This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json) Hash identifier: YMh4At0QTmj20njaT0WSAlfHMllAHKt+i9Q/zETEov0= Subject key identifier: 7D:3D:30:02:66:66:C8:94:B5:C0:AB:B3:27:CB:CC:DF:81:D4:BF:D5 Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Certificate serial: 019C446C17D8F6845DF3339C187A60A049F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft Manifest number: 14F9 Signing time: Mon 09 Feb 2026 22:01:00 +0000 Manifest this update: Mon 09 Feb 2026 22:01:00 +0000 Manifest next update: Tue 10 Feb 2026 22:01:00 +0000 Files and hashes: 1: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: naNmg/3+UPYmnVxgfW5VYIJdJphTJ4YZtlPm09TjxRc=) 2: x7XIqJcPUru0lXudcs2kUD4a4dY.roa (hash: RMRq+vG8pwIp8zMMZ4x4ZnddCysQFlJ5lwvYXFg2Sb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:17:d8:f6:84:5d:f3:33:9c:18:7a:60:a0:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Validity Not Before: Feb 9 22:01:00 2026 GMT Not After : Feb 10 22:01:00 2026 GMT Subject: CN=7d3d30026666c894b5c0abb327cbccdf81d4bfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:89:5b:5a:c5:c5:4b:71:a2:38:d2:97:91:af: ba:58:a9:fb:81:ad:9e:c5:e3:ae:09:5d:35:6d:eb: 60:d7:dc:df:f3:27:bb:40:06:8a:32:40:3e:4e:db: 1f:50:a1:ab:b3:4e:f5:ca:44:54:95:b2:8d:3c:77: dc:42:fb:51:87:83:2c:c9:45:2f:43:ef:2c:8e:7d: 31:23:91:46:65:01:c4:4b:18:21:c9:46:6f:37:67: ae:cb:e5:4a:d8:c5:ae:9c:4c:d6:37:ac:42:76:01: d0:aa:cd:f0:67:70:9a:09:81:ce:02:66:7d:c9:9e: 1b:8c:87:b1:71:20:ce:5a:ca:22:1c:8f:94:2e:55: d2:18:c4:f2:28:16:8d:5b:64:75:10:ae:dc:cb:f2: 0c:da:62:60:41:a5:f8:d6:e0:44:f4:6f:d5:c1:a3: cb:4d:c3:a9:07:0b:8a:5a:fb:71:46:c8:bd:92:92: 4a:74:1c:cd:ba:b4:80:6a:de:a3:de:75:5e:97:15: d1:e7:66:4c:c5:50:22:15:42:59:a2:30:b3:e3:7c: 48:2d:ae:b5:98:e0:73:47:a4:58:72:59:64:b4:49: 70:87:36:20:82:cf:25:1b:bf:f6:b2:f0:30:d8:d2: 8d:43:41:29:2b:99:7f:0c:ad:e5:72:13:0b:0a:62: 3d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:3D:30:02:66:66:C8:94:B5:C0:AB:B3:27:CB:CC:DF:81:D4:BF:D5 X509v3 Authority Key Identifier: keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b7:47:c6:7d:f8:cd:ca:f4:94:94:83:5d:56:b6:ce:5b:0f: bf:f9:96:72:55:ea:fe:f5:5a:45:69:e3:96:cb:c8:4f:a2:e4: b5:33:56:23:d0:99:6b:b9:84:d1:ae:24:c2:2a:5e:a1:37:8b: ee:fa:d1:f9:46:a1:a1:3a:6f:93:58:10:e1:d2:ed:f6:af:dd: 4d:da:12:91:ee:0f:86:8a:9f:cc:66:b4:d5:50:13:8e:97:2a: db:f1:fd:28:90:01:1a:d5:b7:9e:de:27:29:80:4b:f6:49:63: 7f:b8:1d:0a:ac:54:9b:ec:9f:10:81:61:e1:f9:6b:ae:eb:52: ff:4c:cd:de:3f:e7:1e:c5:09:69:86:12:1d:da:a8:35:af:23: 3a:cc:55:b1:54:4f:c4:c9:58:75:ea:bd:3b:c4:9e:05:36:1b: fc:5d:08:7c:c7:57:e9:37:c0:a3:87:a0:8f:48:95:3f:6c:2a: a0:51:91:5d:ae:bc:af:38:2f:80:a9:0f:6d:20:1a:75:43:62: 29:d4:3f:f8:b3:4a:13:62:cf:14:94:45:67:fc:da:6a:20:52: e3:50:5e:0c:7d:05:c4:11:d8:54:d1:d0:34:2e:26:18:90:d6: 91:62:a5:ed:33:34:39:b9:29:3e:32:89:8e:ff:ad:29:ca:41: 09:84:af:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBfY9oRd8zOcGHpgoEn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4 OTkyZjIwHhcNMjYwMjA5MjIwMTAwWhcNMjYwMjEwMjIwMTAwWjAzMTEwLwYDVQQD Eyg3ZDNkMzAwMjY2NjZjODk0YjVjMGFiYjMyN2NiY2NkZjgxZDRiZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3olbWsXFS3GiONKXka+6WKn7ga2e xeOuCV01betg19zf8ye7QAaKMkA+TtsfUKGrs071ykRUlbKNPHfcQvtRh4MsyUUv Q+8sjn0xI5FGZQHESxghyUZvN2euy+VK2MWunEzWN6xCdgHQqs3wZ3CaCYHOAmZ9 yZ4bjIexcSDOWsoiHI+ULlXSGMTyKBaNW2R1EK7cy/IM2mJgQaX41uBE9G/VwaPL TcOpBwuKWvtxRsi9kpJKdBzNurSAat6j3nVelxXR52ZMxVAiFUJZojCz43xILa61 mOBzR6RYcllktElwhzYggs8lG7/2svAw2NKNQ0EpK5l/DK3lchMLCmI9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH09MAJmZsiUtcCrsyfLzN+B1L/VMB8GA1UdIwQY MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct ZDc5YjBlYzc4ZTk3LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3 LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbdHxn34 zcr0lJSDXVa2zlsPv/mWclXq/vVaRWnjlsvIT6LktTNWI9CZa7mE0a4kwipeoTeL 7vrR+UahoTpvk1gQ4dLt9q/dTdoSke4PhoqfzGa01VATjpcq2/H9KJABGtW3nt4n KYBL9kljf7gdCqxUm+yfEIFh4flrrutS/0zN3j/nHsUJaYYSHdqoNa8jOsxVsVRP xMlYdeq9O8SeBTYb/F0IfMdX6TfAo4egj0iVP2wqoFGRXa68rzgvgKkPbSAadUNi KdQ/+LNKE2LPFJRFZ/zaaiBS41BeDH0FxBHYVNHQNC4mGJDWkWKl7TM0ObkpPjKJ jv+tKcpBCYSv6Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:37 2026 by rpki-client