This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json) Hash identifier: /THRtLvWSOsQgNYzeCSR+sjrjVFkaBI5tImO0FxSr58= Subject key identifier: B1:13:E6:58:7A:34:C4:1C:BF:51:64:57:15:DA:ED:F1:93:E0:AE:C2 Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Certificate serial: 019C420F824F4EA04927C47EA0F76F96B449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft Manifest number: 0C1D Signing time: Mon 09 Feb 2026 11:00:38 +0000 Manifest this update: Mon 09 Feb 2026 11:00:38 +0000 Manifest next update: Tue 10 Feb 2026 11:00:38 +0000 Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: SjjZFPv186GJdDlEeRM2FZP5KFiqBIf7gDHBhUBVtCA=) 2: y8jTWT9EJ8pkTtgwIGRTqM5h54U.roa (hash: K3I6cMPL0u+o1+6/3zyPMYD1BTrTNGIZvyZgHqN7zYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:82:4f:4e:a0:49:27:c4:7e:a0:f7:6f:96:b4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580 Validity Not Before: Feb 9 11:00:38 2026 GMT Not After : Feb 10 11:00:38 2026 GMT Subject: CN=b113e6587a34c41cbf51645715daedf193e0aec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:e9:fa:78:69:a9:f4:e9:d2:04:68:0a:54: 48:69:59:a5:59:37:4a:4e:c2:8a:27:05:68:12:72: 20:1f:08:70:f3:e1:02:67:f0:0d:19:3f:45:3f:74: b0:80:ce:09:5b:ce:18:2f:af:a1:4d:1a:eb:b1:56: e6:94:1f:38:54:7f:7a:83:c3:43:d3:15:67:97:d0: 89:57:0e:c5:84:8f:6f:b6:44:ee:41:a1:c7:fa:54: 34:42:f1:4c:0e:86:69:c3:90:de:02:a5:bd:5f:85: d0:2e:60:9a:84:87:a8:7e:13:cd:b1:01:a3:e3:58: dc:39:28:b0:4f:cc:56:1c:6f:86:e9:27:17:a0:4c: 79:bb:22:d8:01:65:3d:96:09:22:5a:b7:59:ff:5d: 38:ba:2d:7a:99:d2:bb:9f:c4:7a:19:c5:28:bb:29: bf:ba:bf:6a:0c:73:0b:7c:fd:c0:18:70:ed:16:99: f1:d3:61:87:58:b0:d1:b8:b4:09:4f:e6:27:30:8d: 51:e6:a0:66:3c:dd:df:2c:84:d3:b2:ff:4d:af:fd: 37:8b:80:23:75:5d:46:ed:26:04:ca:97:f3:cb:93: c6:b5:7e:b0:92:dd:11:55:fd:fc:c1:ae:dc:3c:70: 1c:0b:4e:1c:16:87:ce:5b:88:77:65:a9:69:f1:94: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:E6:58:7A:34:C4:1C:BF:51:64:57:15:DA:ED:F1:93:E0:AE:C2 X509v3 Authority Key Identifier: keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b8:95:2c:88:8a:9a:fc:dd:91:54:a9:c5:dc:70:31:4a:77: b3:f3:8e:c8:26:43:ae:d8:8f:f5:31:ea:bf:32:5c:04:f2:21: 0f:37:08:70:ec:31:33:3e:dc:40:f2:88:44:32:2e:4b:03:03: ed:67:6d:69:57:ab:69:39:57:24:e7:59:63:07:9f:e2:ef:15: be:be:eb:39:38:95:72:a0:9c:d9:02:e4:54:ee:6b:53:14:57: 2b:29:47:89:00:0f:bd:3d:70:c9:4b:2a:89:35:84:3c:98:70: 3c:64:2b:eb:a5:30:08:eb:84:be:6c:3e:b4:5f:b4:88:99:c1: 57:2a:bd:f8:43:22:f6:62:98:3f:3b:26:79:84:f0:f5:04:b3: 37:cb:0a:60:e5:12:2a:7c:87:44:57:8f:f3:0a:9e:9b:2c:f2: 69:31:6c:59:0a:5d:ea:35:c9:04:25:fe:8b:cc:6c:73:61:00: e2:64:d9:11:81:22:dc:01:c7:6f:18:2f:a3:4a:f7:5f:9f:9b: c9:cc:9b:9c:a4:af:df:dd:96:e2:d2:9c:04:60:96:66:cd:82: b2:2f:c8:a0:96:40:a1:b8:6a:9e:7d:22:eb:d0:85:be:00:41: 41:a4:88:48:b5:73:14:d6:71:02:5d:4b:dc:45:0e:25:f0:88: b5:db:48:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4JPTqBJJ8R+oPdvlrRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm OWY1ODAwHhcNMjYwMjA5MTEwMDM4WhcNMjYwMjEwMTEwMDM4WjAzMTEwLwYDVQQD EyhiMTEzZTY1ODdhMzRjNDFjYmY1MTY0NTcxNWRhZWRmMTkzZTBhZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRrp+nhpqfTp0gRoClRIaVmlWTdK TsKKJwVoEnIgHwhw8+ECZ/ANGT9FP3SwgM4JW84YL6+hTRrrsVbmlB84VH96g8ND 0xVnl9CJVw7FhI9vtkTuQaHH+lQ0QvFMDoZpw5DeAqW9X4XQLmCahIeofhPNsQGj 41jcOSiwT8xWHG+G6ScXoEx5uyLYAWU9lgkiWrdZ/104ui16mdK7n8R6GcUouym/ ur9qDHMLfP3AGHDtFpnx02GHWLDRuLQJT+YnMI1R5qBmPN3fLITTsv9Nr/03i4Aj dV1G7SYEypfzy5PGtX6wkt0RVf38wa7cPHAcC04cFofOW4h3Zalp8ZR/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLET5lh6NMQcv1FkVxXa7fGT4K7CMB8GA1UdIwQY MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLiVLIiK mvzdkVSpxdxwMUp3s/OOyCZDrtiP9THqvzJcBPIhDzcIcOwxMz7cQPKIRDIuSwMD 7WdtaVeraTlXJOdZYwef4u8Vvr7rOTiVcqCc2QLkVO5rUxRXKylHiQAPvT1wyUsq iTWEPJhwPGQr66UwCOuEvmw+tF+0iJnBVyq9+EMi9mKYPzsmeYTw9QSzN8sKYOUS KnyHRFeP8wqemyzyaTFsWQpd6jXJBCX+i8xsc2EA4mTZEYEi3AHHbxgvo0r3X5+b ycybnKSv392W4tKcBGCWZs2Csi/IoJZAobhqnn0i69CFvgBBQaSISLVzFNZxAl1L 3EUOJfCItdtIyw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client