This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json) Hash identifier: PtnCF3GNElVWUI9+8QScwwb08Q6+jiAoJeRt0J9IXF8= Subject key identifier: 57:4A:2E:1D:7B:8E:AC:E9:CD:2B:18:80:99:B6:49:70:F4:A4:3F:6B Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Certificate serial: 019C432281EEF79629D86299028F731DFB8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft Manifest number: 057D Signing time: Mon 09 Feb 2026 16:01:00 +0000 Manifest this update: Mon 09 Feb 2026 16:01:00 +0000 Manifest next update: Tue 10 Feb 2026 16:01:00 +0000 Files and hashes: 1: 6sa9q4Dov1lYR1zbGcSJqHuAACs.roa (hash: dZJcWFj8zVWM8Kfo82Oh4jZ+RxNvw0lQ3GRg+Xs1t18=) 2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: vwAo/QgV94Ajtx1Z41X2b+V6Fxc9Qcg6vgidsBH1k3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:81:ee:f7:96:29:d8:62:99:02:8f:73:1d:fb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4 Validity Not Before: Feb 9 16:01:00 2026 GMT Not After : Feb 10 16:01:00 2026 GMT Subject: CN=574a2e1d7b8eace9cd2b188099b64970f4a43f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:84:58:07:47:bd:9c:e7:0f:b7:ce:c0:5b: 8d:24:cc:f0:44:1d:12:8a:06:e0:e5:d7:dd:3e:2f: 89:dc:f2:4f:33:66:3c:46:15:99:4f:c2:9d:e5:1a: e6:99:b2:fc:d9:9f:d8:4f:65:6d:bc:df:14:d4:9e: 6a:a0:07:0e:73:a1:35:41:b5:6a:55:4b:9f:0d:fd: 81:22:9f:b6:22:11:0a:2f:f9:77:99:2e:81:a2:d3: 29:29:71:5b:43:21:03:0b:14:a0:b5:35:11:9f:65: f4:a3:e7:48:3b:d9:bd:7e:11:9e:b9:4e:4d:e7:61: 60:a8:c5:09:37:49:9a:a2:ae:9a:8c:78:92:24:af: e4:ce:fb:5e:8a:4e:70:34:14:7f:51:42:30:ff:f6: d6:51:82:5f:49:53:0e:80:87:84:9b:6a:a9:e4:f1: 88:b0:12:76:44:61:91:1c:bb:1c:82:70:fc:75:0e: 02:e0:ee:2c:a7:b7:3d:f5:80:15:5d:5c:e6:b8:fb: 4f:2f:d8:d6:ac:81:e3:a5:b4:ca:12:43:bc:35:d5: e5:d7:69:49:27:a0:25:44:14:2b:59:04:f9:cd:8d: d1:7f:d7:44:72:a8:d1:fc:d2:7c:b6:e2:b3:d4:ed: ec:17:68:35:f7:1f:42:85:bf:ed:ad:1b:59:0b:90: 84:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:2E:1D:7B:8E:AC:E9:CD:2B:18:80:99:B6:49:70:F4:A4:3F:6B X509v3 Authority Key Identifier: keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1b:92:c4:a6:88:6d:4c:23:1a:8f:3c:b9:79:37:4f:94:67: db:4d:c8:09:c7:2d:b7:61:3e:32:a4:d2:e5:17:94:6a:91:7b: be:53:61:96:85:6e:59:0a:6b:ce:36:9c:19:1d:cf:1c:0c:b9: 64:32:4e:c4:fa:12:78:ec:40:f3:c2:87:6c:e0:61:5d:72:99: 31:36:7d:f4:39:98:c9:e1:12:d1:9c:2b:5e:bb:68:4d:ab:63: 88:d1:43:89:e0:49:b5:b5:9a:57:a4:b6:e3:1e:9e:72:71:8f: 4d:1c:6f:fe:0a:da:a9:dc:13:74:57:8c:e5:d4:a2:80:39:16: b2:51:23:5c:51:13:63:70:aa:c8:03:10:bc:f5:ae:d8:c6:89: 38:c2:b6:eb:da:86:12:ba:ec:d5:5c:65:fd:7f:a7:0b:03:aa: 54:3e:5e:d1:29:ea:7b:f3:45:d7:e4:f9:7d:3f:84:e8:77:64: 46:10:a9:d1:d5:38:48:19:d5:58:f3:54:4f:94:56:8c:98:19: 55:81:88:ee:2b:bd:df:db:ca:c9:28:3d:b6:1e:e6:8b:ec:6c: 64:8b:22:83:5f:8a:0e:6d:ba:7d:a9:11:1c:0f:24:e4:43:6a: 93:fd:9b:9c:df:e9:6c:37:30:fa:b7:7e:b9:99:69:fe:eb:cd: 44:12:06:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoHu95Yp2GKZAo9zHfuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZTUxNDhiMzk5YjUzYmE1MmZkNjhlYWJkYmRmNmFkOTlj YzcxZjQwHhcNMjYwMjA5MTYwMTAwWhcNMjYwMjEwMTYwMTAwWjAzMTEwLwYDVQQD Eyg1NzRhMmUxZDdiOGVhY2U5Y2QyYjE4ODA5OWI2NDk3MGY0YTQzZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+EWAdHvZznD7fOwFuNJMzwRB0S igbg5dfdPi+J3PJPM2Y8RhWZT8Kd5RrmmbL82Z/YT2VtvN8U1J5qoAcOc6E1QbVq VUufDf2BIp+2IhEKL/l3mS6BotMpKXFbQyEDCxSgtTURn2X0o+dIO9m9fhGeuU5N 52FgqMUJN0maoq6ajHiSJK/kzvteik5wNBR/UUIw//bWUYJfSVMOgIeEm2qp5PGI sBJ2RGGRHLscgnD8dQ4C4O4sp7c99YAVXVzmuPtPL9jWrIHjpbTKEkO8NdXl12lJ J6AlRBQrWQT5zY3Rf9dEcqjR/NJ8tuKz1O3sF2g19x9Chb/trRtZC5CEnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdKLh17jqzpzSsYgJm2SXD0pD9rMB8GA1UdIwQY MBaAFKjlFIs5m1O6Uv1o6r299q2ZzHH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQt ZTczNDk5M2YxMWFjLzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQtZTczNDk5M2YxMWFj LzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRuSxKaI bUwjGo88uXk3T5Rn203ICcctt2E+MqTS5ReUapF7vlNhloVuWQprzjacGR3PHAy5 ZDJOxPoSeOxA88KHbOBhXXKZMTZ99DmYyeES0ZwrXrtoTatjiNFDieBJtbWaV6S2 4x6ecnGPTRxv/graqdwTdFeM5dSigDkWslEjXFETY3CqyAMQvPWu2MaJOMK269qG Errs1Vxl/X+nCwOqVD5e0Snqe/NF1+T5fT+E6HdkRhCp0dU4SBnVWPNUT5RWjJgZ VYGI7iu939vKySg9th7mi+xsZIsig1+KDm26fakRHA8k5ENqk/2bnN/pbDcw+rd+ uZlp/uvNRBIGig== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:56 2026 by rpki-client