This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json) Hash identifier: /cZ29ia35oWQWaOnVTM5nBVM4440Om9nUn2iJ18AvRU= Subject key identifier: 5E:70:70:CF:0D:79:97:D8:04:99:FB:0F:90:3E:ED:91:50:E0:99:4B Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5 Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5 Certificate serial: 019C43C72F6F98040FDF36F5FCAB3DC96E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 19:00:53 +0000 Manifest this update: Mon 09 Feb 2026 19:00:53 +0000 Manifest next update: Tue 10 Feb 2026 19:00:53 +0000 Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: ipyvrBAMnr7qkiQl359x+Z3nVxGMK9oO2b72It+xMkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2f:6f:98:04:0f:df:36:f5:fc:ab:3d:c9:6e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5 Validity Not Before: Feb 9 19:00:53 2026 GMT Not After : Feb 10 19:00:53 2026 GMT Subject: CN=5e7070cf0d7997d80499fb0f903eed9150e0994b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4a:f1:ab:d8:af:7f:d2:df:76:5c:ab:b2:4e: 5f:d5:86:43:a6:9a:b3:e9:c2:8f:31:9a:b5:66:05: 79:fa:8f:06:9f:ba:73:48:05:51:7e:62:72:92:59: 47:05:33:61:4c:6d:6f:0c:ea:b0:9a:9f:37:e0:ff: 49:d7:8a:68:ad:7d:cc:cd:9f:e7:3f:16:c3:64:44: fc:1f:c3:c4:30:68:cd:1a:a0:cd:1b:8a:0f:46:d9: d3:e4:06:3e:b8:52:17:83:b2:50:b2:cc:40:03:56: f8:b1:fb:f8:4f:f4:71:22:cc:2b:87:de:f5:79:b4: bc:0e:5f:1a:47:cd:ad:97:8c:f7:56:42:83:c0:cb: 15:73:16:24:a1:be:e5:3f:dc:ed:a7:40:d2:2d:f1: ab:39:d5:44:6d:2c:1e:56:64:dc:49:2f:9c:98:92: 84:79:e5:36:c6:0b:d3:e7:01:a5:05:e7:61:b8:13: 46:5f:31:fd:4f:71:5e:47:76:35:8b:fd:72:27:ef: 30:6d:50:77:82:52:3a:b9:45:bb:4b:26:a9:31:38: 32:d6:99:c6:73:cd:63:c1:de:1e:dd:10:6e:66:3d: e6:3a:cb:59:88:39:37:4f:36:7d:85:e0:58:ff:94: 2a:98:ee:f2:bd:ac:7b:df:69:6f:02:73:b4:1a:01: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:70:70:CF:0D:79:97:D8:04:99:FB:0F:90:3E:ED:91:50:E0:99:4B X509v3 Authority Key Identifier: keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:80:fe:bd:3f:8d:c0:20:ff:7f:e6:b6:74:bc:32:dd:78:c1: e1:32:9b:08:d5:ea:ca:86:f0:d9:f6:6b:98:a8:28:73:50:ef: cb:0c:31:aa:73:28:79:8e:6c:aa:1c:01:36:64:82:83:c5:fe: 20:ff:21:47:dc:9c:57:4f:81:0f:2a:91:d4:7d:ad:44:46:ff: f6:9e:63:e3:bd:73:3b:71:68:d3:75:41:c5:cc:0b:59:f5:df: b0:81:c1:20:4d:07:ac:9f:8c:94:97:40:c1:39:0c:a2:18:1b: 2a:35:23:10:c1:36:c7:01:4f:c9:da:fd:44:ed:f2:0b:85:87: ac:90:b9:2b:bb:b9:ad:17:50:41:80:b7:2f:3d:46:2b:6e:13: 62:23:5d:dd:f6:04:20:74:8a:8e:88:f5:54:0d:63:32:3f:c8: 77:22:70:ee:4e:9e:e9:4d:74:96:e1:ff:7e:84:85:3e:7e:04: d1:4b:64:83:0c:84:52:36:87:47:71:9a:6f:d2:2a:90:69:07: 69:37:07:5a:72:e4:db:64:18:33:24:47:92:64:ad:f8:e5:28: 29:c8:84:94:d7:b5:4b:ca:90:fb:ec:16:04:b2:73:55:5f:ce: 58:58:6f:c4:c3:6f:8e:86:39:26:bd:cb:09:44:59:26:b3:58: fe:e2:e6:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxy9vmAQP3zb1/Ks9yW4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMzI0ZjI1MWI2OGZmNTQ2M2Y2YjUzNTA3ZjY2YTRiMDM0 ZGMwZTUwHhcNMjYwMjA5MTkwMDUzWhcNMjYwMjEwMTkwMDUzWjAzMTEwLwYDVQQD Eyg1ZTcwNzBjZjBkNzk5N2Q4MDQ5OWZiMGY5MDNlZWQ5MTUwZTA5OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80rxq9ivf9Lfdlyrsk5f1YZDppqz 6cKPMZq1ZgV5+o8Gn7pzSAVRfmJykllHBTNhTG1vDOqwmp834P9J14porX3MzZ/n PxbDZET8H8PEMGjNGqDNG4oPRtnT5AY+uFIXg7JQssxAA1b4sfv4T/RxIswrh971 ebS8Dl8aR82tl4z3VkKDwMsVcxYkob7lP9ztp0DSLfGrOdVEbSweVmTcSS+cmJKE eeU2xgvT5wGlBedhuBNGXzH9T3FeR3Y1i/1yJ+8wbVB3glI6uUW7SyapMTgy1pnG c81jwd4e3RBuZj3mOstZiDk3TzZ9heBY/5QqmO7yvax732lvAnO0GgGPLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5wcM8NeZfYBJn7D5A+7ZFQ4JlLMB8GA1UdIwQY MBaAFEMyTyUbaP9UY/a1NQf2aksDTcDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2Et YmMzM2E1NDg5OGUwLzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2EtYmMzM2E1NDg5OGUw LzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKID+vT+N wCD/f+a2dLwy3XjB4TKbCNXqyobw2fZrmKgoc1DvywwxqnMoeY5sqhwBNmSCg8X+ IP8hR9ycV0+BDyqR1H2tREb/9p5j471zO3Fo03VBxcwLWfXfsIHBIE0HrJ+MlJdA wTkMohgbKjUjEME2xwFPydr9RO3yC4WHrJC5K7u5rRdQQYC3Lz1GK24TYiNd3fYE IHSKjoj1VA1jMj/IdyJw7k6e6U10luH/foSFPn4E0UtkgwyEUjaHR3Gab9IqkGkH aTcHWnLk22QYMyRHkmSt+OUoKciElNe1S8qQ++wWBLJzVV/OWFhvxMNvjoY5Jr3L CURZJrNY/uLm4g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:11 2026 by rpki-client