This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json) Hash identifier: eAS8xLfuTHzaEjfR8t32uok8BgA+MBpLInhNUFFawq4= Subject key identifier: DE:AD:4E:B3:B6:59:C1:C6:FD:76:01:32:1A:92:53:8D:49:4E:15:9C Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Certificate serial: 019C42B44F5F95D39B044258904CB6D537D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft Manifest number: 13D9 Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: 73UCxpDNZULQFzYAsKDQ1A7nLKI.roa (hash: Puc2EYq06Fc5Snei+nqiCectlFMfZtUPb3hps442dL8=) 2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: 5kIMollGdncvIxsIt2P9O4tOe0nukJY6PK0MTVAa/YA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4f:5f:95:d3:9b:04:42:58:90:4c:b6:d5:37:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=dead4eb3b659c1c6fd7601321a92538d494e159c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:13:b6:c8:45:a8:a7:5a:e9:38:26:cd:3c: f8:db:71:0c:9d:5b:2c:fd:a0:72:b0:56:ba:65:8d: 9e:e3:88:e0:f3:fa:56:5c:34:8d:5e:2a:bb:72:2e: c3:da:19:b0:40:7b:42:1e:33:0e:84:37:e2:e3:e8: 87:ef:fe:ab:08:5b:df:7a:6c:9c:d5:32:48:8f:a1: 3d:f7:43:3a:50:d9:1b:e7:34:97:b6:82:cf:34:1b: c5:24:79:e7:b2:84:8a:51:62:65:49:47:0c:26:c5: a4:3c:c7:7a:91:1f:ec:36:01:d4:cf:53:bc:4e:b4: f3:e6:23:d7:61:9e:d3:a2:a9:e2:7d:58:b7:1c:48: 3c:19:30:cd:2f:4a:37:c6:88:f1:90:33:8a:f2:64: 9b:18:47:c6:7a:59:21:7d:27:6e:68:08:18:f6:fc: cb:73:4a:3f:9a:13:9a:05:f5:6d:06:f3:46:89:e7: 2e:e5:40:12:21:c9:6b:0e:fe:cf:33:71:d1:40:77: ea:31:c4:2a:0e:fd:22:33:c2:67:39:d9:ff:d1:9b: df:39:37:88:f1:df:bf:94:0b:e3:df:95:35:90:bc: df:62:08:50:53:b3:c8:83:7e:c0:8b:b0:d7:a9:dc: 5e:69:9d:10:75:c0:5f:de:2f:13:86:d7:2f:1d:cf: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:4E:B3:B6:59:C1:C6:FD:76:01:32:1A:92:53:8D:49:4E:15:9C X509v3 Authority Key Identifier: keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b7:46:ff:ae:8c:00:f5:f8:4f:be:66:78:05:df:44:9b:7b: 13:f3:d2:00:66:44:ed:14:9a:aa:a0:62:97:81:a6:02:12:f0: d6:a5:93:cf:a6:29:41:f0:c1:d4:6e:d0:3a:6f:ae:3b:76:16: d1:49:ae:fc:5d:66:5c:6d:79:83:a4:2f:0f:f4:a0:5d:9e:13: ff:06:62:13:87:34:03:a3:8e:db:e9:53:a4:1f:b8:20:01:24: e8:cc:66:65:eb:89:fc:e9:59:21:52:e6:83:d1:dc:17:0e:07: 9a:e6:6f:aa:59:a0:3d:1b:f6:a0:c7:49:59:f1:94:af:ac:71: 30:de:e8:7f:31:96:92:62:88:43:3c:b8:99:bb:28:1a:d7:b3: 8d:00:0f:04:fb:55:b3:63:b0:f4:34:a1:16:cd:a0:d5:80:da: 4b:6c:6d:6a:4a:c3:6a:ce:ca:28:90:2a:d3:b8:90:cc:f4:a1: 2d:d9:16:dd:09:9d:cd:d2:dd:01:90:42:ca:b9:9b:ac:ba:28: 35:55:73:b1:c2:10:1e:b4:8f:6b:c0:fd:78:ef:18:d7:27:9e: fc:49:93:a7:ab:91:6d:9e:38:0f:8a:3c:c8:c1:a2:34:e6:31: 2b:47:ab:4c:ef:a4:1d:98:71:a6:13:eb:82:17:07:41:f1:3e: c8:70:35:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtE9fldObBEJYkEy21TfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw YzExMWIwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD EyhkZWFkNGViM2I2NTljMWM2ZmQ3NjAxMzIxYTkyNTM4ZDQ5NGUxNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4TtshFqKda6TgmzTz423EMnVss /aBysFa6ZY2e44jg8/pWXDSNXiq7ci7D2hmwQHtCHjMOhDfi4+iH7/6rCFvfemyc 1TJIj6E990M6UNkb5zSXtoLPNBvFJHnnsoSKUWJlSUcMJsWkPMd6kR/sNgHUz1O8 TrTz5iPXYZ7ToqnifVi3HEg8GTDNL0o3xojxkDOK8mSbGEfGelkhfSduaAgY9vzL c0o/mhOaBfVtBvNGiecu5UASIclrDv7PM3HRQHfqMcQqDv0iM8JnOdn/0ZvfOTeI 8d+/lAvj35U1kLzfYghQU7PIg37Ai7DXqdxeaZ0QdcBf3i8ThtcvHc/9KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6tTrO2WcHG/XYBMhqSU41JThWcMB8GA1UdIwQY MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5 LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerdG/66M APX4T75meAXfRJt7E/PSAGZE7RSaqqBil4GmAhLw1qWTz6YpQfDB1G7QOm+uO3YW 0Umu/F1mXG15g6QvD/SgXZ4T/wZiE4c0A6OO2+lTpB+4IAEk6MxmZeuJ/OlZIVLm g9HcFw4HmuZvqlmgPRv2oMdJWfGUr6xxMN7ofzGWkmKIQzy4mbsoGtezjQAPBPtV s2Ow9DShFs2g1YDaS2xtakrDas7KKJAq07iQzPShLdkW3QmdzdLdAZBCyrmbrLoo NVVzscIQHrSPa8D9eO8Y1yee/EmTp6uRbZ44D4o8yMGiNOYxK0erTO+kHZhxphPr ghcHQfE+yHA1Uw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:41 2026 by rpki-client