This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json) Hash identifier: Pq7jf96NqDaUeB3wiBYEGAu+ylCpiB/TwR0nPDHdtzU= Subject key identifier: 2F:43:71:AF:51:20:2D:F6:18:3B:0C:B9:9D:FF:8F:D7:EA:A8:05:B3 Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59 Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59 Certificate serial: 019C446C43777ECCA6B094F2B9526B313B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft Manifest number: 0662 Signing time: Mon 09 Feb 2026 22:01:11 +0000 Manifest this update: Mon 09 Feb 2026 22:01:11 +0000 Manifest next update: Tue 10 Feb 2026 22:01:11 +0000 Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: kX1gC7Vegd3SHbH52TFe2EQNr4rsKVyFB+ZjlsRDdf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:43:77:7e:cc:a6:b0:94:f2:b9:52:6b:31:3b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59 Validity Not Before: Feb 9 22:01:11 2026 GMT Not After : Feb 10 22:01:11 2026 GMT Subject: CN=2f4371af51202df6183b0cb99dff8fd7eaa805b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:37:9d:81:26:e8:c4:50:02:09:12:d3:a4: df:83:5b:6b:08:5b:0a:55:b6:2f:a9:2f:e3:a0:d0: 21:70:58:3e:97:01:20:bf:35:66:6b:08:db:24:71: 1a:d6:75:08:69:37:8f:fd:ba:90:e1:15:1d:0e:34: 08:65:67:ef:31:dc:df:ee:5c:4f:c4:75:33:29:80: 2b:d0:e9:35:45:37:d8:6d:0a:8a:d4:fe:ea:60:05: 2d:41:49:a1:1c:d8:df:02:c4:86:2c:e9:ac:75:01: 45:1a:11:7e:8c:18:9a:4c:f8:aa:10:7e:c4:24:9e: 16:43:48:07:bb:ce:4f:25:ca:17:53:27:47:8d:a2: c8:38:59:b5:fd:f6:c7:b9:64:95:5a:2d:84:36:08: ca:48:87:fd:81:9e:7d:43:bf:30:81:ad:7c:cb:60: ea:a5:84:f7:9b:7a:8e:89:00:9e:44:75:21:db:fa: af:28:ee:86:20:75:d0:21:b1:21:0a:b6:3b:d8:01: 31:a8:4d:16:0f:f3:ca:5a:ae:51:8e:c9:66:62:c5: 42:3b:c5:0c:8d:1a:0b:fa:ca:85:1e:86:f1:c0:c8: f3:50:d6:2c:5c:2e:e0:00:59:4f:27:ea:26:9f:0d: 02:44:62:90:f4:cd:3f:8b:7a:04:20:d4:ce:a9:c3: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:71:AF:51:20:2D:F6:18:3B:0C:B9:9D:FF:8F:D7:EA:A8:05:B3 X509v3 Authority Key Identifier: keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4b:42:ac:f8:04:0b:57:5f:76:8e:23:9a:1b:86:31:77:6b: ce:e6:03:f7:7e:f3:9b:c5:b9:47:94:f6:5b:58:3e:fd:18:b9: f7:e3:26:3e:dc:db:1c:10:76:13:28:45:8c:c3:e0:39:be:39: 10:ce:31:eb:12:0c:a7:66:3e:d9:b2:64:88:b2:0b:14:9b:31: 07:93:f8:da:58:bf:5a:29:8a:9b:14:bb:2f:a1:ba:ce:4b:62: c0:07:02:69:a8:0e:88:21:17:f6:b4:d1:dc:d9:89:54:9d:64: 95:59:3f:3a:d0:9b:b0:8f:02:a6:5f:9d:aa:66:6c:22:6a:21: 33:d3:83:f9:de:0a:9a:83:82:94:a6:b4:9c:ca:45:0d:25:5c: 77:f0:0c:ac:b1:f0:69:6c:ea:d6:f6:a3:68:23:b3:e7:c8:71: 6e:11:df:23:02:bf:d2:7d:1c:e6:d3:63:8a:01:59:36:1b:06: 34:c8:99:dc:c7:c1:7c:d9:7f:2e:09:dc:0a:2f:7f:f3:98:1b: 79:f3:9a:62:7e:7d:26:f7:8e:8a:f8:f7:83:95:7f:0a:b7:07: 23:1f:55:d5:2d:20:f8:42:1b:6c:0d:5f:b9:a4:19:1b:67:5d: 4e:24:ec:9b:3f:e2:dd:3d:ad:93:1f:ee:f5:5f:57:af:38:71: d1:38:6d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEN3fsymsJTyuVJrMTsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRlMTA2YmU1Mzg2ZWQxMDY3NWVlMGRlMzM2ZGM3N2Uy MDBkNTkwHhcNMjYwMjA5MjIwMTExWhcNMjYwMjEwMjIwMTExWjAzMTEwLwYDVQQD EygyZjQzNzFhZjUxMjAyZGY2MTgzYjBjYjk5ZGZmOGZkN2VhYTgwNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYU3nYEm6MRQAgkS06Tfg1trCFsK VbYvqS/joNAhcFg+lwEgvzVmawjbJHEa1nUIaTeP/bqQ4RUdDjQIZWfvMdzf7lxP xHUzKYAr0Ok1RTfYbQqK1P7qYAUtQUmhHNjfAsSGLOmsdQFFGhF+jBiaTPiqEH7E JJ4WQ0gHu85PJcoXUydHjaLIOFm1/fbHuWSVWi2ENgjKSIf9gZ59Q78wga18y2Dq pYT3m3qOiQCeRHUh2/qvKO6GIHXQIbEhCrY72AExqE0WD/PKWq5RjslmYsVCO8UM jRoL+sqFHobxwMjzUNYsXC7gAFlPJ+omnw0CRGKQ9M0/i3oEINTOqcNSXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9Dca9RIC32GDsMuZ3/j9fqqAWzMB8GA1UdIwQY MBaAFKk04Qa+U4btEGde4N4zbcd+IA1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYt MGE2YmYyZGY5ZDYyLzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYtMGE2YmYyZGY5ZDYy LzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUtCrPgE C1dfdo4jmhuGMXdrzuYD937zm8W5R5T2W1g+/Ri59+MmPtzbHBB2EyhFjMPgOb45 EM4x6xIMp2Y+2bJkiLILFJsxB5P42li/WimKmxS7L6G6zktiwAcCaagOiCEX9rTR 3NmJVJ1klVk/OtCbsI8Cpl+dqmZsImohM9OD+d4KmoOClKa0nMpFDSVcd/AMrLHw aWzq1vajaCOz58hxbhHfIwK/0n0c5tNjigFZNhsGNMiZ3MfBfNl/LgncCi9/85gb efOaYn59JveOivj3g5V/CrcHIx9V1S0g+EIbbA1fuaQZG2ddTiTsmz/i3T2tkx/u 9V9Xrzhx0ThtvQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:08 2026 by rpki-client