+pjgo9ku0sEsOPyP pe9pIKZfJvuLaf19dr/jYSpKOGEWSfRdt3qOSeergw4yZ7kVtwe4CpeiH3RgsvJ3 AsLKH7v0vqftnwT3OvgBISpSTP4bamWfqz1goL7v2oqyALWMdMMc48gu/o5glfE+ ICoSJOcXG/Qbn1x9C7IrKjv3x6g6tns1TxhFjbWGpw4V/wUsNZk7L23ArQCvcGWl 0WgnKOGtf6NRwQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:57 2026 by rpki-client