This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json) Hash identifier: 7cFUoEMSR8vSlh8mMrBW6eEKcbkB6alnM99z0e5Egfs= Subject key identifier: 9C:DD:DC:92:4C:24:04:AC:74:65:96:5F:D0:2A:5A:E3:F0:26:5D:F0 Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Certificate serial: 019C4322C9DAD7AEFB39006661D59D22547D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft Manifest number: 0C6E Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: K1gGfjkaYZhkx1KwDevwtZC6+CAnIaJXDu7dtnC50Jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c9:da:d7:ae:fb:39:00:66:61:d5:9d:22:54:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50 Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=9cdddc924c2404ac7465965fd02a5ae3f0265df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:96:a5:c8:7c:56:3f:a2:c0:17:89:16:29: c8:97:4a:39:f0:9e:81:ce:ec:59:06:53:84:2a:da: 25:cb:75:84:b6:b1:67:a0:99:ef:9f:d4:ef:64:31: 89:28:38:f7:67:50:7b:a6:8c:98:81:75:cf:bf:61: 23:43:96:63:0d:76:0e:0f:89:49:5f:31:6c:58:bd: d0:1c:e6:74:e1:06:33:af:66:44:28:1d:ab:46:a8: 6b:fa:20:a7:b9:a9:41:00:2b:e3:b1:8f:6b:08:89: 83:55:c1:26:78:7b:49:f3:b6:50:50:e3:c5:3c:71: 6f:4c:16:61:7b:0c:44:ee:a5:12:fb:b7:09:25:df: 37:a6:d7:0d:94:37:01:a5:8b:4d:d8:8d:2e:a0:84: 47:cb:4a:3a:25:f8:26:df:94:4c:0e:f4:76:15:78: 55:30:2e:62:bd:0f:14:8e:08:ae:8b:09:7d:e6:97: 43:69:b2:f9:dc:90:f7:79:28:cf:9b:8e:b8:25:54: c9:d5:9c:ab:fb:5c:5a:7d:6f:20:df:ec:4e:63:0e: 9e:b5:7a:78:d7:27:cf:83:a8:cc:a1:a0:31:72:e4: c5:5c:28:22:60:0f:05:b8:dc:21:f3:b2:ea:8a:d2: a5:61:b8:58:4d:08:62:d0:d2:c8:b6:71:99:85:bb: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DD:DC:92:4C:24:04:AC:74:65:96:5F:D0:2A:5A:E3:F0:26:5D:F0 X509v3 Authority Key Identifier: keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6e:81:2c:42:45:93:41:33:6b:59:a5:5e:56:01:e5:85:d8: 3b:85:c6:e0:d1:46:c7:74:79:93:7c:d3:1c:eb:62:cb:02:8a: c4:1e:40:3f:4b:b5:98:e2:ed:92:a5:c1:67:ac:4f:32:7b:6c: f9:a4:38:6e:e2:45:67:39:d9:7c:88:37:80:6b:ed:ed:0f:be: 53:93:6f:9a:1b:d1:26:bd:27:20:f5:4c:44:e3:2d:71:05:58: 6b:59:58:82:a2:31:fa:4e:6c:99:14:2f:55:76:eb:74:1b:29: 22:0f:e3:54:fd:84:01:d9:6a:5c:b0:cc:a7:28:80:a0:78:86: d2:97:02:ba:3d:6e:83:78:7c:bf:4c:8a:9f:d9:cf:f3:60:bd: d7:ee:7b:aa:a2:a2:bb:d9:c6:f1:18:7e:a7:de:03:ad:ea:8e: b9:11:6e:b3:c2:f8:3f:4f:01:36:ff:3d:4a:42:86:22:d1:46: 85:e3:ef:66:0b:04:b5:56:d0:b0:ba:98:18:56:08:1d:14:db: 1b:e7:a7:f7:76:8b:24:67:9c:77:0f:96:8f:16:5c:16:33:21: 00:41:e7:4a:33:89:09:4e:b0:94:e2:eb:ed:c4:84:6b:ca:54: d7:b2:e8:cd:ba:e4:b9:7b:a5:db:84:ed:0a:c7:d4:07:5d:68: be:e4:5f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsna1677OQBmYdWdIlR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjJjOWVlZTdjNzA2NGZmOTExNTk0ZmU4MzVhMmYxMjVj OGRkNTAwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD Eyg5Y2RkZGM5MjRjMjQwNGFjNzQ2NTk2NWZkMDJhNWFlM2YwMjY1ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLyWpch8Vj+iwBeJFinIl0o58J6B zuxZBlOEKtoly3WEtrFnoJnvn9TvZDGJKDj3Z1B7poyYgXXPv2EjQ5ZjDXYOD4lJ XzFsWL3QHOZ04QYzr2ZEKB2rRqhr+iCnualBACvjsY9rCImDVcEmeHtJ87ZQUOPF PHFvTBZhewxE7qUS+7cJJd83ptcNlDcBpYtN2I0uoIRHy0o6Jfgm35RMDvR2FXhV MC5ivQ8Ujgiuiwl95pdDabL53JD3eSjPm464JVTJ1Zyr+1xafW8g3+xOYw6etXp4 1yfPg6jMoaAxcuTFXCgiYA8FuNwh87LqitKlYbhYTQhi0NLItnGZhbuF6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzd3JJMJASsdGWWX9AqWuPwJl3wMB8GA1UdIwQY MBaAFKhiye7nxwZP+RFZT+g1ovElyN1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3Njct MWIwMmIxZmM3ZDBkLzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3NjctMWIwMmIxZmM3ZDBk LzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF26BLEJF k0Eza1mlXlYB5YXYO4XG4NFGx3R5k3zTHOtiywKKxB5AP0u1mOLtkqXBZ6xPMnts +aQ4buJFZznZfIg3gGvt7Q++U5NvmhvRJr0nIPVMROMtcQVYa1lYgqIx+k5smRQv VXbrdBspIg/jVP2EAdlqXLDMpyiAoHiG0pcCuj1ug3h8v0yKn9nP82C91+57qqKi u9nG8Rh+p94DreqOuRFus8L4P08BNv89SkKGItFGhePvZgsEtVbQsLqYGFYIHRTb G+en93aLJGecdw+WjxZcFjMhAEHnSjOJCU6wlOLr7cSEa8pU17LozbrkuXul24Tt CsfUB11ovuRfsA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:08 2026 by rpki-client