This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json) Hash identifier: Mp/JLzDSjG8SUujCAbFRIu+jiKE//sVEACbNULRuHqw= Subject key identifier: 34:87:81:48:D6:A2:BA:BB:77:22:7C:99:CF:DB:EB:B5:D5:11:D2:8E Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17 Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17 Certificate serial: 019C42EB8731CB8E9BF1A7E1A4D7A0534700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft Manifest number: 0149 Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: xgkNCR8OGSNzy7MxZAkUpgNHsVk90U5OO+FgXK4g0f8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:87:31:cb:8e:9b:f1:a7:e1:a4:d7:a0:53:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17 Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=34878148d6a2babb77227c99cfdbebb5d511d28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:19:c4:08:33:b2:ec:c1:ed:e1:ed:a8:1f: 0f:47:a3:22:20:2e:a4:57:4e:42:28:7b:ea:60:30: e8:e2:a5:da:dc:60:52:de:96:8e:a5:2a:1c:8c:5e: 18:39:70:46:6d:de:21:b9:28:fd:62:e7:d0:47:75: 82:2b:23:a6:c1:27:2d:99:6b:51:4f:2d:23:07:03: 9b:a7:56:49:19:25:e0:5d:3d:cb:45:a7:2a:e9:0e: e2:21:2d:81:8d:5e:d9:29:20:27:b9:b0:17:4f:0e: 10:eb:27:e1:04:7a:80:ff:80:8e:4b:f1:b2:e2:6b: ad:1a:28:d6:d4:c1:b7:6d:6f:55:4b:54:8a:41:56: 44:55:f7:f8:c8:46:58:d3:8e:ff:05:3a:93:40:d5: fc:2b:15:39:59:88:5c:7d:12:fc:ec:d7:18:3b:46: e0:a8:7a:55:8a:a3:14:d3:31:b7:fb:6d:c4:d2:75: 69:3e:09:1c:b1:d4:11:a5:1e:9c:cb:15:05:48:d2: 02:97:45:f5:52:9c:19:57:32:1b:90:8d:e3:ea:d1: 55:f9:e8:b9:9d:ef:61:68:2a:ff:0d:bd:ea:dc:90: 99:73:4d:aa:d9:c8:e4:6d:8d:d4:b6:a6:a9:15:05: 35:d2:a4:16:2c:ae:2b:a8:ec:05:32:b5:f9:7f:44: 99:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:87:81:48:D6:A2:BA:BB:77:22:7C:99:CF:DB:EB:B5:D5:11:D2:8E X509v3 Authority Key Identifier: keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:36:25:89:84:5c:98:38:3c:71:8e:04:1b:9a:9f:72:19: 4e:ff:61:a3:35:8b:cc:1d:68:fa:09:a3:b6:9b:93:04:b6:b8: a4:1c:eb:ab:73:07:8c:25:b1:b0:da:ac:6b:16:d0:65:04:af: 40:d9:51:75:a4:cd:64:71:68:1c:a2:48:8c:92:fe:4e:4e:cf: 9c:a6:18:28:c7:6e:21:49:a6:91:e2:c0:6c:4c:c2:61:d1:03: 37:5c:99:a6:b2:2e:28:62:6f:ba:19:ab:32:e4:dd:5c:53:3b: 38:b0:71:96:f3:41:42:5a:ef:83:58:04:f4:c1:a8:e1:1c:bc: 54:54:95:7e:18:c3:2c:91:6b:9d:ba:23:11:93:75:7f:90:82: 03:76:6b:84:f5:f5:df:ef:5e:f8:41:c2:28:28:14:e9:f8:e4: 01:36:8f:4f:12:ea:10:92:40:09:4f:8e:f8:46:84:38:26:24: a8:29:97:9e:36:77:03:fe:02:13:65:ab:3e:10:23:e7:fc:cf: ca:8c:07:3e:fa:ca:a6:85:75:8e:bc:95:75:fb:f6:ee:1f:e1: d1:c5:c0:60:be:4d:5c:94:06:d6:f1:a6:57:27:1d:17:6e:16: 17:10:a6:b7:b4:f2:85:f2:12:98:03:f6:ac:90:0d:af:a6:14: 21:c5:af:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64cxy46b8afhpNegU0cAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQwMWQxZmMxMWQyMmM4M2Q1ZDNmNTZlZGQ0OGU5NDk4 OWNjMTcwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD EygzNDg3ODE0OGQ2YTJiYWJiNzcyMjdjOTljZmRiZWJiNWQ1MTFkMjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyAZxAgzsuzB7eHtqB8PR6MiIC6k V05CKHvqYDDo4qXa3GBS3paOpSocjF4YOXBGbd4huSj9YufQR3WCKyOmwSctmWtR Ty0jBwObp1ZJGSXgXT3LRacq6Q7iIS2BjV7ZKSAnubAXTw4Q6yfhBHqA/4COS/Gy 4mutGijW1MG3bW9VS1SKQVZEVff4yEZY047/BTqTQNX8KxU5WYhcfRL87NcYO0bg qHpViqMU0zG3+23E0nVpPgkcsdQRpR6cyxUFSNICl0X1UpwZVzIbkI3j6tFV+ei5 ne9haCr/Db3q3JCZc02q2cjkbY3UtqapFQU10qQWLK4rqOwFMrX5f0SZnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSHgUjWorq7dyJ8mc/b67XVEdKOMB8GA1UdIwQY MBaAFNKkAdH8EdIsg9XT9W7dSOlJicwXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZWQzZTItOTBlNS00MjJiLThmMzUt NDQ4MjQxNWM2MjZkLzEvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85ZWQzZTItOTBlNS00MjJiLThmMzUtNDQ4MjQxNWM2MjZk LzEvMHFRQjBmd1IwaXlEMWRQMWJ0MUk2VW1KekJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/42JYmE XJg4PHGOBBuan3IZTv9hozWLzB1o+gmjtpuTBLa4pBzrq3MHjCWxsNqsaxbQZQSv QNlRdaTNZHFoHKJIjJL+Tk7PnKYYKMduIUmmkeLAbEzCYdEDN1yZprIuKGJvuhmr MuTdXFM7OLBxlvNBQlrvg1gE9MGo4Ry8VFSVfhjDLJFrnbojEZN1f5CCA3ZrhPX1 3+9e+EHCKCgU6fjkATaPTxLqEJJACU+O+EaEOCYkqCmXnjZ3A/4CE2WrPhAj5/zP yowHPvrKpoV1jryVdfv27h/h0cXAYL5NXJQG1vGmVycdF24WFxCmt7TyhfISmAP2 rJANr6YUIcWvRA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:38 2026 by rpki-client