This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json) Hash identifier: ndhocapBx4hV/jHfdQk2tZsSakRNZtrzsEaa9YjDNko= Subject key identifier: 99:A5:C0:B3:D3:75:BE:74:03:9C:C7:23:72:D3:8D:C8:58:C0:F3:42 Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b Certificate serial: 019C438FD9ACB3124C39056CD4E80A969B5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft Manifest number: 03EB Signing time: Mon 09 Feb 2026 18:00:26 +0000 Manifest this update: Mon 09 Feb 2026 18:00:26 +0000 Manifest next update: Tue 10 Feb 2026 18:00:26 +0000 Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: yxwQiHqxE5o7YB4Fnh6X6s8w3dxC+CXoq6wbFVeGRUE=) 2: onU8z40HzXbnWY9IaUiQLwKDFGU.roa (hash: JmAau5mAfXMJlxpYOlZN7re/iLo9qI2ZxQ8BfJtKX+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d9:ac:b3:12:4c:39:05:6c:d4:e8:0a:96:9b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b Validity Not Before: Feb 9 18:00:26 2026 GMT Not After : Feb 10 18:00:26 2026 GMT Subject: CN=99a5c0b3d375be74039cc72372d38dc858c0f342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:ed:d8:bf:c3:10:db:2a:17:02:52:d5:7b: f6:5e:6d:c5:64:ac:25:06:ba:b7:04:94:33:ca:2b: 46:e3:65:90:98:cf:f0:c3:d5:37:28:b8:e5:a2:4e: fd:54:65:7c:ca:46:55:f8:bd:51:d2:c9:f6:46:50: ff:2c:4c:50:8c:79:03:81:9d:3f:78:40:e2:fe:3a: 24:36:3f:77:07:5c:46:de:8d:1b:ad:3c:83:8e:b6: 3e:a0:be:55:c8:bc:86:95:dd:b0:a6:03:9c:ea:74: 19:43:51:b3:b4:64:e2:17:21:a6:83:be:18:59:49: 73:f1:7b:2e:c3:ac:9a:4f:4d:d0:9a:3f:f4:85:19: e7:3f:ad:b8:c0:e8:72:bd:97:9d:9f:60:3c:dd:0e: 15:fa:26:20:d9:18:7d:a7:9b:bc:36:e5:a3:7b:55: 3b:8e:52:cb:8e:7c:6f:58:45:04:6b:1b:47:14:5f: f7:aa:83:59:d6:37:b0:39:8a:e5:bf:28:64:d7:0e: 70:f0:c6:88:27:b7:e9:e1:12:29:e9:05:ca:6d:7e: d4:92:e5:00:13:89:ed:5a:66:0e:56:20:28:bd:36: ba:86:ae:b7:dc:fc:d6:1f:c3:6a:42:38:66:43:d9: 51:1f:a7:37:6a:00:27:80:57:b8:12:34:94:1c:2a: b7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A5:C0:B3:D3:75:BE:74:03:9C:C7:23:72:D3:8D:C8:58:C0:F3:42 X509v3 Authority Key Identifier: keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c8:9e:e7:df:ab:b4:0d:cd:a0:75:89:7c:e9:38:1f:0b:13: b1:70:e9:04:d3:15:88:ec:9d:3c:7d:4a:f8:24:13:11:3f:03: 66:c8:c5:01:dc:f9:72:40:fa:8c:38:f7:3f:f8:4a:ed:c9:67: 5e:ee:e0:b0:18:1e:79:8c:37:7e:30:0b:3a:bd:d8:ac:45:d4: dd:06:cc:6d:5f:f0:61:c3:90:9a:3a:a7:a5:20:94:80:8c:66: f9:b5:7d:59:08:a0:dd:6c:21:c0:6f:f4:ef:47:7e:d5:5b:32: a4:c0:6f:4f:50:3f:3e:56:59:da:c7:7e:62:5c:c6:c9:46:a2: 5a:38:51:10:21:c4:7f:43:66:b3:ab:f4:d2:13:e7:c0:b4:74: 6d:de:cd:58:4b:84:9e:04:f6:2d:7d:00:2f:06:bd:8d:2c:59: 42:92:b7:f4:3a:f6:09:d1:0c:2f:77:ec:54:a5:d1:98:ef:0b: bf:bb:30:28:f5:41:b0:da:86:c6:71:24:a9:13:b9:04:03:50: d9:83:07:2d:87:e7:f5:fc:d4:c8:6a:73:82:18:95:66:ae:9b: f3:fd:f9:1b:fc:3e:c2:14:21:d4:c7:3e:4c:ec:6d:98:69:1c: 75:18:9d:7b:0f:41:4c:6b:4e:85:34:a7:bd:85:63:00:40:b1: b8:64:1d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9mssxJMOQVs1OgKlptbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl ZDEzOWIwHhcNMjYwMjA5MTgwMDI2WhcNMjYwMjEwMTgwMDI2WjAzMTEwLwYDVQQD Eyg5OWE1YzBiM2QzNzViZTc0MDM5Y2M3MjM3MmQzOGRjODU4YzBmMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytHt2L/DENsqFwJS1Xv2Xm3FZKwl Brq3BJQzyitG42WQmM/ww9U3KLjlok79VGV8ykZV+L1R0sn2RlD/LExQjHkDgZ0/ eEDi/jokNj93B1xG3o0brTyDjrY+oL5VyLyGld2wpgOc6nQZQ1GztGTiFyGmg74Y WUlz8Xsuw6yaT03Qmj/0hRnnP624wOhyvZedn2A83Q4V+iYg2Rh9p5u8NuWje1U7 jlLLjnxvWEUEaxtHFF/3qoNZ1jewOYrlvyhk1w5w8MaIJ7fp4RIp6QXKbX7UkuUA E4ntWmYOViAovTa6hq633PzWH8NqQjhmQ9lRH6c3agAngFe4EjSUHCq3TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmlwLPTdb50A5zHI3LTjchYwPNCMB8GA1UdIwQY MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMie59+r tA3NoHWJfOk4HwsTsXDpBNMViOydPH1K+CQTET8DZsjFAdz5ckD6jDj3P/hK7cln Xu7gsBgeeYw3fjALOr3YrEXU3QbMbV/wYcOQmjqnpSCUgIxm+bV9WQig3WwhwG/0 70d+1VsypMBvT1A/PlZZ2sd+YlzGyUaiWjhRECHEf0Nms6v00hPnwLR0bd7NWEuE ngT2LX0ALwa9jSxZQpK39Dr2CdEML3fsVKXRmO8Lv7swKPVBsNqGxnEkqRO5BANQ 2YMHLYfn9fzUyGpzghiVZq6b8/35G/w+whQh1Mc+TOxtmGkcdRidew9BTGtOhTSn vYVjAECxuGQdpw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:07 2026 by rpki-client