This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json) Hash identifier: 14qNr/1BdWpaiNPzuw3n7Gw2WnI89XpI/KGixjOtm2s= Subject key identifier: A5:17:01:13:29:59:8D:CC:78:7F:79:C2:22:F2:D4:BB:42:8E:86:B1 Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b Certificate serial: 019C43C6E5EFFC1314D38CCFCCFAA6E5BE4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft Manifest number: 069F Signing time: Mon 09 Feb 2026 19:00:34 +0000 Manifest this update: Mon 09 Feb 2026 19:00:34 +0000 Manifest next update: Tue 10 Feb 2026 19:00:34 +0000 Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: PbMKfBdS6XhUJubQ01k56cAVtz1HnOHOpP71yqSuq9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:e5:ef:fc:13:14:d3:8c:cf:cc:fa:a6:e5:be:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b Validity Not Before: Feb 9 19:00:34 2026 GMT Not After : Feb 10 19:00:34 2026 GMT Subject: CN=a517011329598dcc787f79c222f2d4bb428e86b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:4d:15:24:d2:de:ec:10:8b:cc:a9:ef:7d: 2f:75:6d:0c:95:65:75:43:c0:73:08:3a:0d:a3:bb: 38:bf:62:10:ea:4a:3a:be:f2:86:39:43:b0:37:31: cc:7a:63:6c:35:2f:d6:47:9f:91:9e:cf:4b:c9:8f: cf:a1:02:26:b0:7e:50:4f:07:1e:9e:6d:c5:32:34: 19:69:34:e7:0f:00:1d:e2:72:7e:97:09:c8:67:9e: db:74:02:c6:cd:e3:b0:4d:7d:f0:e8:6d:91:94:22: eb:c4:33:21:4a:e8:71:20:72:0d:d0:7b:fa:02:12: 35:c7:20:f1:2b:85:f0:1a:a4:da:a6:da:79:af:bd: 02:dd:85:1d:7a:93:1a:98:6f:d3:4f:37:27:08:39: 5c:75:8b:b6:6a:8f:52:50:f3:97:bd:0a:45:94:ca: b2:05:8f:45:65:5a:2d:a5:86:f6:e9:e7:68:1c:01: 73:e7:71:a3:e6:5d:86:c4:92:d7:af:21:7b:95:5c: ca:29:93:01:2d:8f:77:98:85:37:25:33:56:52:c9: 4c:80:6e:02:91:27:91:ed:42:62:52:b7:1f:36:35: 6e:15:d7:e4:74:d8:bb:c9:84:22:f3:cd:f0:e6:f8: 15:dd:a7:82:26:4c:06:70:5c:10:00:24:df:70:41: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:01:13:29:59:8D:CC:78:7F:79:C2:22:F2:D4:BB:42:8E:86:B1 X509v3 Authority Key Identifier: keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:ec:31:a8:c7:c5:26:87:76:51:80:97:0d:56:cf:92:e1: e4:5c:eb:03:b6:2b:a2:01:1a:85:43:4c:d2:c2:fa:87:3b:78: 80:a9:68:4d:5e:c1:53:0d:57:9a:99:c6:e6:09:f9:1d:83:0f: cc:6d:f3:0f:96:b5:b2:37:a4:b9:27:22:dd:50:8a:85:96:22: 71:49:9b:82:d4:cb:69:b0:9e:da:be:e4:2f:8a:3f:84:6c:49: bd:5f:76:3d:97:97:81:ca:7d:33:41:38:fa:f9:52:da:30:dc: f3:2d:c4:41:a8:c8:d6:69:a4:ea:ec:2f:95:70:f9:53:98:53: 88:7b:65:44:66:ea:6e:f7:9e:33:36:3a:0b:9b:9b:f1:eb:ad: 86:87:bb:29:47:b9:62:ea:87:74:66:4b:81:d7:8b:52:a0:bc: e0:5c:67:ac:18:a0:37:cd:25:47:a6:11:fd:b4:30:2f:5e:7f: 47:b3:35:2d:4a:38:e2:bd:a5:7f:8f:b3:45:fd:e6:5b:b7:02: 36:3e:ba:82:82:d9:4a:eb:7e:37:43:ce:40:bb:91:f7:db:5f: e0:14:44:74:a5:6e:04:03:78:a0:f2:7f:db:40:73:d2:a8:99: 73:97:d4:2f:0e:90:1f:22:71:f1:d6:85:21:72:f0:28:2c:a3: b4:5b:46:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxuXv/BMU04zPzPqm5b5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZjA5MDJjN2IzMGZlYzNlMGRjZjVmMjNiZmVkZjUwMTgy MzQyOWIwHhcNMjYwMjA5MTkwMDM0WhcNMjYwMjEwMTkwMDM0WjAzMTEwLwYDVQQD EyhhNTE3MDExMzI5NTk4ZGNjNzg3Zjc5YzIyMmYyZDRiYjQyOGU4NmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnclNFSTS3uwQi8yp730vdW0MlWV1 Q8BzCDoNo7s4v2IQ6ko6vvKGOUOwNzHMemNsNS/WR5+Rns9LyY/PoQImsH5QTwce nm3FMjQZaTTnDwAd4nJ+lwnIZ57bdALGzeOwTX3w6G2RlCLrxDMhSuhxIHIN0Hv6 AhI1xyDxK4XwGqTaptp5r70C3YUdepMamG/TTzcnCDlcdYu2ao9SUPOXvQpFlMqy BY9FZVotpYb26edoHAFz53Gj5l2GxJLXryF7lVzKKZMBLY93mIU3JTNWUslMgG4C kSeR7UJiUrcfNjVuFdfkdNi7yYQi883w5vgV3aeCJkwGcFwQACTfcEFkQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUXARMpWY3MeH95wiLy1LtCjoaxMB8GA1UdIwQY MBaAFKnwkCx7MP7D4Nz18jv+31AYI0KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUt ODk2ODU2NWRmNjNhLzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUtODk2ODU2NWRmNjNh LzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjXsMajH xSaHdlGAlw1Wz5Lh5FzrA7YrogEahUNM0sL6hzt4gKloTV7BUw1XmpnG5gn5HYMP zG3zD5a1sjekuSci3VCKhZYicUmbgtTLabCe2r7kL4o/hGxJvV92PZeXgcp9M0E4 +vlS2jDc8y3EQajI1mmk6uwvlXD5U5hTiHtlRGbqbveeMzY6C5ub8euthoe7KUe5 YuqHdGZLgdeLUqC84FxnrBigN80lR6YR/bQwL15/R7M1LUo44r2lf4+zRf3mW7cC Nj66goLZSut+N0POQLuR99tf4BREdKVuBAN4oPJ/20Bz0qiZc5fULw6QHyJx8daF IXLwKCyjtFtGMA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:08 2026 by rpki-client