This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json) Hash identifier: ufcPOG8YbqGVm1SsoVxTfqY5bkZ4JjAn3aYWU0/v4wA= Subject key identifier: 45:A6:E3:E8:6F:F2:87:58:F0:46:EE:EC:DC:6D:CA:2B:F7:5D:A6:6C Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Certificate serial: 019C43594B65BD28A6DDA0794BD6393B882A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft Manifest number: 065C Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: 9JnvlbsSIdtz6IYcT4G10YmIanQ/PwkAXxDQlHjAWVw=) 2: VV6hLMuA5FAt5lW025-WXEyo20U.roa (hash: fRKXtBhSPUOtF3BbdqfYA9h5jxD1PtDCmwUoFG+t6wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4b:65:bd:28:a6:dd:a0:79:4b:d6:39:3b:88:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88 Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=45a6e3e86ff28758f046eeecdc6dca2bf75da66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:44:62:d8:cf:2d:55:e5:87:a5:66:5c:aa: dd:6e:a5:72:08:ab:97:8c:50:e4:c5:30:d0:e6:29: 0d:cb:64:fa:22:2a:e9:d9:b7:a7:13:8c:cf:87:ba: f5:d6:0f:2c:7f:79:b5:77:0f:08:7f:3a:fc:48:da: 94:c1:1c:76:a6:84:bd:b8:5e:72:80:bb:84:45:1a: 7a:5f:94:54:12:2a:c3:fc:6b:3a:2b:b1:03:ed:55: 11:8b:ee:5f:96:07:20:19:78:da:73:d1:c7:c7:45: 72:2f:3a:5b:18:8e:0e:40:9c:08:6a:0c:d3:48:25: bc:60:9c:42:b2:14:c9:c2:12:6d:1d:d6:2c:8c:74: c3:16:36:16:31:ab:75:15:80:9b:fe:f0:0d:f6:59: 98:7e:ff:eb:d4:6b:f0:e5:59:1f:27:bd:62:31:b5: 5c:52:df:26:50:9e:f9:40:fb:2d:53:6b:a6:90:de: 2c:79:0c:03:45:c1:85:ab:99:dd:e7:cb:65:75:c6: 73:c9:de:1d:1f:c3:08:42:68:2c:b5:80:2b:71:80: e6:2e:c2:54:4a:fb:14:02:99:b7:37:e5:a0:15:57: 64:9f:48:0b:f0:da:55:4c:8a:3e:43:74:a4:88:89: f0:66:e8:a8:3f:30:c5:57:a5:b3:d4:0e:e7:6d:fd: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A6:E3:E8:6F:F2:87:58:F0:46:EE:EC:DC:6D:CA:2B:F7:5D:A6:6C X509v3 Authority Key Identifier: keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:14:0b:fa:72:36:22:1b:ce:3f:18:3c:8a:de:46:f1:01:50: b6:17:f0:00:35:13:d5:5a:9c:cc:e2:02:e0:50:2d:f0:f6:73: c6:bb:68:99:11:3e:34:fb:11:a3:fc:5f:d3:3b:45:3d:48:3b: b7:db:23:8d:bf:0d:5c:44:2b:b2:c8:55:be:5d:af:5d:6b:53: 79:c2:19:bb:99:a8:38:70:2f:cd:58:8f:1f:32:35:f3:41:2e: f0:97:51:eb:4c:b3:28:70:2b:6a:02:65:f1:9c:88:04:1a:bd: 98:23:02:58:ab:85:f0:de:08:63:c3:f2:2b:9b:ff:78:77:d6: 93:5d:0b:e1:89:e0:5b:43:83:98:a5:b6:0b:81:a5:42:f8:7a: e3:f6:df:64:55:42:f7:0a:d6:6c:27:ce:e7:d0:6c:9b:6d:66: 9a:b9:3f:10:91:ba:3a:25:9f:15:69:4d:e6:12:e0:ae:b3:70: f7:6e:d9:08:e2:c9:2d:51:47:c0:db:65:a6:73:7f:de:79:1b: c9:31:68:39:27:2a:88:15:af:a2:7f:ed:20:69:c3:1a:46:49: 0c:a2:7e:4d:67:c1:ec:7d:f4:f4:1a:60:f0:25:23:e4:df:22: a0:c9:e7:05:7d:2c:b6:d5:37:69:c0:b8:e1:fe:20:10:29:9e: 96:42:a3:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUtlvSim3aB5S9Y5O4gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj NmRjODgwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD Eyg0NWE2ZTNlODZmZjI4NzU4ZjA0NmVlZWNkYzZkY2EyYmY3NWRhNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ZEYtjPLVXlh6VmXKrdbqVyCKuX jFDkxTDQ5ikNy2T6Iirp2benE4zPh7r11g8sf3m1dw8Ifzr8SNqUwRx2poS9uF5y gLuERRp6X5RUEirD/Gs6K7ED7VURi+5flgcgGXjac9HHx0VyLzpbGI4OQJwIagzT SCW8YJxCshTJwhJtHdYsjHTDFjYWMat1FYCb/vAN9lmYfv/r1Gvw5VkfJ71iMbVc Ut8mUJ75QPstU2umkN4seQwDRcGFq5nd58tldcZzyd4dH8MIQmgstYArcYDmLsJU SvsUApm3N+WgFVdkn0gL8NpVTIo+Q3SkiInwZuioPzDFV6Wz1A7nbf1ipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWm4+hv8odY8Ebu7Nxtyiv3XaZsMB8GA1UdIwQY MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt YTljNWVlZDg1YmE3LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3 LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhQL+nI2 IhvOPxg8it5G8QFQthfwADUT1VqczOIC4FAt8PZzxrtomRE+NPsRo/xf0ztFPUg7 t9sjjb8NXEQrsshVvl2vXWtTecIZu5moOHAvzViPHzI180Eu8JdR60yzKHAragJl 8ZyIBBq9mCMCWKuF8N4IY8PyK5v/eHfWk10L4YngW0ODmKW2C4GlQvh64/bfZFVC 9wrWbCfO59Bsm21mmrk/EJG6OiWfFWlN5hLgrrNw927ZCOLJLVFHwNtlpnN/3nkb yTFoOScqiBWvon/tIGnDGkZJDKJ+TWfB7H309Bpg8CUj5N8ioMnnBX0sttU3acC4 4f4gECmelkKjmQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:24 2026 by rpki-client