This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json) Hash identifier: AMwVcSC3PfHPnu8Uj8rLeHdw7sYTzZPleM0ttGvo3vQ= Subject key identifier: 73:DE:F5:51:2A:A6:F8:D6:54:98:CA:30:86:2A:4D:20:D6:78:04:B2 Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Certificate serial: 019C42EB975BC033952D9FA995B35EDDEF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 15:01:01 +0000 Manifest this update: Mon 09 Feb 2026 15:01:01 +0000 Manifest next update: Tue 10 Feb 2026 15:01:01 +0000 Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: upkm/o4THDJ/qGW/23Ru+U3l8sV0wzafGJy0gyBPb5c=) 2: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (hash: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:97:5b:c0:33:95:2d:9f:a9:95:b3:5e:dd:ef:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729 Validity Not Before: Feb 9 15:01:01 2026 GMT Not After : Feb 10 15:01:01 2026 GMT Subject: CN=73def5512aa6f8d65498ca30862a4d20d67804b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:2e:0e:1d:9c:50:65:b0:c4:34:7c:18:93: 14:cf:67:1e:9e:8d:49:04:84:8b:8d:c2:b1:d3:bc: d3:9e:bb:69:02:3c:07:71:55:51:82:ff:9a:ab:84: f5:cb:ae:a1:a3:b7:c7:b8:bf:74:0f:6e:02:e9:f3: d8:ce:a1:88:f2:7d:a4:be:70:2e:84:3c:aa:38:bf: 6d:1a:2d:a8:32:c3:21:f1:53:f9:d7:1e:9f:fd:39: 28:e8:a3:2c:92:db:71:44:95:6b:63:a6:c3:39:1a: c7:22:34:17:f0:e2:28:00:1c:57:c1:df:b0:87:22: cd:98:48:b1:22:eb:20:3c:8f:e8:d5:aa:07:b1:7a: 23:25:21:c7:87:db:ec:92:ea:98:00:f5:64:81:29: cc:e7:d9:8b:8b:ba:2e:da:e4:7d:83:d6:de:af:65: 9b:de:02:ab:d9:ac:08:7b:b3:20:8b:20:9e:f8:9a: 2c:39:b2:5d:cc:8a:77:5c:95:57:cf:ea:5f:c9:10: a0:08:8f:d0:9d:78:5a:d2:fb:09:f0:75:45:cd:8d: ad:c5:70:ef:6f:76:34:ee:db:ef:32:e6:0f:04:4e: 9e:91:41:b0:7c:0e:b8:cc:78:b8:44:db:b8:45:cf: d0:f9:2c:fc:ce:e5:d7:51:10:05:a8:2c:52:b7:24: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DE:F5:51:2A:A6:F8:D6:54:98:CA:30:86:2A:4D:20:D6:78:04:B2 X509v3 Authority Key Identifier: keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3c:2c:2e:eb:19:17:1b:10:91:00:29:14:51:f5:be:72:b3: da:3d:19:e9:f4:a2:97:74:6d:b8:ee:38:27:1c:5e:b1:60:93: ab:68:e4:cf:1c:11:52:e3:b9:a5:d0:ec:ca:e4:19:9c:99:2e: 5f:7a:85:11:3b:fc:36:cb:8e:d3:9d:3f:42:ee:cb:36:61:1a: c6:c8:be:5b:82:7a:18:09:77:57:5b:c4:ca:3c:ef:77:8c:73: 13:05:25:4e:63:e7:59:e6:6a:0e:b1:b6:eb:ef:90:fb:73:8e: 67:ae:f9:17:05:bb:57:04:99:cb:5d:8a:c6:1d:31:ec:19:c5: e4:09:f9:8e:25:24:38:46:1f:d3:53:29:b5:fd:31:03:3f:b1: 9a:96:20:57:6f:a8:e8:80:f7:90:cd:5f:f9:d9:5c:2a:f7:85: b2:d1:f5:cb:8e:42:a2:39:97:c2:96:37:7f:b9:02:91:06:9e: d9:c5:85:ed:a7:4b:23:2c:e0:8e:08:97:22:74:8e:ec:61:96: 4d:6f:2e:3a:6e:f1:11:95:a1:1e:37:73:9e:ec:6b:79:2b:4c: a8:13:4d:30:57:50:b8:ea:3b:7b:2f:70:e1:64:86:08:3f:51: b1:f6:f0:63:90:a4:4a:f0:6b:e8:bd:96:05:eb:d4:cc:76:f2: af:f4:28:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65dbwDOVLZ+plbNe3e+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0 ODM3MjkwHhcNMjYwMjA5MTUwMTAxWhcNMjYwMjEwMTUwMTAxWjAzMTEwLwYDVQQD Eyg3M2RlZjU1MTJhYTZmOGQ2NTQ5OGNhMzA4NjJhNGQyMGQ2NzgwNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNouDh2cUGWwxDR8GJMUz2ceno1J BISLjcKx07zTnrtpAjwHcVVRgv+aq4T1y66ho7fHuL90D24C6fPYzqGI8n2kvnAu hDyqOL9tGi2oMsMh8VP51x6f/Tko6KMskttxRJVrY6bDORrHIjQX8OIoABxXwd+w hyLNmEixIusgPI/o1aoHsXojJSHHh9vskuqYAPVkgSnM59mLi7ou2uR9g9ber2Wb 3gKr2awIe7MgiyCe+JosObJdzIp3XJVXz+pfyRCgCI/QnXha0vsJ8HVFzY2txXDv b3Y07tvvMuYPBE6ekUGwfA64zHi4RNu4Rc/Q+Sz8zuXXURAFqCxStySO2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPe9VEqpvjWVJjKMIYqTSDWeASyMB8GA1UdIwQY MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt NzVhNTU1YzhmYjQxLzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjwsLusZ FxsQkQApFFH1vnKz2j0Z6fSil3RtuO44JxxesWCTq2jkzxwRUuO5pdDsyuQZnJku X3qFETv8NsuO050/Qu7LNmEaxsi+W4J6GAl3V1vEyjzvd4xzEwUlTmPnWeZqDrG2 6++Q+3OOZ675FwW7VwSZy12Kxh0x7BnF5An5jiUkOEYf01Mptf0xAz+xmpYgV2+o 6ID3kM1f+dlcKveFstH1y45CojmXwpY3f7kCkQae2cWF7adLIyzgjgiXInSO7GGW TW8uOm7xEZWhHjdznuxreStMqBNNMFdQuOo7ey9w4WSGCD9RsfbwY5CkSvBr6L2W BevUzHbyr/QoRg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:19 2026 by rpki-client