This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json) Hash identifier: CqvCfF1qZhwX1EmzSjwKtOYmIkEWeEPpV3ZXIBE58Q4= Subject key identifier: E3:AE:32:D3:76:C7:53:F3:5B:E2:DA:18:64:9E:4E:7F:41:E9:11:23 Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad Certificate serial: 019C446C109D48C3BFD947371BF88A914BB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft Manifest number: 05F5 Signing time: Mon 09 Feb 2026 22:00:58 +0000 Manifest this update: Mon 09 Feb 2026 22:00:58 +0000 Manifest next update: Tue 10 Feb 2026 22:00:58 +0000 Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: 237QbWWMxbi7TidEaPQStKe7WnuyyBRL2vRtHhoKdEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:10:9d:48:c3:bf:d9:47:37:1b:f8:8a:91:4b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad Validity Not Before: Feb 9 22:00:58 2026 GMT Not After : Feb 10 22:00:58 2026 GMT Subject: CN=e3ae32d376c753f35be2da18649e4e7f41e91123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:ac:fb:45:c1:25:ba:e0:33:57:61:7d:33: 9d:2e:4a:bd:41:9d:59:24:43:df:62:dd:aa:a9:b4: bd:59:3b:f7:bf:e4:6a:ec:ed:b3:af:62:00:c2:0b: 22:cb:46:70:82:42:1b:66:2c:98:b2:b1:3f:d3:8c: 31:76:0c:77:e1:91:9c:11:9f:5c:c1:c2:a1:14:db: ae:51:87:cd:17:36:55:11:7f:d3:fe:e7:45:77:ab: ed:2f:88:cc:fc:2f:5d:05:ac:93:02:bd:a2:81:d2: b9:a6:14:29:51:86:1f:7f:1d:a0:20:49:72:df:9d: 37:5c:fc:e5:fa:8d:00:72:b1:6e:54:3a:cb:d8:77: 24:48:b6:24:f9:df:54:1f:cd:92:38:52:81:63:78: b0:09:4f:29:dc:60:97:ac:9c:68:9d:4f:02:b6:32: 36:55:bc:8b:ab:dd:f4:34:59:5b:b8:e6:64:82:e5: d8:42:90:61:3d:c2:73:60:31:e6:14:28:07:73:19: a2:4b:49:a7:33:b9:33:d7:b6:83:c3:9e:a3:09:e2: 2f:8c:67:4e:6a:f6:eb:b8:d4:0a:95:20:6f:2a:40: 35:ea:7b:6b:c4:65:d6:bf:19:53:b7:5e:2f:d5:ec: b4:c3:3b:7f:c2:ee:73:f9:8d:a0:80:a7:e2:a5:32: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AE:32:D3:76:C7:53:F3:5B:E2:DA:18:64:9E:4E:7F:41:E9:11:23 X509v3 Authority Key Identifier: keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f4:53:50:14:d8:87:a8:24:00:0a:be:34:f8:d3:07:e6:d9: 5a:b9:63:b8:45:d9:0e:b7:8e:93:5e:5a:ae:a9:6d:fc:0a:0c: 9d:f9:0f:39:5d:42:74:ad:df:06:44:c3:e7:bb:db:92:f5:90: 60:35:97:c9:80:90:be:e8:6d:3a:be:68:9d:03:a6:aa:18:4d: b2:b2:f0:9f:96:08:e5:a4:bc:57:dd:58:7c:73:b6:21:76:0c: d1:0f:f7:69:4d:a9:9c:b1:87:e9:ce:45:e5:c9:ef:74:24:75: 0b:c7:c7:8e:cc:a5:db:c1:aa:c8:70:43:ed:1a:c4:de:c9:98: 37:63:6c:1b:6c:fe:c7:ea:82:3c:1d:45:19:e6:23:f2:5b:75: 3a:9e:53:c5:ab:a9:a2:77:57:8a:36:f4:62:10:af:5a:6b:d6: 8c:26:e7:99:05:2f:e3:de:43:bb:d7:fe:87:3a:b9:b6:d0:cf: 14:de:8e:7d:8c:c6:27:c9:19:5c:fb:3e:12:9b:31:d1:b9:10: 3d:0b:0e:5c:08:20:75:72:01:1a:31:d7:2e:13:cf:5c:1d:18: f0:e5:5d:66:96:c8:fd:ef:dc:bc:36:2b:f5:f3:7c:4e:1c:a4: 09:49:d3:d3:67:e0:86:e1:6f:41:d6:cf:be:d5:15:92:7e:e5: 49:6c:93:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBCdSMO/2Uc3G/iKkUuyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxN2VjODI4NWE1NjVkZjUyOTRhM2IzYjYwM2ZkZjkxOTRl NmVmYWQwHhcNMjYwMjA5MjIwMDU4WhcNMjYwMjEwMjIwMDU4WjAzMTEwLwYDVQQD EyhlM2FlMzJkMzc2Yzc1M2YzNWJlMmRhMTg2NDllNGU3ZjQxZTkxMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn82s+0XBJbrgM1dhfTOdLkq9QZ1Z JEPfYt2qqbS9WTv3v+Rq7O2zr2IAwgsiy0ZwgkIbZiyYsrE/04wxdgx34ZGcEZ9c wcKhFNuuUYfNFzZVEX/T/udFd6vtL4jM/C9dBayTAr2igdK5phQpUYYffx2gIEly 3503XPzl+o0AcrFuVDrL2HckSLYk+d9UH82SOFKBY3iwCU8p3GCXrJxonU8CtjI2 VbyLq930NFlbuOZkguXYQpBhPcJzYDHmFCgHcxmiS0mnM7kz17aDw56jCeIvjGdO avbruNQKlSBvKkA16ntrxGXWvxlTt14v1ey0wzt/wu5z+Y2ggKfipTILzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOuMtN2x1PzW+LaGGSeTn9B6REjMB8GA1UdIwQY MBaAFEF+yChaVl31KUo7O2A/35GU5u+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMt Nzc1ZjAyMmZkMDY0LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS83NWM0ZTUtOTk1OC00MjE3LWI1NTMtNzc1ZjAyMmZkMDY0 LzEvUVg3SUtGcFdYZlVwU2pzN1lEX2ZrWlRtNzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/RTUBTY h6gkAAq+NPjTB+bZWrljuEXZDreOk15arqlt/AoMnfkPOV1CdK3fBkTD57vbkvWQ YDWXyYCQvuhtOr5onQOmqhhNsrLwn5YI5aS8V91YfHO2IXYM0Q/3aU2pnLGH6c5F 5cnvdCR1C8fHjsyl28GqyHBD7RrE3smYN2NsG2z+x+qCPB1FGeYj8lt1Op5Txaup ondXijb0YhCvWmvWjCbnmQUv495Du9f+hzq5ttDPFN6OfYzGJ8kZXPs+Epsx0bkQ PQsOXAggdXIBGjHXLhPPXB0Y8OVdZpbI/e/cvDYr9fN8ThykCUnT02fghuFvQdbP vtUVkn7lSWyT7Q== -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:56 2026 by rpki-client