This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json) Hash identifier: 3SuuNrKwXX9N1vNTX+lvXQXxhZYW8zpEhfp3PyKLSIM= Subject key identifier: A6:7B:B1:75:67:9B:1E:6D:01:9C:93:AE:FB:6C:8D:C4:46:17:24:11 Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f Certificate serial: 019C42B4263B4FA001853870A55A606DC998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft Manifest number: 14C9 Signing time: Mon 09 Feb 2026 14:00:28 +0000 Manifest this update: Mon 09 Feb 2026 14:00:28 +0000 Manifest next update: Tue 10 Feb 2026 14:00:28 +0000 Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: wAM8qj/01kWrws0V6Cz0CJjdYbranyOStH+2O6MLck4=) 2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:26:3b:4f:a0:01:85:38:70:a5:5a:60:6d:c9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f Validity Not Before: Feb 9 14:00:28 2026 GMT Not After : Feb 10 14:00:28 2026 GMT Subject: CN=a67bb175679b1e6d019c93aefb6c8dc446172411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:70:ac:2f:75:d7:81:26:bd:0e:5b:11:ca:93: 8e:68:e4:ff:fc:63:73:16:6e:9b:f7:d5:01:44:44: 86:4b:45:f5:0c:1e:75:8e:c9:01:33:94:49:73:ab: 8a:8f:7c:e6:a2:f8:ab:92:de:5d:55:ab:f1:f3:ab: f0:cb:77:2f:32:b8:0c:ed:8c:26:7d:2a:e0:43:4d: d5:61:e8:4f:9b:70:0e:eb:84:dd:2f:37:12:c9:55: b1:e0:48:c9:88:86:5a:6c:42:ce:bf:8b:64:d3:1b: 6a:4f:d2:f1:66:a0:26:86:98:e1:86:c0:3e:d3:33: e5:2a:f3:04:80:8a:ad:cc:41:2d:68:9a:1a:49:cd: c2:d7:5f:98:fc:dd:97:b1:d7:9c:0a:81:23:ab:35: 9e:a7:44:0a:5b:50:ce:80:d3:0b:11:c3:79:56:db: 5f:76:fc:4e:49:98:a3:fd:0a:41:59:62:c3:c3:9a: cb:16:ad:7c:01:2c:85:b3:2b:bb:f8:6a:69:4d:b9: 00:f1:88:a1:d3:d8:fe:e3:a0:4f:8d:79:16:75:e1: ce:ef:c8:17:54:b6:d1:1e:80:60:1f:6f:ee:e9:25: ee:28:fa:7e:75:0c:4e:3d:41:b8:1d:f5:c0:a7:ad: 3e:d7:bf:a2:a5:54:33:13:0e:7a:84:21:de:da:8d: bf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:B1:75:67:9B:1E:6D:01:9C:93:AE:FB:6C:8D:C4:46:17:24:11 X509v3 Authority Key Identifier: keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c9:bd:28:9b:86:f2:95:52:39:ca:df:8c:7b:0f:d2:6d:38: 5e:a7:7c:03:16:5b:24:f0:56:c5:06:33:da:8e:93:2d:cb:97: 46:37:b8:58:65:90:3a:04:1b:4e:88:31:32:a6:c7:93:14:2f: 7a:d5:0c:b1:8e:08:c6:d9:3e:f9:5b:c0:82:3f:2b:a8:3c:2c: a1:1c:c7:c0:55:5a:3f:52:5f:c6:5c:39:0a:ed:cf:1e:02:22: 67:47:ea:b4:68:2c:6d:68:e6:2a:62:e6:51:d7:20:fc:fa:14: 9e:78:04:7d:e0:10:77:31:60:f4:7b:85:28:24:a3:68:ad:94: 72:15:67:b1:77:9e:6a:2b:3c:96:2b:5e:2e:f5:b9:e3:aa:ea: 63:06:3f:ec:b7:39:d8:a8:03:24:15:fe:d8:af:93:3c:f0:4d: f6:39:dd:73:21:5f:18:89:64:d0:b8:77:d0:96:8c:22:33:a5: 30:46:7f:4e:85:f9:b8:15:11:6b:39:e6:f0:92:ed:75:11:e7: c6:73:d6:29:ee:35:54:33:48:c0:f6:ca:0c:36:5a:36:74:75: a2:7b:c6:03:32:19:20:ca:06:8c:a8:eb:e5:eb:bc:02:91:3a: a6:62:fa:ab:ca:38:54:31:e0:22:ba:14:c0:3a:0b:5d:b2:e4: 2b:87:76:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCY7T6ABhThwpVpgbcmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz NjY2NmYwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD EyhhNjdiYjE3NTY3OWIxZTZkMDE5YzkzYWVmYjZjOGRjNDQ2MTcyNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nCsL3XXgSa9DlsRypOOaOT//GNz Fm6b99UBRESGS0X1DB51jskBM5RJc6uKj3zmovirkt5dVavx86vwy3cvMrgM7Ywm fSrgQ03VYehPm3AO64TdLzcSyVWx4EjJiIZabELOv4tk0xtqT9LxZqAmhpjhhsA+ 0zPlKvMEgIqtzEEtaJoaSc3C11+Y/N2XsdecCoEjqzWep0QKW1DOgNMLEcN5Vttf dvxOSZij/QpBWWLDw5rLFq18ASyFsyu7+GppTbkA8Yih09j+46BPjXkWdeHO78gX VLbRHoBgH2/u6SXuKPp+dQxOPUG4HfXAp60+17+ipVQzEw56hCHe2o2/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ7sXVnmx5tAZyTrvtsjcRGFyQRMB8GA1UdIwQY MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct Y2ZkZmNkNGVlMGYyLzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8m9KJuG 8pVSOcrfjHsP0m04Xqd8AxZbJPBWxQYz2o6TLcuXRje4WGWQOgQbTogxMqbHkxQv etUMsY4Ixtk++VvAgj8rqDwsoRzHwFVaP1Jfxlw5Cu3PHgIiZ0fqtGgsbWjmKmLm Udcg/PoUnngEfeAQdzFg9HuFKCSjaK2UchVnsXeeais8liteLvW546rqYwY/7Lc5 2KgDJBX+2K+TPPBN9jndcyFfGIlk0Lh30JaMIjOlMEZ/ToX5uBURaznm8JLtdRHn xnPWKe41VDNIwPbKDDZaNnR1onvGAzIZIMoGjKjr5eu8ApE6pmL6q8o4VDHgIroU wDoLXbLkK4d2Fw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:59 2026 by rpki-client