This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json) Hash identifier: tRy0gUE3vE3qaPi/ZFAKhlAGmQhxYMM8QucdhzTc+Ts= Subject key identifier: 3A:A8:35:A4:10:F4:9A:D1:C4:87:D7:9C:F2:F7:4D:3A:A0:6B:60:71 Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f Certificate serial: 019C44DA38D7C3A195AD76B308F9CDBA0990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft Manifest number: 0AB0 Signing time: Tue 10 Feb 2026 00:01:17 +0000 Manifest this update: Tue 10 Feb 2026 00:01:17 +0000 Manifest next update: Wed 11 Feb 2026 00:01:17 +0000 Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: ecmSjV4mg5NykJHZjJEZrbV/w4DcXuT67Z+XR7r/LJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:38:d7:c3:a1:95:ad:76:b3:08:f9:cd:ba:09:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f Validity Not Before: Feb 10 00:01:17 2026 GMT Not After : Feb 11 00:01:17 2026 GMT Subject: CN=3aa835a410f49ad1c487d79cf2f74d3aa06b6071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:12:85:2f:53:ae:1b:a9:3b:48:5a:23:4a: 47:ed:bb:e6:9e:de:fe:02:1b:92:bf:91:9d:2d:97: d4:3c:07:4a:36:53:9d:aa:48:67:be:ed:b7:0f:40: 61:bb:23:72:9d:64:6d:a1:57:61:cc:e5:5f:57:61: 1d:60:11:64:66:eb:b9:dd:48:69:05:06:05:3c:2c: a4:e1:45:be:f2:a7:42:6b:60:28:2a:67:91:df:8d: 46:e2:47:ef:88:46:05:0f:8f:9d:27:37:04:36:b9: b1:6c:f6:19:38:d0:6c:5b:2d:56:35:7e:86:d5:3e: 62:60:3e:83:cc:a5:aa:27:0b:5c:76:93:35:c9:01: 70:c4:e2:71:72:1f:c5:c3:66:9a:0a:fd:13:41:12: fc:b4:d3:f0:43:86:9b:96:2b:0d:26:71:f3:a5:f0: fc:94:46:53:ba:df:c8:fe:b6:25:54:00:00:4d:e5: 2d:ae:37:39:5b:f7:4d:25:45:81:9f:ac:e3:c1:cf: ec:8b:fb:d0:30:09:14:1d:84:a5:2d:13:9c:ba:63: 69:eb:d4:64:53:7d:19:9a:70:63:a1:3f:3e:59:6b: 35:97:81:92:14:b3:19:de:b3:93:f5:fd:26:f3:fd: 2d:e8:c0:90:28:d4:5a:6d:24:b1:c6:2a:95:65:e0: 91:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A8:35:A4:10:F4:9A:D1:C4:87:D7:9C:F2:F7:4D:3A:A0:6B:60:71 X509v3 Authority Key Identifier: keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d5:8e:0b:ab:ce:2e:3e:16:54:35:70:cb:8f:53:b7:a1:42: d3:e2:a1:3d:43:af:b7:20:b0:d4:cd:63:6a:bc:08:6a:21:cd: 2c:8d:49:f8:47:74:68:4c:ee:cb:ec:52:03:ec:4a:4b:f6:91: ae:05:00:b6:d7:d6:9e:2a:7f:3b:ae:81:05:76:2b:8c:cd:1e: 7e:d8:df:2b:af:45:5c:7c:ef:88:84:a0:18:8b:d9:a4:46:16: 54:0f:5e:69:d9:71:dd:90:a6:d1:7b:1e:06:11:cc:ff:2a:9b: 27:7a:94:f4:28:8e:0c:c6:19:f3:07:ff:bc:de:b5:43:f9:6f: c0:c2:5f:5e:28:6f:0d:45:91:bf:66:17:2d:d9:81:24:4d:8a: 97:43:6a:df:00:9f:c2:a1:87:d8:16:e7:8b:4f:f0:bd:ee:a9: fc:95:bb:a2:ac:95:6e:36:c4:88:e5:8e:aa:ab:68:88:77:b8: b2:cb:ed:a9:4f:8e:09:94:d8:21:57:06:17:ef:e8:3f:a9:bf: f8:71:29:6e:72:7f:46:d3:d4:8e:e5:cc:e0:46:3f:55:14:ff: 28:8e:be:e9:00:70:b8:38:93:50:44:03:5c:09:be:97:fb:e8: 96:c3:9f:bf:c7:9f:2f:d8:9e:d1:1d:a4:67:21:3b:21:3c:6b: 4e:97:6b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2jjXw6GVrXazCPnNugmQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk NjBiN2YwHhcNMjYwMjEwMDAwMTE3WhcNMjYwMjExMDAwMTE3WjAzMTEwLwYDVQQD EygzYWE4MzVhNDEwZjQ5YWQxYzQ4N2Q3OWNmMmY3NGQzYWEwNmI2MDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeoShS9TrhupO0haI0pH7bvmnt7+ AhuSv5GdLZfUPAdKNlOdqkhnvu23D0BhuyNynWRtoVdhzOVfV2EdYBFkZuu53Uhp BQYFPCyk4UW+8qdCa2AoKmeR341G4kfviEYFD4+dJzcENrmxbPYZONBsWy1WNX6G 1T5iYD6DzKWqJwtcdpM1yQFwxOJxch/Fw2aaCv0TQRL8tNPwQ4ablisNJnHzpfD8 lEZTut/I/rYlVAAATeUtrjc5W/dNJUWBn6zjwc/si/vQMAkUHYSlLROcumNp69Rk U30ZmnBjoT8+WWs1l4GSFLMZ3rOT9f0m8/0t6MCQKNRabSSxxiqVZeCRnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqoNaQQ9JrRxIfXnPL3TTqga2BxMB8GA1UdIwQY MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3 LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdWOC6vO Lj4WVDVwy49Tt6FC0+KhPUOvtyCw1M1jarwIaiHNLI1J+Ed0aEzuy+xSA+xKS/aR rgUAttfWnip/O66BBXYrjM0eftjfK69FXHzviISgGIvZpEYWVA9eadlx3ZCm0Xse BhHM/yqbJ3qU9CiODMYZ8wf/vN61Q/lvwMJfXihvDUWRv2YXLdmBJE2Kl0Nq3wCf wqGH2Bbni0/wve6p/JW7oqyVbjbEiOWOqqtoiHe4ssvtqU+OCZTYIVcGF+/oP6m/ +HEpbnJ/RtPUjuXM4EY/VRT/KI6+6QBwuDiTUEQDXAm+l/volsOfv8efL9ie0R2k ZyE7ITxrTpdrpg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:55 2026 by rpki-client