This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json) Hash identifier: sDarRiY9hEQfRt4Tja5cKUxC3C0sX9EsvjYh5yv03cI= Subject key identifier: E4:6C:6E:7D:CD:07:9E:07:05:D9:70:8F:8E:B7:DC:35:DA:16:70:F7 Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Certificate serial: 019C42EB801B526F9537767AC63828066D88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:00:55 +0000 Manifest this update: Mon 09 Feb 2026 15:00:55 +0000 Manifest next update: Tue 10 Feb 2026 15:00:55 +0000 Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: TR2P0F9js59s1jIvzRG+M8zpvH9JWiAhxRePfb4sSFQ=) 2: VpxDxilNFo6QDK_norEdW_OneKc.roa (hash: eM+dyL5sYA7YmYI63S6dG6sSIhkE5TG0Z5qosr3fK1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:80:1b:52:6f:95:37:76:7a:c6:38:28:06:6d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584 Validity Not Before: Feb 9 15:00:55 2026 GMT Not After : Feb 10 15:00:55 2026 GMT Subject: CN=e46c6e7dcd079e0705d9708f8eb7dc35da1670f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:70:bf:2e:53:53:05:b7:91:9c:a7:53:f0: f5:55:ef:32:b8:77:ab:5a:1f:8a:45:39:98:0c:f0: 3b:bf:e0:13:36:2e:57:f9:54:1d:11:01:1a:ca:fc: 50:89:8d:61:34:92:95:d6:b3:03:73:7a:ba:9d:40: 6e:24:bf:1a:00:7d:e3:9d:3c:81:90:e5:80:fd:9f: 8a:55:b3:a7:2c:49:7c:a6:d6:1b:4c:23:24:aa:69: 7b:30:24:eb:f2:2b:f7:42:1e:7d:3f:b1:27:dc:27: 77:2f:c6:2f:d4:0e:57:99:64:74:f5:8d:16:1b:52: e9:ca:b0:ca:75:ce:2b:29:32:26:cc:bd:1f:09:54: 50:3f:d9:6b:fe:8f:98:ef:14:1a:80:df:79:cc:37: b3:fe:ec:06:16:03:7b:9c:d2:05:4c:ff:88:08:fd: e4:59:b8:05:f4:1d:cf:e3:29:ab:29:29:ef:32:23: 2e:29:0b:e7:93:71:62:73:17:0a:44:cd:96:95:67: 34:67:59:e6:ee:7b:ff:7f:81:62:9d:e3:b8:18:f3: 1b:c5:d2:f7:a8:4e:46:90:ef:26:02:70:7b:ae:96: 04:02:10:e8:d3:56:82:13:29:ac:c6:a2:20:69:3a: 18:d5:1d:9b:f5:eb:cc:69:b1:c1:f8:ed:cd:08:6a: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:6E:7D:CD:07:9E:07:05:D9:70:8F:8E:B7:DC:35:DA:16:70:F7 X509v3 Authority Key Identifier: keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:59:3e:12:da:61:86:e2:60:76:a8:51:56:49:96:76:de:a6: 53:b7:ed:5e:0a:39:8f:58:7a:a1:ed:8b:83:7b:17:78:da:c9: e4:10:c9:21:25:d4:d2:a0:d9:ae:b2:b8:56:4c:31:21:96:00: 95:2d:97:a7:60:d7:b0:7b:4f:2e:db:e5:7f:dd:6d:a2:c4:21: ec:40:39:95:36:38:fc:f3:93:8c:5d:4b:73:63:94:7f:c9:6d: 2a:0e:50:4f:26:34:a9:e0:36:c5:6e:41:67:da:37:d9:e5:0d: 1e:0d:c5:5f:40:7f:11:96:06:75:af:6c:bb:22:18:2a:b6:a1: 7b:5e:ca:81:98:c6:57:cc:aa:00:fd:bc:ba:2e:f2:4a:34:18: ff:9e:d4:96:34:97:5a:79:59:06:bd:a0:9b:94:38:27:7c:9f: 7c:a5:88:e8:98:97:3c:13:d1:9f:dd:8e:fb:48:10:47:53:f9: ee:75:66:d1:b3:70:b8:79:ff:93:2a:35:c3:c1:9c:b5:44:11: b9:f8:f4:64:56:df:d3:32:60:14:ec:be:f9:8b:98:90:20:5f: 45:a6:ad:77:e8:9f:de:41:cc:34:d8:ea:6d:3b:74:02:e3:e5: bc:60:6d:5e:2c:54:13:f0:4f:76:a0:3e:1a:1e:91:25:c0:41: d0:12:5f:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64AbUm+VN3Z6xjgoBm2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1 N2Q1ODQwHhcNMjYwMjA5MTUwMDU1WhcNMjYwMjEwMTUwMDU1WjAzMTEwLwYDVQQD EyhlNDZjNmU3ZGNkMDc5ZTA3MDVkOTcwOGY4ZWI3ZGMzNWRhMTY3MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/9wvy5TUwW3kZynU/D1Ve8yuHer Wh+KRTmYDPA7v+ATNi5X+VQdEQEayvxQiY1hNJKV1rMDc3q6nUBuJL8aAH3jnTyB kOWA/Z+KVbOnLEl8ptYbTCMkqml7MCTr8iv3Qh59P7En3Cd3L8Yv1A5XmWR09Y0W G1LpyrDKdc4rKTImzL0fCVRQP9lr/o+Y7xQagN95zDez/uwGFgN7nNIFTP+ICP3k WbgF9B3P4ymrKSnvMiMuKQvnk3FicxcKRM2WlWc0Z1nm7nv/f4FineO4GPMbxdL3 qE5GkO8mAnB7rpYEAhDo01aCEymsxqIgaToY1R2b9evMabHB+O3NCGovfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORsbn3NB54HBdlwj4633DXaFnD3MB8GA1UdIwQY MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt MmQ2MjZhY2I3ODMzLzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1k+Etph huJgdqhRVkmWdt6mU7ftXgo5j1h6oe2Lg3sXeNrJ5BDJISXU0qDZrrK4VkwxIZYA lS2Xp2DXsHtPLtvlf91tosQh7EA5lTY4/POTjF1Lc2OUf8ltKg5QTyY0qeA2xW5B Z9o32eUNHg3FX0B/EZYGda9suyIYKrahe17KgZjGV8yqAP28ui7ySjQY/57UljSX WnlZBr2gm5Q4J3yffKWI6JiXPBPRn92O+0gQR1P57nVm0bNwuHn/kyo1w8GctUQR ufj0ZFbf0zJgFOy++YuYkCBfRaatd+if3kHMNNjqbTt0AuPlvGBtXixUE/BPdqA+ Gh6RJcBB0BJfcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:49 2026 by rpki-client