This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft File: _QB9d6vr_l2GsInvuT4C3NMASsY.mft (raw, json) Hash identifier: JuhnjX7z1bSy0tDzZHSUNBrygZ37eAQCFD1hRCrZIb8= Subject key identifier: 3A:0A:83:F4:4E:D2:81:94:20:74:CF:80:73:69:C3:F9:C6:3F:B7:45 Authority key identifier: FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6 Certificate issuer: /CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6 Certificate serial: 019C42B44642E0BE3F4372D74E0D6518D13E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft Manifest number: 02C6 Signing time: Mon 09 Feb 2026 14:00:36 +0000 Manifest this update: Mon 09 Feb 2026 14:00:36 +0000 Manifest next update: Tue 10 Feb 2026 14:00:36 +0000 Files and hashes: 1: 1--1vi_YhmwgSh-LUDJs5yrdk4QU.roa (hash: dnBqijSF+YPKk6kM0CwG5Q01pI1bTPaR1o5KUYqbpck=) 2: _QB9d6vr_l2GsInvuT4C3NMASsY.crl (hash: W6rluFQmCUBmNZDxiXbGbgHIjPxS75L0eIYC/4ligMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:46:42:e0:be:3f:43:72:d7:4e:0d:65:18:d1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd007d77abebfe5d86b089efb93e02dcd3004ac6 Validity Not Before: Feb 9 14:00:36 2026 GMT Not After : Feb 10 14:00:36 2026 GMT Subject: CN=3a0a83f44ed281942074cf807369c3f9c63fb745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:f8:67:9d:a6:06:3a:9b:b3:57:ca:90:7a: bf:f3:73:c2:db:9b:9b:e6:0d:7e:21:03:ea:6f:98: 99:bc:57:67:11:ac:b3:c1:fe:95:69:c1:61:09:61: bd:3e:9e:b9:35:cb:a6:bc:12:60:e1:50:9b:77:48: 48:49:c2:4e:50:27:c4:d4:8c:ea:8f:46:d2:35:91: 11:39:cc:10:8c:50:32:e2:52:a1:5a:5a:57:6d:6f: a1:8d:2d:90:92:c8:b2:e2:db:6d:6b:2a:52:5b:40: 0c:3d:fc:64:dc:07:1d:19:ea:54:c3:d6:28:22:53: 22:4d:f4:9a:da:96:2e:4c:ba:b4:60:42:48:5f:0c: b5:28:2b:41:19:0a:bf:78:6a:71:99:c0:12:75:93: 10:05:e9:6c:b3:71:32:c3:3f:65:10:7e:2a:16:04: 0c:13:19:59:58:04:e1:f0:fe:0b:3e:d2:29:a0:05: 59:98:3f:1b:c2:5c:17:2a:f1:ed:c5:44:2c:5d:cd: 2a:c3:b4:98:e8:7f:bb:7e:1a:54:5e:2f:a4:f2:c1: 4c:38:79:00:00:15:db:7a:4e:da:e7:f4:4b:95:10: 4d:62:5b:0e:c2:44:87:85:a1:6e:2d:11:67:a9:7f: a3:be:b3:d3:90:f5:2c:cf:ee:c7:bb:2d:84:10:98: 21:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:83:F4:4E:D2:81:94:20:74:CF:80:73:69:C3:F9:C6:3F:B7:45 X509v3 Authority Key Identifier: keyid:FD:00:7D:77:AB:EB:FE:5D:86:B0:89:EF:B9:3E:02:DC:D3:00:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QB9d6vr_l2GsInvuT4C3NMASsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/35d7f6-a8c2-4374-9acf-1e6fd4b6c04a/1/_QB9d6vr_l2GsInvuT4C3NMASsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:32:fa:f3:79:61:4f:e5:83:fc:c8:65:e1:7b:db:e7:1d:5d: 6b:44:77:9b:22:68:af:92:0f:b6:f4:23:8b:ac:4d:9c:0b:0b: 7c:40:38:3b:48:86:08:7a:79:b7:65:80:2c:fc:b6:5b:ab:fb: 76:c3:41:6c:9f:ba:e9:1d:48:b0:79:05:13:98:2f:eb:31:6a: 1a:fe:a9:56:c0:97:dd:18:18:2a:2e:bc:1d:37:f1:2e:71:1e: 67:1b:55:a8:72:5c:7a:0f:9f:a6:f8:c0:b8:c7:01:27:e7:be: ae:eb:7f:bf:41:fe:36:d6:f9:12:3e:45:56:1f:ca:92:c8:79: 86:cb:61:4a:5c:c0:60:09:7a:4d:3d:5c:41:3f:b1:8a:51:ec: b7:ea:31:5a:3e:b8:92:5c:96:f4:20:fc:8f:e5:b5:e8:d9:8d: 2f:21:d0:c2:79:07:7e:34:bf:25:e2:6c:aa:ff:e2:d1:7d:3d: 9f:62:e1:7f:d2:69:f3:73:75:fb:db:27:49:13:78:10:fd:86: 2a:1b:b9:c0:fe:43:bf:24:b6:5e:b7:b3:4e:17:0d:94:8b:1f: e6:a0:91:d3:33:6a:a9:67:cb:ab:78:4b:5b:d6:28:94:b7:0b: df:3c:a2:d8:6b:ac:bf:ff:ec:1b:ca:51:61:ad:11:bd:d0:fd: f9:48:7c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEZC4L4/Q3LXTg1lGNE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMDA3ZDc3YWJlYmZlNWQ4NmIwODllZmI5M2UwMmRjZDMw MDRhYzYwHhcNMjYwMjA5MTQwMDM2WhcNMjYwMjEwMTQwMDM2WjAzMTEwLwYDVQQD EygzYTBhODNmNDRlZDI4MTk0MjA3NGNmODA3MzY5YzNmOWM2M2ZiNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv634Z52mBjqbs1fKkHq/83PC25ub 5g1+IQPqb5iZvFdnEayzwf6VacFhCWG9Pp65NcumvBJg4VCbd0hIScJOUCfE1Izq j0bSNZEROcwQjFAy4lKhWlpXbW+hjS2Qksiy4tttaypSW0AMPfxk3AcdGepUw9Yo IlMiTfSa2pYuTLq0YEJIXwy1KCtBGQq/eGpxmcASdZMQBelss3Eywz9lEH4qFgQM ExlZWATh8P4LPtIpoAVZmD8bwlwXKvHtxUQsXc0qw7SY6H+7fhpUXi+k8sFMOHkA ABXbek7a5/RLlRBNYlsOwkSHhaFuLRFnqX+jvrPTkPUsz+7Huy2EEJghbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoKg/RO0oGUIHTPgHNpw/nGP7dFMB8GA1UdIwQY MBaAFP0AfXer6/5dhrCJ77k+AtzTAErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2Yt MWU2ZmQ0YjZjMDRhLzEvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zNWQ3ZjYtYThjMi00Mzc0LTlhY2YtMWU2ZmQ0YjZjMDRh LzEvX1FCOWQ2dnJfbDJHc0ludnVUNEMzTk1BU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzL683lh T+WD/Mhl4Xvb5x1da0R3myJor5IPtvQji6xNnAsLfEA4O0iGCHp5t2WALPy2W6v7 dsNBbJ+66R1IsHkFE5gv6zFqGv6pVsCX3RgYKi68HTfxLnEeZxtVqHJceg+fpvjA uMcBJ+e+rut/v0H+Ntb5Ej5FVh/Kksh5hsthSlzAYAl6TT1cQT+xilHst+oxWj64 klyW9CD8j+W16NmNLyHQwnkHfjS/JeJsqv/i0X09n2Lhf9Jp83N1+9snSRN4EP2G Khu5wP5DvyS2XrezThcNlIsf5qCR0zNqqWfLq3hLW9YolLcL3zyi2Gusv//sG8pR Ya0RvdD9+Uh8DQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:17 2026 by rpki-client