This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json) Hash identifier: hZkswncoKor/uQ9l8e/eEiwUGgSmTNYo3oD32JQ/SIE= Subject key identifier: 38:C9:A0:D5:88:49:1F:8A:A8:5C:A1:46:D4:8D:B4:53:3E:12:07:48 Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Certificate serial: 019C41D8729B74A284421B2BFBE6CEE12FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft Manifest number: 136C Signing time: Mon 09 Feb 2026 10:00:29 +0000 Manifest this update: Mon 09 Feb 2026 10:00:29 +0000 Manifest next update: Tue 10 Feb 2026 10:00:29 +0000 Files and hashes: 1: I4vOB-6b7Yrjiz4kl9EGnxIjQXI.roa (hash: ZbRluEdm21PdXwQDE7RdF6oCp8YLkRPYwO66Xf0NuZo=) 2: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: 3S6ZH+rp9E9qFbCZyECDavDGyZFr2uBTUK1Ooj4svo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:72:9b:74:a2:84:42:1b:2b:fb:e6:ce:e1:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592 Validity Not Before: Feb 9 10:00:29 2026 GMT Not After : Feb 10 10:00:29 2026 GMT Subject: CN=38c9a0d588491f8aa85ca146d48db4533e120748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:cc:67:62:93:86:a1:a4:1f:a2:76:a8:18: f3:6c:7e:c3:4c:ed:bd:5e:2d:3e:ce:bc:c0:6e:34: e0:27:ae:82:c4:e9:a3:99:47:d6:a7:03:02:51:b1: 47:de:b8:a6:f1:3f:97:d6:7b:53:d5:f5:eb:bd:42: 42:50:28:24:38:29:39:d1:d7:a3:6e:1a:7f:a2:95: c9:39:ae:a6:6f:92:95:1a:1a:b8:08:7b:32:2d:47: cd:6b:df:27:7d:61:2a:ef:71:8b:94:65:a9:f5:56: 86:64:c2:39:e8:d6:cb:ed:ea:a5:dc:93:bc:a4:e3: 54:c3:c0:44:83:e6:8c:53:f2:b9:19:42:96:cb:20: 06:7d:d1:20:da:e4:3c:1b:da:2c:ae:c8:17:ea:1c: 45:ad:4e:9a:a6:a6:5a:02:1c:8e:f1:d7:04:c0:eb: 24:a7:64:ec:81:b9:f7:bb:b5:ad:2b:36:a5:74:15: a0:17:05:f8:ae:f0:b8:6d:75:e2:f5:c6:34:86:9f: 14:75:cb:63:d7:16:3c:4f:f4:b8:ff:e8:b4:5b:69: 2c:1f:f5:64:6f:11:b3:95:17:7b:70:69:50:e0:07: 0b:f4:ab:b7:32:72:c7:28:18:8f:51:8f:54:53:11: 40:d3:ef:4a:3c:15:75:fc:95:f0:ff:cf:12:6b:61: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C9:A0:D5:88:49:1F:8A:A8:5C:A1:46:D4:8D:B4:53:3E:12:07:48 X509v3 Authority Key Identifier: keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d8:3d:d6:51:4d:f6:9b:6c:08:2c:94:aa:c0:9d:8a:38:6e: 89:36:54:ef:58:83:4d:4b:d1:83:26:7c:d6:e8:a9:af:dc:77: 01:9e:29:c6:bc:c3:d8:27:59:fc:f3:e7:fe:87:db:d2:53:9b: e5:60:7b:40:c2:75:98:a1:c7:f6:ec:93:1e:c4:6e:2b:85:05: d0:99:b9:b3:72:20:5f:51:6b:48:f3:bf:2f:8e:ce:74:ac:38: 2e:c4:39:d3:84:6f:73:09:c3:3a:2d:ea:07:d1:a6:f9:0e:c8: c3:05:96:a3:b4:61:7f:02:8e:79:1c:2f:15:97:3f:95:78:01: 30:e3:01:41:33:90:e8:dd:69:c1:0a:03:9e:d5:6f:1f:33:f9: c6:0c:e3:e9:b5:90:b1:c2:3f:ac:69:f1:25:ce:87:98:48:ae: 07:dd:12:2b:da:46:46:9e:91:2d:b5:a1:db:3a:69:01:aa:00: 02:73:7f:52:3a:6d:2b:d0:d1:c9:a9:58:29:a3:c4:10:61:2d: 27:f2:6f:ac:35:86:9f:5e:47:f7:88:34:42:3f:2e:f7:43:95: 35:71:fa:8a:9c:57:fb:5b:0d:ca:77:f2:7f:78:77:d6:b0:34: 41:ff:65:fd:f5:6d:c5:38:68:aa:90:2a:16:ad:0d:32:91:31: df:d8:b9:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HKbdKKEQhsr++bO4S/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk NGU1OTIwHhcNMjYwMjA5MTAwMDI5WhcNMjYwMjEwMTAwMDI5WjAzMTEwLwYDVQQD EygzOGM5YTBkNTg4NDkxZjhhYTg1Y2ExNDZkNDhkYjQ1MzNlMTIwNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1HMZ2KThqGkH6J2qBjzbH7DTO29 Xi0+zrzAbjTgJ66CxOmjmUfWpwMCUbFH3rim8T+X1ntT1fXrvUJCUCgkOCk50dej bhp/opXJOa6mb5KVGhq4CHsyLUfNa98nfWEq73GLlGWp9VaGZMI56NbL7eql3JO8 pONUw8BEg+aMU/K5GUKWyyAGfdEg2uQ8G9osrsgX6hxFrU6apqZaAhyO8dcEwOsk p2Tsgbn3u7WtKzaldBWgFwX4rvC4bXXi9cY0hp8Udctj1xY8T/S4/+i0W2ksH/Vk bxGzlRd7cGlQ4AcL9Ku3MnLHKBiPUY9UUxFA0+9KPBV1/JXw/88Sa2FRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjJoNWISR+KqFyhRtSNtFM+EgdIMB8GA1UdIwQY MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4 LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdg91lFN 9ptsCCyUqsCdijhuiTZU71iDTUvRgyZ81uipr9x3AZ4pxrzD2CdZ/PPn/ofb0lOb 5WB7QMJ1mKHH9uyTHsRuK4UF0Jm5s3IgX1FrSPO/L47OdKw4LsQ504RvcwnDOi3q B9Gm+Q7IwwWWo7RhfwKOeRwvFZc/lXgBMOMBQTOQ6N1pwQoDntVvHzP5xgzj6bWQ scI/rGnxJc6HmEiuB90SK9pGRp6RLbWh2zppAaoAAnN/UjptK9DRyalYKaPEEGEt J/JvrDWGn15H94g0Qj8u90OVNXH6ipxX+1sNynfyf3h31rA0Qf9l/fVtxThoqpAq Fq0NMpEx39i5Pg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:37 2026 by rpki-client