This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json) Hash identifier: FWAX49uoGptYIiiVWUWOQ7oBdjReeyIQo3BItxWmg7s= Subject key identifier: D8:59:D5:BA:8E:05:07:40:9F:5D:B6:60:E9:23:55:1E:06:15:B5:56 Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Certificate serial: 019C41A1F1E040ADC85114D5E7CCFF47C84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 09:00:58 +0000 Manifest this update: Mon 09 Feb 2026 09:00:58 +0000 Manifest next update: Tue 10 Feb 2026 09:00:58 +0000 Files and hashes: 1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=) 2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 5GOf94xiAQV/LAu6nyLXQkTAD9nfiuePETSNy4Xs92k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:f1:e0:40:ad:c8:51:14:d5:e7:cc:ff:47:c8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6 Validity Not Before: Feb 9 09:00:58 2026 GMT Not After : Feb 10 09:00:58 2026 GMT Subject: CN=d859d5ba8e0507409f5db660e923551e0615b556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:74:7c:13:fd:c7:a4:2c:54:31:55:c6:d0: 81:27:0e:c4:c5:80:e8:4a:f9:51:4a:e4:50:46:ab: 81:c0:39:66:81:01:51:69:2d:9e:ca:d8:84:f8:68: d3:36:15:e5:06:b9:80:16:cd:e9:82:7f:13:d7:74: b1:a9:91:9c:98:7a:aa:e2:b9:44:f4:63:07:44:42: db:d8:d1:0f:43:f5:04:4f:0a:a3:49:b9:b7:21:b9: 3f:c0:13:6d:7e:b4:f8:8b:97:3f:f5:d7:ae:46:24: a5:c1:02:21:21:fd:43:b9:3f:2d:07:a5:b2:3c:64: 11:12:4e:8d:10:8a:34:6f:31:fe:5b:42:4d:04:17: b4:81:69:54:5b:95:41:80:0d:10:94:3c:35:10:92: 3f:83:a9:6f:09:44:67:e5:34:e7:7e:ba:ea:62:e5: cd:68:39:ed:f5:19:b8:81:e7:96:c1:57:00:95:85: 1a:43:7c:ee:6a:48:44:99:b8:1f:c5:2b:57:3a:67: 38:21:00:30:75:ce:54:61:14:62:82:73:00:06:a8: 62:c6:68:41:18:9c:f3:03:09:c9:ce:e1:35:78:9c: ef:32:dc:7d:7f:9a:fb:26:ee:3c:4b:40:b5:6e:8e: 86:30:52:c1:4c:8b:03:cd:df:1e:b6:12:ae:76:4f: 7a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:D5:BA:8E:05:07:40:9F:5D:B6:60:E9:23:55:1E:06:15:B5:56 X509v3 Authority Key Identifier: keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:cc:80:eb:7c:2b:4e:f4:7d:c6:90:06:2d:83:77:54:0a:94: 8c:8f:f7:b8:f5:98:93:f5:ae:2e:d4:6d:5f:c4:a5:62:2b:23: b6:12:0f:a3:d2:a0:6e:68:29:62:e8:ef:23:9d:31:6a:99:d0: 2d:61:81:7a:9e:78:70:54:72:62:96:4d:ce:db:66:95:8f:38: ec:39:b1:18:21:00:59:a6:35:4a:e4:ae:fd:52:99:cb:15:9c: 5e:38:f9:5c:a5:34:c3:90:e8:4a:68:a0:53:2a:04:50:56:b2: db:f4:d8:f5:1f:66:1c:ee:64:1c:80:0c:a1:79:b4:b9:eb:bc: 7a:53:89:ee:47:49:c0:bb:54:88:94:7d:08:fe:03:b1:28:f2: 49:7c:b1:11:4c:01:73:b3:85:c9:b7:7e:89:f5:89:ef:7a:27: e8:48:41:f6:9c:b9:53:80:97:98:b5:2d:a6:11:40:ee:4b:6d: 46:dd:d8:0e:c1:f4:79:08:1f:f4:d6:f8:a3:bb:4d:87:18:ae: 30:6a:d8:f2:0a:a9:f4:b8:e3:fb:92:19:20:af:da:f3:b7:39: fe:22:a9:48:02:46:f8:95:3f:64:db:eb:0b:9f:99:ec:32:4d: 04:40:5d:91:1b:30:0a:02:95:ba:01:91:2d:49:32:2c:84:47: c4:03:e5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofHgQK3IURTV58z/R8hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl MzlhYzYwHhcNMjYwMjA5MDkwMDU4WhcNMjYwMjEwMDkwMDU4WjAzMTEwLwYDVQQD EyhkODU5ZDViYThlMDUwNzQwOWY1ZGI2NjBlOTIzNTUxZTA2MTViNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLB0fBP9x6QsVDFVxtCBJw7ExYDo SvlRSuRQRquBwDlmgQFRaS2eytiE+GjTNhXlBrmAFs3pgn8T13SxqZGcmHqq4rlE 9GMHRELb2NEPQ/UETwqjSbm3Ibk/wBNtfrT4i5c/9deuRiSlwQIhIf1DuT8tB6Wy PGQREk6NEIo0bzH+W0JNBBe0gWlUW5VBgA0QlDw1EJI/g6lvCURn5TTnfrrqYuXN aDnt9Rm4geeWwVcAlYUaQ3zuakhEmbgfxStXOmc4IQAwdc5UYRRignMABqhixmhB GJzzAwnJzuE1eJzvMtx9f5r7Ju48S0C1bo6GMFLBTIsDzd8ethKudk96owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhZ1bqOBQdAn122YOkjVR4GFbVWMB8GA1UdIwQY MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMyA63wr TvR9xpAGLYN3VAqUjI/3uPWYk/WuLtRtX8SlYisjthIPo9KgbmgpYujvI50xapnQ LWGBep54cFRyYpZNzttmlY847DmxGCEAWaY1SuSu/VKZyxWcXjj5XKU0w5DoSmig UyoEUFay2/TY9R9mHO5kHIAMoXm0ueu8elOJ7kdJwLtUiJR9CP4DsSjySXyxEUwB c7OFybd+ifWJ73on6EhB9py5U4CXmLUtphFA7kttRt3YDsH0eQgf9Nb4o7tNhxiu MGrY8gqp9Ljj+5IZIK/a87c5/iKpSAJG+JU/ZNvrC5+Z7DJNBEBdkRswCgKVugGR LUkyLIRHxAPlvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:37 2026 by rpki-client