This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json) Hash identifier: ReP6usIfiWo/wtOmDt75ObAvG0Q6omNv25+CriMKtO0= Subject key identifier: F3:B0:5E:0D:A7:22:7F:6B:FE:CE:8A:0A:96:0B:9A:5B:E6:12:99:66 Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7 Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7 Certificate serial: 019C4390101FC4628690AB789013C60CA820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft Manifest number: 14F8 Signing time: Mon 09 Feb 2026 18:00:40 +0000 Manifest this update: Mon 09 Feb 2026 18:00:40 +0000 Manifest next update: Tue 10 Feb 2026 18:00:40 +0000 Files and hashes: 1: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: 1xOIwudM9LbFvWItSJzQx4e5vB4xSRQEHEb8fS7o/hI=) 2: l_ruKO78QHVQe-kxScIY78h3qwo.roa (hash: jzBDUnZ8ZQyI+7hv0yjsFFpgvL3Te9Vz0AqbFGjex/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:10:1f:c4:62:86:90:ab:78:90:13:c6:0c:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4398b577b223b5a76351219a74fda446704890f7 Validity Not Before: Feb 9 18:00:40 2026 GMT Not After : Feb 10 18:00:40 2026 GMT Subject: CN=f3b05e0da7227f6bfece8a0a960b9a5be6129966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:08:24:9a:d5:f6:e2:a8:4f:64:30:92:20: 74:2a:51:05:cd:92:01:c9:8b:5c:66:02:ff:61:57: e8:d0:c8:92:4c:a1:b6:67:47:f6:f2:5e:ac:97:25: 51:65:7c:73:67:e6:2b:21:b0:45:b3:8f:ec:91:1b: bc:7f:49:1f:d7:e0:0a:9d:c8:ed:a5:7c:47:d2:fd: 32:00:65:05:99:ce:65:18:6c:c4:7c:8a:87:58:4c: d5:8d:44:f1:f0:2a:64:bd:9f:9c:2f:c3:68:b9:7f: 32:6f:e2:7a:89:b7:1a:13:b9:6f:19:5a:40:10:9c: 6d:94:fa:51:fd:86:0f:63:e9:5c:d8:d5:3b:0b:85: d9:78:1c:65:99:2c:7a:ff:58:b9:f5:00:28:e6:73: b1:53:9e:e4:6c:63:61:04:4e:c8:f1:0c:84:a7:21: 01:e8:5f:21:66:97:6f:02:31:a0:ff:d4:46:59:e0: e3:76:37:44:fc:5f:04:b1:73:b9:64:72:ed:76:37: b5:c2:50:cb:40:90:9f:ad:63:44:e6:03:0e:07:96: 97:01:0b:46:93:80:18:f7:d4:bc:88:0c:f0:80:1a: a4:da:4f:7c:98:e2:1a:1e:61:8c:c7:42:3f:27:a1: 23:0b:85:ca:b4:0f:10:77:91:7b:cc:e8:40:f7:e3: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:5E:0D:A7:22:7F:6B:FE:CE:8A:0A:96:0B:9A:5B:E6:12:99:66 X509v3 Authority Key Identifier: keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:d4:ae:91:30:57:1c:00:e7:31:d5:e8:9b:13:c8:c3:fc: 01:94:c9:27:a0:a7:46:c6:e1:74:cb:87:2c:04:78:2f:39:3e: 0d:88:bf:41:8d:5d:29:31:41:6b:ee:bd:93:60:8a:e8:96:16: 00:3c:b0:37:f4:19:ed:d3:50:ab:de:d1:9e:03:ae:99:4c:bf: 27:0b:2f:3e:3b:76:ca:c3:47:93:82:a7:f4:38:65:1d:98:ec: 1b:ed:61:0e:2d:5b:0a:92:73:18:29:cc:56:66:95:d1:51:ac: 51:cf:20:72:ef:7b:92:76:68:97:93:85:11:8a:9e:7d:2b:3d: fd:89:48:59:fa:12:47:0b:77:b2:99:0f:a6:57:e6:43:3c:f6: c7:84:00:c2:43:f4:90:85:79:bf:d6:c8:93:60:e5:8f:da:4b: 6c:26:64:b0:f3:e6:6b:28:5c:c8:db:bf:7a:14:54:cf:2d:29: 6d:9e:9e:10:2a:1b:46:aa:b8:fc:7f:04:a2:5b:4c:0c:0a:e4: c3:e2:3b:85:0a:57:ed:bb:f6:da:ba:6a:0f:81:29:f2:1e:44: b1:f2:da:8d:29:69:40:46:61:34:d7:52:13:fb:c0:72:6f:34: 21:f6:1f:07:75:9a:3e:10:27:cb:dd:47:a4:fc:ca:51:4a:85: 9d:e6:b8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBAfxGKGkKt4kBPGDKggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOThiNTc3YjIyM2I1YTc2MzUxMjE5YTc0ZmRhNDQ2NzA0 ODkwZjcwHhcNMjYwMjA5MTgwMDQwWhcNMjYwMjEwMTgwMDQwWjAzMTEwLwYDVQQD EyhmM2IwNWUwZGE3MjI3ZjZiZmVjZThhMGE5NjBiOWE1YmU2MTI5OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7MIJJrV9uKoT2QwkiB0KlEFzZIB yYtcZgL/YVfo0MiSTKG2Z0f28l6slyVRZXxzZ+YrIbBFs4/skRu8f0kf1+AKncjt pXxH0v0yAGUFmc5lGGzEfIqHWEzVjUTx8CpkvZ+cL8NouX8yb+J6ibcaE7lvGVpA EJxtlPpR/YYPY+lc2NU7C4XZeBxlmSx6/1i59QAo5nOxU57kbGNhBE7I8QyEpyEB 6F8hZpdvAjGg/9RGWeDjdjdE/F8EsXO5ZHLtdje1wlDLQJCfrWNE5gMOB5aXAQtG k4AY99S8iAzwgBqk2k98mOIaHmGMx0I/J6EjC4XKtA8Qd5F7zOhA9+OJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOwXg2nIn9r/s6KCpYLmlvmEplmMB8GA1UdIwQY MBaAFEOYtXeyI7WnY1EhmnT9pEZwSJD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMt N2JjNDUzNDBkZDI4LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMtN2JjNDUzNDBkZDI4 LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheXUrpEw VxwA5zHV6JsTyMP8AZTJJ6CnRsbhdMuHLAR4Lzk+DYi/QY1dKTFBa+69k2CK6JYW ADywN/QZ7dNQq97RngOumUy/JwsvPjt2ysNHk4Kn9DhlHZjsG+1hDi1bCpJzGCnM VmaV0VGsUc8gcu97knZol5OFEYqefSs9/YlIWfoSRwt3spkPplfmQzz2x4QAwkP0 kIV5v9bIk2Dlj9pLbCZksPPmayhcyNu/ehRUzy0pbZ6eECobRqq4/H8EoltMDArk w+I7hQpX7bv22rpqD4Ep8h5EsfLajSlpQEZhNNdSE/vAcm80IfYfB3WaPhAny91H pPzKUUqFnea4mA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:07 2026 by rpki-client