This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json) Hash identifier: i5RXjDLZti7Y44SEuwlU1GYbGIwf/uPkRCmRAmwv0Io= Subject key identifier: DC:8E:9C:59:42:F0:FD:00:83:6D:CE:49:7A:2E:49:F0:3F:81:D0:BB Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Certificate serial: 019C42B42D28E69E603D91F3E1A0F61CE638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 14:00:30 +0000 Manifest this update: Mon 09 Feb 2026 14:00:30 +0000 Manifest next update: Tue 10 Feb 2026 14:00:30 +0000 Files and hashes: 1: 0nPKlV2FgZ0LZAZQ71hQLBw38Uo.roa (hash: Fb/Fjfm/zNM0E1C+LzpEdYLGiz1+AVF8bxpn6ETeoj4=) 2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: L5h7jKIuaSBmQeMwHacitZM+TP3OcJp+lUXBZuveTQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2d:28:e6:9e:60:3d:91:f3:e1:a0:f6:1c:e6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a Validity Not Before: Feb 9 14:00:30 2026 GMT Not After : Feb 10 14:00:30 2026 GMT Subject: CN=dc8e9c5942f0fd00836dce497a2e49f03f81d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:0f:9c:11:08:24:c3:1c:ba:2f:96:05:8a: b1:62:28:11:ba:b7:85:35:f1:d7:58:8b:bb:21:18: ea:fd:5b:96:30:2a:40:c5:ef:d6:44:58:f0:5c:a2: 78:19:ac:e3:20:12:87:80:83:39:5f:e0:43:69:49: 06:0c:23:1b:f6:f9:5b:37:10:66:d5:36:5b:1c:e8: 27:f9:69:0f:82:6d:1c:19:be:4a:dd:81:3e:fd:62: 7d:e9:d2:9e:ee:dd:6b:61:f2:76:7b:e9:4e:f9:1e: ff:21:ca:e1:ba:61:54:a1:29:77:cd:cd:37:8b:26: 00:ff:66:33:be:1a:9e:40:53:0e:52:13:6d:43:fb: 2f:3b:c7:1a:27:64:8f:f0:a6:77:13:bd:2b:d9:5e: 94:b1:01:bf:e5:39:b9:99:21:1d:b9:62:70:4b:ee: 8c:8a:d0:da:b7:3b:78:ba:51:72:08:0e:e2:91:59: ef:bb:ab:18:f8:8c:31:ea:2d:8f:71:df:30:6c:ee: 37:b4:c2:6a:bc:62:2c:e8:ff:e6:4f:04:43:d7:be: c3:75:62:72:d2:af:0d:8b:b2:6f:be:bb:40:ce:1a: 7f:cd:f7:37:29:ee:3d:88:28:1d:10:06:46:07:df: 0e:f8:9f:77:61:9b:2b:4d:a3:3e:59:b6:72:c3:7c: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:9C:59:42:F0:FD:00:83:6D:CE:49:7A:2E:49:F0:3F:81:D0:BB X509v3 Authority Key Identifier: keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:37:b8:a2:f4:8a:e2:04:73:60:41:19:40:31:c7:3c:d5: 71:49:86:9a:67:d7:92:10:15:8b:a2:a1:c4:46:7b:de:71:93: 11:8a:85:fc:f5:40:5b:f1:08:2c:9d:d2:48:18:f2:94:95:86: e6:6b:79:18:f4:f5:ac:09:ab:b5:6c:04:e7:08:45:a8:bd:23: a9:5a:5d:1e:ba:d7:0e:27:f1:70:7c:56:44:26:d9:37:4d:45: ee:ea:b6:9d:25:fa:98:9d:2c:1a:b1:20:96:6d:b9:a8:e3:55: a8:5d:b9:a4:bb:c0:c8:c9:e5:e8:72:60:9d:42:0c:1b:90:92: 23:25:d4:3d:2e:70:52:cf:e2:e0:53:d3:62:34:20:3f:33:d7: 59:bc:98:54:99:23:fe:db:34:72:ae:56:00:61:5b:20:c8:7e: 48:2e:85:0a:a6:94:42:b9:fd:9b:d2:16:cc:53:42:bf:9b:3e: d0:fa:a1:f9:9d:60:e7:ba:f0:e1:78:f2:90:8a:94:3f:90:51: 6a:87:86:90:7c:11:eb:bc:d3:ef:df:05:36:55:c7:e8:29:7e: 2d:0c:57:38:34:1f:16:ee:ca:22:86:ad:d5:e7:b1:b2:9a:74: 7e:55:9e:c9:aa:16:43:86:c5:1e:23:77:f2:f8:48:64:df:78: 88:f4:85:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtC0o5p5gPZHz4aD2HOY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1 ZDViNmEwHhcNMjYwMjA5MTQwMDMwWhcNMjYwMjEwMTQwMDMwWjAzMTEwLwYDVQQD EyhkYzhlOWM1OTQyZjBmZDAwODM2ZGNlNDk3YTJlNDlmMDNmODFkMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQkPnBEIJMMcui+WBYqxYigRureF NfHXWIu7IRjq/VuWMCpAxe/WRFjwXKJ4GazjIBKHgIM5X+BDaUkGDCMb9vlbNxBm 1TZbHOgn+WkPgm0cGb5K3YE+/WJ96dKe7t1rYfJ2e+lO+R7/IcrhumFUoSl3zc03 iyYA/2YzvhqeQFMOUhNtQ/svO8caJ2SP8KZ3E70r2V6UsQG/5Tm5mSEduWJwS+6M itDatzt4ulFyCA7ikVnvu6sY+Iwx6i2Pcd8wbO43tMJqvGIs6P/mTwRD177DdWJy 0q8Ni7JvvrtAzhp/zfc3Ke49iCgdEAZGB98O+J93YZsrTaM+WbZyw3zdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyOnFlC8P0Ag23OSXouSfA/gdC7MB8GA1UdIwQY MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5 LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLE3uKL0 iuIEc2BBGUAxxzzVcUmGmmfXkhAVi6KhxEZ73nGTEYqF/PVAW/EILJ3SSBjylJWG 5mt5GPT1rAmrtWwE5whFqL0jqVpdHrrXDifxcHxWRCbZN01F7uq2nSX6mJ0sGrEg lm25qONVqF25pLvAyMnl6HJgnUIMG5CSIyXUPS5wUs/i4FPTYjQgPzPXWbyYVJkj /ts0cq5WAGFbIMh+SC6FCqaUQrn9m9IWzFNCv5s+0Pqh+Z1g57rw4XjykIqUP5BR aoeGkHwR67zT798FNlXH6Cl+LQxXODQfFu7KIoat1eexspp0flWeyaoWQ4bFHiN3 8vhIZN94iPSF+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:42 2026 by rpki-client