This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json) Hash identifier: 6R0FiI2DVjA7u5SQS+jMyDPqYCBkWd5ko1c3mGlnUGM= Subject key identifier: 11:F8:19:54:C2:00:59:1E:29:F7:26:DF:23:25:7F:4D:5F:AC:94:E3 Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Certificate serial: 019C44D9A3348D766F12D0A2B3C2D888B7B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft Manifest number: 0C7F Signing time: Tue 10 Feb 2026 00:00:39 +0000 Manifest this update: Tue 10 Feb 2026 00:00:39 +0000 Manifest next update: Wed 11 Feb 2026 00:00:39 +0000 Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: A9sF1KJljJd7iN4Pz5NG7RPn1LdbC6CXtQtBbqqliz4=) 2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=) 3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:a3:34:8d:76:6f:12:d0:a2:b3:c2:d8:88:b7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0 Validity Not Before: Feb 10 00:00:39 2026 GMT Not After : Feb 11 00:00:39 2026 GMT Subject: CN=11f81954c200591e29f726df23257f4d5fac94e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:92:53:6d:fd:8a:31:0d:3a:15:d0:5d:cc:ad: ae:49:68:c2:79:e7:ad:b8:d1:80:6c:82:23:81:15: 0b:05:c7:90:b6:6c:c8:ef:55:60:0b:c7:d2:af:b4: 18:29:90:45:cf:53:ea:40:ac:93:ea:7c:36:e4:2f: e8:ce:c5:f3:35:41:5e:3a:2a:3c:26:64:e8:72:2b: ce:a7:e9:f4:7c:2f:10:c8:73:8b:4d:de:04:40:2c: e5:1a:9c:0f:83:19:4b:3a:63:d8:11:42:73:e5:4c: c9:36:58:4d:29:81:ba:b2:86:12:82:73:f2:48:d6: fc:07:32:5f:b3:ee:3a:4c:6d:38:00:91:49:87:32: fc:37:49:76:86:14:cd:49:dc:00:ce:e2:25:cf:bd: 95:bc:63:0a:69:43:cb:30:dc:65:3d:bb:0c:fc:6d: f4:e8:73:ec:da:10:a6:77:f3:3b:4b:c7:42:8b:60: 79:fc:15:f8:39:8e:49:ef:35:65:26:40:15:35:d8: b6:72:d9:3d:96:5d:cc:a0:8b:0c:46:c6:b6:06:d3: b0:9b:ad:95:ed:5d:f4:98:83:70:26:9b:3a:55:11: 67:e0:3a:1f:18:9e:0c:6d:fd:5d:4f:41:23:24:21: fb:79:4f:cc:b7:68:38:1e:52:22:20:a8:15:0a:36: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F8:19:54:C2:00:59:1E:29:F7:26:DF:23:25:7F:4D:5F:AC:94:E3 X509v3 Authority Key Identifier: keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:84:e8:7b:d2:b0:9d:e1:a2:79:e3:6d:94:99:b1:1f:85:73: 32:df:ef:b7:89:41:df:c5:92:e6:0f:73:13:e1:7b:01:3f:99: 86:e1:66:70:43:3f:fc:d3:5b:78:4d:12:5a:da:76:21:95:fa: 96:0b:d3:f2:72:34:17:7f:27:dc:80:ca:29:38:cf:f6:d0:a3: 50:fa:5a:f0:9c:0b:b0:d8:9f:1e:34:bf:e2:68:a7:fa:90:c3: 2a:5d:7f:b0:51:77:78:99:fe:82:2d:09:b6:bf:a6:6c:1b:72: 37:bf:53:31:21:5d:13:fd:67:dc:38:3d:1c:0c:8b:86:71:ae: 62:4d:94:b9:9f:36:87:13:1f:7e:77:27:27:08:cf:3b:2c:1d: 48:1b:d0:9a:f0:ad:b4:b7:82:db:10:c7:37:e0:53:1e:e5:b4: 74:58:eb:fe:9c:14:8e:b7:70:13:7b:9b:eb:10:cf:bf:db:8e: 28:ea:00:f2:18:76:d0:7f:a4:87:a9:e3:1e:5a:0a:43:59:5c: 96:a7:a5:1a:a5:67:fc:da:a2:2d:49:3b:20:3e:e8:13:c9:61: 6b:cb:d5:fd:52:34:58:d4:b9:fb:52:84:6c:41:37:60:79:37: 18:1e:1f:fd:51:b5:36:3e:8d:f9:f1:9e:c5:d6:fd:da:a4:a2: cf:9d:68:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2aM0jXZvEtCis8LYiLexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2NlNzhmNGFjM2JhOTAyYTBjMzhkYzAxYTBjNWYyMTI2 NTE5YjAwHhcNMjYwMjEwMDAwMDM5WhcNMjYwMjExMDAwMDM5WjAzMTEwLwYDVQQD EygxMWY4MTk1NGMyMDA1OTFlMjlmNzI2ZGYyMzI1N2Y0ZDVmYWM5NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZJTbf2KMQ06FdBdzK2uSWjCeeet uNGAbIIjgRULBceQtmzI71VgC8fSr7QYKZBFz1PqQKyT6nw25C/ozsXzNUFeOio8 JmTocivOp+n0fC8QyHOLTd4EQCzlGpwPgxlLOmPYEUJz5UzJNlhNKYG6soYSgnPy SNb8BzJfs+46TG04AJFJhzL8N0l2hhTNSdwAzuIlz72VvGMKaUPLMNxlPbsM/G30 6HPs2hCmd/M7S8dCi2B5/BX4OY5J7zVlJkAVNdi2ctk9ll3MoIsMRsa2BtOwm62V 7V30mINwJps6VRFn4DofGJ4Mbf1dT0EjJCH7eU/Mt2g4HlIiIKgVCjauQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH4GVTCAFkeKfcm3yMlf01frJTjMB8GA1UdIwQY MBaAFEB8549Kw7qQKgw43AGgxfISZRmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMt YTk3MWEzMzRmYWE0LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hODdlYTgtYzNiNi00NzJkLWE5NmMtYTk3MWEzMzRmYWE0 LzEvUUh6bmowckR1cEFxRERqY0FhREY4aEpsR2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYToe9Kw neGieeNtlJmxH4VzMt/vt4lB38WS5g9zE+F7AT+ZhuFmcEM//NNbeE0SWtp2IZX6 lgvT8nI0F38n3IDKKTjP9tCjUPpa8JwLsNifHjS/4min+pDDKl1/sFF3eJn+gi0J tr+mbBtyN79TMSFdE/1n3Dg9HAyLhnGuYk2UuZ82hxMffncnJwjPOywdSBvQmvCt tLeC2xDHN+BTHuW0dFjr/pwUjrdwE3ub6xDPv9uOKOoA8hh20H+kh6njHloKQ1lc lqelGqVn/NqiLUk7ID7oE8lha8vV/VI0WNS5+1KEbEE3YHk3GB4f/VG1Nj6N+fGe xdb92qSiz51olQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:42 2026 by rpki-client