This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json) Hash identifier: uuUDr09IZDfc5caMebx91WuPWCNNqPj43e2A+5VgueA= Subject key identifier: A0:41:6A:D0:DA:82:6C:09:03:F2:62:93:22:CE:E8:92:8B:79:4D:F5 Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569 Certificate serial: 019C45112E2F034B34AB921D5B611D6C8C7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft Manifest number: 17A5 Signing time: Tue 10 Feb 2026 01:01:19 +0000 Manifest this update: Tue 10 Feb 2026 01:01:19 +0000 Manifest next update: Wed 11 Feb 2026 01:01:19 +0000 Files and hashes: 1: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: 55JMOmQl8ET8HB1IfBlh5gVOxH+SZ8z2eWUlu17gsBs=) 2: e3szWYnRwcnVrlDIwYxJ3pYMom4.roa (hash: BKtUpfmwzLTGUQniKBkvPeoFHhYGa5oaDqKuTCxUab8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:11:2e:2f:03:4b:34:ab:92:1d:5b:61:1d:6c:8c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569 Validity Not Before: Feb 10 01:01:19 2026 GMT Not After : Feb 11 01:01:19 2026 GMT Subject: CN=a0416ad0da826c0903f2629322cee8928b794df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4c:2a:b9:01:b6:e8:65:ba:a6:7a:38:ed:18: f6:59:3b:f1:55:34:28:2d:f5:20:9f:23:be:6d:4e: 92:b9:a4:94:4e:e2:49:a2:e5:42:47:67:8b:46:0e: e7:f5:08:02:8c:57:bc:84:cf:91:58:07:2d:14:f7: 97:28:6a:df:44:63:11:4d:79:5d:04:d9:d4:d9:62: 6e:eb:76:42:a5:ba:73:28:16:c5:87:1b:5b:45:a8: d5:77:3b:12:d9:f2:0d:20:bf:f0:88:64:01:a8:10: 74:76:7a:fd:8a:e3:8e:55:bc:32:6f:0c:75:12:6b: 9c:6e:62:50:33:48:ac:8e:a1:cf:c8:0b:d6:de:7b: 9b:d0:1e:b5:e8:d2:0b:14:e2:5c:3e:ee:e7:7b:df: 76:0c:65:46:0a:cb:cb:8c:85:df:08:ab:89:44:a7: cf:8a:9d:5f:58:42:28:53:3d:bd:a3:2c:a3:f9:0e: d2:fc:35:79:bb:2a:d4:07:23:99:31:e1:be:69:36: b4:16:00:36:d9:a5:12:f8:7e:44:19:0c:f9:35:d2: 00:fb:be:8f:66:01:41:75:28:b2:78:63:f1:00:2f: 62:fd:e5:2f:fc:8a:b3:e2:b4:49:62:21:91:b1:c0: 11:8a:dd:74:83:02:23:77:b4:8d:18:27:8f:2e:f3: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:6A:D0:DA:82:6C:09:03:F2:62:93:22:CE:E8:92:8B:79:4D:F5 X509v3 Authority Key Identifier: keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:ef:28:50:b4:23:06:96:44:3d:d6:9f:2d:2d:2b:a2:e9: 42:1a:e2:12:1e:4b:9b:a3:86:5c:94:e3:c7:12:c4:fb:71:13: 15:ac:ce:0e:4a:fd:67:bb:b6:24:59:11:fc:4c:0b:ec:ea:43: d7:d5:be:d9:86:5a:00:e5:bb:1c:41:01:2f:ae:a4:1b:b0:d4: 4f:90:38:f6:f2:3b:99:9a:e1:85:19:50:2c:c4:ed:4a:22:b1: dd:eb:91:7b:5a:93:fe:70:bb:26:ab:7f:47:cf:bd:35:2f:9e: 14:11:75:eb:f9:c3:44:a2:e9:b9:52:1c:6c:56:43:1c:50:b9: 58:0f:af:b1:d0:cf:4d:34:85:20:a1:a5:20:21:4d:ca:66:84: 2d:a4:44:5c:c4:c3:d3:0f:5d:b7:12:de:f3:85:9f:d9:4c:c6: 5e:9b:68:2d:e4:a1:bc:4b:90:30:24:f7:0c:69:01:2c:86:ab: 9c:b0:60:e4:d9:b5:80:ea:58:66:a4:10:bc:3d:fe:66:97:34: bd:b0:4a:56:19:c1:13:9c:4c:5e:72:59:9f:f0:e8:89:9e:ae: 3d:bb:5f:b5:89:a5:db:e3:39:c0:40:ec:95:f8:d0:53:47:cc: 8d:46:02:97:d1:4a:e6:bd:38:64:e0:42:f8:2c:6d:7f:b2:45: f7:df:84:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFES4vA0s0q5IdW2EdbIx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMGUwOTQ5ZGY1OTMwZjZiNzllZmNiZDljYmExNzRjYTIx M2Y1NjkwHhcNMjYwMjEwMDEwMTE5WhcNMjYwMjExMDEwMTE5WjAzMTEwLwYDVQQD EyhhMDQxNmFkMGRhODI2YzA5MDNmMjYyOTMyMmNlZTg5MjhiNzk0ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0wquQG26GW6pno47Rj2WTvxVTQo LfUgnyO+bU6SuaSUTuJJouVCR2eLRg7n9QgCjFe8hM+RWActFPeXKGrfRGMRTXld BNnU2WJu63ZCpbpzKBbFhxtbRajVdzsS2fINIL/wiGQBqBB0dnr9iuOOVbwybwx1 EmucbmJQM0isjqHPyAvW3nub0B616NILFOJcPu7ne992DGVGCsvLjIXfCKuJRKfP ip1fWEIoUz29oyyj+Q7S/DV5uyrUByOZMeG+aTa0FgA22aUS+H5EGQz5NdIA+76P ZgFBdSiyeGPxAC9i/eUv/Iqz4rRJYiGRscARit10gwIjd7SNGCePLvPRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBBatDagmwJA/JikyLO6JKLeU31MB8GA1UdIwQY MBaAFEMOCUnfWTD2t578vZy6F0yiE/VpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYt MDY4NjE2MGE3ZTY4LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYtMDY4NjE2MGE3ZTY4 LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOq7vKFC0 IwaWRD3Wny0tK6LpQhriEh5Lm6OGXJTjxxLE+3ETFazODkr9Z7u2JFkR/EwL7OpD 19W+2YZaAOW7HEEBL66kG7DUT5A49vI7mZrhhRlQLMTtSiKx3euRe1qT/nC7Jqt/ R8+9NS+eFBF16/nDRKLpuVIcbFZDHFC5WA+vsdDPTTSFIKGlICFNymaELaREXMTD 0w9dtxLe84Wf2UzGXptoLeShvEuQMCT3DGkBLIarnLBg5Nm1gOpYZqQQvD3+Zpc0 vbBKVhnBE5xMXnJZn/DoiZ6uPbtftYml2+M5wEDslfjQU0fMjUYCl9FK5r04ZOBC +Cxtf7JF99+EOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:48 2026 by rpki-client