This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json) Hash identifier: 7e0wE7hbzPK58RzY36RCPLufQm+nkGS1cTaBAJMBW+4= Subject key identifier: D3:86:BA:5C:94:9D:5E:FF:A0:DD:05:CA:25:2C:C1:F1:36:C4:C0:DA Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2 Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2 Certificate serial: 019C43220BF8392C94E65D9D0B4DFF6ABEE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft Manifest number: 10F7 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: hheaBqkgDe39nItoSXJlbOfaINXMXR3lSUGzvxJtTIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0b:f8:39:2c:94:e6:5d:9d:0b:4d:ff:6a:be:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=d386ba5c949d5effa0dd05ca252cc1f136c4c0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:dc:00:6c:c3:b0:c4:15:97:be:bd:21:c5: 39:c2:90:6f:ac:ba:6f:7f:03:45:9a:23:41:de:3b: da:21:d2:4d:bb:05:3b:68:f8:13:99:7e:10:c4:8b: 44:ba:95:69:4b:e3:73:2c:5d:ff:8c:a7:fe:9d:a1: 1c:4e:db:6f:e9:7c:dd:58:ec:dc:bc:d4:0e:90:68: 7d:d3:8c:4e:0b:da:e7:07:5d:e7:96:53:a9:1c:4a: 3e:53:64:a6:de:cd:87:70:9d:07:31:05:fe:dd:83: dd:84:fc:d1:53:65:1c:f4:b8:69:33:4d:ad:70:f3: 40:67:ab:ac:b1:dc:64:6f:bf:d1:f3:97:65:1f:a8: b0:d5:33:b9:a8:1b:6b:8b:1e:6f:43:88:96:ff:4a: a9:22:c8:8a:17:69:b9:b0:04:58:a3:0c:e0:06:b7: 8c:b2:9c:72:91:ef:eb:ed:9c:36:53:79:20:7e:c7: ac:0c:0a:dd:d4:51:6b:d8:a2:fa:d9:c8:59:0b:49: a0:a7:75:f7:32:8a:94:0b:ed:28:4b:bf:67:f3:cb: 3f:8a:9a:f2:86:46:6f:70:5d:b2:17:1c:33:d7:ed: 62:c7:9f:b1:03:36:12:ba:ef:69:28:20:35:82:ea: 22:48:12:06:a7:4e:69:c0:e9:6f:29:45:8f:ac:06: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:BA:5C:94:9D:5E:FF:A0:DD:05:CA:25:2C:C1:F1:36:C4:C0:DA X509v3 Authority Key Identifier: keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:15:d3:f2:49:03:56:bd:5b:05:39:74:14:84:60:18:05:79: a0:c1:dd:55:97:f4:ce:88:68:26:a0:9c:ee:31:a7:95:5d:de: 14:2e:8a:26:9a:c5:d3:03:4c:8d:3d:db:c0:2c:83:eb:07:8c: 84:54:c4:ad:29:bc:aa:89:eb:c7:6a:cd:d6:e0:cd:85:7a:13: 4d:93:0a:ba:ba:b3:da:ed:c4:51:e1:1e:8e:76:dd:03:31:76: d6:7a:1f:66:47:ab:42:cc:76:d2:50:02:e6:a6:85:2f:b9:06: 24:76:8e:a0:19:b9:40:c4:7b:93:24:9f:ce:0f:62:30:a6:26: 0c:b7:0d:33:88:5c:3a:8c:74:65:2c:9b:e6:47:dd:c4:9c:12: d6:3d:cb:5a:e0:80:db:4c:79:dc:f7:51:13:d9:02:88:08:8f: 6b:15:36:f8:1d:96:49:c0:c8:e4:06:85:2f:eb:73:a8:45:a2: ae:33:50:e3:9f:a2:87:16:67:54:25:a3:da:55:f1:7b:ab:e9: 57:9a:f3:f3:1d:62:d5:ac:da:dc:d7:cb:85:3e:2a:64:ff:f4: 1b:8b:ea:74:07:f3:1a:1f:95:24:3b:00:8e:89:4a:04:f2:21: 6d:0a:1b:cd:ab:46:0a:1c:aa:ef:d2:4d:a1:dc:82:78:30:91: c4:3b:e4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgv4OSyU5l2dC03/ar7jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOGY4ZWQxMjFiYTMwODFjZmIyMTVmYWFiNTBhZTE0NWI1 OTBkZDIwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EyhkMzg2YmE1Yzk0OWQ1ZWZmYTBkZDA1Y2EyNTJjYzFmMTM2YzRjMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlHcAGzDsMQVl769IcU5wpBvrLpv fwNFmiNB3jvaIdJNuwU7aPgTmX4QxItEupVpS+NzLF3/jKf+naEcTttv6XzdWOzc vNQOkGh904xOC9rnB13nllOpHEo+U2Sm3s2HcJ0HMQX+3YPdhPzRU2Uc9LhpM02t cPNAZ6ussdxkb7/R85dlH6iw1TO5qBtrix5vQ4iW/0qpIsiKF2m5sARYowzgBreM spxyke/r7Zw2U3kgfsesDArd1FFr2KL62chZC0mgp3X3MoqUC+0oS79n88s/ipry hkZvcF2yFxwz1+1ix5+xAzYSuu9pKCA1guoiSBIGp05pwOlvKUWPrAbXUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOGulyUnV7/oN0FyiUswfE2xMDaMB8GA1UdIwQY MBaAFEOPjtEhujCBz7IV+qtQrhRbWQ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWIt ZDA0MDY3NjdlNmNjLzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85MzUwNDQtMWFmNS00NWQwLWFjZWItZDA0MDY3NjdlNmNj LzEvUTQtTzBTRzZNSUhQc2hYNnExQ3VGRnRaRGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxXT8kkD Vr1bBTl0FIRgGAV5oMHdVZf0zohoJqCc7jGnlV3eFC6KJprF0wNMjT3bwCyD6weM hFTErSm8qonrx2rN1uDNhXoTTZMKurqz2u3EUeEejnbdAzF21nofZkerQsx20lAC 5qaFL7kGJHaOoBm5QMR7kySfzg9iMKYmDLcNM4hcOox0ZSyb5kfdxJwS1j3LWuCA 20x53PdRE9kCiAiPaxU2+B2WScDI5AaFL+tzqEWirjNQ45+ihxZnVCWj2lXxe6vp V5rz8x1i1aza3NfLhT4qZP/0G4vqdAfzGh+VJDsAjolKBPIhbQobzatGChyq79JN odyCeDCRxDvkNg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:08 2026 by rpki-client