This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft File: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft (raw, json) Hash identifier: kKiuNObmO8ZLbx2FVCX9KQ12L6s4Q/rjSsOW9SuzPOs= Subject key identifier: 95:54:7F:E6:6B:62:3E:E7:F8:17:AC:38:72:4D:5F:98:DE:4A:C4:AA Authority key identifier: 40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77 Certificate issuer: /CN=406400d71d7edeb0eb305d4982ecf520b0f44e77 Certificate serial: 019C41A1A3F9E4A26CABFBF1C22747BCB157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft Manifest number: 0C1E Signing time: Mon 09 Feb 2026 09:00:38 +0000 Manifest this update: Mon 09 Feb 2026 09:00:38 +0000 Manifest next update: Tue 10 Feb 2026 09:00:38 +0000 Files and hashes: 1: QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl (hash: BTh4MumIMB4aHSdgqTPY3ksjf6ShEjElIuQZ/7YANdE=) 2: V4MLpAR-XerQgSqIgoN4njXNQ-w.roa (hash: EcD5dnrBCv8yKANXd46Tk8wmKmJGu/BbKV7Yp3tongc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a3:f9:e4:a2:6c:ab:fb:f1:c2:27:47:bc:b1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=406400d71d7edeb0eb305d4982ecf520b0f44e77 Validity Not Before: Feb 9 09:00:38 2026 GMT Not After : Feb 10 09:00:38 2026 GMT Subject: CN=95547fe66b623ee7f817ac38724d5f98de4ac4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:58:0b:59:a8:22:e5:0d:7d:7e:7b:8e:91: 83:8b:7c:d7:ed:39:14:aa:17:e8:3e:34:ec:af:a0: 61:bd:73:1c:7e:85:33:71:8b:f4:f0:c9:e8:d3:c2: 80:f5:f0:d5:20:ae:a2:02:f5:62:ae:ad:fe:2d:f9: 8b:fa:44:88:77:2c:22:3e:2a:26:2e:46:ab:5e:e9: 4b:1c:6e:02:96:d7:8a:67:2a:32:b6:39:2b:0c:7c: 37:94:f8:33:34:e9:ae:38:cf:67:1d:8f:3b:6e:30: 0b:53:4f:76:81:b2:32:d4:f2:6f:bb:82:40:55:f6: ce:c5:1e:42:68:5e:46:5c:89:81:94:c3:6c:d3:dc: 78:78:25:8a:3d:f0:c8:07:08:61:91:0e:fc:d0:b0: 54:48:91:85:6c:70:69:e3:e9:66:2f:22:95:d8:8d: 05:b5:ba:54:a7:0c:1e:ce:d4:48:dd:e7:da:11:67: 7f:47:08:bb:50:8a:be:a9:ed:35:64:3d:0f:91:ba: c7:0d:02:fc:de:a8:f2:05:6b:bb:fa:3d:c7:62:c5: c3:0b:cb:40:d2:e1:17:1c:cf:61:ab:c5:b4:3c:fb: f9:b7:f0:eb:06:a1:65:6e:b3:e7:d0:db:10:d1:47: 80:54:a9:5f:49:d0:b9:a8:77:f9:1c:a9:55:e1:b4: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:54:7F:E6:6B:62:3E:E7:F8:17:AC:38:72:4D:5F:98:DE:4A:C4:AA X509v3 Authority Key Identifier: keyid:40:64:00:D7:1D:7E:DE:B0:EB:30:5D:49:82:EC:F5:20:B0:F4:4E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f0751d-d7b3-4701-a326-2148082c3533/1/QGQA1x1-3rDrMF1Jguz1ILD0Tnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f2:5e:5c:0c:c6:d0:52:9c:a4:4c:e3:51:08:b5:87:07:3b: 1d:82:80:4a:cd:d1:45:dc:99:b2:5b:d2:ac:8b:ea:7e:e3:ce: 11:de:c9:6a:97:e4:73:e3:f3:0e:d6:18:64:95:77:07:6b:f5: e8:01:77:c6:81:54:32:63:1b:fb:92:bd:6a:e2:d2:69:65:61: 55:77:20:b9:d1:f2:99:ac:6d:e1:59:20:be:d8:ed:23:1b:0e: e8:6f:a1:6e:37:5a:74:9c:f4:aa:dc:fb:51:f7:c9:d8:dd:a1: 15:76:e0:c0:74:9f:52:52:8d:17:31:b6:5e:37:94:66:18:ec: 91:95:99:6e:93:96:42:ac:f2:f4:72:e1:aa:1b:71:af:06:f8: 1a:51:ed:b4:02:bc:a9:08:5b:27:2c:02:69:c1:c0:d3:cc:8c: 5c:a8:9b:9d:74:3d:2b:2f:45:93:03:db:4b:d5:52:0c:62:bc: 03:02:ec:41:81:a4:36:87:e5:bd:65:15:93:18:31:0b:69:b9: 81:69:b5:51:e4:45:87:4b:98:a9:e0:57:fd:18:09:b6:d6:fa: 50:1e:fa:b7:31:c0:e8:4c:7e:f7:af:03:97:f1:ea:58:a0:96: 3a:47:df:d2:54:e9:1c:22:43:e1:f1:26:e5:96:f8:ed:f8:2f: d9:bc:45:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaP55KJsq/vxwidHvLFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNjQwMGQ3MWQ3ZWRlYjBlYjMwNWQ0OTgyZWNmNTIwYjBm NDRlNzcwHhcNMjYwMjA5MDkwMDM4WhcNMjYwMjEwMDkwMDM4WjAzMTEwLwYDVQQD Eyg5NTU0N2ZlNjZiNjIzZWU3ZjgxN2FjMzg3MjRkNWY5OGRlNGFjNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnytYC1moIuUNfX57jpGDi3zX7TkU qhfoPjTsr6BhvXMcfoUzcYv08Mno08KA9fDVIK6iAvVirq3+LfmL+kSIdywiPiom LkarXulLHG4ClteKZyoytjkrDHw3lPgzNOmuOM9nHY87bjALU092gbIy1PJvu4JA VfbOxR5CaF5GXImBlMNs09x4eCWKPfDIBwhhkQ780LBUSJGFbHBp4+lmLyKV2I0F tbpUpwweztRI3efaEWd/Rwi7UIq+qe01ZD0PkbrHDQL83qjyBWu7+j3HYsXDC8tA 0uEXHM9hq8W0PPv5t/DrBqFlbrPn0NsQ0UeAVKlfSdC5qHf5HKlV4bTaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVUf+ZrYj7n+BesOHJNX5jeSsSqMB8GA1UdIwQY MBaAFEBkANcdft6w6zBdSYLs9SCw9E53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYt MjE0ODA4MmMzNTMzLzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mMDc1MWQtZDdiMy00NzAxLWEzMjYtMjE0ODA4MmMzNTMz LzEvUUdRQTF4MS0zckRyTUYxSmd1ejFJTEQwVG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvJeXAzG 0FKcpEzjUQi1hwc7HYKASs3RRdyZslvSrIvqfuPOEd7Japfkc+PzDtYYZJV3B2v1 6AF3xoFUMmMb+5K9auLSaWVhVXcgudHymaxt4VkgvtjtIxsO6G+hbjdadJz0qtz7 UffJ2N2hFXbgwHSfUlKNFzG2XjeUZhjskZWZbpOWQqzy9HLhqhtxrwb4GlHttAK8 qQhbJywCacHA08yMXKibnXQ9Ky9FkwPbS9VSDGK8AwLsQYGkNoflvWUVkxgxC2m5 gWm1UeRFh0uYqeBX/RgJttb6UB76tzHA6Ex+968Dl/HqWKCWOkff0lTpHCJD4fEm 5Zb47fgv2bxFNw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:35 2026 by rpki-client