This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json) Hash identifier: MZUS0jwL55QIu9wgYMfr6JC/kF2DxRW5Iz+jaBn0eYI= Subject key identifier: 37:70:23:1D:A4:5E:CB:2C:76:DF:70:28:F9:E2:21:53:0A:F9:41:5C Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Certificate serial: 019C4133F24F23B2B328C60CEEC0B601DAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft Manifest number: 06FB Signing time: Mon 09 Feb 2026 07:00:49 +0000 Manifest this update: Mon 09 Feb 2026 07:00:49 +0000 Manifest next update: Tue 10 Feb 2026 07:00:49 +0000 Files and hashes: 1: ibn8bNQQz7BgdWQGJtHjkoVEvpE.roa (hash: BoHl0eq6h4PEPopUgDa/zkXPmdyvWksghSbqXzV9YdE=) 2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: IXXcXQkjj0zLEP0uESkodv6FjwQfO0HS+Ik4ggd70MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:f2:4f:23:b2:b3:28:c6:0c:ee:c0:b6:01:da:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48 Validity Not Before: Feb 9 07:00:49 2026 GMT Not After : Feb 10 07:00:49 2026 GMT Subject: CN=3770231da45ecb2c76df7028f9e221530af9415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:a6:11:ac:25:e7:3a:cf:d4:b3:67:71:73: 66:75:00:59:fa:b5:df:4f:19:b7:ac:02:55:2d:54: 5c:8d:5e:a4:d3:12:f8:72:79:3b:1e:6c:f7:c2:62: 1b:ac:9c:9b:e5:56:89:1c:31:8d:dc:f5:9d:a6:8e: f1:81:aa:e1:29:c2:88:fa:e8:69:a4:79:ba:35:c0: f2:fb:0d:e1:70:e9:fb:44:6f:ae:67:33:84:c7:e6: 40:74:4d:8e:ab:92:ea:8d:cc:ca:21:ea:de:ff:78: 79:09:d1:20:d8:d4:ed:fa:e0:ef:21:f0:66:5e:0e: a7:c9:4b:2b:98:8e:37:ed:7c:f0:31:66:a2:19:bc: 05:e9:d9:81:7c:a0:6b:b7:3a:64:60:ca:ab:10:fc: 0a:96:08:b2:f3:ad:67:53:86:43:cb:86:74:cb:6f: e1:5a:db:3c:48:19:90:28:e5:30:99:ea:84:d5:c3: 7e:6e:0d:38:24:8f:3e:55:39:17:55:c2:6f:80:eb: 26:bc:fa:cf:63:46:55:fb:ae:0e:54:af:a2:e9:1e: c6:85:72:2a:3e:ea:d1:f8:2b:9a:1e:f8:3b:cc:5d: 43:c4:c8:8d:89:05:14:52:33:7d:ee:56:10:97:e7: b1:aa:34:f5:0d:0d:64:8c:4d:69:0c:2a:66:fd:11: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:23:1D:A4:5E:CB:2C:76:DF:70:28:F9:E2:21:53:0A:F9:41:5C X509v3 Authority Key Identifier: keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:85:10:3c:ee:ec:52:ad:ca:7a:8d:b9:83:13:65:76:06:fe: 2e:d2:96:65:f8:27:71:a2:8a:42:e2:a6:e0:10:87:64:77:0f: e4:2a:fa:77:84:67:cc:4f:eb:6c:14:29:ef:69:03:72:56:6b: 0a:d6:22:f1:e0:d0:2b:fc:71:70:b7:aa:45:c1:7e:18:2e:55: 37:74:83:fe:b9:c6:fc:10:18:f5:f4:e8:73:a0:a8:7f:f2:68: 4e:dc:67:47:52:c8:bc:d2:9c:bf:f3:f1:45:71:23:ce:99:61: 8f:f7:5a:4e:47:64:c9:35:81:08:5a:dc:cd:77:b6:0c:41:fe: 92:51:72:26:2e:59:25:b2:dc:fd:c6:28:48:84:bd:c8:da:fc: 3c:93:89:b3:b8:11:f1:7b:e6:4f:82:1d:be:f6:04:29:99:6d: 0b:9f:ae:c2:f4:41:b2:33:bc:23:01:08:7a:ab:49:b6:87:20: 10:1b:6d:68:5f:f3:80:68:14:84:5b:f3:ce:bb:d2:bf:92:55: 2a:3e:bb:d2:ef:b1:5c:f3:94:15:48:f5:a6:6b:0e:6a:88:94: 8b:1a:a7:dd:b0:0e:6e:c3:b2:c9:62:78:a0:91:d1:aa:15:06: 38:5d:b6:4a:57:54:0b:d9:bf:b7:95:37:a7:78:d8:26:dd:10: 76:dd:ee:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM/JPI7KzKMYM7sC2AdqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YmJkNGQ5ODU4YWI1MjgwNzAwZWY3ZTk1YzA0MTYwZjNk MmNiNDgwHhcNMjYwMjA5MDcwMDQ5WhcNMjYwMjEwMDcwMDQ5WjAzMTEwLwYDVQQD EygzNzcwMjMxZGE0NWVjYjJjNzZkZjcwMjhmOWUyMjE1MzBhZjk0MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJOmEawl5zrP1LNncXNmdQBZ+rXf Txm3rAJVLVRcjV6k0xL4cnk7Hmz3wmIbrJyb5VaJHDGN3PWdpo7xgarhKcKI+uhp pHm6NcDy+w3hcOn7RG+uZzOEx+ZAdE2Oq5LqjczKIere/3h5CdEg2NTt+uDvIfBm Xg6nyUsrmI437XzwMWaiGbwF6dmBfKBrtzpkYMqrEPwKlgiy861nU4ZDy4Z0y2/h Wts8SBmQKOUwmeqE1cN+bg04JI8+VTkXVcJvgOsmvPrPY0ZV+64OVK+i6R7GhXIq PurR+CuaHvg7zF1DxMiNiQUUUjN97lYQl+exqjT1DQ1kjE1pDCpm/RF1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdwIx2kXsssdt9wKPniIVMK+UFcMB8GA1UdIwQY MBaAFKi71NmFirUoBwDvfpXAQWDz0stIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYt MThiMmZkNDMyMGY1LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYtMThiMmZkNDMyMGY1 LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYUQPO7s Uq3Keo25gxNldgb+LtKWZfgncaKKQuKm4BCHZHcP5Cr6d4RnzE/rbBQp72kDclZr CtYi8eDQK/xxcLeqRcF+GC5VN3SD/rnG/BAY9fToc6Cof/JoTtxnR1LIvNKcv/Px RXEjzplhj/daTkdkyTWBCFrczXe2DEH+klFyJi5ZJbLc/cYoSIS9yNr8PJOJs7gR 8XvmT4IdvvYEKZltC5+uwvRBsjO8IwEIeqtJtocgEBttaF/zgGgUhFvzzrvSv5JV Kj670u+xXPOUFUj1pmsOaoiUixqn3bAObsOyyWJ4oJHRqhUGOF22SldUC9m/t5U3 p3jYJt0Qdt3u+A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:47 2026 by rpki-client