This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json) Hash identifier: pOP6FdEx9iKZR7gwWzdZZyHQ7KADL3m5TAg0Vj0TLpU= Subject key identifier: 85:62:D2:7D:77:66:72:85:4A:E2:55:B5:12:B8:BD:54:0B:C2:27:83 Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9 Certificate serial: 019C42B44BC05E07F816B964104F5695155E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft Manifest number: 029B Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: nFIHJLO6qNshMTLmV+mHNBC0haYDaH+M+gOFFZKV324=) 2: wmkrs-T4Qk-NyFJuLfe4BJQMXMw.roa (hash: ENCrMS/ggVPvYnMViHVPfzOMTrIXGPczqg+j9lYLbks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4b:c0:5e:07:f8:16:b9:64:10:4f:56:95:15:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9 Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=8562d27d776672854ae255b512b8bd540bc22783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:93:13:63:3a:14:24:d3:8b:88:4c:e9:05:60: 2e:e4:9b:e1:2f:c4:e1:5c:6c:e2:4a:0d:d8:36:77: e3:0a:5a:3e:fa:db:7f:f4:1c:73:99:6b:d1:d0:6a: 82:1f:4e:1e:ad:95:2f:ab:a0:9f:cb:65:7c:43:ad: bc:6a:76:b7:78:dc:cc:60:60:07:52:86:28:a8:47: 27:79:fc:67:14:76:9d:07:f1:be:7e:09:9a:21:55: 2d:a9:59:d2:14:ea:0c:2c:32:d2:3a:f1:16:b2:b5: 15:80:bc:d7:25:25:69:90:a5:cb:f4:db:f1:7b:b2: cf:c9:5c:de:73:91:8b:21:3b:cc:ea:bf:15:df:2a: c4:ed:fd:aa:58:8c:5e:52:18:ca:5a:94:20:3d:59: 4e:c4:ac:4a:47:b1:44:55:4d:ef:d5:bf:2e:db:c7: ea:cf:6f:56:6e:59:79:13:6d:9e:f5:72:8d:45:8b: 19:2f:0d:29:d8:f8:0c:f5:1f:4a:b3:2f:4f:17:19: e8:85:af:2f:d8:b9:51:4f:08:0c:05:55:6e:82:87: 94:4b:0d:91:80:f7:8a:f1:59:a5:eb:ed:c5:f2:e3: 40:41:fb:89:2f:55:e8:33:91:a8:9c:06:79:49:24: 89:64:ab:f4:84:be:20:ea:86:81:0c:40:ba:a2:ba: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:D2:7D:77:66:72:85:4A:E2:55:B5:12:B8:BD:54:0B:C2:27:83 X509v3 Authority Key Identifier: keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:7b:2b:9a:91:7e:e2:38:51:4c:cd:f1:7c:cf:af:a3:72:ad: 2c:3b:b6:3f:e4:35:86:a2:ed:72:2e:8d:22:32:cf:44:de:20: 84:c2:1a:3c:e4:e0:15:53:06:4d:fa:11:3b:3d:78:4c:ba:57: b5:eb:42:cd:80:cb:c0:8b:37:99:69:74:11:2c:75:f0:84:e1: 87:a4:d3:b4:e1:db:9d:f7:26:17:de:b8:03:04:00:28:6d:71: e0:b1:ba:9d:e5:60:e3:25:33:4d:7b:c3:78:17:8d:21:22:cb: a4:65:5a:5a:79:2a:eb:8e:dc:d9:92:06:48:f3:73:74:c3:42: d8:06:bd:a8:00:32:c4:df:ad:f7:43:a4:bf:17:11:63:07:6e: e3:2b:00:3e:62:55:f8:7e:30:8c:ed:57:52:56:72:27:8e:59: 74:ac:db:5a:0d:ec:b4:00:51:4e:d2:95:c5:f5:6c:c3:b6:c4: fd:9c:34:76:39:2a:3b:7a:53:3b:8e:89:d0:d6:98:77:bd:26: e2:e1:78:b4:5d:5a:80:1c:69:e7:2f:8c:8c:07:d3:3b:a0:03: 07:48:b0:d6:e8:f9:60:e3:60:d7:d2:85:bb:d8:3a:34:48:7c: 19:e2:bb:ed:c2:d2:0f:a1:d3:e7:c3:5c:c1:e8:bb:82:ad:2e: de:94:b2:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEvAXgf4FrlkEE9WlRVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0 ZDVmYzkwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD Eyg4NTYyZDI3ZDc3NjY3Mjg1NGFlMjU1YjUxMmI4YmQ1NDBiYzIyNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJMTYzoUJNOLiEzpBWAu5JvhL8Th XGziSg3YNnfjClo++tt/9BxzmWvR0GqCH04erZUvq6Cfy2V8Q628ana3eNzMYGAH UoYoqEcnefxnFHadB/G+fgmaIVUtqVnSFOoMLDLSOvEWsrUVgLzXJSVpkKXL9Nvx e7LPyVzec5GLITvM6r8V3yrE7f2qWIxeUhjKWpQgPVlOxKxKR7FEVU3v1b8u28fq z29Wbll5E22e9XKNRYsZLw0p2PgM9R9Ksy9PFxnoha8v2LlRTwgMBVVugoeUSw2R gPeK8Vml6+3F8uNAQfuJL1XoM5GonAZ5SSSJZKv0hL4g6oaBDEC6orpzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVi0n13ZnKFSuJVtRK4vVQLwieDMB8GA1UdIwQY MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt Y2QzYzE2MGE2ZjQ2LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2 LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxnsrmpF+ 4jhRTM3xfM+vo3KtLDu2P+Q1hqLtci6NIjLPRN4ghMIaPOTgFVMGTfoROz14TLpX tetCzYDLwIs3mWl0ESx18IThh6TTtOHbnfcmF964AwQAKG1x4LG6neVg4yUzTXvD eBeNISLLpGVaWnkq647c2ZIGSPNzdMNC2Aa9qAAyxN+t90OkvxcRYwdu4ysAPmJV +H4wjO1XUlZyJ45ZdKzbWg3stABRTtKVxfVsw7bE/Zw0djkqO3pTO46J0NaYd70m 4uF4tF1agBxp5y+MjAfTO6ADB0iw1uj5YONg19KFu9g6NEh8GeK77cLSD6HT58Nc wei7gq0u3pSy6g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:19 2026 by rpki-client