This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json) Hash identifier: IUPd0TzLdP1WFIgidRkpgBTSrdsg/NtmkQv9qPF2DQ8= Subject key identifier: FC:B3:C7:DF:D9:7E:F5:8B:0E:44:3C:1C:77:C4:84:D8:B1:96:F3:2E Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Certificate serial: 019C41A223E2034F04E5066A96C6F22FDE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:01:10 +0000 Manifest this update: Mon 09 Feb 2026 09:01:10 +0000 Manifest next update: Tue 10 Feb 2026 09:01:10 +0000 Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=) 2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: EGCcLdpLk48Pef7AkysEXexXPyWM0F3o4Ct/rRGn0qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:23:e2:03:4f:04:e5:06:6a:96:c6:f2:2f:de:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Validity Not Before: Feb 9 09:01:10 2026 GMT Not After : Feb 10 09:01:10 2026 GMT Subject: CN=fcb3c7dfd97ef58b0e443c1c77c484d8b196f32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:66:e4:3a:81:34:9d:fa:62:6c:ac:7f:74: 51:70:19:1b:f0:ae:54:8a:94:d0:bb:11:77:4d:d8: f6:a5:6d:da:9a:11:25:37:a0:97:af:07:0e:7c:7f: 60:07:75:72:12:d7:ff:45:b4:fc:9a:9d:2a:f7:42: 54:f1:d2:2f:df:2e:ff:4c:38:5e:af:09:ea:ba:52: 40:78:b4:17:54:60:f6:fa:79:61:4c:4e:00:6d:d1: 6e:da:80:e3:26:28:dd:4c:c3:da:c1:0f:7b:51:08: f7:74:75:bd:bc:59:56:0f:c9:2b:e5:07:dd:ea:33: 52:10:f5:da:95:11:5c:c0:9a:95:90:f6:01:00:c0: a2:25:4c:06:46:62:c6:9a:56:2a:ff:8f:b9:2b:31: 71:c1:fb:8b:a2:eb:5b:c8:a6:7d:66:eb:44:fc:ff: 76:db:89:ee:bf:ae:1c:8a:c9:9a:56:57:b8:4a:92: e7:d1:59:12:19:0e:73:fe:85:b9:92:6d:5b:50:55: b8:f0:f8:b5:76:a8:e5:d3:fd:11:4c:53:d5:ee:6c: f8:dd:08:65:5a:8b:58:e1:23:d0:03:1f:fd:73:95: 77:9c:a9:4d:66:97:cf:aa:64:6d:7a:ca:f6:ae:dd: 8d:a0:d4:5f:00:bb:b7:e3:11:24:2e:52:04:31:17: 2a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B3:C7:DF:D9:7E:F5:8B:0E:44:3C:1C:77:C4:84:D8:B1:96:F3:2E X509v3 Authority Key Identifier: keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:16:11:3c:b5:91:f2:38:48:bf:67:94:4e:d1:95:ad:ae:b0: 51:80:ed:6d:ce:8d:88:a6:ec:55:54:52:3e:9f:48:bc:b1:5a: ce:4d:5b:2c:c5:92:b0:97:6a:87:66:44:9c:f2:22:05:dc:37: 7f:53:c5:b2:f2:c4:1c:a1:bb:46:48:2f:14:7d:45:e1:56:77: b5:96:a2:12:75:24:d2:ce:36:2c:35:ec:a9:d5:f1:88:db:f3: e7:ab:0d:c1:cf:7e:07:25:ca:9a:ed:ef:d3:29:14:13:05:c0: 1b:05:55:bd:b4:6e:39:85:98:6f:27:85:8c:b6:e6:73:b3:6a: 1c:8a:e9:b3:bf:3f:95:fb:1a:5f:3c:39:32:b0:cb:b5:57:53: 28:5f:56:22:ab:bf:8a:8a:68:3e:48:a5:54:79:f1:47:db:2d: 17:9d:77:97:d9:e2:bb:14:d4:ff:76:53:0b:b9:97:d1:b0:8e: 48:4a:0f:30:7e:17:c1:b0:5f:41:82:50:4f:f0:03:ca:75:7a: 22:0f:87:c9:a7:db:ef:9d:0f:29:a8:a2:5d:66:74:f3:4c:af: d5:94:36:ce:3c:11:57:c3:c4:1e:20:da:a0:f2:89:d4:04:dc: 18:df:a0:54:1f:7f:8c:69:08:a9:be:cf:81:61:3c:e7:4e:9b: 30:c5:f8:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiPiA08E5QZqlsbyL94BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi NzM4OGMwHhcNMjYwMjA5MDkwMTEwWhcNMjYwMjEwMDkwMTEwWjAzMTEwLwYDVQQD EyhmY2IzYzdkZmQ5N2VmNThiMGU0NDNjMWM3N2M0ODRkOGIxOTZmMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51m5DqBNJ36Ymysf3RRcBkb8K5U ipTQuxF3Tdj2pW3amhElN6CXrwcOfH9gB3VyEtf/RbT8mp0q90JU8dIv3y7/TDhe rwnqulJAeLQXVGD2+nlhTE4AbdFu2oDjJijdTMPawQ97UQj3dHW9vFlWD8kr5Qfd 6jNSEPXalRFcwJqVkPYBAMCiJUwGRmLGmlYq/4+5KzFxwfuLoutbyKZ9ZutE/P92 24nuv64cismaVle4SpLn0VkSGQ5z/oW5km1bUFW48Pi1dqjl0/0RTFPV7mz43Qhl WotY4SPQAx/9c5V3nKlNZpfPqmRtesr2rt2NoNRfALu34xEkLlIEMRcqGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyzx9/ZfvWLDkQ8HHfEhNixlvMuMB8GA1UdIwQY MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3 LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxYRPLWR 8jhIv2eUTtGVra6wUYDtbc6NiKbsVVRSPp9IvLFazk1bLMWSsJdqh2ZEnPIiBdw3 f1PFsvLEHKG7RkgvFH1F4VZ3tZaiEnUk0s42LDXsqdXxiNvz56sNwc9+ByXKmu3v 0ykUEwXAGwVVvbRuOYWYbyeFjLbmc7NqHIrps78/lfsaXzw5MrDLtVdTKF9WIqu/ iopoPkilVHnxR9stF513l9niuxTU/3ZTC7mX0bCOSEoPMH4XwbBfQYJQT/ADynV6 Ig+Hyafb750PKaiiXWZ080yv1ZQ2zjwRV8PEHiDaoPKJ1ATcGN+gVB9/jGkIqb7P gWE8506bMMX4FQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:43 2026 by rpki-client