This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json) Hash identifier: QPiYnfAnQaYJqWw2DH288bnZ62bEBMJJ6TNzHa/1wg8= Subject key identifier: 4B:6C:AF:C8:2A:2B:52:19:C4:1C:83:B5:A7:39:B5:83:60:5F:E3:36 Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d Certificate serial: 019C424695F3E100EA474C435F4AE9A8BB8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft Manifest number: 0A74 Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: 1hEkw6mcJSPAXrkOAVz1O1Zz43os52IuEQZLFPwbNas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:95:f3:e1:00:ea:47:4c:43:5f:4a:e9:a8:bb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=4b6cafc82a2b5219c41c83b5a739b583605fe336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:2c:db:20:29:a3:48:c6:26:14:e7:c5:03: 1b:61:83:3f:ed:de:9a:94:6a:4c:ad:30:bb:c1:27: 88:7c:2e:21:3f:21:96:06:bb:3d:55:19:d4:b1:8f: 27:b7:01:32:43:8e:0d:fe:c4:03:a4:9d:d1:2b:60: 3d:65:93:da:55:51:82:5e:56:8b:32:6d:16:49:ae: d6:fb:79:df:fc:77:0d:00:92:74:e5:89:10:2f:dd: b8:66:d9:0d:77:9a:cf:26:d3:52:02:35:50:fd:d0: c9:dc:7e:e9:45:6e:57:0b:24:48:7f:94:a4:3c:bf: 0f:54:fb:77:da:d3:68:b2:45:50:3e:6e:36:29:d0: 76:05:3e:38:72:20:93:91:da:8e:6d:dc:ac:e1:42: f9:6e:92:7c:35:c9:a3:31:af:fb:d3:fc:35:dd:f1: fb:5b:80:de:10:e1:66:dd:46:44:ac:74:16:37:01: 46:83:5e:54:80:24:06:9e:50:ad:35:fd:02:c1:67: 4a:f9:1e:a1:85:fa:d7:74:3e:5a:c6:f3:28:52:cc: 80:4c:52:9b:61:29:63:00:3f:23:fd:d1:80:5f:33: 7a:ab:38:4a:8b:29:2e:d0:74:d8:d1:d4:99:d9:a1: 0e:3f:88:7a:7b:24:4a:09:a3:4c:f9:ef:cd:f7:4d: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6C:AF:C8:2A:2B:52:19:C4:1C:83:B5:A7:39:B5:83:60:5F:E3:36 X509v3 Authority Key Identifier: keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:f8:ed:58:eb:74:4e:0b:47:26:6a:e2:7c:6e:a1:19:e8: 11:d0:10:34:f7:37:2a:b1:d8:25:46:ed:57:e3:22:26:fb:5c: 4b:ff:05:87:95:79:b8:1b:a4:22:13:f2:de:cc:58:27:23:2c: dc:37:dd:0f:e6:05:0f:d1:9b:6f:bf:ad:b6:e9:f5:4a:17:fd: 00:96:a6:f0:19:9a:a6:6e:5b:c7:9d:51:4e:91:a6:01:e2:c7: 47:ed:df:4f:9f:9f:da:a4:40:d3:fa:66:ad:27:f3:2d:b7:8c: a8:19:e7:e4:a7:d2:7c:e0:b6:89:3a:24:df:fd:5f:a1:d2:31: da:4a:ef:aa:db:cd:da:41:05:bc:8d:fc:e3:2e:71:68:9f:f6: cc:6c:24:e2:fa:22:1d:89:67:9d:6c:00:23:c3:79:80:72:13: bf:fb:fd:be:f7:ed:e8:f6:2f:34:a6:0a:77:af:a4:ba:af:29: 09:79:2b:4e:4c:e8:8b:66:e3:e9:ff:59:1a:d8:50:79:37:c3: 49:44:7a:57:ab:90:a0:6d:a1:0e:65:95:77:84:e8:09:57:99: 1b:e7:81:a2:32:99:3b:e2:5d:ff:e8:cc:18:34:98:e6:4a:f9: a4:16:ca:d4:6d:fc:d0:a6:17:af:aa:21:61:0a:fa:bd:62:ed: 11:c6:ae:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpXz4QDqR0xDX0rpqLuNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmM4MDA4MDYzN2ZhY2IxNmY1MTljNWQ5N2VjMjdiM2Q4 NTA5N2QwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD Eyg0YjZjYWZjODJhMmI1MjE5YzQxYzgzYjVhNzM5YjU4MzYwNWZlMzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHgs2yApo0jGJhTnxQMbYYM/7d6a lGpMrTC7wSeIfC4hPyGWBrs9VRnUsY8ntwEyQ44N/sQDpJ3RK2A9ZZPaVVGCXlaL Mm0WSa7W+3nf/HcNAJJ05YkQL924ZtkNd5rPJtNSAjVQ/dDJ3H7pRW5XCyRIf5Sk PL8PVPt32tNoskVQPm42KdB2BT44ciCTkdqObdys4UL5bpJ8NcmjMa/70/w13fH7 W4DeEOFm3UZErHQWNwFGg15UgCQGnlCtNf0CwWdK+R6hhfrXdD5axvMoUsyATFKb YSljAD8j/dGAXzN6qzhKiyku0HTY0dSZ2aEOP4h6eyRKCaNM+e/N902KmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtsr8gqK1IZxByDtac5tYNgX+M2MB8GA1UdIwQY MBaAFKtsgAgGN/rLFvUZxdl+wns9hQl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTkt ZTllMWQ5MWE5ODE2LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82YTJjNWMtOWUxYi00NTYxLWE0ZTktZTllMWQ5MWE5ODE2 LzEvcTJ5QUNBWTMtc3NXOVJuRjJYN0NlejJGQ1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAn47Vjr dE4LRyZq4nxuoRnoEdAQNPc3KrHYJUbtV+MiJvtcS/8Fh5V5uBukIhPy3sxYJyMs 3DfdD+YFD9Gbb7+ttun1Shf9AJam8Bmapm5bx51RTpGmAeLHR+3fT5+f2qRA0/pm rSfzLbeMqBnn5KfSfOC2iTok3/1fodIx2krvqtvN2kEFvI384y5xaJ/2zGwk4voi HYlnnWwAI8N5gHITv/v9vvft6PYvNKYKd6+kuq8pCXkrTkzoi2bj6f9ZGthQeTfD SUR6V6uQoG2hDmWVd4ToCVeZG+eBojKZO+Jd/+jMGDSY5kr5pBbK1G380KYXr6oh YQr6vWLtEcau3w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:54 2026 by rpki-client