This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json) Hash identifier: 7MFtSN7cABRxfO7X8J/7C+PWg4974s79at4k74cUbvw= Subject key identifier: 50:3E:21:5B:E6:7D:B9:AB:A5:4C:E7:2B:02:38:AF:8B:0F:EA:C3:EB Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Certificate serial: 019C41D8C97CB3EFDDD0B1382802C8DCAA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 10:00:52 +0000 Manifest this update: Mon 09 Feb 2026 10:00:52 +0000 Manifest next update: Tue 10 Feb 2026 10:00:52 +0000 Files and hashes: 1: 89B9QRpsAYslipobPKLMe4rYzLU.roa (hash: sMU4kNtcmn2Zuj4Vpvbkloa2tK9j6EDzNo9Vzz7bFFo=) 2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: JeyI9YwIK2Nj8wCcRxSUjdEOa6mPIQ4A9n9hl+OacUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c9:7c:b3:ef:dd:d0:b1:38:28:02:c8:dc:aa:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Validity Not Before: Feb 9 10:00:52 2026 GMT Not After : Feb 10 10:00:52 2026 GMT Subject: CN=503e215be67db9aba54ce72b0238af8b0feac3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:8a:20:50:65:6b:c2:71:ff:23:2d:d7:8b: 85:71:93:d1:0c:19:26:ac:14:ab:1a:2f:4a:63:ab: 2c:70:a9:af:aa:2a:88:6b:1f:0c:a2:44:73:f6:37: f3:17:df:58:6d:eb:79:fe:9e:50:84:63:a8:62:9d: 7b:67:2f:ed:a4:a8:b9:aa:97:6a:b4:aa:7f:98:cb: 3e:d9:ec:3b:e2:8e:c4:87:1b:8c:2d:ac:1a:c0:8c: c6:ed:ec:90:39:10:ea:76:48:ae:2e:fe:90:50:85: 99:a4:95:af:a6:6e:2d:dd:16:31:c6:e4:2c:78:12: d4:e5:7e:26:f0:1f:d1:b8:ec:81:14:2b:73:a5:74: 3e:cd:09:e7:ee:39:d2:87:73:58:69:20:ed:f7:65: b8:39:fe:12:de:8e:21:66:de:cd:9e:95:a6:43:83: 6c:5b:6a:69:1b:ee:a0:e7:d5:57:ac:95:69:aa:53: 39:33:a8:a1:36:ed:95:e0:79:fe:45:bb:cc:ec:bf: 14:17:d6:fb:a3:31:ac:ac:f4:c3:31:0c:ad:93:9a: 66:99:ae:51:c7:a4:ed:86:6f:dc:b4:01:4f:8f:46: 66:60:3e:d3:87:fc:44:a3:6d:9c:ee:81:08:43:0e: cd:6f:03:8b:91:00:6e:d9:a7:52:11:31:61:08:c8: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3E:21:5B:E6:7D:B9:AB:A5:4C:E7:2B:02:38:AF:8B:0F:EA:C3:EB X509v3 Authority Key Identifier: keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b1:ad:70:04:8b:4a:c2:d4:f8:cf:13:32:be:20:f0:93:0e: 09:c9:8a:5b:36:4a:72:e5:79:9f:c5:96:ef:a7:0c:c0:95:e8: ad:b1:79:42:d2:d3:46:35:ad:ce:4e:8e:76:19:fc:ec:0d:5c: 7f:79:5a:1b:fb:85:ee:35:f6:94:03:fc:21:38:60:d4:69:16: 18:6d:63:19:bb:9e:3d:6d:f9:f1:40:68:b1:7c:66:b5:25:02: 63:61:c2:97:f0:0b:7d:46:d2:9a:7a:87:61:19:ca:b6:86:14: e2:63:51:8a:c6:7d:c8:bc:f2:73:82:ee:f8:e6:d1:f7:85:bf: 6a:02:66:53:eb:45:88:fa:7a:48:d1:ca:09:8d:52:61:56:7a: 79:cb:04:9d:de:c1:86:0c:cb:3d:97:d8:b2:12:0a:cd:1d:d7: 1f:62:2e:82:f3:0f:53:b5:8a:1d:f0:40:82:ef:f8:a9:40:c9: 78:ed:09:fe:34:4b:1d:23:7c:1b:87:70:00:1d:22:f1:37:28: 41:1d:01:72:84:f1:22:ef:a4:d2:22:73:ed:6f:52:8a:d8:48: 3d:98:6e:ee:44:71:8f:13:07:1d:df:b3:bd:5b:49:c1:04:e9: 6d:79:4f:97:ae:38:c7:38:54:d7:06:96:df:14:55:d1:db:dc: 42:2f:7e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ml8s+/d0LE4KALI3KpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl YWRiODgwHhcNMjYwMjA5MTAwMDUyWhcNMjYwMjEwMTAwMDUyWjAzMTEwLwYDVQQD Eyg1MDNlMjE1YmU2N2RiOWFiYTU0Y2U3MmIwMjM4YWY4YjBmZWFjM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+CKIFBla8Jx/yMt14uFcZPRDBkm rBSrGi9KY6sscKmvqiqIax8MokRz9jfzF99Ybet5/p5QhGOoYp17Zy/tpKi5qpdq tKp/mMs+2ew74o7EhxuMLawawIzG7eyQORDqdkiuLv6QUIWZpJWvpm4t3RYxxuQs eBLU5X4m8B/RuOyBFCtzpXQ+zQnn7jnSh3NYaSDt92W4Of4S3o4hZt7NnpWmQ4Ns W2ppG+6g59VXrJVpqlM5M6ihNu2V4Hn+RbvM7L8UF9b7ozGsrPTDMQytk5pmma5R x6Tthm/ctAFPj0ZmYD7Th/xEo22c7oEIQw7NbwOLkQBu2adSETFhCMhFxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA+IVvmfbmrpUznKwI4r4sP6sPrMB8GA1UdIwQY MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLGtcASL SsLU+M8TMr4g8JMOCcmKWzZKcuV5n8WW76cMwJXorbF5QtLTRjWtzk6Odhn87A1c f3laG/uF7jX2lAP8IThg1GkWGG1jGbuePW358UBosXxmtSUCY2HCl/ALfUbSmnqH YRnKtoYU4mNRisZ9yLzyc4Lu+ObR94W/agJmU+tFiPp6SNHKCY1SYVZ6ecsEnd7B hgzLPZfYshIKzR3XH2IugvMPU7WKHfBAgu/4qUDJeO0J/jRLHSN8G4dwAB0i8Tco QR0BcoTxIu+k0iJz7W9SithIPZhu7kRxjxMHHd+zvVtJwQTpbXlPl644xzhU1waW 3xRV0dvcQi9+mw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:11 2026 by rpki-client