This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json) Hash identifier: k8UIj9Tu3neAOATp0+11fnx/JdYkyT1aLcMlYDQtd/8= Subject key identifier: 3F:3A:A4:7E:8B:74:78:0B:F0:12:65:52:85:61:FB:E4:D9:EA:79:79 Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15 Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15 Certificate serial: 019C41A269F1569266D08492D1F1AFF42778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 09:01:28 +0000 Manifest this update: Mon 09 Feb 2026 09:01:28 +0000 Manifest next update: Tue 10 Feb 2026 09:01:28 +0000 Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: ULxuzsR9iGnjVVO8HDlNwBaZkNUD5X+j4h/kosUgN00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:69:f1:56:92:66:d0:84:92:d1:f1:af:f4:27:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15 Validity Not Before: Feb 9 09:01:28 2026 GMT Not After : Feb 10 09:01:28 2026 GMT Subject: CN=3f3aa47e8b74780bf01265528561fbe4d9ea7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:d0:9f:a2:89:59:ef:26:d2:ca:d5:8b:dc: f4:2b:84:f0:25:c3:22:dc:4b:d4:46:bb:cc:21:55: e6:35:b4:5c:50:78:a4:be:b5:a2:89:82:0e:7f:c9: 77:0f:42:f8:b8:a6:4a:2a:2a:2d:ae:22:59:6d:cc: cb:80:06:91:64:b6:f5:aa:db:0b:d5:d0:44:a5:40: 31:92:a1:ee:ae:67:92:06:f7:37:18:92:1c:7b:db: fc:e0:bf:cb:5f:76:a4:cc:91:d6:a3:f6:6a:72:c6: 03:9e:87:39:cd:c6:37:bc:f6:67:b2:d1:a9:54:19: 92:28:74:a1:ce:14:76:b6:d2:b9:bd:0f:24:b4:63: 28:b5:8b:cc:cb:6c:31:55:07:06:be:bf:0f:8e:da: f3:0b:4f:df:08:45:ac:82:3d:e9:90:52:c5:e7:7d: 36:a8:a9:7d:fc:5b:36:5b:fe:57:ec:c5:5f:cd:fe: d2:14:b4:f6:1d:98:d5:61:5a:03:be:fe:78:f8:03: d7:e2:1f:1a:68:e1:3b:d4:72:27:5c:0c:e0:98:6d: 5c:ca:ac:4a:90:00:12:2e:ce:b1:36:98:ba:75:cc: 3d:8f:df:8b:2e:85:17:75:7d:c1:b2:7a:73:0c:24: 31:fd:81:17:3b:d4:66:af:e3:37:5c:b4:81:9c:5c: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:A4:7E:8B:74:78:0B:F0:12:65:52:85:61:FB:E4:D9:EA:79:79 X509v3 Authority Key Identifier: keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f1:a4:b4:73:87:dc:f5:06:af:c3:a6:bc:28:8d:04:3e:38: 71:fa:cd:e1:e7:2a:21:a1:62:06:a9:17:9f:94:38:95:ac:56: 0f:07:bf:32:93:8d:a9:c0:1b:ba:8e:e5:f1:90:95:ed:9b:29: fc:4c:eb:4b:9f:f0:67:71:27:4b:d6:54:84:48:7b:ee:54:02: 7e:4b:51:1d:3f:46:3d:49:79:47:1b:6a:e5:3c:72:28:e6:3d: 91:57:f4:55:d0:90:ea:f6:cd:c6:86:98:cd:91:ed:f1:29:b5: 3d:00:8f:58:dd:6a:db:76:18:11:f9:f2:50:88:85:a1:1e:e3: 55:34:44:d1:ea:f2:16:03:ec:ac:14:50:85:9c:5d:44:dd:d0: 1c:63:db:49:40:d6:d6:c9:fe:b1:73:67:92:eb:8f:ec:6a:2a: 6b:9b:4b:c5:2a:03:a9:93:8b:ca:f3:68:c7:4e:47:3e:db:fe: 2f:38:83:39:ed:9a:53:6c:86:76:e4:b3:39:12:24:62:a8:87: b5:a7:45:d1:47:56:ef:b0:3c:0f:16:35:2d:07:bb:93:e8:50: e7:9c:12:e7:9a:44:d9:45:af:46:6b:9c:24:cd:ad:e5:86:5c: 1a:d9:a7:34:94:a4:4b:8f:05:2c:60:23:78:61:da:76:7b:18: 4f:cf:55:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomnxVpJm0ISS0fGv9Cd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWZjNjkzOGUzZDVlMGI5Mjc0N2IzMmY2ZDcwZmRhZjBl NTBhMTUwHhcNMjYwMjA5MDkwMTI4WhcNMjYwMjEwMDkwMTI4WjAzMTEwLwYDVQQD EygzZjNhYTQ3ZThiNzQ3ODBiZjAxMjY1NTI4NTYxZmJlNGQ5ZWE3OTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLfQn6KJWe8m0srVi9z0K4TwJcMi 3EvURrvMIVXmNbRcUHikvrWiiYIOf8l3D0L4uKZKKiotriJZbczLgAaRZLb1qtsL 1dBEpUAxkqHurmeSBvc3GJIce9v84L/LX3akzJHWo/ZqcsYDnoc5zcY3vPZnstGp VBmSKHShzhR2ttK5vQ8ktGMotYvMy2wxVQcGvr8PjtrzC0/fCEWsgj3pkFLF5302 qKl9/Fs2W/5X7MVfzf7SFLT2HZjVYVoDvv54+APX4h8aaOE71HInXAzgmG1cyqxK kAASLs6xNpi6dcw9j9+LLoUXdX3BsnpzDCQx/YEXO9Rmr+M3XLSBnFy/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD86pH6LdHgL8BJlUoVh++TZ6nl5MB8GA1UdIwQY MBaAFEGfxpOOPV4LknR7MvbXD9rw5QoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2Qt OWJjZWIwMjlkNTI4LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2QtOWJjZWIwMjlkNTI4 LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/GktHOH 3PUGr8OmvCiNBD44cfrN4ecqIaFiBqkXn5Q4laxWDwe/MpONqcAbuo7l8ZCV7Zsp /EzrS5/wZ3EnS9ZUhEh77lQCfktRHT9GPUl5Rxtq5TxyKOY9kVf0VdCQ6vbNxoaY zZHt8Sm1PQCPWN1q23YYEfnyUIiFoR7jVTRE0eryFgPsrBRQhZxdRN3QHGPbSUDW 1sn+sXNnkuuP7Goqa5tLxSoDqZOLyvNox05HPtv+LziDOe2aU2yGduSzORIkYqiH tadF0UdW77A8DxY1LQe7k+hQ55wS55pE2UWvRmucJM2t5YZcGtmnNJSkS48FLGAj eGHadnsYT89Vmg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client