This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json) Hash identifier: 1BGn+ODiEKTedol8MqB9EKzTLw7Ym/ge1d1plH8zl8A= Subject key identifier: 9F:F6:9A:29:EA:E4:2B:DE:9A:AF:F8:FD:E7:D6:F7:2A:E1:66:A3:77 Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b Certificate serial: 019C4434D5CDC8209DE9DDC5E12F758B4C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft Manifest number: 14E4 Signing time: Mon 09 Feb 2026 21:00:39 +0000 Manifest this update: Mon 09 Feb 2026 21:00:39 +0000 Manifest next update: Tue 10 Feb 2026 21:00:39 +0000 Files and hashes: 1: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: fH57tQ5D/nQRbgyArpkVMgcXeOIC8gZ32qhL3C1+4ek=) 2: rlMjya3NsVVgO1waTc6yGFx9urk.roa (hash: 9FM63jOjz4W8peZkAPQ1K8fUNKLUxM1YrAhzY91gkyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:d5:cd:c8:20:9d:e9:dd:c5:e1:2f:75:8b:4c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b Validity Not Before: Feb 9 21:00:39 2026 GMT Not After : Feb 10 21:00:39 2026 GMT Subject: CN=9ff69a29eae42bde9aaff8fde7d6f72ae166a377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:5a:9b:cd:72:10:f2:a0:ed:8f:60:77:b8: 99:36:c4:4f:f1:ab:b0:0a:19:9e:11:9c:52:2c:26: 1d:e4:97:b7:9c:51:9a:b2:73:64:22:23:85:20:5b: e5:a2:71:9b:7f:19:60:ba:66:3e:9f:ae:bc:17:51: 5b:c7:8f:fd:8f:33:77:7c:78:26:50:1c:ca:a7:cd: 85:a6:51:b6:14:85:90:73:92:5b:1c:e9:c7:07:af: d6:fb:c1:49:00:df:61:ac:39:0c:d7:5a:5a:fc:76: 23:c3:2c:d1:77:72:55:9e:69:59:f2:6f:79:2e:06: 1f:dd:76:4a:f4:91:b1:94:9b:de:f2:90:ac:da:a5: 14:a8:b5:4d:0b:06:18:70:17:40:61:a9:87:71:4d: 1d:65:ce:14:e6:99:fc:30:f4:0b:14:84:4c:56:00: 9b:ff:7a:d6:3c:fa:0f:6b:19:16:7e:35:1f:b9:82: ec:21:2b:b9:e6:0b:91:e3:63:88:e0:0f:e6:83:2d: 54:07:4a:32:19:84:4b:0e:c1:ab:bf:e5:f5:d0:63: 54:8c:aa:a9:09:74:e1:5b:43:0f:d3:a3:86:f8:5f: 1b:55:d0:98:da:05:84:1e:80:60:cc:ad:f6:d4:a2: 30:ad:d9:0b:bd:c7:31:c0:d3:10:a8:99:f7:91:f3: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F6:9A:29:EA:E4:2B:DE:9A:AF:F8:FD:E7:D6:F7:2A:E1:66:A3:77 X509v3 Authority Key Identifier: keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d4:43:bf:eb:95:53:fa:89:a7:c7:de:d9:0a:15:4b:38:46: 0b:be:1c:c7:c5:93:dd:64:70:4e:13:bc:b2:09:b9:3d:4a:b2: 82:64:45:97:14:79:90:ee:3e:fd:34:f6:3c:d2:3b:27:ed:2a: 92:01:38:46:09:98:b8:0b:76:2e:60:f8:de:fb:84:94:07:ec: 45:c9:e0:6b:31:a6:ea:17:d2:ab:a9:07:83:4f:9a:53:88:0e: 84:60:08:9a:61:f5:7d:21:1f:31:1e:60:4d:48:40:35:a9:5d: a2:d1:49:aa:64:b5:29:89:32:d9:ee:1e:a5:e0:53:94:30:86: 2f:d0:ec:ef:16:0b:13:b4:6d:08:cc:3e:af:db:31:10:40:f3: 63:7b:12:db:93:a8:37:23:7a:ed:9c:b9:28:b3:71:94:33:01: 38:d1:9c:6e:f5:50:52:5d:5d:b4:b9:99:a5:97:1e:2b:56:13: db:0a:20:85:2e:03:a7:40:80:bf:93:34:34:2d:51:5c:6b:97: 10:88:78:e1:db:a9:fe:04:9b:e2:e8:a3:44:0c:2c:17:54:94: 5c:ce:94:b9:d3:88:1d:05:ff:af:2e:4c:71:68:b9:47:25:ae: ce:8b:52:1d:0b:d4:81:62:03:b5:6d:ac:97:32:30:a9:97:6a: 95:f8:d2:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENNXNyCCd6d3F4S91i0xeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm ZGE2M2IwHhcNMjYwMjA5MjEwMDM5WhcNMjYwMjEwMjEwMDM5WjAzMTEwLwYDVQQD Eyg5ZmY2OWEyOWVhZTQyYmRlOWFhZmY4ZmRlN2Q2ZjcyYWUxNjZhMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6INam81yEPKg7Y9gd7iZNsRP8auw ChmeEZxSLCYd5Je3nFGasnNkIiOFIFvlonGbfxlgumY+n668F1Fbx4/9jzN3fHgm UBzKp82FplG2FIWQc5JbHOnHB6/W+8FJAN9hrDkM11pa/HYjwyzRd3JVnmlZ8m95 LgYf3XZK9JGxlJve8pCs2qUUqLVNCwYYcBdAYamHcU0dZc4U5pn8MPQLFIRMVgCb /3rWPPoPaxkWfjUfuYLsISu55guR42OI4A/mgy1UB0oyGYRLDsGrv+X10GNUjKqp CXThW0MP06OG+F8bVdCY2gWEHoBgzK321KIwrdkLvccxwNMQqJn3kfMBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/2minq5Cvemq/4/efW9yrhZqN3MB8GA1UdIwQY MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNRDv+uV U/qJp8fe2QoVSzhGC74cx8WT3WRwThO8sgm5PUqygmRFlxR5kO4+/TT2PNI7J+0q kgE4RgmYuAt2LmD43vuElAfsRcngazGm6hfSq6kHg0+aU4gOhGAImmH1fSEfMR5g TUhANaldotFJqmS1KYky2e4epeBTlDCGL9Ds7xYLE7RtCMw+r9sxEEDzY3sS25Oo NyN67Zy5KLNxlDMBONGcbvVQUl1dtLmZpZceK1YT2woghS4Dp0CAv5M0NC1RXGuX EIh44dup/gSb4uijRAwsF1SUXM6UudOIHQX/ry5McWi5RyWuzotSHQvUgWIDtW2s lzIwqZdqlfjSYg== -----END CERTIFICATE-----Generated at Tue Feb 10 05:50:38 2026 by rpki-client