This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json) Hash identifier: QQb3Y43yii6vjbb265eACdkUy8TMDldS7Vg9lsAWCcs= Subject key identifier: 25:0E:A0:C7:05:11:E8:07:C5:25:4C:00:9E:74:FC:98:30:3A:27:98 Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612 Certificate serial: 019C427E25AD896CA501672A83D28D6602DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft Manifest number: 1819 Signing time: Mon 09 Feb 2026 13:01:29 +0000 Manifest this update: Mon 09 Feb 2026 13:01:29 +0000 Manifest next update: Tue 10 Feb 2026 13:01:29 +0000 Files and hashes: 1: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: wPTTR9iTEZ3JB09NHMqZeZqnTfC5TetaCmk5sPOm+oU=) 2: k3T33aZGj24vxqNw1UfxEFrHk44.roa (hash: 3m3SCEsy+0+eUIAdjTP7HM49Wof/8SG/a2XAHOJJcbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:25:ad:89:6c:a5:01:67:2a:83:d2:8d:66:02:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612 Validity Not Before: Feb 9 13:01:29 2026 GMT Not After : Feb 10 13:01:29 2026 GMT Subject: CN=250ea0c70511e807c5254c009e74fc98303a2798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:83:6e:71:0c:f3:61:53:13:bb:68:ad:08:2a: cf:32:9c:57:f1:5c:b9:c7:09:14:c9:9d:f3:16:ec: 10:41:27:d1:03:a3:44:c4:b5:25:de:40:cf:24:95: 94:30:04:4b:79:a2:e3:0c:f4:88:65:0b:6b:a9:e6: 7a:10:06:12:c9:c3:ad:24:81:2a:5d:9d:91:85:d0: 18:df:6d:06:02:a8:99:b3:3a:c9:c5:81:b9:0c:a9: 3d:f9:3b:df:67:58:19:c6:7a:4f:e8:db:36:6e:0a: 73:c6:47:8d:7e:91:c0:1b:c1:12:4d:34:1a:61:27: 02:37:12:9c:d3:19:b5:49:df:da:25:74:1d:8b:3f: b9:d7:60:e8:57:02:96:0c:41:0f:ed:2f:d9:f1:b4: 8b:4f:07:9c:29:72:96:bc:2f:c8:fe:dd:18:05:8c: c5:72:fe:87:ec:d2:18:19:85:27:56:b0:30:d1:41: 5f:ce:0c:b9:16:f3:6b:10:db:db:0b:cb:28:7b:da: b6:38:e4:63:83:07:d5:b0:61:89:7d:8d:a7:05:ce: 04:1f:4c:7f:bb:00:d7:f9:39:56:0e:b1:4b:f2:1f: 84:b0:d1:d5:00:0c:a3:6b:55:c1:62:12:f6:ca:80: 98:15:7e:d0:d4:d4:bd:6d:b4:a8:19:96:82:b8:c5: 76:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:A0:C7:05:11:E8:07:C5:25:4C:00:9E:74:FC:98:30:3A:27:98 X509v3 Authority Key Identifier: keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b6:e1:78:43:e0:08:63:7f:8a:12:8e:84:d6:c6:d1:fa:64: 0e:d0:3b:a1:f2:18:ac:dd:ba:f9:b2:20:63:85:fd:cc:f3:92: 31:93:26:8e:41:de:1e:12:d1:d3:f0:ac:12:e3:7f:c7:ba:85: 13:b6:6d:c4:e5:d8:13:84:a1:86:f5:33:30:75:f0:1e:9d:7d: ca:53:84:46:7a:f4:00:3d:7d:a6:f4:15:8c:20:99:22:39:13: e6:eb:0d:5a:66:ab:60:ae:1c:68:d5:11:4b:1b:63:41:af:7c: 77:7f:38:34:f6:2e:98:04:1e:ee:0f:fb:e3:e8:db:f1:4f:16: cf:58:8f:56:9d:cd:8e:13:db:61:6d:7d:bb:dc:92:c8:b1:e5: bc:ae:f0:31:20:e1:69:a3:f3:90:e1:96:4d:7e:23:dd:fe:87: 4d:d1:9a:4d:61:78:27:a3:ea:81:05:76:9d:ca:c9:eb:9b:17: 14:cc:a7:a0:f2:da:eb:84:76:1e:0a:7e:c1:96:ba:0f:0f:1a: 28:b2:75:ae:16:c1:9a:31:e0:c7:7c:f9:ad:09:28:a3:f2:d4: b9:fc:04:96:4b:ef:fa:72:c0:17:d5:3b:7e:bd:3e:c3:9d:ed: c7:e2:29:84:d9:dc:56:f8:4c:e3:5a:ce:57:fa:5a:e6:18:ef: 10:db:7c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfiWtiWylAWcqg9KNZgLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4 OGU2MTIwHhcNMjYwMjA5MTMwMTI5WhcNMjYwMjEwMTMwMTI5WjAzMTEwLwYDVQQD EygyNTBlYTBjNzA1MTFlODA3YzUyNTRjMDA5ZTc0ZmM5ODMwM2EyNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oNucQzzYVMTu2itCCrPMpxX8Vy5 xwkUyZ3zFuwQQSfRA6NExLUl3kDPJJWUMARLeaLjDPSIZQtrqeZ6EAYSycOtJIEq XZ2RhdAY320GAqiZszrJxYG5DKk9+TvfZ1gZxnpP6Ns2bgpzxkeNfpHAG8ESTTQa YScCNxKc0xm1Sd/aJXQdiz+512DoVwKWDEEP7S/Z8bSLTwecKXKWvC/I/t0YBYzF cv6H7NIYGYUnVrAw0UFfzgy5FvNrENvbC8soe9q2OORjgwfVsGGJfY2nBc4EH0x/ uwDX+TlWDrFL8h+EsNHVAAyja1XBYhL2yoCYFX7Q1NS9bbSoGZaCuMV21QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUOoMcFEegHxSVMAJ50/JgwOieYMB8GA1UdIwQY MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt NDM2YmZiOWU3N2VkLzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbbheEPg CGN/ihKOhNbG0fpkDtA7ofIYrN26+bIgY4X9zPOSMZMmjkHeHhLR0/CsEuN/x7qF E7ZtxOXYE4ShhvUzMHXwHp19ylOERnr0AD19pvQVjCCZIjkT5usNWmarYK4caNUR SxtjQa98d384NPYumAQe7g/74+jb8U8Wz1iPVp3NjhPbYW19u9ySyLHlvK7wMSDh aaPzkOGWTX4j3f6HTdGaTWF4J6PqgQV2ncrJ65sXFMynoPLa64R2Hgp+wZa6Dw8a KLJ1rhbBmjHgx3z5rQkoo/LUufwElkvv+nLAF9U7fr0+w53tx+IphNncVvhM41rO V/pa5hjvENt8rw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:58 2026 by rpki-client