This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json) Hash identifier: t2C95EFn7UAQ0PQJw8jZknG0ng/RhJRCN1RB/SnOhkw= Subject key identifier: BE:56:B5:2E:1B:67:31:F2:92:7A:9B:B3:26:99:94:A9:41:73:76:A1 Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Certificate serial: 019C262A7CFD8C245EDBDEACCC179F77AAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft Manifest number: 0CE5 Signing time: Wed 04 Feb 2026 01:00:44 +0000 Manifest this update: Wed 04 Feb 2026 01:00:44 +0000 Manifest next update: Thu 05 Feb 2026 01:00:44 +0000 Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: m+HVBiVX8yk1WtohwmLPeeovbESrgmvtYLBO9DItnEI=) 2: rhstuAH1RjeoFX9aBL9o13FXeo8.roa (hash: V/dFIE6DEQQYxzvLKa9DV5po5slChYjT93vla6o5qEc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 19:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:2a:7c:fd:8c:24:5e:db:de:ac:cc:17:9f:77:aa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084 Validity Not Before: Feb 4 01:00:44 2026 GMT Not After : Feb 5 01:00:44 2026 GMT Subject: CN=be56b52e1b6731f2927a9bb3269994a9417376a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:8b:d4:3f:7b:af:00:2d:8d:47:eb:b3:87: 53:0b:d2:61:38:00:4f:fc:63:65:86:4f:3a:fc:f6: 9c:40:04:18:01:7e:0d:fb:6b:db:d7:16:7e:a4:4f: 2a:8e:1c:1e:f4:62:d3:b2:86:30:b2:86:81:34:8b: 4c:39:c3:0e:7c:6a:ef:90:2d:b9:7a:23:49:56:e5: 76:c6:6e:11:7e:9f:b1:f7:f1:3f:79:0f:e0:4b:57: 10:d0:9f:ad:8a:b2:0d:f7:87:1a:c0:10:9c:e6:60: 2c:ed:20:1d:62:9b:8e:f0:21:97:c9:a5:53:ff:b0: 7f:a8:e9:01:f4:87:76:b2:63:b5:12:43:8d:fb:ac: 2a:8c:84:54:c9:bb:4f:e6:09:e5:9f:02:fc:e8:3a: 06:e0:c0:62:b1:e5:7b:6a:4f:f9:e5:d9:ea:30:7c: 4d:43:bc:e5:1b:05:0b:9f:e2:f5:23:9b:b1:e1:fc: cb:a4:ed:b6:33:1e:f8:c8:82:3a:3c:d4:d4:1e:e0: b7:f3:c5:f9:92:e9:ea:69:f3:3c:02:bd:5d:ef:25: 75:91:c4:16:28:6b:f9:6e:3a:8f:30:61:a3:13:66: f6:fa:6a:fa:13:be:f0:a6:f4:9f:d2:a2:5d:b5:3a: 38:13:42:7f:ce:bf:4a:bb:00:2a:c4:84:2a:98:85: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:B5:2E:1B:67:31:F2:92:7A:9B:B3:26:99:94:A9:41:73:76:A1 X509v3 Authority Key Identifier: keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:61:8d:be:ea:d0:01:5b:5f:ad:7d:5c:a4:a3:5b:f1:29:d2: 5a:c2:25:10:02:78:12:a9:df:f4:a6:33:a4:93:49:35:6a:e3: 0f:e7:22:f6:27:d3:92:e0:72:14:aa:c1:5a:b0:19:d2:e5:a0: ec:16:2d:8d:cd:d8:f0:4f:d4:d8:be:30:70:7c:6e:0a:94:c7: 01:d4:01:02:06:ef:42:6c:ec:8b:cd:36:e6:72:84:8c:2d:b4: 4d:9c:fc:5c:59:df:3b:0f:78:b7:9a:4a:ad:33:84:b9:f7:3b: c8:7b:84:64:cb:34:10:24:c0:4d:4e:98:55:61:f9:c2:c5:29: 9d:b2:f4:dd:47:24:96:85:2c:f3:38:0e:a4:89:8f:40:b1:2c: 91:cc:f1:e8:7f:12:7b:1a:5f:a4:2a:d9:4e:1d:96:fa:d5:18: 81:33:ad:e7:83:53:0c:5e:50:d5:5e:8b:a1:b4:b6:07:f3:4f: 67:e9:28:ec:66:36:65:fd:42:30:b3:15:f2:22:23:9e:b5:e5: e5:56:b3:3b:f7:04:8c:58:96:f0:93:3b:1a:d8:cf:41:5a:fd: 8e:55:83:63:95:42:e4:52:6e:99:02:8a:80:db:f4:a0:6f:48: 9d:35:59:c6:71:d3:9e:b9:f6:07:df:10:31:7d:b1:a3:c8:dd: bd:48:31:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmKnz9jCRe296szBefd6r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw MTkwODQwHhcNMjYwMjA0MDEwMDQ0WhcNMjYwMjA1MDEwMDQ0WjAzMTEwLwYDVQQD EyhiZTU2YjUyZTFiNjczMWYyOTI3YTliYjMyNjk5OTRhOTQxNzM3NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNqL1D97rwAtjUfrs4dTC9JhOABP /GNlhk86/PacQAQYAX4N+2vb1xZ+pE8qjhwe9GLTsoYwsoaBNItMOcMOfGrvkC25 eiNJVuV2xm4Rfp+x9/E/eQ/gS1cQ0J+tirIN94cawBCc5mAs7SAdYpuO8CGXyaVT /7B/qOkB9Id2smO1EkON+6wqjIRUybtP5gnlnwL86DoG4MBiseV7ak/55dnqMHxN Q7zlGwULn+L1I5ux4fzLpO22Mx74yII6PNTUHuC388X5kunqafM8Ar1d7yV1kcQW KGv5bjqPMGGjE2b2+mr6E77wpvSf0qJdtTo4E0J/zr9KuwAqxIQqmIWCDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5WtS4bZzHyknqbsyaZlKlBc3ahMB8GA1UdIwQY MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2GNvurQ AVtfrX1cpKNb8SnSWsIlEAJ4Eqnf9KYzpJNJNWrjD+ci9ifTkuByFKrBWrAZ0uWg 7BYtjc3Y8E/U2L4wcHxuCpTHAdQBAgbvQmzsi8025nKEjC20TZz8XFnfOw94t5pK rTOEufc7yHuEZMs0ECTATU6YVWH5wsUpnbL03UckloUs8zgOpImPQLEskczx6H8S expfpCrZTh2W+tUYgTOt54NTDF5Q1V6LobS2B/NPZ+ko7GY2Zf1CMLMV8iIjnrXl 5VazO/cEjFiW8JM7GtjPQVr9jlWDY5VC5FJumQKKgNv0oG9InTVZxnHTnrn2B98Q MX2xo8jdvUgxYA== -----END CERTIFICATE-----Generated at Wed Feb 4 04:38:03 2026 by rpki-client