This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json) Hash identifier: gWtUMiN+HSlKhP/2HCUJlM3rl7VcCYYVaGZuxiRZMX4= Subject key identifier: 51:27:71:68:6B:5F:BB:73:88:0B:71:8F:CE:22:41:1F:2D:CE:44:F5 Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Certificate serial: 019C41A26C3214A92DFFCD420C910BFF6DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft Manifest number: 0AF1 Signing time: Mon 09 Feb 2026 09:01:29 +0000 Manifest this update: Mon 09 Feb 2026 09:01:29 +0000 Manifest next update: Tue 10 Feb 2026 09:01:29 +0000 Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: chDLbNVzAJyvcRxSCFCOiTpM9aIGr5qgPA9VKzguSog=) 2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:6c:32:14:a9:2d:ff:cd:42:0c:91:0b:ff:6d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e Validity Not Before: Feb 9 09:01:29 2026 GMT Not After : Feb 10 09:01:29 2026 GMT Subject: CN=512771686b5fbb73880b718fce22411f2dce44f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:78:05:82:eb:9a:26:fd:87:ba:35:83:13:da: 5f:c3:64:ea:09:60:68:e3:58:1a:5f:ed:1d:7e:1a: 24:94:a5:78:22:4e:67:09:68:86:46:7f:40:b1:55: 65:80:45:bb:ba:9e:fd:ce:17:69:cd:cb:dc:06:61: 4a:68:9e:be:fa:2f:66:f0:bc:be:5e:8f:35:7b:17: c5:99:12:0f:d6:fc:f0:c4:c0:37:a6:33:9e:04:d8: e4:76:8a:de:ba:41:ca:c9:95:3b:ab:59:75:54:bc: b0:59:ab:02:a7:66:c4:19:4c:88:14:0d:92:59:59: a4:c5:63:46:4d:5a:53:25:fd:9a:d1:c7:fc:3b:f1: e6:c2:dd:bc:34:2d:c0:6e:6c:a8:b1:06:16:bc:38: 4a:74:e6:1b:5a:c2:0a:df:96:32:a0:f1:78:ab:70: bd:b3:01:80:95:b4:dc:9b:b8:ca:0b:48:9b:6e:29: 1c:34:c0:36:6c:b3:d2:af:9e:28:ea:f4:36:5c:7e: 6d:00:2e:db:4d:48:0a:b9:f9:cc:d5:e3:23:2e:ec: dc:28:8a:1d:c7:ef:ea:41:78:06:1b:76:b6:f4:03: e3:19:ed:68:51:0f:18:55:49:58:72:6c:c5:eb:ce: 69:e4:7e:34:f9:b3:a5:d6:6f:b8:0d:54:ec:49:a2: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:71:68:6B:5F:BB:73:88:0B:71:8F:CE:22:41:1F:2D:CE:44:F5 X509v3 Authority Key Identifier: keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:9a:a7:d9:4a:b4:a5:62:96:2e:9c:b1:6d:94:fb:77:63: 3b:e9:cf:9d:bf:c5:19:62:d5:21:2a:8b:24:ae:7c:f3:19:db: f5:37:04:4c:4a:20:9f:a7:9f:51:01:b0:05:7c:9a:5a:4e:00: 3c:c5:41:6c:85:e6:58:02:61:07:fd:60:83:20:c2:52:b9:c6: 39:14:59:ba:2e:8e:d4:29:d3:d1:23:28:96:72:3e:82:64:b5: 92:74:a3:11:ef:97:65:5a:b5:9b:dd:ad:66:7b:62:c7:a2:b8: d4:8b:10:b7:53:0f:34:98:b2:03:57:bd:74:2b:8a:7b:52:92: 3b:fa:ed:f1:f7:3f:50:a0:c7:a9:b6:c7:6b:4b:7b:f4:f2:9c: 5b:d1:f5:12:93:a0:e4:e4:02:7a:62:4e:31:62:54:e4:e2:d8: bf:2a:96:5e:f4:bb:3e:16:61:3a:08:51:1f:97:a2:dd:50:e5: 0d:3e:96:cd:c6:40:ac:9d:0c:96:97:e4:90:db:49:da:6b:02: 8f:9e:0a:47:0b:a1:4d:84:ee:71:e0:c1:58:77:36:cc:b9:6c: 86:ba:53:ad:23:00:ec:95:08:30:ac:7f:3b:d9:77:34:7b:25: 30:80:b7:c1:b0:2a:9e:54:ca:6e:19:70:fe:71:0b:ee:75:b2: 2d:c9:4b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomwyFKkt/81CDJEL/23vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk NWRkNmUwHhcNMjYwMjA5MDkwMTI5WhcNMjYwMjEwMDkwMTI5WjAzMTEwLwYDVQQD Eyg1MTI3NzE2ODZiNWZiYjczODgwYjcxOGZjZTIyNDExZjJkY2U0NGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43gFguuaJv2HujWDE9pfw2TqCWBo 41gaX+0dfhoklKV4Ik5nCWiGRn9AsVVlgEW7up79zhdpzcvcBmFKaJ6++i9m8Ly+ Xo81exfFmRIP1vzwxMA3pjOeBNjkdoreukHKyZU7q1l1VLywWasCp2bEGUyIFA2S WVmkxWNGTVpTJf2a0cf8O/Hmwt28NC3AbmyosQYWvDhKdOYbWsIK35YyoPF4q3C9 swGAlbTcm7jKC0ibbikcNMA2bLPSr54o6vQ2XH5tAC7bTUgKufnM1eMjLuzcKIod x+/qQXgGG3a29APjGe1oUQ8YVUlYcmzF685p5H40+bOl1m+4DVTsSaJVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEncWhrX7tziAtxj84iQR8tzkT1MB8GA1UdIwQY MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5 LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPqap9lK tKVili6csW2U+3djO+nPnb/FGWLVISqLJK588xnb9TcETEogn6efUQGwBXyaWk4A PMVBbIXmWAJhB/1ggyDCUrnGORRZui6O1CnT0SMolnI+gmS1knSjEe+XZVq1m92t Zntix6K41IsQt1MPNJiyA1e9dCuKe1KSO/rt8fc/UKDHqbbHa0t79PKcW9H1EpOg 5OQCemJOMWJU5OLYvyqWXvS7PhZhOghRH5ei3VDlDT6WzcZArJ0MlpfkkNtJ2msC j54KRwuhTYTuceDBWHc2zLlshrpTrSMA7JUIMKx/O9l3NHslMIC3wbAqnlTKbhlw /nEL7nWyLclLHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:42 2026 by rpki-client