This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json) Hash identifier: yzzCHiLzUIgcnJKbOdLQvapGfdDdFvU8Bg1L4VOt3qs= Subject key identifier: 48:0D:54:4E:A2:EC:AD:9E:AC:EA:F1:C3:5F:F0:B1:B2:85:7F:35:5F Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43 Certificate serial: 019C42B478E75CA1CFA70120F2C5F3B9586F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft Manifest number: 1817 Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: kO/N8O2HqfEusRXqoTYo0y4fZ4HMX+RN8lyXtZJsu+k=) 2: vRnuRcOcTR4IlPBpAANvMD2tP4Q.roa (hash: NFKmQ01DaLYF5z1+sTJFGIZl8qsux87G1ZSp/QZjt6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:78:e7:5c:a1:cf:a7:01:20:f2:c5:f3:b9:58:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=480d544ea2ecad9eaceaf1c35ff0b1b2857f355f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:54:0f:40:4c:c0:e1:d7:aa:4c:8f:e8:a8: ef:36:61:68:8b:b3:b8:14:d6:9d:29:1b:f9:81:a6: fb:1c:16:15:ac:2b:3c:97:54:ab:ef:77:53:d2:ec: 5f:66:b1:0f:c0:11:0f:5b:8c:0f:3a:0a:df:d1:7d: 80:e4:82:dc:af:e6:b3:d9:1d:c3:69:78:24:dc:9f: 0c:5e:04:f9:10:ae:53:9f:67:3b:c2:0d:37:7d:93: 73:47:f3:95:19:94:ea:63:d5:9c:f4:83:2b:c0:69: 89:09:c0:20:c8:b6:a2:a3:29:0a:20:4d:59:59:a5: 15:93:96:70:78:1e:16:ff:ad:ab:a2:7b:c2:c6:92: f4:dc:3a:4b:79:c9:c6:51:a2:ad:3a:b1:7a:8c:17: 82:d7:70:c5:63:15:52:c1:64:53:db:1e:ae:4f:7f: 31:f4:8a:c5:7c:f7:7b:c9:04:53:02:92:94:65:6c: 33:10:1b:4b:7c:15:0d:af:25:cf:52:c1:b4:5c:6e: 53:be:c6:86:a1:97:ea:1d:2a:4f:e4:be:5c:bf:d2: 67:2c:72:48:1c:b5:91:db:35:0a:0a:05:16:f3:f9: 0d:65:05:3a:aa:44:b0:00:a0:7c:f2:8d:f7:e3:6f: 8d:a9:51:23:5f:29:e5:41:a9:c1:ba:dc:77:e7:cc: d6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0D:54:4E:A2:EC:AD:9E:AC:EA:F1:C3:5F:F0:B1:B2:85:7F:35:5F X509v3 Authority Key Identifier: keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5c:94:e6:b9:da:08:b7:06:75:a7:d6:45:a3:0d:df:e7:f3: 99:96:7d:2a:3c:47:e7:32:48:04:5c:60:38:45:33:c8:d0:8a: d1:cc:b3:93:72:a7:f4:82:4f:c8:ce:4f:e2:ba:cb:bd:88:7b: 0e:10:c8:5a:4c:b1:6e:a5:0e:75:e6:23:1a:16:43:40:26:37: 7b:f8:99:0d:97:a7:9e:9a:b6:4b:83:96:52:fa:57:f6:61:87: 74:a3:5e:7f:a4:5a:86:25:c1:f6:28:51:ea:83:38:01:40:24: 72:74:e0:74:42:90:9a:a7:1f:ba:26:a1:62:02:93:12:19:a8: f4:63:e4:89:91:71:c0:02:c9:08:da:32:d8:ec:08:2f:30:a8: fd:b4:b6:c1:d8:eb:dc:5f:77:65:1d:12:31:60:2f:a1:5f:fb: 56:ed:b9:3c:49:c8:d0:40:27:df:8c:55:81:a5:42:fa:9a:ba: 53:82:ab:f7:1a:e1:a5:01:49:b1:66:30:59:c5:85:21:3e:2a: 6a:b4:10:26:b2:00:ab:59:1c:83:63:76:a1:1a:78:a0:d1:4f: 35:b8:1d:8a:3c:5d:43:21:cd:5a:c4:eb:71:df:ed:49:2a:1f: cf:db:9c:4f:74:e6:d8:96:f4:b6:01:39:36:e9:07:6d:fb:cb: 15:9b:bb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHjnXKHPpwEg8sXzuVhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0 MDZkNDMwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD Eyg0ODBkNTQ0ZWEyZWNhZDllYWNlYWYxYzM1ZmYwYjFiMjg1N2YzNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn85UD0BMwOHXqkyP6KjvNmFoi7O4 FNadKRv5gab7HBYVrCs8l1Sr73dT0uxfZrEPwBEPW4wPOgrf0X2A5ILcr+az2R3D aXgk3J8MXgT5EK5Tn2c7wg03fZNzR/OVGZTqY9Wc9IMrwGmJCcAgyLaioykKIE1Z WaUVk5ZweB4W/62ronvCxpL03DpLecnGUaKtOrF6jBeC13DFYxVSwWRT2x6uT38x 9IrFfPd7yQRTApKUZWwzEBtLfBUNryXPUsG0XG5TvsaGoZfqHSpP5L5cv9JnLHJI HLWR2zUKCgUW8/kNZQU6qkSwAKB88o3342+NqVEjXynlQanButx358zWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgNVE6i7K2erOrxw1/wsbKFfzVfMB8GA1UdIwQY MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt ZTNlZWNmOWRmYWFkLzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1yU5rna CLcGdafWRaMN3+fzmZZ9KjxH5zJIBFxgOEUzyNCK0cyzk3Kn9IJPyM5P4rrLvYh7 DhDIWkyxbqUOdeYjGhZDQCY3e/iZDZennpq2S4OWUvpX9mGHdKNef6RahiXB9ihR 6oM4AUAkcnTgdEKQmqcfuiahYgKTEhmo9GPkiZFxwALJCNoy2OwILzCo/bS2wdjr 3F93ZR0SMWAvoV/7Vu25PEnI0EAn34xVgaVC+pq6U4Kr9xrhpQFJsWYwWcWFIT4q arQQJrIAq1kcg2N2oRp4oNFPNbgdijxdQyHNWsTrcd/tSSofz9ucT3Tm2Jb0tgE5 NukHbfvLFZu73w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:30 2026 by rpki-client