This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json) Hash identifier: 9YxpcGQux0LhK0656ZaGp4tCDiISn82Na8+1NvJumAU= Subject key identifier: 63:F3:0F:40:4F:52:29:2E:62:D8:72:3B:8C:D2:84:7B:FA:EA:26:65 Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Certificate serial: 019C420F79D2092C23B901774FDADACFE76D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft Manifest number: 12A6 Signing time: Mon 09 Feb 2026 11:00:36 +0000 Manifest this update: Mon 09 Feb 2026 11:00:36 +0000 Manifest next update: Tue 10 Feb 2026 11:00:36 +0000 Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: ze0ln0UCIY9AVPJHlkD2NP8QZifoQMLXeDPae4zWiV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:79:d2:09:2c:23:b9:01:77:4f:da:da:cf:e7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a Validity Not Before: Feb 9 11:00:36 2026 GMT Not After : Feb 10 11:00:36 2026 GMT Subject: CN=63f30f404f52292e62d8723b8cd2847bfaea2665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:de:d7:b4:cd:98:5a:70:d2:df:8d:b0:2c: c5:4f:09:8e:ca:6b:06:5e:2c:07:16:23:35:43:2e: f4:ea:f2:40:d0:2b:28:fc:11:9f:5d:42:77:bd:be: 32:b2:4f:f6:7a:b4:2c:5a:ce:d6:9a:95:8a:c4:b9: d0:67:4d:4c:cc:d8:fa:3b:1c:65:b4:88:69:51:53: 5d:7a:39:b6:24:ed:b7:5d:f2:de:40:a8:e6:ea:9f: e0:6c:11:c6:66:ff:00:75:10:3e:79:57:aa:66:a2: 22:c5:96:e9:9f:cc:dc:4a:0e:3b:6e:f6:32:5f:d1: 8b:7f:46:ef:68:42:90:93:e8:4c:c3:59:19:39:78: 0a:f5:ff:9e:85:25:42:37:28:9e:2f:58:2e:7f:75: 45:fd:6a:90:f4:44:37:97:d0:d5:45:1e:60:ba:0d: 79:fb:23:19:0c:d2:38:3e:a3:69:68:e1:8b:24:6c: 09:d3:51:91:c4:59:36:64:78:71:06:7b:e0:6c:06: 2f:30:15:77:48:72:a5:80:85:14:57:03:39:74:9f: bc:0e:8a:98:36:7b:12:f1:a5:68:5d:c9:d1:aa:2a: a1:77:b8:fd:fa:b3:7a:f5:d6:14:25:84:7d:46:82: b0:eb:98:a4:95:ea:f4:e5:a1:cc:ca:64:90:9e:58: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F3:0F:40:4F:52:29:2E:62:D8:72:3B:8C:D2:84:7B:FA:EA:26:65 X509v3 Authority Key Identifier: keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c7:13:a0:8a:d7:09:10:61:0c:ee:ab:7b:3d:05:35:36:f5: 59:54:a8:00:27:ef:14:ce:8a:c6:15:5b:b3:e7:03:5a:8f:40: 07:4f:08:e6:61:3b:42:79:ab:62:bd:07:37:9c:37:bb:71:92: 7b:0b:b8:5a:54:9b:7a:22:0d:8a:f0:50:22:f7:36:8f:78:92: 0c:ed:1f:af:e6:6a:02:c8:96:46:e1:b5:8f:b2:bc:d6:96:b3: 5e:cf:95:e8:fe:51:04:25:2e:63:b0:48:cd:76:d5:34:27:98: 89:83:b2:e2:d8:9c:97:5b:50:ff:53:28:ca:10:e9:f4:25:ca: 77:6a:64:e8:84:9a:b0:8e:4a:eb:f1:d9:3d:01:9b:36:a3:52: 1d:9d:15:22:0c:b9:e2:77:4e:f6:fa:09:e1:50:07:d1:44:0c: 05:91:1b:56:3e:c1:ca:7f:fd:a0:22:77:46:ce:57:c1:23:bd: 84:39:0d:44:ce:42:8e:5f:43:15:4d:5a:ee:6d:68:9a:fb:5c: 17:f6:7d:92:84:54:2c:a3:a9:25:2f:9c:88:b7:eb:84:61:94: 0f:ad:cd:08:31:36:20:e9:76:fa:e4:51:ef:f9:62:ad:d5:d2: 45:92:1b:f1:d9:32:0c:6c:22:1d:a7:fc:9f:5c:5b:b7:5f:05: 7a:91:35:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3nSCSwjuQF3T9raz+dtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMTFjY2QyYmQyMjU0NGFiZTU4NWE3Y2QzZjk0OTExZWEw Yzk0MmEwHhcNMjYwMjA5MTEwMDM2WhcNMjYwMjEwMTEwMDM2WjAzMTEwLwYDVQQD Eyg2M2YzMGY0MDRmNTIyOTJlNjJkODcyM2I4Y2QyODQ3YmZhZWEyNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHDe17TNmFpw0t+NsCzFTwmOymsG XiwHFiM1Qy706vJA0Cso/BGfXUJ3vb4ysk/2erQsWs7WmpWKxLnQZ01MzNj6Oxxl tIhpUVNdejm2JO23XfLeQKjm6p/gbBHGZv8AdRA+eVeqZqIixZbpn8zcSg47bvYy X9GLf0bvaEKQk+hMw1kZOXgK9f+ehSVCNyieL1guf3VF/WqQ9EQ3l9DVRR5gug15 +yMZDNI4PqNpaOGLJGwJ01GRxFk2ZHhxBnvgbAYvMBV3SHKlgIUUVwM5dJ+8DoqY NnsS8aVoXcnRqiqhd7j9+rN69dYUJYR9RoKw65ikler05aHMymSQnljuOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPzD0BPUikuYthyO4zShHv66iZlMB8GA1UdIwQY MBaAFEMRzNK9IlRKvlhafNP5SRHqDJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYt ZDM3OGJhZjZhYTkyLzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYtZDM3OGJhZjZhYTky LzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXccToIrX CRBhDO6rez0FNTb1WVSoACfvFM6KxhVbs+cDWo9AB08I5mE7QnmrYr0HN5w3u3GS ewu4WlSbeiINivBQIvc2j3iSDO0fr+ZqAsiWRuG1j7K81pazXs+V6P5RBCUuY7BI zXbVNCeYiYOy4ticl1tQ/1MoyhDp9CXKd2pk6ISasI5K6/HZPQGbNqNSHZ0VIgy5 4ndO9voJ4VAH0UQMBZEbVj7Byn/9oCJ3Rs5XwSO9hDkNRM5Cjl9DFU1a7m1omvtc F/Z9koRULKOpJS+ciLfrhGGUD63NCDE2IOl2+uRR7/lirdXSRZIb8dkyDGwiHaf8 n1xbt18FepE1jg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:50 2026 by rpki-client