This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json) Hash identifier: fBfm7q+SnPhWjiFRyJ1jH/Lbzpp49wD/EOoDPAteH2M= Subject key identifier: 02:E8:AC:62:64:D8:CA:E9:79:82:84:B6:6D:64:DF:44:91:A1:09:D3 Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf Certificate serial: 019C41D8FB16EB20CB14BDCD89BDEE7887A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft Manifest number: 0240 Signing time: Mon 09 Feb 2026 10:01:04 +0000 Manifest this update: Mon 09 Feb 2026 10:01:04 +0000 Manifest next update: Tue 10 Feb 2026 10:01:04 +0000 Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=) 2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: ATO9Oj+z7BL1hCrdDJ0AyZUOKZVOMHRlwpEB36ATjFs=) 3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:fb:16:eb:20:cb:14:bd:cd:89:bd:ee:78:87:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf Validity Not Before: Feb 9 10:01:04 2026 GMT Not After : Feb 10 10:01:04 2026 GMT Subject: CN=02e8ac6264d8cae9798284b66d64df4491a109d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:83:a6:19:6e:1d:f0:5c:3e:0c:c1:c4:28:81: a3:5e:0f:d6:c1:cb:6b:ec:cb:4d:43:ef:4b:7e:c0: 1e:7a:75:01:21:b2:a0:3b:48:72:f3:f8:1a:6a:e8: 8f:f1:93:81:85:8d:8e:22:3f:7a:2b:72:fd:90:81: 7d:74:f4:ef:80:d6:60:77:27:1c:28:1b:2e:33:96: 37:43:30:2c:c2:c9:5e:6f:db:ed:d7:0f:5a:17:1a: dc:c8:b9:04:b2:ce:d3:b9:8a:3a:0f:95:7d:06:7f: ce:88:ba:d8:c5:75:c8:f1:65:8b:7c:df:85:92:f5: f5:c2:91:29:78:f4:74:82:2a:3d:43:09:3c:59:a2: 46:83:55:d4:cd:78:66:8e:c9:ab:17:13:1b:fb:16: 63:30:61:ea:06:56:88:38:e9:03:d9:88:4c:d8:7a: ed:85:00:69:b1:bb:f1:4a:aa:92:ca:db:43:4e:4d: fc:70:d1:d4:04:5d:02:76:a6:5f:f2:04:e8:fc:19: 44:fe:0e:2a:05:e4:e9:08:13:5c:20:cb:1d:77:69: b8:ed:87:c7:e5:d4:51:3c:75:e7:58:17:a2:68:0f: 51:72:ee:58:b9:98:41:8b:8e:04:9e:cb:90:18:7e: cf:37:54:49:05:0f:04:08:9d:0b:3d:16:55:bf:59: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E8:AC:62:64:D8:CA:E9:79:82:84:B6:6D:64:DF:44:91:A1:09:D3 X509v3 Authority Key Identifier: keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:71:01:52:87:d4:03:1f:24:98:08:6e:42:49:1a:07:d5:f4: f1:06:e1:c0:da:de:05:85:31:96:0d:eb:67:3a:5b:7c:00:c4: 14:68:e6:45:7e:d5:16:39:0f:a6:3c:a6:63:d7:09:0d:e4:54: 15:4b:02:bd:24:3e:b9:8e:14:9e:bd:54:9f:63:e4:1b:fc:43: 46:3d:4e:4c:3c:73:75:75:69:1b:6d:7c:c6:1e:8d:46:ee:92: 3e:b1:35:e0:6c:bb:4f:81:76:c7:72:96:4e:51:2d:e9:f2:89: b4:c7:22:d1:99:69:03:10:ea:c8:b8:89:0a:81:43:47:47:3f: 90:ac:ca:b0:4c:bf:cc:ac:0f:d6:71:f1:3f:7e:45:15:df:36: 68:af:1c:8f:73:03:94:6e:f0:2d:5f:ec:9d:a8:a0:05:70:61: 08:e2:39:14:c6:fb:25:03:c9:22:32:90:2a:64:a8:eb:38:fc: af:09:bd:47:49:70:b0:a4:f2:2b:78:52:a1:f1:1c:86:8d:ba: 66:21:78:f4:aa:2c:26:74:bb:e3:0a:2d:48:b5:73:e6:64:56: 79:2b:68:3e:1d:ee:5e:a6:44:23:0b:b1:c0:f4:5a:f1:80:7d: 77:f2:98:ad:06:df:22:fc:9d:b7:9e:b2:bb:b5:a0:a5:d2:e4: cf:14:1f:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PsW6yDLFL3Nib3ueIeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw YTE4Y2YwHhcNMjYwMjA5MTAwMTA0WhcNMjYwMjEwMTAwMTA0WjAzMTEwLwYDVQQD EygwMmU4YWM2MjY0ZDhjYWU5Nzk4Mjg0YjY2ZDY0ZGY0NDkxYTEwOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IOmGW4d8Fw+DMHEKIGjXg/Wwctr 7MtNQ+9LfsAeenUBIbKgO0hy8/gaauiP8ZOBhY2OIj96K3L9kIF9dPTvgNZgdycc KBsuM5Y3QzAswsleb9vt1w9aFxrcyLkEss7TuYo6D5V9Bn/OiLrYxXXI8WWLfN+F kvX1wpEpePR0gio9Qwk8WaJGg1XUzXhmjsmrFxMb+xZjMGHqBlaIOOkD2YhM2Hrt hQBpsbvxSqqSyttDTk38cNHUBF0CdqZf8gTo/BlE/g4qBeTpCBNcIMsdd2m47YfH 5dRRPHXnWBeiaA9Rcu5YuZhBi44EnsuQGH7PN1RJBQ8ECJ0LPRZVv1myGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALorGJk2MrpeYKEtm1k30SRoQnTMB8GA1UdIwQY MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt NmI4NzcwMzZhYTFhLzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnEBUofU Ax8kmAhuQkkaB9X08QbhwNreBYUxlg3rZzpbfADEFGjmRX7VFjkPpjymY9cJDeRU FUsCvSQ+uY4Unr1Un2PkG/xDRj1OTDxzdXVpG218xh6NRu6SPrE14Gy7T4F2x3KW TlEt6fKJtMci0ZlpAxDqyLiJCoFDR0c/kKzKsEy/zKwP1nHxP35FFd82aK8cj3MD lG7wLV/snaigBXBhCOI5FMb7JQPJIjKQKmSo6zj8rwm9R0lwsKTyK3hSofEcho26 ZiF49KosJnS74wotSLVz5mRWeStoPh3uXqZEIwuxwPRa8YB9d/KYrQbfIvydt56y u7WgpdLkzxQfzw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:58 2026 by rpki-client