This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json) Hash identifier: ejSi3GRHMcV5RNMrXzyaFosJetAXppxSOipkp48pqR8= Subject key identifier: 5E:39:AA:75:37:39:F1:0C:E1:6F:6C:A2:52:D3:BF:E4:ED:D5:BF:B0 Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Certificate serial: 019C427DECB8B9EFEF335C96ED0DA5422ADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft Manifest number: F7 Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: P30hncn24f+on+kqNqzTbrTpydRDeiXjMPMDLJb55qI=) 2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ec:b8:b9:ef:ef:33:5c:96:ed:0d:a5:42:2a:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6 Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=5e39aa753739f10ce16f6ca252d3bfe4edd5bfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:3a:70:f5:ad:6d:73:99:52:a3:ed:68:b2: 66:7e:fb:89:71:35:85:64:36:89:86:75:3e:18:a5: b7:c6:f2:7d:79:79:91:4b:8c:e8:77:03:47:d8:20: 45:bd:a3:8f:bb:78:0c:cf:70:e2:c5:a1:5f:f2:a3: 45:29:99:ea:2a:2a:5f:69:d5:8f:43:9d:bb:b3:6e: 86:d2:66:4b:5e:cc:ec:81:7f:2c:31:42:35:d2:ac: da:e8:b2:47:81:e4:c0:f7:28:67:91:d3:71:57:b8: 60:04:8c:cb:d8:06:42:bf:c6:f3:a5:be:65:85:6a: 72:c1:9a:be:56:36:38:c4:bb:35:ee:8c:e1:2a:a5: 62:fa:14:b5:58:b6:bc:c7:84:9c:fc:12:db:c8:44: c9:8c:bc:5d:bf:32:2b:f0:fe:fb:38:d2:10:09:98: 40:af:41:fd:80:b9:d3:65:ac:cb:7b:ba:7e:11:ac: c8:dd:33:02:68:0c:ae:91:4f:c4:41:cb:a6:d5:57: 24:35:4e:b8:23:33:e5:5c:c6:19:43:8f:d0:36:5e: 9a:46:09:17:78:da:c3:3d:e8:9d:d4:0e:f8:73:44: 14:4b:06:b2:47:eb:24:c0:44:77:ce:8b:4d:bd:af: 5f:c5:fe:32:18:c3:b7:9d:72:cc:91:a3:c0:3e:ad: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:39:AA:75:37:39:F1:0C:E1:6F:6C:A2:52:D3:BF:E4:ED:D5:BF:B0 X509v3 Authority Key Identifier: keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:f9:ed:32:ca:82:8f:36:e6:61:00:75:3d:b9:0a:e0:05:be: 7b:3e:e0:06:75:60:f7:5b:3e:c5:4b:ba:83:15:09:d2:61:8c: 17:42:77:d1:85:78:0f:48:42:d4:46:00:00:d8:1c:a2:2d:9c: 4d:44:19:6c:72:5c:c1:2c:d1:e7:c5:9c:35:8c:2f:7d:b4:2a: 52:3f:de:cb:86:ee:8e:d4:56:57:5c:27:79:ab:82:53:0b:d3: f6:5a:65:25:41:41:b2:c7:cc:d9:11:d3:79:b4:ff:c7:71:49: c2:9c:13:22:a6:d5:c6:70:77:8c:cc:44:da:86:45:f4:89:7b: 20:91:39:88:0e:f7:44:27:be:1c:08:c9:b5:80:57:0b:dd:4d: 2e:f6:ed:3b:0c:7d:bf:2a:64:e6:46:6a:7e:88:db:e1:03:bc: c7:9c:4d:51:21:6f:39:aa:2c:9c:a0:0e:97:ba:67:c3:b3:ca: 08:70:4b:4d:59:92:42:e2:5a:13:1a:5c:f3:5b:ee:54:58:68: 14:b5:b1:9e:f8:36:d4:73:64:05:87:17:af:31:83:44:1a:04: 44:13:83:41:e6:2b:2f:98:a8:51:a2:05:fe:e4:f5:4c:3c:9e: 75:34:f0:8b:82:67:18:cb:47:91:da:7b:44:f6:44:7c:6d:2a: f4:5c:c2:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfey4ue/vM1yW7Q2lQircMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4 MmVmZTYwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD Eyg1ZTM5YWE3NTM3MzlmMTBjZTE2ZjZjYTI1MmQzYmZlNGVkZDViZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa46cPWtbXOZUqPtaLJmfvuJcTWF ZDaJhnU+GKW3xvJ9eXmRS4zodwNH2CBFvaOPu3gMz3DixaFf8qNFKZnqKipfadWP Q527s26G0mZLXszsgX8sMUI10qza6LJHgeTA9yhnkdNxV7hgBIzL2AZCv8bzpb5l hWpywZq+VjY4xLs17ozhKqVi+hS1WLa8x4Sc/BLbyETJjLxdvzIr8P77ONIQCZhA r0H9gLnTZazLe7p+EazI3TMCaAyukU/EQcum1VckNU64IzPlXMYZQ4/QNl6aRgkX eNrDPeid1A74c0QUSwayR+skwER3zotNva9fxf4yGMO3nXLMkaPAPq0t2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF45qnU3OfEM4W9solLTv+Tt1b+wMB8GA1UdIwQY MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fntMsqC jzbmYQB1PbkK4AW+ez7gBnVg91s+xUu6gxUJ0mGMF0J30YV4D0hC1EYAANgcoi2c TUQZbHJcwSzR58WcNYwvfbQqUj/ey4bujtRWV1wneauCUwvT9lplJUFBssfM2RHT ebT/x3FJwpwTIqbVxnB3jMxE2oZF9Il7IJE5iA73RCe+HAjJtYBXC91NLvbtOwx9 vypk5kZqfojb4QO8x5xNUSFvOaosnKAOl7pnw7PKCHBLTVmSQuJaExpc81vuVFho FLWxnvg21HNkBYcXrzGDRBoERBODQeYrL5ioUaIF/uT1TDyedTTwi4JnGMtHkdp7 RPZEfG0q9FzCSg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:13 2026 by rpki-client