This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json) Hash identifier: weh4Tc1nZf0eIe/KXrfqkbgwmUqGQwqh3a/6e39U9zQ= Subject key identifier: AF:D4:26:62:E1:B0:31:07:2A:D6:0C:22:DA:BF:83:66:66:25:2B:5B Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Certificate serial: 019C4322932581354000F680746A9424A8B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: 4s+wGbiIY5a7dCSJDtRwduAWxw3/IzUvnKQTwTcbYzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:93:25:81:35:40:00:f6:80:74:6a:94:24:a8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=afd42662e1b031072ad60c22dabf836666252b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:11:c4:32:94:70:46:dd:18:36:d2:6c:a9: d5:f1:ae:f9:91:dd:d4:5f:10:d5:cb:e4:1c:62:1d: f1:57:08:63:33:fe:78:74:11:a0:8e:10:1f:b0:10: 98:9e:ff:d8:56:b6:d5:ac:c7:18:39:75:9e:c7:ab: e5:cb:00:79:39:5c:d1:19:2f:cd:27:2c:22:16:df: 00:5a:b1:ca:ec:ee:30:4a:45:2e:46:8e:19:07:7a: 80:da:4c:f5:8b:d5:fb:b4:05:b6:de:95:71:f4:f9: ee:70:e0:7c:fd:89:d1:fc:86:e5:59:bb:51:a8:08: 38:23:a0:14:24:af:0c:4d:5f:31:8e:7b:36:f0:df: 61:f0:3f:04:6f:09:cf:4d:38:ee:de:e6:01:64:4c: 5c:fc:7d:a8:16:f9:a9:03:7c:04:2a:b2:1c:0b:03: 55:8c:74:6d:b8:b8:de:a1:5d:99:c4:6d:09:6e:56: 33:19:36:38:b2:aa:ab:b9:28:72:d3:49:51:fd:30: 63:6b:d9:8a:b2:4e:4a:21:a4:cb:72:75:02:b1:7e: 54:78:06:02:37:f6:a8:fd:e0:0c:91:14:65:ab:10: 0f:3c:eb:d1:c4:ee:3c:8a:ff:cc:26:bc:77:13:ae: ff:53:3e:65:9a:82:4e:2a:ab:1d:16:c0:c4:91:2f: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:26:62:E1:B0:31:07:2A:D6:0C:22:DA:BF:83:66:66:25:2B:5B X509v3 Authority Key Identifier: keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:33:8e:6e:95:ad:94:11:8e:f0:94:ce:78:fa:66:a1:31: d5:9c:c2:5b:08:15:fb:4d:93:3e:a2:f7:58:5b:ab:cc:f7:15: 41:25:c2:05:b2:61:a2:83:45:ee:df:29:7c:b5:72:bb:9e:f0: 9f:95:d7:8f:1f:3f:d9:48:f1:84:79:20:66:ce:1d:e3:34:bd: d7:9a:17:29:7f:35:af:d1:6d:c5:b3:d1:22:f4:e7:aa:38:cf: 64:1f:a9:11:af:7a:25:af:db:2e:9b:94:5e:76:65:8e:09:9b: 93:7f:23:02:6e:21:46:eb:7d:28:a9:c3:b4:6d:8f:45:94:45: 4b:2d:3c:f0:3a:b2:7e:c1:ef:e3:8d:cf:fe:b2:fa:37:3e:7f: 68:61:5d:42:41:10:df:85:52:e7:f1:63:b1:8e:e8:b6:be:b7: a5:07:34:d4:7d:71:52:28:23:5a:8d:4a:49:56:7b:71:76:d5: 65:e7:88:e6:29:1c:21:08:46:ab:a5:49:eb:90:ae:4c:1c:92: b0:f4:0c:10:0e:07:d2:a6:e1:85:ae:1f:39:7d:ae:cc:0e:28: 4f:c8:1d:ba:18:42:a7:28:e8:74:0d:e1:a2:e9:a2:f0:ff:95: df:c9:1f:17:9b:ad:c5:60:98:02:06:76:38:9f:7e:09:33:d6: d6:66:dd:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpMlgTVAAPaAdGqUJKi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4 MWFiM2EwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD EyhhZmQ0MjY2MmUxYjAzMTA3MmFkNjBjMjJkYWJmODM2NjY2MjUyYjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxARxDKUcEbdGDbSbKnV8a75kd3U XxDVy+QcYh3xVwhjM/54dBGgjhAfsBCYnv/YVrbVrMcYOXWex6vlywB5OVzRGS/N JywiFt8AWrHK7O4wSkUuRo4ZB3qA2kz1i9X7tAW23pVx9PnucOB8/YnR/IblWbtR qAg4I6AUJK8MTV8xjns28N9h8D8EbwnPTTju3uYBZExc/H2oFvmpA3wEKrIcCwNV jHRtuLjeoV2ZxG0JblYzGTY4sqqruShy00lR/TBja9mKsk5KIaTLcnUCsX5UeAYC N/ao/eAMkRRlqxAPPOvRxO48iv/MJrx3E67/Uz5lmoJOKqsdFsDEkS/8WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/UJmLhsDEHKtYMItq/g2ZmJStbMB8GA1UdIwQY MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYUzjm6V rZQRjvCUznj6ZqEx1ZzCWwgV+02TPqL3WFurzPcVQSXCBbJhooNF7t8pfLVyu57w n5XXjx8/2UjxhHkgZs4d4zS915oXKX81r9FtxbPRIvTnqjjPZB+pEa96Ja/bLpuU XnZljgmbk38jAm4hRut9KKnDtG2PRZRFSy088DqyfsHv443P/rL6Nz5/aGFdQkEQ 34VS5/FjsY7otr63pQc01H1xUigjWo1KSVZ7cXbVZeeI5ikcIQhGq6VJ65CuTByS sPQMEA4H0qbhha4fOX2uzA4oT8gduhhCpyjodA3houmi8P+V38kfF5utxWCYAgZ2 OJ9+CTPW1mbd3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:51 2026 by rpki-client