This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json) Hash identifier: JFJaJBnYWp1hdXktiQs0Vw2qYRwbT6drqZilvuqFPDQ= Subject key identifier: 96:B2:69:0E:18:42:A8:6A:66:EB:7E:D5:BC:BD:2F:1C:0D:AC:6D:CC Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d Certificate serial: 019C4322EF5AA0E67F2A17443DA15E7C0EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft Manifest number: 0F22 Signing time: Mon 09 Feb 2026 16:01:28 +0000 Manifest this update: Mon 09 Feb 2026 16:01:28 +0000 Manifest next update: Tue 10 Feb 2026 16:01:28 +0000 Files and hashes: 1: G3s7fFZiJFqITolnCSvINrflYsk.roa (hash: jskO07AkOlpZvjtyrYTNt3+GnH5jKgWqutiH7gmA7J0=) 2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: zkAP+uHW9WKA+Zq+0gCVzzqnKH+GoQO4cTYsxj4tudQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ef:5a:a0:e6:7f:2a:17:44:3d:a1:5e:7c:0e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d Validity Not Before: Feb 9 16:01:28 2026 GMT Not After : Feb 10 16:01:28 2026 GMT Subject: CN=96b2690e1842a86a66eb7ed5bcbd2f1c0dac6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:9c:8c:19:b1:f0:da:97:3b:f8:f4:9c:63: fc:b4:27:cc:5a:62:10:4c:3c:83:1f:86:e3:56:cc: 71:6c:d3:25:33:1c:d3:d1:bf:95:d6:9d:54:da:0d: f2:bb:09:f5:69:cb:1d:ed:b0:24:08:91:b8:bf:54: c1:b1:7d:16:46:9b:bd:2d:c2:27:b2:64:de:d0:e2: 1b:4f:ae:b1:8d:b2:4d:c2:d5:e2:e9:d0:27:4c:f3: 2a:5e:95:78:3b:08:b3:03:53:7f:0e:da:3e:f4:a4: 85:36:bf:d7:7b:43:94:df:e4:a9:c6:c9:7d:56:fa: d5:88:af:33:77:34:a1:49:5e:96:30:ad:2d:54:1d: 87:79:e0:1c:64:c4:88:bd:b9:8b:d2:ac:84:b3:63: 9d:58:a8:b2:fd:c0:11:fb:f0:12:2d:c5:df:ac:f8: 6f:26:a1:21:ea:bc:8d:1c:08:8c:68:09:4a:2b:4d: f7:35:9b:11:9e:ce:5b:d1:4e:40:08:2e:27:eb:a8: d3:10:77:06:ba:f8:b6:0e:83:e8:4e:78:ae:75:f5: 7f:12:22:bf:12:8f:31:8e:f2:f2:8a:69:83:af:69: 5e:9a:70:76:e5:03:71:fb:3a:06:de:a6:42:24:af: 25:bf:db:4c:af:59:d4:5f:47:9e:17:57:c3:1e:a7: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:69:0E:18:42:A8:6A:66:EB:7E:D5:BC:BD:2F:1C:0D:AC:6D:CC X509v3 Authority Key Identifier: keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:91:3c:b9:df:18:86:3e:6d:53:a7:0b:88:02:61:74:31:0e: ef:77:fd:68:24:6e:b0:48:50:44:ff:7b:14:f6:6b:ec:d0:19: a3:97:39:c6:4a:ba:7c:50:29:cd:0e:b6:3b:b8:18:4f:4b:2e: 51:2d:48:40:2c:24:2d:cc:be:98:45:2c:b0:87:71:7e:9b:17: 15:86:e0:38:91:fb:15:17:f7:05:1b:47:d5:cc:02:b0:94:59: 37:e2:06:f0:71:b3:08:e2:da:e5:11:08:23:82:58:80:99:2a: 95:de:81:60:be:64:e0:f4:f4:03:b1:67:4e:05:d2:db:8c:e0: 72:d1:44:8d:c8:3f:63:11:31:a5:37:27:eb:d7:19:0a:9e:88: 48:8a:38:54:ad:a3:d6:81:c4:b0:50:34:33:93:90:6f:a0:36: df:85:0e:de:51:13:b3:e9:c8:2f:c0:bb:79:4d:3d:12:ee:48: dd:b9:bb:4d:2f:73:81:4f:d8:70:b2:5d:04:5b:d0:3a:3e:50: 72:72:19:6d:84:29:a3:74:51:a2:f2:fd:50:f7:41:e4:25:fc: 99:03:3b:d9:e7:56:86:19:f4:22:a7:1a:dd:c4:e2:b8:34:34: e9:c2:ab:b1:5b:eb:88:a3:ea:aa:87:3c:23:9e:99:9c:a7:80: 19:da:d8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIu9aoOZ/KhdEPaFefA7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2E0ZjRhNzM3ZWMwOWYzMzVhYzQwNjMzMTMzMzI4MjEz ZWZjM2QwHhcNMjYwMjA5MTYwMTI4WhcNMjYwMjEwMTYwMTI4WjAzMTEwLwYDVQQD Eyg5NmIyNjkwZTE4NDJhODZhNjZlYjdlZDViY2JkMmYxYzBkYWM2ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWcjBmx8NqXO/j0nGP8tCfMWmIQ TDyDH4bjVsxxbNMlMxzT0b+V1p1U2g3yuwn1acsd7bAkCJG4v1TBsX0WRpu9LcIn smTe0OIbT66xjbJNwtXi6dAnTPMqXpV4OwizA1N/Dto+9KSFNr/Xe0OU3+Spxsl9 VvrViK8zdzShSV6WMK0tVB2HeeAcZMSIvbmL0qyEs2OdWKiy/cAR+/ASLcXfrPhv JqEh6ryNHAiMaAlKK033NZsRns5b0U5ACC4n66jTEHcGuvi2DoPoTniudfV/EiK/ Eo8xjvLyimmDr2lemnB25QNx+zoG3qZCJK8lv9tMr1nUX0eeF1fDHqdDPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJayaQ4YQqhqZut+1by9LxwNrG3MMB8GA1UdIwQY MBaAFKrKT0pzfsCfM1rEBjMTMyghPvw9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDct MzM0ZTZmMzMyMTgwLzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMTg3NmEtZmFlMS00M2NjLWEyZDctMzM0ZTZmMzMyMTgw LzEvcXNwUFNuTi13Sjh6V3NRR014TXpLQ0UtX0QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATpE8ud8Y hj5tU6cLiAJhdDEO73f9aCRusEhQRP97FPZr7NAZo5c5xkq6fFApzQ62O7gYT0su US1IQCwkLcy+mEUssIdxfpsXFYbgOJH7FRf3BRtH1cwCsJRZN+IG8HGzCOLa5REI I4JYgJkqld6BYL5k4PT0A7FnTgXS24zgctFEjcg/YxExpTcn69cZCp6ISIo4VK2j 1oHEsFA0M5OQb6A234UO3lETs+nIL8C7eU09Eu5I3bm7TS9zgU/YcLJdBFvQOj5Q cnIZbYQpo3RRovL9UPdB5CX8mQM72edWhhn0Iqca3cTiuDQ06cKrsVvriKPqqoc8 I56ZnKeAGdrYWA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:54 2026 by rpki-client