This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json) Hash identifier: 0n5NxsWt1H/w0EUKiCyEikbuqZJE7bVVwkSzIU8zIpM= Subject key identifier: ED:78:74:FD:07:36:3B:E1:CC:83:5F:14:5A:D2:CA:D0:2B:57:5C:F9 Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Certificate serial: 019C420F421B5D12505B559E8F6899FF7D04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft Manifest number: 04A9 Signing time: Mon 09 Feb 2026 11:00:21 +0000 Manifest this update: Mon 09 Feb 2026 11:00:21 +0000 Manifest next update: Tue 10 Feb 2026 11:00:21 +0000 Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: k8TddrllY196e/DIymZ19x7zLm3M4Qhd4raMYDHsccA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:42:1b:5d:12:50:5b:55:9e:8f:68:99:ff:7d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9 Validity Not Before: Feb 9 11:00:21 2026 GMT Not After : Feb 10 11:00:21 2026 GMT Subject: CN=ed7874fd07363be1cc835f145ad2cad02b575cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:c6:a2:c8:99:43:32:e8:fa:b7:73:c2:c4: bd:3e:56:cb:05:9b:29:a0:54:4a:66:83:ee:5c:8c: 54:ce:72:00:37:31:95:39:3b:90:45:c5:32:dd:72: ef:e3:37:fe:5c:97:bc:53:8d:4c:02:25:c9:3e:e9: 82:1a:40:c4:1e:19:03:91:4d:ed:dc:da:13:b9:b7: 68:80:91:a6:af:ee:3f:f2:44:0a:7d:b0:cc:87:e5: 02:26:16:9a:9a:1e:9b:96:d9:26:de:0b:fd:f0:01: 0b:47:a7:6a:0b:f0:a6:46:41:10:7f:80:ce:66:8c: 3a:01:b6:3a:3d:46:d4:31:a3:ac:ed:ac:34:e6:6d: fe:3c:eb:67:82:3d:48:dc:06:b8:55:bb:57:9d:1d: 7a:85:ca:37:23:63:8f:11:40:e7:bd:2c:bb:72:02: a8:ac:ca:80:39:6c:82:51:b7:03:f1:76:f0:2c:a0: 94:78:2c:90:4d:cf:e6:85:39:8f:a6:d7:c3:b6:32: b6:59:d3:d8:b7:c9:2d:27:dd:b1:8d:61:24:d7:e5: 1e:92:8a:48:20:b2:21:2a:76:09:f0:2e:de:50:de: 51:15:d7:7b:18:e9:ba:d9:20:d4:65:0f:8a:fc:ba: 56:0c:c2:fc:b5:f8:9f:a0:5a:7f:85:bf:62:e9:45: ff:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:78:74:FD:07:36:3B:E1:CC:83:5F:14:5A:D2:CA:D0:2B:57:5C:F9 X509v3 Authority Key Identifier: keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:98:19:da:6b:ae:04:97:59:06:7e:dc:be:30:8a:2b:93: 87:31:8a:15:f8:02:8e:a2:26:86:a1:b6:70:3e:ae:49:0a:d5: 39:3a:24:96:aa:ed:91:fd:f5:2d:51:25:c7:0f:ef:fd:b8:dc: 90:47:2e:4a:74:76:ee:b4:a4:7f:71:5c:1d:37:5e:fe:b2:3a: c8:72:7c:d4:96:12:70:d0:27:03:4b:f2:d7:f8:f5:18:17:74: 72:2d:2c:5b:3a:07:75:0e:fc:01:45:ff:89:22:f2:62:80:7f: fc:00:87:50:78:0e:fa:31:7a:b0:14:ad:42:87:60:e4:0f:bc: 46:db:6f:69:5e:df:20:e2:77:db:27:07:ac:78:78:5c:f2:37: 3d:f7:b0:09:00:5e:6c:14:96:22:bf:85:ac:7b:04:e5:56:82: b8:b2:2e:d6:ab:a8:95:d8:c6:b8:ad:06:68:f5:35:37:9c:7e: 1b:9d:3a:24:47:68:5a:b3:82:fc:50:14:0b:24:fb:13:07:d1: 9a:76:ed:13:85:1d:b0:8d:fc:be:30:42:a3:6c:0f:85:a1:a9: d3:30:94:ea:95:d4:47:74:ae:dd:d6:c6:84:4d:ae:fa:4e:56: ff:34:38:9d:6e:a3:38:ff:fd:25:d3:a6:d8:7d:75:a3:f1:cf: 3a:c0:77:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0IbXRJQW1Wej2iZ/30EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZWUxZTdlY2QzMGI4MGEyMDA2ZjUzOGZjZTYzYjI0MjBj NTdiZTkwHhcNMjYwMjA5MTEwMDIxWhcNMjYwMjEwMTEwMDIxWjAzMTEwLwYDVQQD EyhlZDc4NzRmZDA3MzYzYmUxY2M4MzVmMTQ1YWQyY2FkMDJiNTc1Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzHGosiZQzLo+rdzwsS9PlbLBZsp oFRKZoPuXIxUznIANzGVOTuQRcUy3XLv4zf+XJe8U41MAiXJPumCGkDEHhkDkU3t 3NoTubdogJGmr+4/8kQKfbDMh+UCJhaamh6bltkm3gv98AELR6dqC/CmRkEQf4DO Zow6AbY6PUbUMaOs7aw05m3+POtngj1I3Aa4VbtXnR16hco3I2OPEUDnvSy7cgKo rMqAOWyCUbcD8XbwLKCUeCyQTc/mhTmPptfDtjK2WdPYt8ktJ92xjWEk1+UekopI ILIhKnYJ8C7eUN5RFdd7GOm62SDUZQ+K/LpWDML8tfifoFp/hb9i6UX/mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO14dP0HNjvhzINfFFrSytArV1z5MB8GA1UdIwQY MBaAFEHuHn7NMLgKIAb1OPzmOyQgxXvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMt NTcyODhmN2YzMDg4LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMtNTcyODhmN2YzMDg4 LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZyYGdpr rgSXWQZ+3L4wiiuThzGKFfgCjqImhqG2cD6uSQrVOToklqrtkf31LVElxw/v/bjc kEcuSnR27rSkf3FcHTde/rI6yHJ81JYScNAnA0vy1/j1GBd0ci0sWzoHdQ78AUX/ iSLyYoB//ACHUHgO+jF6sBStQodg5A+8RttvaV7fIOJ32ycHrHh4XPI3PfewCQBe bBSWIr+FrHsE5VaCuLIu1quoldjGuK0GaPU1N5x+G506JEdoWrOC/FAUCyT7EwfR mnbtE4UdsI38vjBCo2wPhaGp0zCU6pXUR3Su3dbGhE2u+k5W/zQ4nW6jOP/9JdOm 2H11o/HPOsB3IA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:56 2026 by rpki-client