This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json) Hash identifier: uwFTN6cV5g7CVF+2o/T/9FgclkqYsCqDqZ6tq2npcFw= Subject key identifier: C1:93:19:E0:D3:DD:A8:4C:CB:04:5E:98:6D:82:30:72:C9:0E:43:E1 Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145 Certificate serial: 019C427D19D28C195861132EA3FACB903C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft Manifest number: 09EA Signing time: Mon 09 Feb 2026 13:00:20 +0000 Manifest this update: Mon 09 Feb 2026 13:00:20 +0000 Manifest next update: Tue 10 Feb 2026 13:00:20 +0000 Files and hashes: 1: 4rFWGG1hCLjpdzpnntCtvivktok.roa (hash: h+b3VUlMYpjtGHgCeteMfY7E2bpp8Imly4GOvLLhOSc=) 2: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: HfT0MUm+mu2MPyypZ/8IACVxnk+NrWFlPIsvxA3QjqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:19:d2:8c:19:58:61:13:2e:a3:fa:cb:90:3c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145 Validity Not Before: Feb 9 13:00:20 2026 GMT Not After : Feb 10 13:00:20 2026 GMT Subject: CN=c19319e0d3dda84ccb045e986d823072c90e43e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:90:97:fc:0c:a2:4f:6a:35:f2:90:9e:be: d8:d0:18:0a:26:87:04:79:7f:cd:89:2a:ba:09:38: 8f:8a:39:dd:6c:de:ad:9f:fc:53:60:c3:79:52:6f: 20:e9:f5:bd:a3:78:85:98:5f:44:37:e6:d5:a7:9c: f9:9b:ed:09:92:47:5c:17:8e:8b:39:be:37:6a:b9: ce:58:cf:7a:c7:af:19:0d:50:7a:96:a1:b2:cc:9d: 1c:0a:59:67:94:fa:3d:4a:68:68:44:6d:df:d5:56: c2:9e:fc:12:e4:f4:dd:21:5f:42:1f:af:e1:6c:5c: f8:1c:37:29:97:d4:2a:87:4a:24:c2:47:53:a4:33: 1d:25:6a:b6:a8:35:44:7d:3f:57:14:79:b3:8c:76: 74:fd:e2:3d:6e:e0:43:bb:86:08:84:41:a8:41:7f: f0:c0:84:d6:60:0d:36:de:0c:73:61:d6:b1:77:70: ad:d1:53:e3:98:eb:6d:ae:51:0d:75:4c:10:27:7d: e2:25:6c:6b:c0:10:f7:aa:2e:92:41:a2:52:ba:c1: 6d:83:33:68:0e:74:92:c6:4f:9f:cd:fc:cc:10:99: 70:95:c6:f6:8e:a7:d9:de:9e:f8:1b:80:e0:b5:2a: 3c:b6:d5:8a:00:ba:2f:f7:0b:c5:91:93:f3:47:07: 09:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:93:19:E0:D3:DD:A8:4C:CB:04:5E:98:6D:82:30:72:C9:0E:43:E1 X509v3 Authority Key Identifier: keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:91:85:17:b0:b8:dc:15:ce:d9:66:82:e6:82:1e:83:3f:c2: c6:35:b9:71:8e:42:f9:ca:b4:49:a8:08:cd:16:74:84:aa:e2: f0:8f:7b:2c:58:3b:91:36:b0:0f:ae:1d:e6:bb:dd:27:8a:41: 25:b0:1e:78:45:44:c1:8b:f6:a8:3b:75:55:62:9a:81:7f:e2: 9e:66:9f:24:46:11:1a:c9:b1:4c:28:28:35:95:3b:f0:fb:3f: 04:d5:d4:58:59:13:1d:c6:e5:38:ad:9c:c7:f2:83:39:d8:76: 74:26:97:a3:05:f9:6b:08:c4:94:2d:97:57:10:60:03:f7:94: 86:9a:33:83:76:76:93:62:10:83:dd:a5:df:ac:1b:b9:fd:df: ff:b9:8f:31:80:85:6b:63:ff:07:d7:c6:fa:eb:c0:68:10:30: 0e:17:9b:79:8f:f5:ef:44:50:51:9b:a9:01:82:d3:38:5c:e5: d1:82:05:dd:24:63:4d:64:6d:9b:b6:ab:00:ed:f7:a0:df:a6: 2b:dc:f3:77:06:0f:6a:67:b1:61:24:c5:34:4c:f0:1c:8a:e2: 6f:a2:56:29:bb:43:33:20:7f:e3:70:85:c2:54:50:66:fa:44: d6:3b:43:be:8a:de:c0:ae:8e:8c:1e:e5:50:2c:6d:57:53:6b: cd:40:d7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRnSjBlYYRMuo/rLkDxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw NmMxNDUwHhcNMjYwMjA5MTMwMDIwWhcNMjYwMjEwMTMwMDIwWjAzMTEwLwYDVQQD EyhjMTkzMTllMGQzZGRhODRjY2IwNDVlOTg2ZDgyMzA3MmM5MGU0M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iQl/wMok9qNfKQnr7Y0BgKJocE eX/NiSq6CTiPijndbN6tn/xTYMN5Um8g6fW9o3iFmF9EN+bVp5z5m+0JkkdcF46L Ob43arnOWM96x68ZDVB6lqGyzJ0cCllnlPo9SmhoRG3f1VbCnvwS5PTdIV9CH6/h bFz4HDcpl9Qqh0okwkdTpDMdJWq2qDVEfT9XFHmzjHZ0/eI9buBDu4YIhEGoQX/w wITWYA023gxzYdaxd3Ct0VPjmOttrlENdUwQJ33iJWxrwBD3qi6SQaJSusFtgzNo DnSSxk+fzfzMEJlwlcb2jqfZ3p74G4DgtSo8ttWKALov9wvFkZPzRwcJlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGTGeDT3ahMywRemG2CMHLJDkPhMB8GA1UdIwQY MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZGFF7C4 3BXO2WaC5oIegz/CxjW5cY5C+cq0SagIzRZ0hKri8I97LFg7kTawD64d5rvdJ4pB JbAeeEVEwYv2qDt1VWKagX/inmafJEYRGsmxTCgoNZU78Ps/BNXUWFkTHcblOK2c x/KDOdh2dCaXowX5awjElC2XVxBgA/eUhpozg3Z2k2IQg92l36wbuf3f/7mPMYCF a2P/B9fG+uvAaBAwDhebeY/170RQUZupAYLTOFzl0YIF3SRjTWRtm7arAO33oN+m K9zzdwYPamexYSTFNEzwHIrib6JWKbtDMyB/43CFwlRQZvpE1jtDvorewK6OjB7l UCxtV1NrzUDX3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:17 2026 by rpki-client