This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json) Hash identifier: oLW4O/+gCsx/t5fuEdsSawJwLJvGW0aiUyrl7of5erQ= Subject key identifier: 07:F9:96:F8:72:CE:DC:F3:D1:48:3E:08:B7:BD:38:67:E6:CC:47:AF Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Certificate serial: 019C41D82FC80B893DF833AD0D4F3064CC51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft Manifest number: 0648 Signing time: Mon 09 Feb 2026 10:00:12 +0000 Manifest this update: Mon 09 Feb 2026 10:00:12 +0000 Manifest next update: Tue 10 Feb 2026 10:00:12 +0000 Files and hashes: 1: OEKZs0V1OvPJXM--EEoOQzvnjxU.roa (hash: IA4xXF3SM3MMssScw4atGZl6MKvdjLCpQTou+Su+nF0=) 2: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: HpsenbjDVtrVtjM9a8Ia4Ng8AvS04IL/OyfaVgN8eKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:2f:c8:0b:89:3d:f8:33:ad:0d:4f:30:64:cc:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696 Validity Not Before: Feb 9 10:00:12 2026 GMT Not After : Feb 10 10:00:12 2026 GMT Subject: CN=07f996f872cedcf3d1483e08b7bd3867e6cc47af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:11:dc:03:53:cd:ce:c9:fa:76:0e:c3:84:ba: eb:c3:5d:d4:6e:ab:1f:a1:0d:04:6b:12:f0:e9:88: 7e:2a:47:4b:65:1b:0b:ee:2b:11:97:8c:da:21:89: f8:eb:34:32:fd:3c:5c:6a:ab:fc:61:89:89:e1:0b: 06:c3:93:a1:45:32:79:6e:cb:03:ab:5f:f1:ba:4a: a0:81:f9:40:d1:e5:35:d4:c2:c7:b3:0c:8a:7f:03: e8:2a:39:60:da:97:25:67:6f:69:fc:e9:cb:e5:18: 3a:18:60:78:3c:90:b6:e7:05:63:34:86:31:2b:23: 70:30:e5:96:19:b5:02:52:9c:9a:ab:e5:b4:d2:13: fc:08:16:f2:e5:bd:eb:b7:d3:cd:59:41:21:b8:38: 16:9b:2f:c7:58:8b:5b:b5:a1:5c:17:2b:68:9a:15: 8a:38:6c:b9:39:0f:c1:1d:ef:b6:6b:f3:3c:cf:28: e2:9b:58:d8:a4:3e:b4:0d:72:b9:44:ca:c1:bb:6f: ad:e9:7c:ed:73:bc:50:79:53:85:17:00:cf:9d:18: 14:0c:4a:c9:85:ae:bc:26:14:de:4d:34:f7:b2:d9: f2:da:c9:65:05:ac:66:20:c9:e2:55:5a:f5:ab:e8: 25:1a:76:a7:f9:e7:42:20:60:88:8e:f0:e2:c9:ac: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F9:96:F8:72:CE:DC:F3:D1:48:3E:08:B7:BD:38:67:E6:CC:47:AF X509v3 Authority Key Identifier: keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1e:dc:ff:9f:10:80:d0:f1:dd:cc:22:4f:b3:ba:de:2b:4a: 69:25:30:ad:18:29:24:19:4f:01:7f:53:00:ac:c4:41:14:a2: dd:16:fe:a5:a2:d6:e8:31:f0:b8:40:d9:c0:9e:24:80:ae:b8: b9:a3:24:99:72:80:80:17:34:55:a2:89:58:50:a4:14:de:b7: 73:d8:cb:2c:92:80:48:d4:3c:9b:9c:e6:0a:b8:e2:0b:2f:e3: 4f:04:09:28:75:ba:82:4e:d2:a3:34:49:d7:04:36:1e:66:ec: d1:bb:93:46:62:cc:15:e9:68:90:65:a9:9a:da:db:08:7b:7d: fb:4a:c4:49:c2:54:d1:ed:35:53:81:95:d1:14:da:13:53:59: 7c:f2:4c:fc:c3:f5:13:b2:34:55:61:7e:93:70:35:ef:09:08: 69:04:36:33:29:ec:a4:5b:1f:27:0e:0c:ef:90:87:16:60:a4: ce:e8:9f:e2:89:f5:98:0d:c4:52:51:a0:69:1d:98:b0:72:0b: b2:06:da:93:22:1d:64:d6:b7:bc:22:0f:bd:40:f3:e5:03:69: ca:68:4c:ac:d9:4f:a0:4e:6a:96:b2:03:73:30:d4:51:eb:21: 68:cb:18:a0:4a:a9:6e:fa:57:e8:11:3c:9a:ec:65:7e:4c:46: f5:97:b1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2C/IC4k9+DOtDU8wZMxRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOWRkMWNlYWUwZjY1ZDYyYTJlYjdjNjdjNDhkZDQzMGU3 ZGE2OTYwHhcNMjYwMjA5MTAwMDEyWhcNMjYwMjEwMTAwMDEyWjAzMTEwLwYDVQQD EygwN2Y5OTZmODcyY2VkY2YzZDE0ODNlMDhiN2JkMzg2N2U2Y2M0N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xHcA1PNzsn6dg7DhLrrw13Ubqsf oQ0EaxLw6Yh+KkdLZRsL7isRl4zaIYn46zQy/Txcaqv8YYmJ4QsGw5OhRTJ5bssD q1/xukqggflA0eU11MLHswyKfwPoKjlg2pclZ29p/OnL5Rg6GGB4PJC25wVjNIYx KyNwMOWWGbUCUpyaq+W00hP8CBby5b3rt9PNWUEhuDgWmy/HWItbtaFcFytomhWK OGy5OQ/BHe+2a/M8zyjim1jYpD60DXK5RMrBu2+t6Xztc7xQeVOFFwDPnRgUDErJ ha68JhTeTTT3stny2sllBaxmIMniVVr1q+glGnan+edCIGCIjvDiyaxVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf5lvhyztzz0Ug+CLe9OGfmzEevMB8GA1UdIwQY MBaAFEOd0c6uD2XWKi63xnxI3UMOfaaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2Ut NjQxN2JkOGZlMjljLzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9iMzdhNTYtN2JiMS00ZjgzLWExN2UtNjQxN2JkOGZlMjlj LzEvUTUzUnpxNFBaZFlxTHJmR2ZFamRRdzU5cHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh7c/58Q gNDx3cwiT7O63itKaSUwrRgpJBlPAX9TAKzEQRSi3Rb+paLW6DHwuEDZwJ4kgK64 uaMkmXKAgBc0VaKJWFCkFN63c9jLLJKASNQ8m5zmCrjiCy/jTwQJKHW6gk7SozRJ 1wQ2Hmbs0buTRmLMFelokGWpmtrbCHt9+0rEScJU0e01U4GV0RTaE1NZfPJM/MP1 E7I0VWF+k3A17wkIaQQ2MynspFsfJw4M75CHFmCkzuif4on1mA3EUlGgaR2YsHIL sgbakyIdZNa3vCIPvUDz5QNpymhMrNlPoE5qlrIDczDUUeshaMsYoEqpbvpX6BE8 muxlfkxG9Zexlg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:46 2026 by rpki-client