This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json) Hash identifier: zlsbnzPW8w4/D0lF/VX54zAusMalwYXmssEqKR126fo= Subject key identifier: 69:6C:E8:AF:B7:06:08:95:2A:C5:A3:A3:71:42:94:F7:5B:7D:67:49 Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Certificate serial: 019C4390AA6CA72BC298594992D7EFFBE117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 18:01:20 +0000 Manifest this update: Mon 09 Feb 2026 18:01:20 +0000 Manifest next update: Tue 10 Feb 2026 18:01:20 +0000 Files and hashes: 1: 1-YWnVhmZgIQ2n1BTvYVPFZ-J0aI.roa (hash: QicNScNwGmBX+P4CKMl0elvS4JnrqWkgK9UTnVq+9pI=) 2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: NG8pEnnakWXgl9KBraECZGonVKYc0fFF6pidkjZPoNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:aa:6c:a7:2b:c2:98:59:49:92:d7:ef:fb:e1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978 Validity Not Before: Feb 9 18:01:20 2026 GMT Not After : Feb 10 18:01:20 2026 GMT Subject: CN=696ce8afb70608952ac5a3a3714294f75b7d6749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:dd:34:9b:d6:54:bd:3f:7e:9b:f0:9a:03: 2f:38:3d:2d:62:0c:f0:74:c1:08:b8:6d:d0:6c:e6: a9:a6:d2:3b:4a:6a:50:89:ef:aa:86:0f:bf:d1:da: 4e:98:a0:5b:50:9b:db:e5:3f:56:c2:9a:da:10:98: 6a:a8:2f:24:e9:c3:a8:f8:06:e6:46:5e:b6:92:78: fd:5e:83:73:30:87:0e:ed:f8:06:39:5f:2e:8b:91: 4c:6b:f7:ea:ca:32:27:c5:3c:79:48:fc:64:43:aa: 25:c8:71:35:9a:d7:cc:55:52:dc:6b:5f:82:78:dd: 42:f4:4d:ae:92:d4:de:02:6b:2f:91:ac:84:61:70: c3:12:36:f6:76:45:1e:ca:e7:e9:86:b3:67:97:9a: 91:06:48:d1:ff:07:5d:f9:36:25:96:78:9f:41:d0: ab:7b:6e:bb:de:28:1d:ed:4f:eb:18:62:e4:bc:25: 83:bf:78:e0:d5:73:dc:4f:25:e7:95:ef:92:bb:84: 80:16:29:58:91:44:3a:b0:87:11:df:78:32:71:f5: ef:31:a1:a3:05:14:78:d7:2f:4e:d9:81:29:f9:cf: b9:8c:d0:0e:76:1f:08:dc:a5:2f:b3:ba:2d:9f:f1: e0:08:d6:9b:25:ad:9a:fc:d6:f4:3b:78:ce:5b:f9: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:E8:AF:B7:06:08:95:2A:C5:A3:A3:71:42:94:F7:5B:7D:67:49 X509v3 Authority Key Identifier: keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:27:a1:dc:78:f3:f4:e8:f8:6d:fd:c2:f5:de:1c:be:bd: bf:26:6a:48:59:8c:0e:aa:aa:36:3e:53:04:d4:38:63:7a:1d: 63:43:25:04:bb:7e:39:4f:6e:79:8c:61:3d:69:0a:44:c6:67: a1:e4:1e:49:5d:d4:eb:89:51:2d:d6:a0:a4:97:dd:5f:55:13: ca:63:4d:c8:10:59:4d:4e:1d:64:6a:d1:bf:a9:cf:e3:e6:b2: 2b:6b:1f:6f:e9:75:84:13:95:18:87:95:c8:bb:e2:a1:23:03: 00:a8:d4:77:61:d7:8c:97:29:25:24:58:a0:52:c2:d6:7d:21: 73:4f:44:ed:f5:30:c0:12:4d:b9:53:27:4f:41:02:fe:8f:17: ee:b9:49:39:49:61:92:5a:11:f6:b0:00:a1:46:f3:3e:5e:ca: 1b:f0:34:d2:ee:52:11:09:6d:48:d6:f8:82:17:45:5a:89:8a: e2:bb:cd:1c:ff:cd:ef:e1:6c:8a:2b:a5:61:cb:c4:93:cf:72: a6:eb:33:86:54:3f:d3:99:87:be:80:ac:42:99:73:51:ba:59: f5:5c:a0:80:e8:76:60:a8:00:eb:b7:03:e2:0e:99:f1:9b:f4: 9f:71:a6:3c:da:8c:bb:e4:b8:bb:82:cc:2f:12:3c:a9:e7:c9: 61:3d:d4:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKpspyvCmFlJktfv++EXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODQ3ZjY0NTY3ZTRhYTRhZDVjYjdmYzIyZjIyZGY0ZTJi YzY5NzgwHhcNMjYwMjA5MTgwMTIwWhcNMjYwMjEwMTgwMTIwWjAzMTEwLwYDVQQD Eyg2OTZjZThhZmI3MDYwODk1MmFjNWEzYTM3MTQyOTRmNzViN2Q2NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGLdNJvWVL0/fpvwmgMvOD0tYgzw dMEIuG3QbOapptI7SmpQie+qhg+/0dpOmKBbUJvb5T9WwpraEJhqqC8k6cOo+Abm Rl62knj9XoNzMIcO7fgGOV8ui5FMa/fqyjInxTx5SPxkQ6olyHE1mtfMVVLca1+C eN1C9E2uktTeAmsvkayEYXDDEjb2dkUeyufphrNnl5qRBkjR/wdd+TYllnifQdCr e2673igd7U/rGGLkvCWDv3jg1XPcTyXnle+Su4SAFilYkUQ6sIcR33gycfXvMaGj BRR41y9O2YEp+c+5jNAOdh8I3KUvs7otn/HgCNabJa2a/Nb0O3jOW/kzXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGls6K+3BgiVKsWjo3FClPdbfWdJMB8GA1UdIwQY MBaAFKiEf2RWfkqkrVy3/CLyLfTivGl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQt MTAyNTU3MThhMTg1LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8xN2FmOTQtNzIxNC00YWRiLWIzMDQtMTAyNTU3MThhMTg1 LzEvcUlSX1pGWi1TcVN0WExmOEl2SXQ5T0s4YVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv8nodx4 8/To+G39wvXeHL69vyZqSFmMDqqqNj5TBNQ4Y3odY0MlBLt+OU9ueYxhPWkKRMZn oeQeSV3U64lRLdagpJfdX1UTymNNyBBZTU4dZGrRv6nP4+ayK2sfb+l1hBOVGIeV yLvioSMDAKjUd2HXjJcpJSRYoFLC1n0hc09E7fUwwBJNuVMnT0EC/o8X7rlJOUlh kloR9rAAoUbzPl7KG/A00u5SEQltSNb4ghdFWomK4rvNHP/N7+FsiiulYcvEk89y puszhlQ/05mHvoCsQplzUbpZ9VyggOh2YKgA67cD4g6Z8Zv0n3GmPNqMu+S4u4LM LxI8qefJYT3UDg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:34 2026 by rpki-client