This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json) Hash identifier: aIeF679KHl+oD6hIYllTfZ1V0VSyPa1wEbPm0je18rQ= Subject key identifier: 7C:52:25:8E:ED:4F:7D:84:EC:06:6E:56:75:72:F4:E5:A2:28:4B:52 Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Certificate serial: 019C4321DFD5FEE8A1A35385FC439070FDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 16:00:19 +0000 Manifest this update: Mon 09 Feb 2026 16:00:19 +0000 Manifest next update: Tue 10 Feb 2026 16:00:19 +0000 Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: aqRnTpM2KlOjicoqCwf85Je4q5HAMwewj3naE73ozNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:df:d5:fe:e8:a1:a3:53:85:fc:43:90:70:fd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f Validity Not Before: Feb 9 16:00:19 2026 GMT Not After : Feb 10 16:00:19 2026 GMT Subject: CN=7c52258eed4f7d84ec066e567572f4e5a2284b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:e2:64:b1:28:c3:15:b6:2e:7f:24:2d:02: 74:dc:3c:44:aa:b4:ca:e6:be:43:0a:8f:5d:00:f2: 6c:76:a6:27:44:5f:85:72:bc:75:4b:bc:b0:7c:ee: 14:0e:6e:d8:96:02:70:14:d5:a4:97:19:38:a3:76: 06:04:f5:1d:1d:6d:87:7a:1d:c8:05:9a:2a:be:4e: c9:33:82:e9:95:55:3a:a3:d8:99:71:b1:86:87:39: 80:ee:8f:b1:e0:fa:be:2b:95:c1:ef:2a:a8:1b:d2: 20:a1:9a:3f:5a:72:7e:fd:44:0a:44:44:c1:3c:a3: 77:52:03:c0:91:21:45:b3:b1:17:43:fa:10:1a:77: 77:a4:54:94:9f:c5:fc:f7:17:4b:2b:3e:88:36:d4: 81:77:f1:dc:e7:73:33:8f:79:a6:08:68:0e:d9:cb: 3d:1c:d3:3f:1e:e2:49:bf:a5:c7:47:94:a6:f5:d2: ae:ec:ff:d2:8e:ca:6e:54:81:e9:d0:f9:5f:40:38: b0:1a:43:8d:90:18:75:ca:68:3a:3f:2b:fd:e0:6b: 91:a6:b0:40:c4:3b:1e:e5:a9:5a:84:2e:c5:1c:4f: 61:e8:0e:77:0d:34:fc:92:c6:e9:e8:28:97:50:35: 9e:4d:9d:ea:79:a6:cc:55:7a:b6:71:d7:5f:74:72: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:52:25:8E:ED:4F:7D:84:EC:06:6E:56:75:72:F4:E5:A2:28:4B:52 X509v3 Authority Key Identifier: keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:19:76:c9:b8:c1:60:33:f4:fd:24:0a:34:3d:0f:51:4b:19: 5c:29:f1:82:7d:a3:76:6c:e4:ab:18:dd:a1:82:74:72:3f:69: 41:18:7b:b4:b6:a8:f1:b0:86:d0:ef:b8:b3:97:74:42:01:3c: 47:1a:0a:96:49:c8:4e:08:11:f6:c4:6d:ea:14:8c:7a:fb:4d: 0b:05:82:7c:0a:6f:08:19:7c:62:77:73:20:61:2b:63:ab:08: e0:63:2c:b6:b0:36:5a:89:ac:35:39:d4:93:c1:8d:d9:37:14: a8:dc:d5:57:0e:8c:90:f8:b9:a9:b7:ac:bc:86:24:7d:2b:4d: c5:85:69:b0:d6:a6:79:0b:ea:c2:3a:d7:fd:1f:95:84:2d:d0: fe:20:ae:a3:0d:ec:10:45:ba:90:f2:cd:51:b0:bd:1d:32:b3: 65:0c:a4:b1:73:11:8d:2c:98:90:bf:c2:03:68:66:cc:ef:3b: 97:c5:0e:80:60:99:44:ef:ac:8b:1c:0a:4b:35:f3:76:84:9b: 0f:55:df:85:75:2c:00:70:98:33:22:27:2f:9c:29:60:72:7b: 92:4e:17:e8:61:be:0f:56:68:32:9b:f8:a4:73:f2:58:6a:4a: 1b:ab:8e:90:53:15:f0:c6:b0:9b:dd:b6:40:4c:ce:c2:18:27: 8e:3c:33:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDId/V/uiho1OF/EOQcP3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm Yjc3NmYwHhcNMjYwMjA5MTYwMDE5WhcNMjYwMjEwMTYwMDE5WjAzMTEwLwYDVQQD Eyg3YzUyMjU4ZWVkNGY3ZDg0ZWMwNjZlNTY3NTcyZjRlNWEyMjg0YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEviZLEowxW2Ln8kLQJ03DxEqrTK 5r5DCo9dAPJsdqYnRF+Fcrx1S7ywfO4UDm7YlgJwFNWklxk4o3YGBPUdHW2Heh3I BZoqvk7JM4LplVU6o9iZcbGGhzmA7o+x4Pq+K5XB7yqoG9IgoZo/WnJ+/UQKRETB PKN3UgPAkSFFs7EXQ/oQGnd3pFSUn8X89xdLKz6INtSBd/Hc53Mzj3mmCGgO2cs9 HNM/HuJJv6XHR5Sm9dKu7P/SjspuVIHp0PlfQDiwGkONkBh1ymg6Pyv94GuRprBA xDse5alahC7FHE9h6A53DTT8ksbp6CiXUDWeTZ3qeabMVXq2cddfdHLsvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxSJY7tT32E7AZuVnVy9OWiKEtSMB8GA1UdIwQY MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2 LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRl2ybjB YDP0/SQKND0PUUsZXCnxgn2jdmzkqxjdoYJ0cj9pQRh7tLao8bCG0O+4s5d0QgE8 RxoKlknITggR9sRt6hSMevtNCwWCfApvCBl8YndzIGErY6sI4GMstrA2WomsNTnU k8GN2TcUqNzVVw6MkPi5qbesvIYkfStNxYVpsNameQvqwjrX/R+VhC3Q/iCuow3s EEW6kPLNUbC9HTKzZQyksXMRjSyYkL/CA2hmzO87l8UOgGCZRO+sixwKSzXzdoSb D1XfhXUsAHCYMyInL5wpYHJ7kk4X6GG+D1ZoMpv4pHPyWGpKG6uOkFMV8Mawm922 QEzOwhgnjjwzKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:44 2026 by rpki-client