This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft File: QUZdOIpCMlXUiDLQc2m2vHcD6io.mft (raw, json) Hash identifier: 0wfhEYRBo6L9zgqfkN6fuPJzzCBpYQFLskyHCZvpeKg= Subject key identifier: 74:C5:09:0A:FB:05:97:D0:08:61:D7:D2:EB:7E:28:05:DB:92:B3:57 Authority key identifier: 41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A Certificate issuer: /CN=41465d388a423255d48832d07369b6bc7703ea2a Certificate serial: 019C4358E18A79DCAEF31D1D7B5CF5A6B58A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft Manifest number: 0137 Signing time: Mon 09 Feb 2026 17:00:24 +0000 Manifest this update: Mon 09 Feb 2026 17:00:24 +0000 Manifest next update: Tue 10 Feb 2026 17:00:24 +0000 Files and hashes: 1: QUZdOIpCMlXUiDLQc2m2vHcD6io.crl (hash: Pc5dMDDkSpiWCRbSaHL1+zsHZDmYP/4jFnJV+9c4wVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e1:8a:79:dc:ae:f3:1d:1d:7b:5c:f5:a6:b5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41465d388a423255d48832d07369b6bc7703ea2a Validity Not Before: Feb 9 17:00:24 2026 GMT Not After : Feb 10 17:00:24 2026 GMT Subject: CN=74c5090afb0597d00861d7d2eb7e2805db92b357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:11:ee:b1:7a:b5:45:5a:2e:07:41:2b:d1: 25:7a:61:ed:75:30:a5:2e:35:10:50:53:e8:78:cb: 74:7e:c1:10:4a:03:3f:cc:b4:82:69:19:2c:d3:27: 43:0e:a1:4e:5c:11:f1:da:fa:fd:3d:9b:d1:d1:e9: b5:1b:8e:50:0b:83:12:b9:94:fd:56:fa:74:34:75: 48:79:e9:15:3c:50:71:94:3f:0e:4a:c5:9e:4a:f7: 9f:6f:22:9d:a6:41:35:a0:85:ab:c1:09:46:ae:dd: 83:f7:f2:d8:f1:2e:5c:96:d2:cb:54:1d:71:76:2d: d9:96:b3:96:a9:37:ee:fa:b5:46:47:61:3e:ad:3d: b9:a6:87:63:a0:c8:80:44:48:30:63:d8:3e:a8:65: fc:cc:e0:69:6e:55:a0:ac:86:57:02:6f:56:28:cf: a9:89:c3:8f:5a:95:6e:30:2d:88:d9:02:7c:75:0f: 5a:d5:13:64:47:5b:a8:67:48:b8:d2:d7:6b:53:63: aa:81:84:9f:8f:d4:92:68:2e:c1:1b:7c:2e:bd:57: 34:5f:9e:23:d9:7c:a2:35:60:2b:2b:36:03:33:f4: 77:80:d6:aa:4b:21:6a:aa:2d:c3:91:3c:d9:a6:99: f0:27:25:5c:34:b0:eb:07:43:f4:da:16:bd:d4:66: ed:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:09:0A:FB:05:97:D0:08:61:D7:D2:EB:7E:28:05:DB:92:B3:57 X509v3 Authority Key Identifier: keyid:41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0c:64:a8:a8:42:f9:de:57:7e:78:08:a3:1b:63:0a:09:ae: a5:bf:1d:94:d9:5c:64:11:3f:16:1a:7d:06:69:e4:90:ad:8e: fa:4c:e6:5d:55:77:46:3f:3a:c9:63:29:9d:6e:d7:fd:4f:48: 5d:e6:43:98:73:23:72:e4:ad:dd:32:69:a5:2a:04:56:60:66: f4:98:68:88:be:d1:61:bc:39:cf:a4:3b:58:c2:26:e5:9f:56: 8d:8d:9a:12:6f:1d:c2:be:9f:b0:56:c2:2e:e5:c0:8c:87:7f: 55:2c:73:0b:3b:63:0b:d9:b6:8e:9f:55:ad:6f:1d:b8:85:4d: 5b:71:a6:e0:b1:aa:ac:fe:b0:ba:95:c2:f1:1e:b6:76:f4:28: ef:9c:39:ae:09:6a:aa:8c:04:a0:26:5a:96:ee:86:71:da:9b: 9d:36:39:80:59:25:e2:64:db:c8:31:78:c7:8f:8f:8d:98:60: 77:e2:f6:ef:d4:6d:ef:10:f1:81:4c:88:0e:2b:2d:3e:6e:b5: f5:0f:16:06:e2:b4:98:19:96:16:e9:d6:24:75:e6:ce:47:fc: 6f:f9:fb:0b:c8:48:0d:53:a9:4f:87:dc:33:9f:06:95:62:14: 99:43:e5:12:44:52:52:d6:c1:f6:99:91:28:7f:63:00:ba:04: 35:ad:c4:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOGKedyu8x0de1z1prWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNDY1ZDM4OGE0MjMyNTVkNDg4MzJkMDczNjliNmJjNzcw M2VhMmEwHhcNMjYwMjA5MTcwMDI0WhcNMjYwMjEwMTcwMDI0WjAzMTEwLwYDVQQD Eyg3NGM1MDkwYWZiMDU5N2QwMDg2MWQ3ZDJlYjdlMjgwNWRiOTJiMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y4R7rF6tUVaLgdBK9ElemHtdTCl LjUQUFPoeMt0fsEQSgM/zLSCaRks0ydDDqFOXBHx2vr9PZvR0em1G45QC4MSuZT9 Vvp0NHVIeekVPFBxlD8OSsWeSvefbyKdpkE1oIWrwQlGrt2D9/LY8S5cltLLVB1x di3ZlrOWqTfu+rVGR2E+rT25podjoMiAREgwY9g+qGX8zOBpblWgrIZXAm9WKM+p icOPWpVuMC2I2QJ8dQ9a1RNkR1uoZ0i40tdrU2OqgYSfj9SSaC7BG3wuvVc0X54j 2XyiNWArKzYDM/R3gNaqSyFqqi3DkTzZppnwJyVcNLDrB0P02ha91GbtwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTFCQr7BZfQCGHX0ut+KAXbkrNXMB8GA1UdIwQY MBaAFEFGXTiKQjJV1Igy0HNptrx3A+oqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zYjBlNzItMDQzYy00ZGZiLWI2MzYt MTVhNTMwNmMyZWZkLzEvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8zYjBlNzItMDQzYy00ZGZiLWI2MzYtMTVhNTMwNmMyZWZk LzEvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwxkqKhC +d5XfngIoxtjCgmupb8dlNlcZBE/Fhp9BmnkkK2O+kzmXVV3Rj86yWMpnW7X/U9I XeZDmHMjcuSt3TJppSoEVmBm9JhoiL7RYbw5z6Q7WMIm5Z9WjY2aEm8dwr6fsFbC LuXAjId/VSxzCztjC9m2jp9VrW8duIVNW3Gm4LGqrP6wupXC8R62dvQo75w5rglq qowEoCZalu6GcdqbnTY5gFkl4mTbyDF4x4+PjZhgd+L279Rt7xDxgUyIDistPm61 9Q8WBuK0mBmWFunWJHXmzkf8b/n7C8hIDVOpT4fcM58GlWIUmUPlEkRSUtbB9pmR KH9jALoENa3Ebg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:54 2026 by rpki-client