This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft File: QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json) Hash identifier: jHSSarqUtT+VDyVzbUgZC6V7+v3/Up3wKvNebSHosdw= Subject key identifier: B6:34:FD:0B:E1:0F:55:16:35:A6:81:90:AE:27:EA:FE:3B:2F:98:C6 Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22 Certificate issuer: /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22 Certificate serial: 019C43220C287B05F2B7E95D5AB0BCD71E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft Manifest number: 0A82 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: d5CdouJ8srQ+mnrNIyGi2wC5gUu0MiQRDIfblwBYfFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0c:28:7b:05:f2:b7:e9:5d:5a:b0:bc:d7:1e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=b634fd0be10f551635a68190ae27eafe3b2f98c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cd:82:7b:5d:5f:8b:0a:9d:52:c4:3a:3a:a7: 15:75:a4:42:d7:9f:8b:5b:09:b1:d1:b9:0a:61:cc: cf:cc:92:f1:90:89:e7:6c:35:8e:5f:b0:8b:e0:8b: bd:2f:48:45:71:84:71:b7:32:40:63:a5:a4:f8:93: 6c:00:9d:a5:ed:37:2f:c3:94:c7:e6:c3:dd:7e:68: 09:19:04:68:76:a7:98:77:23:40:cf:e6:d8:bc:da: 70:0a:54:ff:0a:99:71:16:42:8a:89:61:50:b3:ff: 54:e4:98:32:9a:1f:34:d6:6e:9c:3b:8c:bc:69:74: 27:92:0e:61:3a:d6:eb:6d:ab:3c:3b:19:ac:f4:e9: bf:f1:6b:78:38:72:c9:92:97:39:30:39:07:1d:f5: aa:d1:16:76:23:1c:f8:9c:31:38:86:2b:cf:a2:3e: 75:79:3f:71:44:4d:3e:84:7d:cf:6f:79:c6:79:60: 06:de:76:f0:34:c6:ad:8c:5a:10:50:43:15:7f:2e: e6:24:89:0c:ca:82:4f:75:d6:73:7e:97:1e:13:99: 86:f5:1a:d0:45:62:0d:2e:aa:b7:9f:33:17:29:e2: 69:97:ff:7d:a4:d7:94:98:d1:72:df:9d:6b:df:42: c2:07:ac:da:fc:b9:b6:f5:a5:f9:6f:3a:ce:18:4f: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:FD:0B:E1:0F:55:16:35:A6:81:90:AE:27:EA:FE:3B:2F:98:C6 X509v3 Authority Key Identifier: keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:63:72:20:49:32:f1:ae:73:83:a2:e8:a1:02:22:36:28:21: db:3c:2d:e2:bd:90:77:da:a2:7d:68:34:c5:4c:d7:25:c9:a9: 88:1e:00:72:20:dc:96:e4:10:6f:93:e8:2d:3b:28:06:2a:05: ed:da:8a:2e:45:11:89:c2:fe:ce:15:26:18:97:48:be:fd:37: 21:f9:9c:15:a6:ae:0a:c9:aa:05:dc:18:59:59:ad:3b:9d:a4: 89:46:6b:52:e9:4a:98:02:85:e9:75:fc:8f:04:19:98:b7:e7: 2f:3c:e8:a6:67:53:38:1b:47:ab:67:c3:11:14:58:6b:28:62: d9:66:ef:3e:bb:5d:fc:e2:17:18:f7:2d:3b:ec:04:e5:f1:97: 76:64:3c:00:7b:34:26:a3:f8:4f:4f:ae:d1:74:60:63:d8:4a: c9:18:16:a3:bb:b5:c9:b1:5e:3c:da:d4:5d:e7:6c:b0:12:1d: 61:df:4e:59:6c:35:6e:05:cf:93:e5:41:9a:6e:01:eb:45:78: 4b:32:e2:01:73:c9:76:79:47:33:6c:a4:c9:87:8a:8c:e4:59: 17:ea:50:38:50:fe:a3:62:93:fa:91:fd:c4:94:e1:29:ef:4c: d5:d9:7e:d0:93:dd:8c:f2:38:e0:ea:2a:49:40:88:d1:b5:18: e1:4f:04:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgwoewXyt+ldWrC81x4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNkY2MwZGUzZmU3ODRiYmQyZmJlMjZhMWQ4MTY1NmE0 NjdkMjIwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EyhiNjM0ZmQwYmUxMGY1NTE2MzVhNjgxOTBhZTI3ZWFmZTNiMmY5OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA082Ce11fiwqdUsQ6OqcVdaRC15+L Wwmx0bkKYczPzJLxkInnbDWOX7CL4Iu9L0hFcYRxtzJAY6Wk+JNsAJ2l7Tcvw5TH 5sPdfmgJGQRodqeYdyNAz+bYvNpwClT/CplxFkKKiWFQs/9U5Jgymh801m6cO4y8 aXQnkg5hOtbrbas8Oxms9Om/8Wt4OHLJkpc5MDkHHfWq0RZ2Ixz4nDE4hivPoj51 eT9xRE0+hH3Pb3nGeWAG3nbwNMatjFoQUEMVfy7mJIkMyoJPddZzfpceE5mG9RrQ RWINLqq3nzMXKeJpl/99pNeUmNFy351r30LCB6za/Lm29aX5bzrOGE+lrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY0/QvhD1UWNaaBkK4n6v47L5jGMB8GA1UdIwQY MBaAFEAs3MDeP+eEu9L74modgWVqRn0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUt ODY0ZGFjYTZjZmRmLzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUtODY0ZGFjYTZjZmRm LzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2NyIEky 8a5zg6LooQIiNigh2zwt4r2Qd9qifWg0xUzXJcmpiB4AciDcluQQb5PoLTsoBioF 7dqKLkURicL+zhUmGJdIvv03IfmcFaauCsmqBdwYWVmtO52kiUZrUulKmAKF6XX8 jwQZmLfnLzzopmdTOBtHq2fDERRYayhi2WbvPrtd/OIXGPctO+wE5fGXdmQ8AHs0 JqP4T0+u0XRgY9hKyRgWo7u1ybFePNrUXedssBIdYd9OWWw1bgXPk+VBmm4B60V4 SzLiAXPJdnlHM2ykyYeKjORZF+pQOFD+o2KT+pH9xJThKe9M1dl+0JPdjPI44Ooq SUCI0bUY4U8E8w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:15 2026 by rpki-client