This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json) Hash identifier: 9MqJ92BMCAJcUxBIRvun7t5fW57NZ/ylFoFZpWyUOa4= Subject key identifier: 15:B8:CF:3B:B7:DA:0F:9B:F0:70:45:A8:09:78:5C:BE:DC:AA:6B:AD Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Certificate serial: 019C43C6BF2F61295228A0319E32DDA73F5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft Manifest number: 03DF Signing time: Mon 09 Feb 2026 19:00:24 +0000 Manifest this update: Mon 09 Feb 2026 19:00:24 +0000 Manifest next update: Tue 10 Feb 2026 19:00:24 +0000 Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: vIiljiP+0ukMNAerL/3GEwYh7AwMTY35A/wMDsdnVig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:bf:2f:61:29:52:28:a0:31:9e:32:dd:a7:3f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147 Validity Not Before: Feb 9 19:00:24 2026 GMT Not After : Feb 10 19:00:24 2026 GMT Subject: CN=15b8cf3bb7da0f9bf07045a809785cbedcaa6bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:c7:0d:3b:3c:71:1a:80:48:3a:7e:6a:bf: 90:40:be:2a:b6:8a:92:8c:8b:18:64:77:13:71:02: cb:78:66:f7:ae:01:e2:23:57:31:d1:2b:bc:64:eb: a0:35:7c:24:6f:7a:4c:3f:1a:d2:84:ba:43:20:5a: 54:5c:11:25:2a:de:ce:10:dc:e3:ff:6e:a0:d7:40: d0:a0:9b:a7:e2:ff:c3:32:a3:c6:80:f0:ab:c1:32: ca:79:0b:2b:e2:c8:86:71:90:70:19:90:ae:6d:2d: 40:48:cd:93:95:3e:26:b6:d8:f4:e1:9f:c0:83:5a: f6:19:54:72:7c:e6:6e:b8:48:b6:0e:22:0f:7e:3b: 17:2d:15:7d:5b:dd:cb:c9:97:b6:8a:4b:e3:a3:a3: 73:2d:2c:d6:85:8a:aa:b4:c8:0a:de:7b:85:cb:e9: f5:d7:a7:81:c3:4a:ac:a0:5d:00:b5:fb:cb:53:ba: 81:b8:70:0b:fb:29:c6:b7:ab:56:7f:13:db:0a:dc: 90:2d:9a:42:48:36:d7:5d:c1:af:55:e3:74:6b:ce: 2d:cd:56:ca:5f:c0:03:b5:d2:cb:2d:e3:0d:c0:d1: c6:de:96:68:91:5c:c5:86:84:4a:27:13:aa:35:a7: 21:0e:ab:7a:5c:6b:4b:62:1b:67:5e:c3:01:7f:36: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B8:CF:3B:B7:DA:0F:9B:F0:70:45:A8:09:78:5C:BE:DC:AA:6B:AD X509v3 Authority Key Identifier: keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:4c:78:7a:9a:9a:81:27:5c:96:d9:d5:09:29:8c:70:c5:2d: c1:2a:57:a2:a2:47:4e:83:22:7d:80:ce:bb:f2:c0:a8:57:23: 31:9a:c4:a6:89:11:6e:f8:78:87:34:13:38:31:87:1a:c8:65: 6d:79:bf:f7:d7:dc:10:9d:b6:14:be:f2:22:63:42:6c:05:e2: e3:6d:bf:8e:26:0f:8b:0a:91:e8:46:0e:04:30:52:25:95:1f: 97:f9:a3:7e:b1:7f:dc:3e:33:15:9b:83:c7:52:4b:43:bf:f8: de:b2:4b:3b:91:c8:32:47:d9:92:dc:58:2b:06:00:29:55:47: 20:56:ad:d8:2b:84:1a:f0:59:f3:01:63:84:04:5c:35:1f:9a: c6:f0:99:cd:bb:45:21:e0:34:31:7a:5d:20:2d:cd:ae:68:9d: 35:c8:ad:c2:eb:3b:c8:53:18:da:90:8a:26:0a:2c:1b:fe:e4: bd:d6:05:16:7e:25:6a:39:43:ba:f2:64:80:46:7d:37:d0:cf: bb:75:c0:ad:c9:de:3b:f4:3a:39:41:b9:d6:1c:28:4a:87:1f: 69:b9:4b:ff:82:22:c1:71:ff:6e:29:b3:94:0a:5c:3d:79:a0: 17:ec:fb:3a:9d:c3:ae:39:56:c1:bb:22:3a:91:84:34:b9:fc: ce:78:36:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxr8vYSlSKKAxnjLdpz9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm NjUxNDcwHhcNMjYwMjA5MTkwMDI0WhcNMjYwMjEwMTkwMDI0WjAzMTEwLwYDVQQD EygxNWI4Y2YzYmI3ZGEwZjliZjA3MDQ1YTgwOTc4NWNiZWRjYWE2YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSPHDTs8cRqASDp+ar+QQL4qtoqS jIsYZHcTcQLLeGb3rgHiI1cx0Su8ZOugNXwkb3pMPxrShLpDIFpUXBElKt7OENzj /26g10DQoJun4v/DMqPGgPCrwTLKeQsr4siGcZBwGZCubS1ASM2TlT4mttj04Z/A g1r2GVRyfOZuuEi2DiIPfjsXLRV9W93LyZe2ikvjo6NzLSzWhYqqtMgK3nuFy+n1 16eBw0qsoF0AtfvLU7qBuHAL+ynGt6tWfxPbCtyQLZpCSDbXXcGvVeN0a84tzVbK X8ADtdLLLeMNwNHG3pZokVzFhoRKJxOqNachDqt6XGtLYhtnXsMBfzb1+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW4zzu32g+b8HBFqAl4XL7cqmutMB8GA1UdIwQY MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEx4epqa gSdcltnVCSmMcMUtwSpXoqJHToMifYDOu/LAqFcjMZrEpokRbvh4hzQTODGHGshl bXm/99fcEJ22FL7yImNCbAXi422/jiYPiwqR6EYOBDBSJZUfl/mjfrF/3D4zFZuD x1JLQ7/43rJLO5HIMkfZktxYKwYAKVVHIFat2CuEGvBZ8wFjhARcNR+axvCZzbtF IeA0MXpdIC3NrmidNcitwus7yFMY2pCKJgosG/7kvdYFFn4lajlDuvJkgEZ9N9DP u3XArcneO/Q6OUG51hwoSocfablL/4IiwXH/bimzlApcPXmgF+z7Op3DrjlWwbsi OpGENLn8zng26A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:00 2026 by rpki-client