This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json) Hash identifier: ZELgOMiSCXKJmDD1BFw39NGMrSskoGu5XhaOBwAEBcU= Subject key identifier: E0:25:92:2F:05:7F:07:05:3B:5B:70:02:16:23:C0:2F:A9:FD:7C:5C Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Certificate serial: 019C427DF9EFF6F12EB6F126132ED9692D30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft Manifest number: 1526 Signing time: Mon 09 Feb 2026 13:01:17 +0000 Manifest this update: Mon 09 Feb 2026 13:01:17 +0000 Manifest next update: Tue 10 Feb 2026 13:01:17 +0000 Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: FD1rwsgZ9yuPBUwfQjJkpEg8hZIUPHbn44QJWfFcjr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f9:ef:f6:f1:2e:b6:f1:26:13:2e:d9:69:2d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e Validity Not Before: Feb 9 13:01:17 2026 GMT Not After : Feb 10 13:01:17 2026 GMT Subject: CN=e025922f057f07053b5b70021623c02fa9fd7c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a7:82:73:76:a4:ee:9a:e8:53:12:58:44:db: bf:fa:47:fb:b8:0c:b5:9f:1f:cd:f6:91:60:9b:46: 62:83:5c:ac:6e:28:7e:bb:9c:6b:f5:d2:9c:78:0b: cf:e2:67:74:cc:40:82:d3:2f:50:5e:49:11:9d:30: 62:83:8c:28:42:6c:07:82:dd:b5:92:22:ed:0c:fc: 49:f5:f9:ad:9e:b9:3d:13:2f:02:28:13:3c:58:b3: 76:85:c3:a1:97:1a:d9:30:8c:7f:4c:b5:a5:0e:e7: 60:b3:d1:0b:8c:50:ed:8c:35:62:73:5b:98:f1:79: 88:59:99:57:2c:5b:1e:1d:7c:74:0c:4c:79:b5:df: 56:a8:c7:cd:63:6f:76:31:37:2a:68:78:6d:f1:c8: e3:af:ae:87:63:1c:82:f0:4b:f6:bb:ca:30:f2:b1: 32:76:ec:af:b1:e1:1f:79:48:fd:93:b4:7d:01:ad: 2e:e2:91:4f:70:bf:8f:c0:cc:b8:d2:4a:6d:3e:29: 2f:55:53:7f:cf:59:23:11:fc:9f:65:5b:19:26:6f: 60:39:13:16:b7:27:fd:4c:86:ed:23:c9:e0:59:1b: 9f:d1:bc:bc:a2:4f:14:be:09:9e:b2:61:8e:59:4d: a3:47:00:b1:53:21:62:59:00:92:5c:99:a0:89:a6: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:25:92:2F:05:7F:07:05:3B:5B:70:02:16:23:C0:2F:A9:FD:7C:5C X509v3 Authority Key Identifier: keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2a:3a:53:5b:8b:cd:c0:c1:72:7f:c9:19:da:5e:0c:19:7b: 38:de:d1:c6:6c:85:2b:3f:6f:7d:17:41:91:87:d9:ba:8d:86: c3:23:09:d7:38:a4:3a:06:a6:98:79:3f:91:32:60:fc:a2:27: bc:7e:3e:bb:48:f1:1a:8c:b4:9b:90:8f:ba:25:dc:9e:f5:b0: 06:e1:cf:33:1e:95:c5:cf:57:32:9a:af:f7:85:b5:e0:a8:9a: 7e:9a:06:ea:78:0b:ea:a0:37:07:2f:29:95:f3:36:49:eb:48: 91:d8:1a:47:40:04:f0:1c:98:00:65:1e:93:91:95:34:c5:ee: 57:9f:51:3e:20:f5:99:e7:d3:91:dd:03:2f:55:ec:50:3b:65: bd:b0:68:99:62:4b:02:67:ae:40:78:dd:93:db:0f:95:a1:18: 76:a3:d3:05:8d:41:83:0d:be:26:a0:63:cd:4e:bd:94:57:d4: 55:23:bf:ba:d9:e3:1e:eb:a0:79:97:f5:62:82:66:28:95:50: 67:72:f7:1f:83:f5:09:9f:e7:8a:d0:c7:fb:0b:bc:91:27:23: 48:35:a8:dc:dd:24:f3:ff:63:00:89:7e:78:6a:33:a2:7f:15: 56:8b:d8:23:96:b2:eb:4b:26:3a:27:7f:1c:a8:46:fc:80:bf: 73:f4:c5:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffnv9vEutvEmEy7ZaS0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh MzM4M2UwHhcNMjYwMjA5MTMwMTE3WhcNMjYwMjEwMTMwMTE3WjAzMTEwLwYDVQQD EyhlMDI1OTIyZjA1N2YwNzA1M2I1YjcwMDIxNjIzYzAyZmE5ZmQ3YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqeCc3ak7proUxJYRNu/+kf7uAy1 nx/N9pFgm0Zig1ysbih+u5xr9dKceAvP4md0zECC0y9QXkkRnTBig4woQmwHgt21 kiLtDPxJ9fmtnrk9Ey8CKBM8WLN2hcOhlxrZMIx/TLWlDudgs9ELjFDtjDVic1uY 8XmIWZlXLFseHXx0DEx5td9WqMfNY292MTcqaHht8cjjr66HYxyC8Ev2u8ow8rEy duyvseEfeUj9k7R9Aa0u4pFPcL+PwMy40kptPikvVVN/z1kjEfyfZVsZJm9gORMW tyf9TIbtI8ngWRuf0by8ok8UvgmesmGOWU2jRwCxUyFiWQCSXJmgiaYxBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAlki8FfwcFO1twAhYjwC+p/XxcMB8GA1UdIwQY MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdio6U1uL zcDBcn/JGdpeDBl7ON7RxmyFKz9vfRdBkYfZuo2GwyMJ1zikOgammHk/kTJg/KIn vH4+u0jxGoy0m5CPuiXcnvWwBuHPMx6Vxc9XMpqv94W14KiafpoG6ngL6qA3By8p lfM2SetIkdgaR0AE8ByYAGUek5GVNMXuV59RPiD1mefTkd0DL1XsUDtlvbBomWJL AmeuQHjdk9sPlaEYdqPTBY1Bgw2+JqBjzU69lFfUVSO/utnjHuugeZf1YoJmKJVQ Z3L3H4P1CZ/nitDH+wu8kScjSDWo3N0k8/9jAIl+eGozon8VVovYI5ay60smOid/ HKhG/IC/c/TFQA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:37 2026 by rpki-client