This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json) Hash identifier: l3LDEitBJksfmhbSZ3PPg7c+l+of/5HhCBPA/MbsHHk= Subject key identifier: 51:69:96:3B:F2:FB:7A:78:1C:BB:5A:7E:7D:B1:91:54:8E:C9:17:20 Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Certificate serial: 019C41A1FF2839A72B6D193661D700ADEB8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft Manifest number: 0827 Signing time: Mon 09 Feb 2026 09:01:01 +0000 Manifest this update: Mon 09 Feb 2026 09:01:01 +0000 Manifest next update: Tue 10 Feb 2026 09:01:01 +0000 Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=) 2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: lC3BhL6K/0SUZGJrJPOl/G8Ab4K4Qhs/GjS7zCqZjfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ff:28:39:a7:2b:6d:19:36:61:d7:00:ad:eb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9 Validity Not Before: Feb 9 09:01:01 2026 GMT Not After : Feb 10 09:01:01 2026 GMT Subject: CN=5169963bf2fb7a781cbb5a7e7db191548ec91720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:b5:6f:b3:29:f0:9a:63:bb:a1:04:48:d5: 88:3a:05:9e:6a:06:8c:43:dc:4a:9e:ee:3b:c8:f8: 6a:64:b7:ad:39:a6:7d:2b:d0:a2:8a:4f:97:b9:27: 87:42:34:fc:6c:16:c8:35:33:61:2d:1d:37:26:23: 56:81:b3:6a:04:fd:28:b0:b2:a0:97:af:46:48:c1: 40:5e:ee:bc:91:87:2f:85:8c:79:8e:93:2e:0a:38: 31:15:d7:e9:54:0a:ad:05:e3:44:54:8f:c0:1c:84: de:bc:76:9b:b7:b3:ee:74:99:05:1e:b0:9a:1a:37: d6:e9:21:f0:34:e9:0a:a6:2d:fb:16:f7:5e:a6:82: 74:81:16:45:35:07:42:18:66:e9:97:74:55:70:d4: 37:06:10:22:5f:61:39:b4:66:79:68:88:fb:6b:99: 78:46:54:08:2e:b9:cc:2d:12:82:53:c1:23:a0:90: 9b:62:3b:d8:b9:74:1c:c9:87:5b:1f:d1:da:df:1a: b5:64:ab:8d:70:46:86:51:d5:9a:47:07:0b:7b:ac: 3c:6a:81:3c:bc:bd:b8:0e:1d:1f:7a:f2:01:db:aa: 2b:3c:72:e7:c0:af:9f:f7:c5:ec:14:26:0e:ba:5c: 2b:b7:11:c2:5a:70:d7:3f:ee:b7:6a:40:23:ad:e7: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:96:3B:F2:FB:7A:78:1C:BB:5A:7E:7D:B1:91:54:8E:C9:17:20 X509v3 Authority Key Identifier: keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:2b:66:a3:1b:b3:8b:a4:39:2b:53:97:7b:13:bd:61:d8:9c: e2:72:47:d7:6c:9a:4b:59:a1:15:64:0f:8d:e2:f8:8b:00:27: 01:b3:c4:d7:66:e8:38:5f:d0:f3:05:34:9f:db:27:39:14:cd: c2:32:58:d0:2d:22:a1:1c:1a:e6:c0:51:21:2f:98:54:7a:2e: f0:b3:21:bd:80:b0:29:9b:62:6c:f8:22:ad:f0:61:5a:ef:29: b0:7c:37:91:39:45:ab:88:80:d8:97:15:39:95:bb:15:0a:d8: c7:9d:67:ce:25:0d:f5:43:84:aa:de:52:d8:10:09:60:25:1c: 34:42:c8:00:30:27:c5:3b:00:0e:44:ee:2a:e4:7b:f4:86:4e: c9:7d:ff:ee:4d:e6:f5:11:76:0d:f8:f8:6b:e1:6e:67:2f:6e: b0:4c:f9:96:79:96:0c:2d:bd:5c:04:49:10:bc:a4:13:d3:a2: 72:f0:5f:2f:de:82:e8:03:6b:09:bb:55:5e:d0:7e:40:0f:63: c7:97:a2:3a:31:61:af:aa:36:f5:54:85:7b:1d:74:c6:e9:44: 3d:d9:8c:e3:13:2f:90:f2:50:f5:c1:48:cb:00:d5:84:43:b1: bd:ee:a3:5b:f0:4d:01:6d:9e:c9:11:ad:b0:a6:68:38:36:7a: 5b:81:ee:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBof8oOacrbRk2YdcAreuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0 NDcxZjkwHhcNMjYwMjA5MDkwMTAxWhcNMjYwMjEwMDkwMTAxWjAzMTEwLwYDVQQD Eyg1MTY5OTYzYmYyZmI3YTc4MWNiYjVhN2U3ZGIxOTE1NDhlYzkxNzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApei1b7Mp8Jpju6EESNWIOgWeagaM Q9xKnu47yPhqZLetOaZ9K9Ciik+XuSeHQjT8bBbINTNhLR03JiNWgbNqBP0osLKg l69GSMFAXu68kYcvhYx5jpMuCjgxFdfpVAqtBeNEVI/AHITevHabt7PudJkFHrCa GjfW6SHwNOkKpi37FvdepoJ0gRZFNQdCGGbpl3RVcNQ3BhAiX2E5tGZ5aIj7a5l4 RlQILrnMLRKCU8EjoJCbYjvYuXQcyYdbH9Ha3xq1ZKuNcEaGUdWaRwcLe6w8aoE8 vL24Dh0fevIB26orPHLnwK+f98XsFCYOulwrtxHCWnDXP+63akAjreda6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFpljvy+3p4HLtafn2xkVSOyRcgMB8GA1UdIwQY MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt OTNmNDI1NWYyYjgyLzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCtmoxuz i6Q5K1OXexO9Ydic4nJH12yaS1mhFWQPjeL4iwAnAbPE12boOF/Q8wU0n9snORTN wjJY0C0ioRwa5sBRIS+YVHou8LMhvYCwKZtibPgirfBhWu8psHw3kTlFq4iA2JcV OZW7FQrYx51nziUN9UOEqt5S2BAJYCUcNELIADAnxTsADkTuKuR79IZOyX3/7k3m 9RF2Dfj4a+FuZy9usEz5lnmWDC29XARJELykE9OicvBfL96C6ANrCbtVXtB+QA9j x5eiOjFhr6o29VSFex10xulEPdmM4xMvkPJQ9cFIywDVhEOxve6jW/BNAW2eyRGt sKZoODZ6W4HutA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:27 2026 by rpki-client