This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft File: QbKQBTJFsRKlim1YlN_cf2dCLos.mft (raw, json) Hash identifier: 5cVtfSPuHZDwn1mAGC8lsOWUfgnsy2KjD+jrMi/J1nA= Subject key identifier: 0C:90:F6:60:94:82:16:8D:F0:01:97:04:5F:01:DD:B8:77:C9:FB:ED Authority key identifier: 41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B Certificate issuer: /CN=41b290053245b112a58a6d5894dfdc7f67422e8b Certificate serial: 019C432252F3D86400E3577665DE302B8563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft Manifest number: 0BFC Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: QbKQBTJFsRKlim1YlN_cf2dCLos.crl (hash: mienpWjvRoMsBgpeevpbheBrtvemnFsSopK5fKK3SBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:52:f3:d8:64:00:e3:57:76:65:de:30:2b:85:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b290053245b112a58a6d5894dfdc7f67422e8b Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=0c90f6609482168df00197045f01ddb877c9fbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2e:db:06:c9:38:54:8a:7a:5d:ce:c1:20:15: e6:7f:63:0d:a9:93:67:be:02:fc:22:b3:e2:98:59: 27:3e:94:b9:fa:28:ae:92:b1:30:8d:17:07:5c:f0: c3:d4:4a:da:e7:47:7e:21:27:ad:6e:fe:e5:ac:b9: 24:40:10:d9:14:09:89:c3:b0:44:1c:91:19:67:c2: 0d:ab:95:26:32:fe:8a:cc:07:8d:b5:95:07:0f:03: cf:92:8b:4f:b1:5d:f4:d8:12:a4:e8:5b:c0:c4:57: 82:65:8e:97:8b:99:a6:28:e8:c1:ca:16:af:03:94: 27:bc:f6:c6:76:92:81:37:56:f8:e5:ef:cc:f3:b6: 38:08:ff:f5:c2:e9:aa:2f:b3:af:e4:9f:1b:0f:b5: 5e:cf:67:f1:31:a1:8a:e2:7a:d5:cd:2e:74:aa:b8: f1:72:29:5a:69:05:0e:54:46:2f:16:90:d0:b4:ad: 42:34:fc:44:1f:f1:f0:c9:c3:de:7b:46:2a:ad:f3: 22:1a:5e:57:6e:56:c1:ef:8e:6d:e5:5f:69:cc:f4: 8f:69:7f:74:6f:61:fa:1d:ad:a2:c3:a7:db:c3:7c: 07:34:a0:50:86:83:be:d8:99:45:3a:bb:b4:48:70: d7:2d:2f:59:55:87:f1:3e:c9:51:00:1e:47:ee:68: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:90:F6:60:94:82:16:8D:F0:01:97:04:5F:01:DD:B8:77:C9:FB:ED X509v3 Authority Key Identifier: keyid:41:B2:90:05:32:45:B1:12:A5:8A:6D:58:94:DF:DC:7F:67:42:2E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbKQBTJFsRKlim1YlN_cf2dCLos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a8839-8d8c-4e47-8ef4-8c73ad9bd2a0/1/QbKQBTJFsRKlim1YlN_cf2dCLos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f9:d8:e0:e1:16:07:2e:87:9c:a2:09:2e:62:cd:68:6b:10: 39:47:c5:6e:54:a5:61:09:d3:21:0a:e6:97:b0:84:15:28:82: c7:c1:26:60:00:b9:2a:a6:7a:09:45:e1:ae:4a:62:43:be:6d: 5b:32:e7:a4:ac:4d:82:fe:30:cb:35:c9:f2:14:1f:66:41:37: b7:e9:42:96:5e:f2:36:b7:a6:04:ab:6a:84:4f:d4:0d:e6:c7: af:44:64:eb:7c:5b:35:16:de:32:3d:a0:0d:c0:a6:f4:53:a4: 8d:ca:4f:72:59:14:e9:20:61:64:c9:a9:10:b9:2c:28:c9:f7: 5c:86:e9:cd:a9:5a:13:c1:9e:0e:18:e7:a9:85:37:ed:1e:8b: 2b:84:4e:80:e8:b0:80:a5:a3:03:50:5d:22:b1:6b:12:aa:d7: d9:80:0d:f6:ca:05:7e:c6:08:e1:3d:61:04:0a:13:97:1b:ef: 0e:fd:2f:32:33:c6:4b:5d:5f:e3:77:a8:f2:4f:e2:1a:7a:98: 8d:26:9c:0f:fb:7b:59:b9:0d:b8:85:e7:37:b7:6a:f3:2e:fa: 1a:fc:09:10:36:bb:67:92:3e:0e:c4:c2:14:86:87:18:35:58: 21:26:d1:72:df:7c:d3:51:1d:fe:93:3b:18:61:d0:7c:93:3c: 2d:99:a5:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlLz2GQA41d2Zd4wK4VjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYjI5MDA1MzI0NWIxMTJhNThhNmQ1ODk0ZGZkYzdmNjc0 MjJlOGIwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD EygwYzkwZjY2MDk0ODIxNjhkZjAwMTk3MDQ1ZjAxZGRiODc3YzlmYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS7bBsk4VIp6Xc7BIBXmf2MNqZNn vgL8IrPimFknPpS5+iiukrEwjRcHXPDD1Era50d+ISetbv7lrLkkQBDZFAmJw7BE HJEZZ8INq5UmMv6KzAeNtZUHDwPPkotPsV302BKk6FvAxFeCZY6Xi5mmKOjByhav A5QnvPbGdpKBN1b45e/M87Y4CP/1wumqL7Ov5J8bD7Vez2fxMaGK4nrVzS50qrjx cilaaQUOVEYvFpDQtK1CNPxEH/HwycPee0YqrfMiGl5XblbB745t5V9pzPSPaX90 b2H6Ha2iw6fbw3wHNKBQhoO+2JlFOru0SHDXLS9ZVYfxPslRAB5H7mhXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyQ9mCUghaN8AGXBF8B3bh3yfvtMB8GA1UdIwQY MBaAFEGykAUyRbESpYptWJTf3H9nQi6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQt OGM3M2FkOWJkMmEwLzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8yYTg4MzktOGQ4Yy00ZTQ3LThlZjQtOGM3M2FkOWJkMmEw LzEvUWJLUUJUSkZzUktsaW0xWWxOX2NmMmRDTG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvnY4OEW By6HnKIJLmLNaGsQOUfFblSlYQnTIQrml7CEFSiCx8EmYAC5KqZ6CUXhrkpiQ75t WzLnpKxNgv4wyzXJ8hQfZkE3t+lCll7yNremBKtqhE/UDebHr0Rk63xbNRbeMj2g DcCm9FOkjcpPclkU6SBhZMmpELksKMn3XIbpzalaE8GeDhjnqYU37R6LK4ROgOiw gKWjA1BdIrFrEqrX2YAN9soFfsYI4T1hBAoTlxvvDv0vMjPGS11f43eo8k/iGnqY jSacD/t7WbkNuIXnN7dq8y76GvwJEDa7Z5I+DsTCFIaHGDVYISbRct9801Ed/pM7 GGHQfJM8LZmliQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:55 2026 by rpki-client