This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json) Hash identifier: rP/Fejz3kAbP5Ni7KZRkWnzjns/jvo37EPTp3CzY8ZI= Subject key identifier: 13:48:9F:6F:C3:AE:66:DD:89:E7:5E:D4:55:3B:C6:FC:DD:08:E1:62 Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Certificate serial: 019C4359583E9C20048BBDA2FF624178D9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft Manifest number: 041C Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: rUamG3bmT1SM/DasYMHx1eijbe4IUVVKeZFbUVMNuN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:58:3e:9c:20:04:8b:bd:a2:ff:62:41:78:d9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=13489f6fc3ae66dd89e75ed4553bc6fcdd08e162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:30:3e:dc:c7:54:fc:ea:b2:28:37:3f:f9: bb:2f:85:93:c6:d2:78:38:33:3c:2c:25:24:34:89: ab:07:22:5f:1a:d5:9d:3a:3d:85:f2:18:2c:7f:ce: 44:1c:c2:d2:11:d7:30:b8:ee:41:a6:3c:4e:66:87: b2:c5:a7:a9:64:5d:73:cc:e8:41:b1:09:92:ae:d9: 03:16:7b:47:37:a0:6b:e8:97:0c:db:72:cc:90:67: c7:8c:c3:93:6f:b9:02:f1:34:e9:a4:41:f9:a3:1a: 2c:ca:9e:30:99:22:71:4b:be:28:08:99:64:56:5f: 0a:f9:b1:5b:db:af:87:9c:5a:fd:ff:af:fa:7f:ba: 61:62:8f:7f:79:d5:7e:29:eb:07:cc:d6:c4:d7:ae: 3b:18:01:53:ef:41:19:6a:d2:93:cf:6c:5b:9a:57: 74:e5:68:4b:c2:f4:bb:42:fb:f1:24:b6:c6:4f:32: e1:f0:ee:bb:32:68:b1:12:b1:1e:e0:c4:7a:df:4a: e4:eb:6a:33:17:02:fd:6a:34:11:0b:75:31:ba:ee: 5e:0b:d3:3a:04:a8:84:db:22:ff:f8:c3:7b:ce:0b: 7a:9b:25:e0:05:a8:a2:5a:cc:8f:62:8d:b3:a8:61: c8:c6:23:65:d2:c2:4c:c9:21:16:8e:28:e9:a3:64: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:48:9F:6F:C3:AE:66:DD:89:E7:5E:D4:55:3B:C6:FC:DD:08:E1:62 X509v3 Authority Key Identifier: keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:51:fa:b2:bc:27:0a:22:c2:f8:42:c9:3a:31:18:e2:46:be: c8:c5:30:bd:28:6c:87:3c:b6:fe:d8:a7:ae:bd:94:c7:de:32: 43:4d:4e:68:22:5e:51:b1:dc:be:88:4a:a6:58:a5:35:d7:39: 5c:43:2b:43:19:16:ec:af:f0:aa:42:0e:35:32:b1:ff:ea:63: 95:4d:0f:ea:96:0b:cc:16:e2:23:e0:1d:ed:4b:47:0e:34:e1: cd:30:07:5b:d4:b2:24:f0:2e:32:a4:85:a4:87:36:ce:19:5a: 68:43:14:56:45:31:ed:02:88:74:b7:22:1a:ed:a3:6c:e9:e5: e0:9d:2e:79:80:97:f1:6c:9d:b9:de:9c:2d:d9:da:06:e3:49: 13:c4:bc:fb:f0:c0:5e:46:64:33:c5:4a:07:6f:79:f0:f8:ce: 98:d5:1c:dc:df:2b:ae:d5:df:ae:77:47:62:da:b5:45:09:91: 9a:50:52:d8:16:14:83:e7:07:79:2a:ee:1d:ad:6e:9d:70:f3: 0f:6e:2a:7b:c1:07:78:fe:24:79:0e:5d:a0:c9:1b:5b:46:37: 61:85:69:5f:57:23:1c:a2:aa:fc:33:1f:63:9f:3f:28:0e:af: 29:5f:4f:a0:41:6f:dc:84:0c:0f:83:a2:30:53:d1:f0:3f:87: 5a:0f:89:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVg+nCAEi72i/2JBeNnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZDMzZmUxMWI5OTQ5NTE2YzFmMWRkODE0ZTI0ZTQ3NDUz YTllOTYwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD EygxMzQ4OWY2ZmMzYWU2NmRkODllNzVlZDQ1NTNiYzZmY2RkMDhlMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQQwPtzHVPzqsig3P/m7L4WTxtJ4 ODM8LCUkNImrByJfGtWdOj2F8hgsf85EHMLSEdcwuO5BpjxOZoeyxaepZF1zzOhB sQmSrtkDFntHN6Br6JcM23LMkGfHjMOTb7kC8TTppEH5oxosyp4wmSJxS74oCJlk Vl8K+bFb26+HnFr9/6/6f7phYo9/edV+KesHzNbE1647GAFT70EZatKTz2xbmld0 5WhLwvS7QvvxJLbGTzLh8O67MmixErEe4MR630rk62ozFwL9ajQRC3Uxuu5eC9M6 BKiE2yL/+MN7zgt6myXgBaiiWsyPYo2zqGHIxiNl0sJMySEWjijpo2TnYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNIn2/Drmbdiede1FU7xvzdCOFiMB8GA1UdIwQY MBaAFKnTP+EbmUlRbB8d2BTiTkdFOp6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDkt NjgwMjA4M2RlMjExLzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NmNmMzgtZDdhYi00MGMzLTlmMDktNjgwMjA4M2RlMjEx LzEvcWRNXzRSdVpTVkZzSHgzWUZPSk9SMFU2bnBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1H6srwn CiLC+ELJOjEY4ka+yMUwvShshzy2/tinrr2Ux94yQ01OaCJeUbHcvohKplilNdc5 XEMrQxkW7K/wqkIONTKx/+pjlU0P6pYLzBbiI+Ad7UtHDjThzTAHW9SyJPAuMqSF pIc2zhlaaEMUVkUx7QKIdLciGu2jbOnl4J0ueYCX8Wydud6cLdnaBuNJE8S8+/DA XkZkM8VKB2958PjOmNUc3N8rrtXfrndHYtq1RQmRmlBS2BYUg+cHeSruHa1unXDz D24qe8EHeP4keQ5doMkbW0Y3YYVpX1cjHKKq/DMfY58/KA6vKV9PoEFv3IQMD4Oi MFPR8D+HWg+Jcg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:54 2026 by rpki-client