This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json) Hash identifier: 78Df7+kRaSnLGXFcohlVURyikOiN00nR4NXgHebYXBc= Subject key identifier: D1:0C:38:D2:F1:6B:9B:61:58:E2:6D:D2:FD:66:DC:B3:08:18:8E:29 Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Certificate serial: 019C427D90ABDBE9CD70012659F9F6D8A869 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft Manifest number: 164C Signing time: Mon 09 Feb 2026 13:00:51 +0000 Manifest this update: Mon 09 Feb 2026 13:00:51 +0000 Manifest next update: Tue 10 Feb 2026 13:00:51 +0000 Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: OPOUn2yLCyHzFmzSkCbfL1UBe6I//NWdkcllGJ2Alq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:90:ab:db:e9:cd:70:01:26:59:f9:f6:d8:a8:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64 Validity Not Before: Feb 9 13:00:51 2026 GMT Not After : Feb 10 13:00:51 2026 GMT Subject: CN=d10c38d2f16b9b6158e26dd2fd66dcb308188e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:57:68:31:e5:8a:77:4f:ae:f8:c6:3b:99: b6:f3:5a:76:bf:f6:fb:4d:01:ae:e2:88:09:b7:6c: 0f:67:93:e3:d2:94:5c:4f:24:3a:7b:d4:fb:f7:80: 69:65:6d:7e:5d:39:51:2d:fb:b6:d9:37:03:68:e9: 11:4a:41:33:a8:73:62:ef:de:4d:c8:10:98:d0:d7: 93:ce:3f:8b:d1:91:79:39:87:0d:0b:50:5d:40:b1: f2:c8:46:15:63:c5:2e:d1:60:07:c5:d2:8f:09:92: 13:68:a2:ba:09:88:cf:e0:02:86:2b:b1:fb:33:94: bd:f3:e0:89:97:5d:e9:25:9c:77:57:f2:4f:b2:1b: b9:6c:29:d8:92:fb:4f:83:5f:c8:69:59:e3:eb:87: d9:92:3f:3b:c7:16:65:20:d6:63:17:d4:d5:08:4d: 99:92:df:17:92:bf:36:52:80:db:a3:bd:bd:44:2d: ac:0f:67:ed:d5:23:51:3f:ee:fb:c5:78:ba:41:78: 41:43:9e:32:56:5b:f5:10:64:85:a7:af:c4:51:db: f0:18:09:61:f9:fe:80:69:2a:bf:38:41:c4:ce:f6: 2a:ea:fd:6b:bb:10:9f:76:4a:47:81:13:9f:46:78: b4:bb:dd:03:7a:a5:c8:c6:83:df:3f:c0:41:32:e1: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0C:38:D2:F1:6B:9B:61:58:E2:6D:D2:FD:66:DC:B3:08:18:8E:29 X509v3 Authority Key Identifier: keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:82:a5:91:98:61:eb:7f:f3:cb:58:09:e8:b4:3e:06:65:d0: a9:b0:22:fd:22:ac:12:82:fb:5a:a7:8b:7f:6b:18:29:44:e4: 72:92:8c:bb:5a:7a:c0:bd:44:0d:81:ca:63:0f:17:a0:42:24: 3f:66:42:1b:62:c2:dc:57:20:11:37:b3:c7:8d:a0:a7:4b:96: 04:f7:b1:f8:9d:f9:9a:dc:08:9d:1b:6e:d8:26:8f:97:9c:ef: c6:e5:28:40:60:c4:1f:d2:c3:67:17:93:71:5e:d6:dd:13:6a: 5b:61:3b:5c:4c:bb:f6:ce:f9:dc:24:77:97:98:f8:63:5f:50: 1f:7f:9c:47:98:84:05:a1:64:05:f5:8b:48:03:05:a0:95:7f: 9a:02:48:e4:96:91:dd:e1:63:c1:d9:3c:41:75:6d:f6:f7:71: 2e:86:04:00:6b:af:e2:1e:4a:8f:e0:ac:4d:c6:45:ea:0e:54: 03:8f:92:66:5e:84:58:81:d5:0d:07:25:5e:06:c6:83:d7:d1: b9:62:b6:40:92:4c:e8:c8:78:bd:94:26:16:84:65:dc:5b:36: 8e:b6:1b:f2:90:de:59:01:f6:49:04:73:37:47:46:5c:d6:b7: 00:f7:dc:37:05:ef:75:c6:07:e8:61:51:52:cc:89:b1:e2:67: 01:a3:eb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZCr2+nNcAEmWfn22KhpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MmVhNzU4ZTQxNTU5NGE4MDM3ZmZkYjc5OGY2YmI5MThj MTVlNjQwHhcNMjYwMjA5MTMwMDUxWhcNMjYwMjEwMTMwMDUxWjAzMTEwLwYDVQQD EyhkMTBjMzhkMmYxNmI5YjYxNThlMjZkZDJmZDY2ZGNiMzA4MTg4ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RXaDHlindPrvjGO5m281p2v/b7 TQGu4ogJt2wPZ5Pj0pRcTyQ6e9T794BpZW1+XTlRLfu22TcDaOkRSkEzqHNi795N yBCY0NeTzj+L0ZF5OYcNC1BdQLHyyEYVY8Uu0WAHxdKPCZITaKK6CYjP4AKGK7H7 M5S98+CJl13pJZx3V/JPshu5bCnYkvtPg1/IaVnj64fZkj87xxZlINZjF9TVCE2Z kt8Xkr82UoDbo729RC2sD2ft1SNRP+77xXi6QXhBQ54yVlv1EGSFp6/EUdvwGAlh +f6AaSq/OEHEzvYq6v1ruxCfdkpHgROfRni0u90DeqXIxoPfP8BBMuHVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEMONLxa5thWOJt0v1m3LMIGI4pMB8GA1UdIwQY MBaAFKkup1jkFVlKgDf/23mPa7kYwV5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYt OTU4NmQ4NDAxMzRlLzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYtOTU4NmQ4NDAxMzRl LzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIKlkZhh 63/zy1gJ6LQ+BmXQqbAi/SKsEoL7WqeLf2sYKUTkcpKMu1p6wL1EDYHKYw8XoEIk P2ZCG2LC3FcgETezx42gp0uWBPex+J35mtwInRtu2CaPl5zvxuUoQGDEH9LDZxeT cV7W3RNqW2E7XEy79s753CR3l5j4Y19QH3+cR5iEBaFkBfWLSAMFoJV/mgJI5JaR 3eFjwdk8QXVt9vdxLoYEAGuv4h5Kj+CsTcZF6g5UA4+SZl6EWIHVDQclXgbGg9fR uWK2QJJM6Mh4vZQmFoRl3Fs2jrYb8pDeWQH2SQRzN0dGXNa3APfcNwXvdcYH6GFR UsyJseJnAaPrIg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:41 2026 by rpki-client