This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json) Hash identifier: rcfsxXYF7IhMBix16LwiELJb0685CkLULDMP0Pb6THU= Subject key identifier: 09:2A:1B:DA:2A:B9:BA:88:A4:20:CA:1E:48:1F:28:84:16:CF:31:C9 Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4 Certificate serial: 019C413439D41630F521BBAF0D0A88D69A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft Manifest number: 0501 Signing time: Mon 09 Feb 2026 07:01:07 +0000 Manifest this update: Mon 09 Feb 2026 07:01:07 +0000 Manifest next update: Tue 10 Feb 2026 07:01:07 +0000 Files and hashes: 1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: hOXK67ByrcGkZYVY7zh/AcNf6tFRjyFQvxIT90N8JQE=) 2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:39:d4:16:30:f5:21:bb:af:0d:0a:88:d6:9a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4 Validity Not Before: Feb 9 07:01:07 2026 GMT Not After : Feb 10 07:01:07 2026 GMT Subject: CN=092a1bda2ab9ba88a420ca1e481f288416cf31c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:c8:d1:30:32:77:e9:e7:36:39:22:3e:22: ea:59:72:0b:18:2b:79:3d:28:0d:27:9d:af:8f:02: 03:c5:d5:c8:c8:7f:14:54:77:47:fc:38:ac:ad:9f: e3:4e:b0:0e:90:0f:c8:f8:44:5f:70:0d:aa:d1:35: 93:7f:3e:46:5e:fc:a5:d2:d5:57:34:9a:5c:01:4b: e8:92:1f:ed:a3:fd:5f:bf:3a:a0:42:bf:4e:be:95: 92:54:61:21:9b:f4:ee:43:f2:0a:6b:a3:51:5c:24: e6:12:f5:1e:11:60:bd:5c:ec:8f:2c:d3:f4:26:fb: 27:78:78:e0:06:88:7f:ae:23:dd:54:49:38:92:1a: 2b:2d:d3:48:4b:f6:48:93:1f:58:67:4f:ff:de:80: 7c:91:b0:11:d5:e5:c2:3c:04:be:83:e7:ed:09:e8: d4:80:dd:44:62:4b:a2:f0:0d:00:d7:0a:f8:52:3d: b4:13:c1:56:cd:47:c0:1a:c0:2f:d9:9f:0a:a4:e5: 0c:e5:a1:21:72:02:34:e2:9f:d8:ef:0d:98:63:aa: e5:8e:c2:62:67:05:60:55:e6:5a:a2:5d:f3:78:15: a7:c7:e5:fa:e7:cd:1f:c2:06:7d:84:23:db:2e:cf: d7:e4:6d:4d:e3:68:56:55:ae:e0:7f:4b:9f:00:a3: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:1B:DA:2A:B9:BA:88:A4:20:CA:1E:48:1F:28:84:16:CF:31:C9 X509v3 Authority Key Identifier: keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8e:fd:c6:0a:be:eb:43:15:0a:50:e5:c1:0f:39:01:0b:09: 12:9b:44:0f:46:93:57:4b:9b:4b:77:6b:64:85:cd:5f:65:b7: 78:73:2a:39:1a:7d:df:39:ab:45:0a:20:2c:7b:77:82:ec:1a: c2:d6:6c:77:d4:e8:86:06:a3:b3:1c:10:4d:ff:1c:8a:1e:83: 63:56:12:20:aa:e9:a9:e2:74:48:6c:fe:5b:fb:17:8b:e9:67: 0b:6b:77:69:3d:51:25:2b:2c:dc:55:9f:e0:f2:22:d5:cd:82: 19:a0:b3:8a:b7:d6:a4:a2:49:e4:68:a3:9e:1e:7a:c9:4c:98: 5b:fe:b9:bd:96:94:9b:2d:2a:a5:ae:51:95:0b:f6:6c:1c:06: 26:ac:19:06:3e:40:49:ea:ea:a1:3e:62:dc:7d:cf:39:92:71: 62:46:74:92:7a:f4:aa:01:96:58:cc:01:b4:35:6b:56:56:e7: bf:9d:e8:60:5b:31:db:40:a6:89:12:74:ed:78:71:8d:7b:9a: 9c:b6:7d:59:db:dd:a7:ad:51:9f:fb:c1:f1:05:99:2b:1b:12: b4:70:52:ec:4e:36:6c:b2:af:79:75:73:e2:5e:30:8a:49:f5: bc:96:bc:f6:4a:30:09:e8:83:bf:11:cf:ca:e7:38:fc:73:cf: 1d:bf:d7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNDnUFjD1IbuvDQqI1pqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1 ZmNkYTQwHhcNMjYwMjA5MDcwMTA3WhcNMjYwMjEwMDcwMTA3WjAzMTEwLwYDVQQD EygwOTJhMWJkYTJhYjliYTg4YTQyMGNhMWU0ODFmMjg4NDE2Y2YzMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uvI0TAyd+nnNjkiPiLqWXILGCt5 PSgNJ52vjwIDxdXIyH8UVHdH/DisrZ/jTrAOkA/I+ERfcA2q0TWTfz5GXvyl0tVX NJpcAUvokh/to/1fvzqgQr9OvpWSVGEhm/TuQ/IKa6NRXCTmEvUeEWC9XOyPLNP0 JvsneHjgBoh/riPdVEk4khorLdNIS/ZIkx9YZ0//3oB8kbAR1eXCPAS+g+ftCejU gN1EYkui8A0A1wr4Uj20E8FWzUfAGsAv2Z8KpOUM5aEhcgI04p/Y7w2YY6rljsJi ZwVgVeZaol3zeBWnx+X6580fwgZ9hCPbLs/X5G1N42hWVa7gf0ufAKObHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkqG9oqubqIpCDKHkgfKIQWzzHJMB8GA1UdIwQY MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt YmM5ODg3YTdiNTUzLzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo79xgq+ 60MVClDlwQ85AQsJEptED0aTV0ubS3drZIXNX2W3eHMqORp93zmrRQogLHt3guwa wtZsd9TohgajsxwQTf8cih6DY1YSIKrpqeJ0SGz+W/sXi+lnC2t3aT1RJSss3FWf 4PIi1c2CGaCzirfWpKJJ5Gijnh56yUyYW/65vZaUmy0qpa5RlQv2bBwGJqwZBj5A SerqoT5i3H3POZJxYkZ0knr0qgGWWMwBtDVrVlbnv53oYFsx20CmiRJ07XhxjXua nLZ9Wdvdp61Rn/vB8QWZKxsStHBS7E42bLKveXVz4l4wikn1vJa89kowCeiDvxHP yuc4/HPPHb/XOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:31 2026 by rpki-client