This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json) Hash identifier: Sq5ghKlKXIjh59MhAYrqwmDLaGOqq99e2qQeM/pZoNU= Subject key identifier: 32:01:BE:1D:34:BC:4B:0D:A2:F0:33:FC:A5:A7:BA:CC:50:D4:87:B7 Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5 Certificate serial: 019C43C6A580E805BEBFD0816CE62167A844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft Manifest number: 159D Signing time: Mon 09 Feb 2026 19:00:17 +0000 Manifest this update: Mon 09 Feb 2026 19:00:17 +0000 Manifest next update: Tue 10 Feb 2026 19:00:17 +0000 Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: h118AB9R/rMmBeU0ceKbu4mauWULXx4kfnLdRfGc0sQ=) 2: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (hash: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:a5:80:e8:05:be:bf:d0:81:6c:e6:21:67:a8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5 Validity Not Before: Feb 9 19:00:17 2026 GMT Not After : Feb 10 19:00:17 2026 GMT Subject: CN=3201be1d34bc4b0da2f033fca5a7bacc50d487b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:b4:02:bc:9c:90:1e:2e:31:5b:a1:50:32: c9:1d:0e:0e:2b:23:41:2b:a1:e3:71:a7:e5:d4:63: 38:07:87:34:b4:60:f0:93:43:74:72:36:39:29:9d: fb:08:ab:2e:36:0b:fe:2b:84:27:14:d4:09:a4:bd: 34:e3:20:1d:8e:30:da:86:07:79:bc:88:6f:7f:09: 39:7e:fd:a9:42:02:cf:92:af:69:72:83:c3:81:21: 8a:2c:b0:18:9e:8d:36:10:0e:e4:2d:a5:f6:cf:b8: 6e:0d:d0:36:79:dd:13:7b:bd:31:84:cc:94:d8:ec: 88:57:af:d0:30:2d:9e:6b:0a:7f:e7:a5:ac:9f:fd: 36:67:0b:92:7f:58:46:7e:d1:05:01:28:df:da:22: 3e:4d:85:73:ee:3f:1f:88:3b:39:35:1c:ac:7b:a9: b3:7b:ea:86:cb:e4:97:71:e7:d6:b4:65:b0:e5:c5: b8:f5:58:79:13:04:41:79:80:76:f3:95:bd:4e:66: 74:df:df:db:01:75:f7:17:f1:a7:72:06:22:a1:d3: 60:05:b3:fa:ef:e7:20:5a:c7:44:3b:56:8b:51:45: e3:ed:65:dc:8f:67:c0:63:0a:25:b7:15:37:dc:c8: f3:26:72:87:65:89:ec:a7:b4:33:5b:0a:1b:31:22: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:BE:1D:34:BC:4B:0D:A2:F0:33:FC:A5:A7:BA:CC:50:D4:87:B7 X509v3 Authority Key Identifier: keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fa:af:7b:1e:f3:d1:55:88:0a:50:dc:59:55:51:d6:3a:46: 56:71:f2:a9:cf:66:5d:1d:c7:43:42:bf:45:ac:54:b9:3d:a4: 49:ba:79:fc:ca:04:b0:de:f0:f1:4e:1b:55:07:07:9b:20:9c: ad:43:4e:e5:78:57:d8:48:0d:73:6a:5c:62:4f:3f:ee:33:fb: 9c:ec:61:c6:c0:32:12:cf:df:ae:32:a4:aa:27:6b:5f:41:6a: af:08:1f:90:6a:c0:31:2c:d2:20:01:e5:1b:96:06:cf:1e:49: 89:c2:5c:7f:fd:f3:8e:ca:58:ea:05:b5:67:fe:f0:46:17:67: ac:98:83:36:f1:9e:89:1b:38:c3:7a:df:91:cb:2f:60:f3:28: 6d:3b:61:1c:00:f3:e5:77:40:d7:39:65:fb:f7:9d:94:89:4e: fd:fd:ae:b8:70:6e:f0:c7:3c:41:38:38:5c:3a:f5:88:68:b9: f0:44:c0:2d:49:82:d6:c5:eb:fc:ee:34:ce:1d:79:d7:ee:b1: 3f:3f:93:5c:2f:de:3e:f7:1c:24:85:ff:d9:6d:79:64:bb:27: dc:43:41:d2:ee:2f:5c:01:1a:58:af:33:34:ab:e8:7c:14:05: f9:63:16:3f:d2:32:d5:e2:bd:9d:f1:b7:83:32:7b:18:eb:3a: 50:fa:48:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxqWA6AW+v9CBbOYhZ6hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx OTU0ZDUwHhcNMjYwMjA5MTkwMDE3WhcNMjYwMjEwMTkwMDE3WjAzMTEwLwYDVQQD EygzMjAxYmUxZDM0YmM0YjBkYTJmMDMzZmNhNWE3YmFjYzUwZDQ4N2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnW0AryckB4uMVuhUDLJHQ4OKyNB K6Hjcafl1GM4B4c0tGDwk0N0cjY5KZ37CKsuNgv+K4QnFNQJpL004yAdjjDahgd5 vIhvfwk5fv2pQgLPkq9pcoPDgSGKLLAYno02EA7kLaX2z7huDdA2ed0Te70xhMyU 2OyIV6/QMC2eawp/56Wsn/02ZwuSf1hGftEFASjf2iI+TYVz7j8fiDs5NRyse6mz e+qGy+SXcefWtGWw5cW49Vh5EwRBeYB285W9TmZ039/bAXX3F/GncgYiodNgBbP6 7+cgWsdEO1aLUUXj7WXcj2fAYwoltxU33MjzJnKHZYnsp7QzWwobMSKaQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIBvh00vEsNovAz/KWnusxQ1Ie3MB8GA1UdIwQY MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvqvex7z 0VWIClDcWVVR1jpGVnHyqc9mXR3HQ0K/RaxUuT2kSbp5/MoEsN7w8U4bVQcHmyCc rUNO5XhX2EgNc2pcYk8/7jP7nOxhxsAyEs/frjKkqidrX0FqrwgfkGrAMSzSIAHl G5YGzx5JicJcf/3zjspY6gW1Z/7wRhdnrJiDNvGeiRs4w3rfkcsvYPMobTthHADz 5XdA1zll+/edlIlO/f2uuHBu8Mc8QTg4XDr1iGi58ETALUmC1sXr/O40zh151+6x Pz+TXC/ePvccJIX/2W15ZLsn3ENB0u4vXAEaWK8zNKvofBQF+WMWP9Iy1eK9nfG3 gzJ7GOs6UPpICA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:34 2026 by rpki-client