This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json) Hash identifier: hptuT8vVqklfhHLRLj+ZfmI9KCn1KCSxmPP4gon9ehc= Subject key identifier: 35:C1:4C:73:7A:52:FF:FA:1E:2E:08:A8:CE:A7:F4:84:A9:4C:4E:BE Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Certificate serial: 019C438FAB3E779A469D33BB193CF137C8AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:14 +0000 Manifest this update: Mon 09 Feb 2026 18:00:14 +0000 Manifest next update: Tue 10 Feb 2026 18:00:14 +0000 Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: nblsO3AeZ3H+G6nx0/SEtjFRb3KwfChsDVVJ41Wql8U=) 2: heO1dPv16lNqNoaUzHYmWrwdcrs.roa (hash: Pmdo0ju6M8iagRWSreMlT5nEuBLF3DYNOFUHFOJkLRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ab:3e:77:9a:46:9d:33:bb:19:3c:f1:37:c8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72 Validity Not Before: Feb 9 18:00:14 2026 GMT Not After : Feb 10 18:00:14 2026 GMT Subject: CN=35c14c737a52fffa1e2e08a8cea7f484a94c4ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:dc:05:62:48:dd:c4:2a:c2:c1:e5:ce:7b: f4:4a:57:07:be:5b:26:e4:e7:dd:12:cf:fb:9f:84: 6c:57:bc:3b:7b:0b:dc:cf:63:f0:1d:e7:96:a2:4f: 5f:a4:86:cd:3e:d0:0d:d5:0b:47:80:30:42:34:23: 4b:49:d8:7a:61:33:b1:13:fe:a8:ac:aa:5a:6e:6c: e2:05:e4:32:0c:8f:e4:c2:c4:9e:70:a5:f6:20:72: f3:06:14:c3:59:b0:d6:de:42:f7:ae:cf:c3:63:8a: 99:18:2c:fa:e9:cd:64:d7:79:fe:51:3f:77:d7:5c: 06:40:78:80:41:be:95:f6:8d:db:be:da:05:d7:a5: 59:4e:90:14:ac:6b:c4:3c:d3:a0:73:37:ec:07:ec: 33:db:ab:91:de:05:0f:8d:9c:52:6c:74:84:20:32: a0:90:ea:e1:cb:2a:1f:b0:ca:9e:29:cf:c8:88:23: 58:18:3e:e6:30:5d:d7:ad:ec:de:3c:b6:0d:1d:21: 97:09:ef:c4:2b:5a:57:40:03:23:45:65:20:5a:ec: 63:0c:ec:ef:78:c9:6b:a3:ab:95:fe:27:cd:32:89: 02:56:1c:98:3e:98:8d:74:9e:e2:94:26:b1:5b:ec: a6:57:03:72:3a:30:1d:1c:31:93:a1:ba:68:0b:6b: f8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C1:4C:73:7A:52:FF:FA:1E:2E:08:A8:CE:A7:F4:84:A9:4C:4E:BE X509v3 Authority Key Identifier: keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:40:0c:2c:60:71:3e:7c:e3:40:f3:e5:1a:35:e9:22:53:e3: 0d:c4:fd:b0:4b:70:c5:bf:ef:42:9c:bd:fb:dc:8c:fb:e6:1c: fc:31:ee:dc:77:03:6e:69:5f:39:30:4a:63:2b:89:8f:f2:80: 36:61:1d:50:7c:6f:10:f4:6b:b2:49:e3:41:65:c9:a9:c6:f5: a3:35:10:ca:36:0d:1b:b5:17:68:3d:b1:75:71:46:68:25:07: ae:7d:18:31:77:5a:a3:42:b6:02:d9:d8:20:3c:62:60:8c:e2: 9d:5f:35:53:a5:d3:1b:e5:31:fb:fc:66:41:9c:0b:88:8a:4c: 17:7f:a7:b3:dd:e4:68:53:07:13:a0:ca:9b:d7:22:ce:6d:f4: 7a:23:81:d8:2c:f6:d2:56:21:4c:fc:91:82:ec:a8:5d:ff:17: e2:33:73:7e:1d:61:65:9e:9a:ef:54:b9:cd:98:dc:66:b3:5f: 29:ed:af:83:d8:8d:48:b0:ae:9e:06:3d:58:69:e1:26:c9:7c: e3:36:1d:49:d6:32:50:42:14:e7:c2:99:33:fd:85:31:86:ac: cb:fd:88:63:c3:6f:bf:24:c1:b5:d9:91:7c:bf:58:56:5c:6c: a2:ba:fa:ef:c3:2a:d9:f1:ea:a4:d3:48:a4:bb:d9:b0:d4:a9: 6a:49:e3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6s+d5pGnTO7GTzxN8iqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0 MjFhNzIwHhcNMjYwMjA5MTgwMDE0WhcNMjYwMjEwMTgwMDE0WjAzMTEwLwYDVQQD EygzNWMxNGM3MzdhNTJmZmZhMWUyZTA4YThjZWE3ZjQ4NGE5NGM0ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylHcBWJI3cQqwsHlznv0SlcHvlsm 5OfdEs/7n4RsV7w7ewvcz2PwHeeWok9fpIbNPtAN1QtHgDBCNCNLSdh6YTOxE/6o rKpabmziBeQyDI/kwsSecKX2IHLzBhTDWbDW3kL3rs/DY4qZGCz66c1k13n+UT93 11wGQHiAQb6V9o3bvtoF16VZTpAUrGvEPNOgczfsB+wz26uR3gUPjZxSbHSEIDKg kOrhyyofsMqeKc/IiCNYGD7mMF3XrezePLYNHSGXCe/EK1pXQAMjRWUgWuxjDOzv eMlro6uV/ifNMokCVhyYPpiNdJ7ilCaxW+ymVwNyOjAdHDGTobpoC2v4QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXBTHN6Uv/6Hi4IqM6n9ISpTE6+MB8GA1UdIwQY MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEAMLGBx PnzjQPPlGjXpIlPjDcT9sEtwxb/vQpy9+9yM++Yc/DHu3HcDbmlfOTBKYyuJj/KA NmEdUHxvEPRrsknjQWXJqcb1ozUQyjYNG7UXaD2xdXFGaCUHrn0YMXdao0K2AtnY IDxiYIzinV81U6XTG+Ux+/xmQZwLiIpMF3+ns93kaFMHE6DKm9cizm30eiOB2Cz2 0lYhTPyRguyoXf8X4jNzfh1hZZ6a71S5zZjcZrNfKe2vg9iNSLCungY9WGnhJsl8 4zYdSdYyUEIU58KZM/2FMYasy/2IY8NvvyTBtdmRfL9YVlxsorr678Mq2fHqpNNI pLvZsNSpaknjlA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:55 2026 by rpki-client