This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json) Hash identifier: y87CaGwVC/wLB1z0s34qcL1Oe/wGqK7KUd4bVQx0y8U= Subject key identifier: D9:75:B6:B8:18:29:5D:2B:E8:47:A9:92:DC:1D:15:EB:FC:C3:5C:73 Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Certificate serial: 019C420FF0878CF6E66835445A9E2AA82E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 11:01:06 +0000 Manifest this update: Mon 09 Feb 2026 11:01:06 +0000 Manifest next update: Tue 10 Feb 2026 11:01:06 +0000 Files and hashes: 1: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: jsW8V3dMjyHUXYzMmU11NocwG12KZr405v8gggD9JmY=) 2: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (hash: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f0:87:8c:f6:e6:68:35:44:5a:9e:2a:a8:2e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Validity Not Before: Feb 9 11:01:06 2026 GMT Not After : Feb 10 11:01:06 2026 GMT Subject: CN=d975b6b818295d2be847a992dc1d15ebfcc35c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:78:a1:c6:3f:0b:1c:25:65:63:57:ec:7b: a3:0a:03:ae:50:ed:50:28:53:ab:79:3f:79:c4:de: 68:e9:a0:24:9a:f8:15:c7:35:5b:0a:72:b0:0f:f9: c0:30:5f:47:a6:ce:f2:de:89:29:23:2a:2d:b2:1e: b4:b7:b6:e9:3e:63:61:98:f3:94:43:91:69:3a:e8: 7a:a6:77:ae:e5:8e:ce:35:43:e2:97:32:98:b7:47: 98:c2:d9:e6:f1:04:15:67:ca:ee:cb:92:3c:e8:f1: 87:60:92:7e:bb:be:c8:c9:74:bc:35:b0:8c:88:f9: 25:1f:ee:f3:82:ff:ff:38:12:7c:34:a8:97:b6:f4: ec:05:ae:7a:90:13:6d:d4:4a:e4:07:b2:39:70:45: 81:4e:f4:04:d5:01:bb:5d:be:56:c8:cc:42:6f:87: f1:50:a0:60:8d:b4:b8:f4:9e:8e:e5:92:e2:33:f8: 11:fe:4c:48:41:66:78:30:b4:65:05:87:9b:d2:34: de:a3:21:04:e2:9f:21:19:39:b4:d3:cd:4f:67:10: 2e:ac:c7:50:ff:ff:4f:7c:fa:3f:5a:a2:0a:ce:64: fc:7b:f7:52:e8:09:44:66:2b:28:e4:fb:0f:a0:d3: 70:9e:aa:df:3d:d4:92:cb:5e:f8:80:6b:c7:37:c1: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:75:B6:B8:18:29:5D:2B:E8:47:A9:92:DC:1D:15:EB:FC:C3:5C:73 X509v3 Authority Key Identifier: keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:96:8f:71:10:2e:a5:6b:74:d0:ad:54:cc:02:ca:48:68:05: 22:77:2f:d9:ff:29:10:db:62:cc:d6:c5:78:aa:85:e6:53:28: 47:40:04:cf:bc:67:e5:af:48:5c:d6:d9:86:a6:3b:41:31:72: b5:6f:57:a7:c6:19:77:31:3c:b7:de:19:4f:68:94:ac:c9:a4: e8:9d:03:b8:f0:11:fd:a9:4b:61:c0:1d:6f:8a:d2:5c:cb:ca: a4:68:a8:36:9c:e7:54:68:54:19:d9:0c:c7:e7:45:4f:16:5a: 83:3e:6d:cd:01:d3:cd:25:0b:d5:01:0c:be:48:dc:00:01:b3: 2f:81:7a:23:01:7e:1d:6b:c0:c5:31:14:a5:21:75:89:f2:ed: 40:b7:70:21:43:2a:68:5c:fb:27:19:44:d3:27:b8:cc:4b:9b: 45:a8:93:1f:c3:1c:c6:2c:e3:80:ce:4c:e4:f5:07:b4:70:5b: ef:03:0a:fe:4c:d0:4f:bf:6b:89:96:3d:aa:0e:e2:bd:52:a1: 3f:a2:69:d2:6f:26:6a:2e:e6:6a:e7:76:d9:ff:9d:25:52:30: 66:e8:9c:39:e3:cf:31:2f:3f:51:ef:b3:a5:60:4d:66:16:66: cb:29:b5:26:1f:39:19:d5:d0:ce:6f:ac:a7:7a:8e:de:17:2c: b2:4a:a8:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/CHjPbmaDVEWp4qqC4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl OTE4ZTMwHhcNMjYwMjA5MTEwMTA2WhcNMjYwMjEwMTEwMTA2WjAzMTEwLwYDVQQD EyhkOTc1YjZiODE4Mjk1ZDJiZTg0N2E5OTJkYzFkMTVlYmZjYzM1YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX14ocY/CxwlZWNX7HujCgOuUO1Q KFOreT95xN5o6aAkmvgVxzVbCnKwD/nAMF9Hps7y3okpIyotsh60t7bpPmNhmPOU Q5FpOuh6pneu5Y7ONUPilzKYt0eYwtnm8QQVZ8ruy5I86PGHYJJ+u77IyXS8NbCM iPklH+7zgv//OBJ8NKiXtvTsBa56kBNt1ErkB7I5cEWBTvQE1QG7Xb5WyMxCb4fx UKBgjbS49J6O5ZLiM/gR/kxIQWZ4MLRlBYeb0jTeoyEE4p8hGTm0081PZxAurMdQ //9PfPo/WqIKzmT8e/dS6AlEZiso5PsPoNNwnqrfPdSSy174gGvHN8Fk3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl1trgYKV0r6EepktwdFev8w1xzMB8GA1UdIwQY MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt ZmM1OWRlZGIxZDJiLzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZaPcRAu pWt00K1UzALKSGgFIncv2f8pENtizNbFeKqF5lMoR0AEz7xn5a9IXNbZhqY7QTFy tW9Xp8YZdzE8t94ZT2iUrMmk6J0DuPAR/alLYcAdb4rSXMvKpGioNpznVGhUGdkM x+dFTxZagz5tzQHTzSUL1QEMvkjcAAGzL4F6IwF+HWvAxTEUpSF1ifLtQLdwIUMq aFz7JxlE0ye4zEubRaiTH8McxizjgM5M5PUHtHBb7wMK/kzQT79riZY9qg7ivVKh P6Jp0m8mai7maud22f+dJVIwZuicOePPMS8/Ue+zpWBNZhZmyym1Jh85GdXQzm+s p3qO3hcsskqoWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:52 2026 by rpki-client