This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json) Hash identifier: eWT9+y5/B8FobScf0hlYNXqNn8Tog3gof8NO2pxry1c= Subject key identifier: B8:5E:97:5D:8B:65:60:EB:8C:66:A5:EF:5F:7E:A9:85:5C:45:CD:CC Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31 Certificate serial: 019C41A19524BD90CF67AE0F1314B6A08205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft Manifest number: 0DFE Signing time: Mon 09 Feb 2026 09:00:34 +0000 Manifest this update: Mon 09 Feb 2026 09:00:34 +0000 Manifest next update: Tue 10 Feb 2026 09:00:34 +0000 Files and hashes: 1: 4SKGR2Rhx6Hq30qNCyoehJO7WaQ.roa (hash: /Aj0axBj9aVxd0CaoZ4TQJb5zpK/Z9ZsET+fz6PD9KQ=) 2: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: onEOzQCFJFEISOx1t91ULMVSdc2VhvRrMza39WzgQNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:95:24:bd:90:cf:67:ae:0f:13:14:b6:a0:82:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31 Validity Not Before: Feb 9 09:00:34 2026 GMT Not After : Feb 10 09:00:34 2026 GMT Subject: CN=b85e975d8b6560eb8c66a5ef5f7ea9855c45cdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:41:99:5a:e3:4d:42:3a:80:6a:da:61:b1: d0:fd:93:04:1e:50:ba:43:95:90:be:16:18:59:d5: a3:e5:a6:68:1f:8f:0e:a4:72:60:a4:c3:df:8c:e6: 66:a1:e2:b1:95:1d:ba:5f:e2:01:4b:fe:d9:d1:6e: cd:82:9c:c6:2f:57:8c:5c:00:ec:f3:60:79:19:cb: 50:08:df:5a:e9:cb:1f:cc:40:f0:f3:86:55:3b:f1: 9a:e3:c8:6a:d9:4d:c6:c8:99:ff:cf:24:21:3b:e7: 79:ef:c6:c0:0a:cf:cd:84:da:34:39:fb:73:31:1c: 5e:98:c4:f8:c2:aa:2e:ef:c0:b5:15:7c:0f:d6:db: ce:1e:63:fd:4c:e0:28:21:1e:8f:ea:40:28:ec:1a: f2:b2:d4:d6:2f:35:d3:30:23:df:75:ef:e0:6d:13: ec:3c:1e:79:1b:2c:af:1f:73:80:37:c9:2b:af:93: db:b1:36:07:7e:7c:48:55:37:71:dc:6b:d8:09:21: 28:14:b8:7e:7f:1e:da:55:46:73:e7:95:55:f1:c4: 8b:f2:3e:7d:4a:91:e7:71:32:dc:02:7d:3c:01:6e: ac:28:2b:6e:90:54:5c:58:b9:08:a9:9e:db:3a:af: 24:30:79:73:9b:33:05:6e:a0:c5:3e:32:64:43:b1: 10:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5E:97:5D:8B:65:60:EB:8C:66:A5:EF:5F:7E:A9:85:5C:45:CD:CC X509v3 Authority Key Identifier: keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5e:2d:66:6b:6a:78:0e:e1:77:71:d4:4a:a5:ab:6a:a7:73: 5e:91:fa:6e:43:71:69:96:b8:7c:c5:fd:7e:f0:21:ee:be:76: bc:58:7b:57:41:f7:ca:21:57:a7:fa:e6:1e:a5:ff:20:65:89: dd:bb:6c:a8:41:12:38:eb:f9:e0:5d:6c:03:a1:42:7e:a2:e7: ba:9f:41:69:f5:5d:64:64:02:b8:2e:76:f9:1f:8f:06:2d:75: 55:39:9b:bb:ab:8d:7f:5d:5a:74:53:d7:c3:76:e4:6f:7f:21: ac:ac:9d:33:c2:76:29:d1:e8:5f:65:5d:44:49:cb:69:5f:a7: 17:d6:56:ae:60:f2:f6:00:36:53:fb:f9:37:21:b6:d4:6d:00: e6:7a:d9:3c:b4:75:7e:5b:6a:b4:09:70:96:45:cf:4e:82:25: bb:6e:de:ba:30:0a:cf:c7:c1:f4:6f:2a:d5:77:ab:3a:ad:86: 8b:b1:c0:bc:53:a5:49:95:c1:08:9b:4b:c0:6b:e5:8d:ec:61: b0:82:a7:7b:de:f6:5b:d6:e2:ae:70:f2:b4:31:ed:66:be:4f: f4:ba:09:36:d4:96:e5:fd:80:b3:b0:bb:6c:b7:e9:f9:c2:79: 66:40:09:1d:c7:7d:a7:ef:b6:89:42:26:f2:e2:e1:ca:50:c3: cf:8b:4a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZUkvZDPZ64PExS2oIIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTA0NWQwMjFkNDhhZTg2MWEwY2U2N2QzOGQxNWEwNjc2 NTNhMzEwHhcNMjYwMjA5MDkwMDM0WhcNMjYwMjEwMDkwMDM0WjAzMTEwLwYDVQQD EyhiODVlOTc1ZDhiNjU2MGViOGM2NmE1ZWY1ZjdlYTk4NTVjNDVjZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfhBmVrjTUI6gGraYbHQ/ZMEHlC6 Q5WQvhYYWdWj5aZoH48OpHJgpMPfjOZmoeKxlR26X+IBS/7Z0W7NgpzGL1eMXADs 82B5GctQCN9a6csfzEDw84ZVO/Ga48hq2U3GyJn/zyQhO+d578bACs/NhNo0Oftz MRxemMT4wqou78C1FXwP1tvOHmP9TOAoIR6P6kAo7BrystTWLzXTMCPfde/gbRPs PB55GyyvH3OAN8krr5PbsTYHfnxIVTdx3GvYCSEoFLh+fx7aVUZz55VV8cSL8j59 SpHncTLcAn08AW6sKCtukFRcWLkIqZ7bOq8kMHlzmzMFbqDFPjJkQ7EQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhel12LZWDrjGal719+qYVcRc3MMB8GA1UdIwQY MBaAFEPgRdAh1IroYaDOZ9ONFaBnZToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTIt M2IwMmM5OWM3MzNiLzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTItM2IwMmM5OWM3MzNi LzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV4tZmtq eA7hd3HUSqWraqdzXpH6bkNxaZa4fMX9fvAh7r52vFh7V0H3yiFXp/rmHqX/IGWJ 3btsqEESOOv54F1sA6FCfqLnup9BafVdZGQCuC52+R+PBi11VTmbu6uNf11adFPX w3bkb38hrKydM8J2KdHoX2VdREnLaV+nF9ZWrmDy9gA2U/v5NyG21G0A5nrZPLR1 fltqtAlwlkXPToIlu27eujAKz8fB9G8q1XerOq2Gi7HAvFOlSZXBCJtLwGvljexh sIKne972W9birnDytDHtZr5P9LoJNtSW5f2As7C7bLfp+cJ5ZkAJHcd9p++2iUIm 8uLhylDDz4tKjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:28 2026 by rpki-client