This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json) Hash identifier: RrEKQo954jNl5fNlga2ufRQ74xGiK7syL9hr/4T53kw= Subject key identifier: 3B:B8:71:5A:2F:66:E3:7A:7C:A5:94:82:32:DD:57:25:A0:51:DC:1A Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53 Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553 Certificate serial: 019C427E0F83E29B8DA2E7056F95A899BA61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft Manifest number: 0974 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: 9INJsedOYul733hYNVUSRlHwyIEsyYFh6WQKgoKsUcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0f:83:e2:9b:8d:a2:e7:05:6f:95:a8:99:ba:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=3bb8715a2f66e37a7ca5948232dd5725a051dc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:fb:b6:3e:c5:84:83:7b:2a:34:e1:f4:f0: 9c:75:81:36:67:54:b4:a9:e3:21:2c:b2:b4:54:d8: 7d:e0:85:f4:17:dc:f8:30:47:99:a0:b4:81:3d:ba: a5:41:6e:b6:e7:81:41:fb:e8:bd:f9:46:1b:e9:f1: 1c:5f:97:57:89:34:c4:cb:03:3b:85:11:1b:89:96: 07:e5:d6:df:45:6a:b5:93:6c:32:96:c2:9d:06:f2: 07:88:62:39:c6:4e:cc:78:4e:8c:15:30:1b:5c:a9: 3b:fc:3d:20:8e:f6:52:7a:c8:94:78:aa:d5:0e:59: 63:51:70:f4:07:3f:46:02:25:1f:7a:6e:6e:cc:a5: 6c:5a:1d:7d:2d:14:5c:a0:a6:57:86:73:e1:8c:31: 40:b2:3b:08:2f:5e:1d:6a:73:fc:cb:13:91:73:7d: 6e:29:c6:e6:9d:0b:5a:f0:42:8b:28:5c:9a:04:83: 7d:98:ee:c9:81:e7:5e:a5:90:cc:a7:b7:7e:a9:0a: cf:6f:d0:81:be:0b:e7:6a:89:b7:92:b3:f9:65:e0: 27:a1:e2:cb:bd:d9:1c:3d:f0:0f:47:47:43:f9:d5: 9c:79:e1:e7:36:46:83:37:63:ef:37:22:07:37:eb: 4e:3b:8a:5e:fc:ec:7f:5d:ef:84:37:b6:c7:49:6f: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:71:5A:2F:66:E3:7A:7C:A5:94:82:32:DD:57:25:A0:51:DC:1A X509v3 Authority Key Identifier: keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c6:9e:31:9f:74:9a:f5:fb:e9:45:7f:35:09:ca:51:53:bf: 55:5c:72:ab:04:73:d3:04:d1:77:11:67:e7:2e:47:b2:e5:af: 0a:6f:35:c3:11:5f:6b:ba:c1:5a:33:9c:5d:d7:87:5d:ac:03: 16:3a:cf:6d:17:ae:2d:ad:ac:fe:b9:39:2a:ec:20:b8:70:c8: 51:e8:03:e2:c2:59:6a:cb:87:44:f4:17:fc:48:59:46:bb:0b: 4f:76:b8:a9:f1:f0:42:09:a3:ad:0f:a6:4d:09:0a:b9:fb:ce: 89:31:49:e4:48:8d:27:d6:3f:fb:15:20:bc:aa:ef:4d:40:0e: 22:d1:50:c6:ca:55:7b:ff:5b:01:f5:55:25:da:03:bd:05:10: 5c:9e:6f:14:e4:5f:14:52:a4:31:58:72:db:fe:cc:9e:a6:36: 30:f0:13:bf:0b:c5:51:aa:9c:fe:ad:78:85:6b:a7:33:80:00: 72:05:5d:92:e9:13:c2:57:cb:69:d6:f4:7c:0c:aa:02:f4:8b: 7c:a2:c7:30:1d:86:5a:e8:bc:0d:a0:cb:d1:c0:59:fd:cc:c1: 26:e5:5a:2a:6b:8c:b8:83:d6:c6:72:a5:bf:41:ec:47:a2:8e: 52:ae:f9:d1:ef:a6:b6:69:ed:c8:15:68:3a:89:db:f5:55:6d: 82:f9:13:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg+D4puNoucFb5WombphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh NWM1NTMwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EygzYmI4NzE1YTJmNjZlMzdhN2NhNTk0ODIzMmRkNTcyNWEwNTFkYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAH7tj7FhIN7KjTh9PCcdYE2Z1S0 qeMhLLK0VNh94IX0F9z4MEeZoLSBPbqlQW6254FB++i9+UYb6fEcX5dXiTTEywM7 hREbiZYH5dbfRWq1k2wylsKdBvIHiGI5xk7MeE6MFTAbXKk7/D0gjvZSesiUeKrV DlljUXD0Bz9GAiUfem5uzKVsWh19LRRcoKZXhnPhjDFAsjsIL14danP8yxORc31u KcbmnQta8EKLKFyaBIN9mO7JgedepZDMp7d+qQrPb9CBvgvnaom3krP5ZeAnoeLL vdkcPfAPR0dD+dWceeHnNkaDN2PvNyIHN+tOO4pe/Ox/Xe+EN7bHSW9NlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu4cVovZuN6fKWUgjLdVyWgUdwaMB8GA1UdIwQY MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsaeMZ90 mvX76UV/NQnKUVO/VVxyqwRz0wTRdxFn5y5HsuWvCm81wxFfa7rBWjOcXdeHXawD FjrPbReuLa2s/rk5KuwguHDIUegD4sJZasuHRPQX/EhZRrsLT3a4qfHwQgmjrQ+m TQkKufvOiTFJ5EiNJ9Y/+xUgvKrvTUAOItFQxspVe/9bAfVVJdoDvQUQXJ5vFORf FFKkMVhy2/7MnqY2MPATvwvFUaqc/q14hWunM4AAcgVdkukTwlfLadb0fAyqAvSL fKLHMB2GWui8DaDL0cBZ/czBJuVaKmuMuIPWxnKlv0HsR6KOUq750e+mtmntyBVo Oonb9VVtgvkTgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:02 2026 by rpki-client