This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json) Hash identifier: SzfvZAsG+m1FmsIqda9qGFUNmF/nK8JRLPPM9NXM8L4= Subject key identifier: 7A:0F:8E:96:55:A6:89:3A:83:4B:29:97:4E:7B:0D:7C:63:8A:7E:86 Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b Certificate serial: 019C41A18F878FCBFD9D60FAF9B99A0AA286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft Manifest number: 132B Signing time: Mon 09 Feb 2026 09:00:32 +0000 Manifest this update: Mon 09 Feb 2026 09:00:32 +0000 Manifest next update: Tue 10 Feb 2026 09:00:32 +0000 Files and hashes: 1: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: URwIwU4yFHsrNmdVghpMJfCE9o36pmAvtzm9Qp6/DqI=) 2: VcfqWg7FbQqb-Uja1uMxHMYRwIk.roa (hash: Lj+UoxvlbBzpt+4S58JMbON1coh0nlAf0RSoB4fN3M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8f:87:8f:cb:fd:9d:60:fa:f9:b9:9a:0a:a2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4191e5826270f49eae999d489e85deccc847738b Validity Not Before: Feb 9 09:00:32 2026 GMT Not After : Feb 10 09:00:32 2026 GMT Subject: CN=7a0f8e9655a6893a834b29974e7b0d7c638a7e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:23:c1:47:e4:cd:a8:7b:04:b4:60:37:37: 95:f6:f9:35:81:7f:20:4c:a3:18:7f:bc:7e:9f:2a: d7:8d:25:6e:55:c9:e6:1c:a0:df:52:21:aa:aa:95: c3:86:77:bb:2f:ea:71:c3:7b:23:91:fb:50:c8:f3: 82:90:8b:aa:4e:a3:da:39:b5:46:fe:c5:6d:ac:bf: 60:2c:35:4d:37:c0:82:7e:82:d4:ec:a0:ae:3f:f1: 12:08:d3:74:60:2a:77:3a:3b:07:af:cd:a5:a5:e5: 16:f4:30:17:24:62:16:d4:2c:b2:bc:f2:81:5a:e5: 7f:41:4b:5a:dc:3d:04:08:00:03:a4:75:82:21:b2: 8b:62:53:59:f1:32:c4:20:a6:57:36:a7:76:7f:81: cf:3b:e1:56:00:c2:c8:71:e4:6e:09:10:cf:78:fb: d1:76:0b:49:25:dc:48:e3:76:b8:70:c2:11:5d:fc: 5c:a2:60:2c:58:30:f7:c7:3c:7a:8d:6f:96:ec:ba: 9f:d2:05:68:66:a4:02:7c:e3:6f:56:4a:05:ab:23: 0c:9c:74:e2:b8:c0:64:2f:7a:92:a3:a9:44:3b:1a: 3d:e9:18:77:9e:dd:7a:70:9b:34:89:8f:2f:6b:9d: df:3d:e1:5f:39:db:8c:3e:64:7b:42:ca:04:28:5f: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:8E:96:55:A6:89:3A:83:4B:29:97:4E:7B:0D:7C:63:8A:7E:86 X509v3 Authority Key Identifier: keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:3f:18:e8:91:e8:f3:b5:e6:da:60:53:5b:b5:12:2a:f8: a4:6d:16:40:2e:4c:09:74:48:fa:32:12:3a:e3:65:b1:e3:5a: 50:ec:cf:d3:c8:9f:7b:77:6b:46:35:fb:56:8b:cd:2b:2b:c5: c9:f5:ff:ac:79:3f:44:69:f0:bc:e3:51:84:bc:60:5b:64:2b: a9:a6:a0:b7:43:85:e3:28:8c:d5:14:27:0c:45:3e:3f:c2:45: 99:23:ce:69:a0:0d:ab:1a:9d:8d:15:d4:c4:be:81:35:c5:fb: 18:7f:15:6b:35:e2:3b:fd:0b:62:ba:e4:e5:d4:4f:df:eb:d6: 12:62:c7:7d:a4:ad:14:c5:f0:79:5a:8e:7b:23:38:44:73:37: 5c:de:09:d5:7d:2b:c7:70:c7:15:dd:92:bf:e0:0e:4d:31:96: 3c:37:9d:62:2a:54:e1:6d:27:17:19:bf:1a:91:33:0a:87:dc: be:c8:ae:0f:66:38:f9:a2:f2:ee:4e:b6:a0:5c:88:bf:32:76: 26:86:8d:fd:9d:e3:6b:df:3f:90:07:a8:08:d8:f8:04:0b:1f: b9:53:41:f0:5e:7a:93:29:9f:a9:7c:ea:07:04:91:f6:97:f0: 88:03:e5:38:05:90:cc:ba:fe:4e:4b:f8:96:3e:39:d4:48:d3: 61:d4:1e:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoY+Hj8v9nWD6+bmaCqKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOTFlNTgyNjI3MGY0OWVhZTk5OWQ0ODllODVkZWNjYzg0 NzczOGIwHhcNMjYwMjA5MDkwMDMyWhcNMjYwMjEwMDkwMDMyWjAzMTEwLwYDVQQD Eyg3YTBmOGU5NjU1YTY4OTNhODM0YjI5OTc0ZTdiMGQ3YzYzOGE3ZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI0jwUfkzah7BLRgNzeV9vk1gX8g TKMYf7x+nyrXjSVuVcnmHKDfUiGqqpXDhne7L+pxw3sjkftQyPOCkIuqTqPaObVG /sVtrL9gLDVNN8CCfoLU7KCuP/ESCNN0YCp3OjsHr82lpeUW9DAXJGIW1CyyvPKB WuV/QUta3D0ECAADpHWCIbKLYlNZ8TLEIKZXNqd2f4HPO+FWAMLIceRuCRDPePvR dgtJJdxI43a4cMIRXfxcomAsWDD3xzx6jW+W7Lqf0gVoZqQCfONvVkoFqyMMnHTi uMBkL3qSo6lEOxo96Rh3nt16cJs0iY8va53fPeFfOduMPmR7QsoEKF+kgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoPjpZVpok6g0spl057DXxjin6GMB8GA1UdIwQY MBaAFEGR5YJicPSerpmdSJ6F3szIR3OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYt N2RmZGFjZmE2NTExLzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYtN2RmZGFjZmE2NTEx LzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHw0/GOiR 6PO15tpgU1u1Eir4pG0WQC5MCXRI+jISOuNlseNaUOzP08ife3drRjX7VovNKyvF yfX/rHk/RGnwvONRhLxgW2Qrqaagt0OF4yiM1RQnDEU+P8JFmSPOaaANqxqdjRXU xL6BNcX7GH8VazXiO/0LYrrk5dRP3+vWEmLHfaStFMXweVqOeyM4RHM3XN4J1X0r x3DHFd2Sv+AOTTGWPDedYipU4W0nFxm/GpEzCofcvsiuD2Y4+aLy7k62oFyIvzJ2 JoaN/Z3ja98/kAeoCNj4BAsfuVNB8F56kymfqXzqBwSR9pfwiAPlOAWQzLr+Tkv4 lj451EjTYdQe4w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:40 2026 by rpki-client