This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json) Hash identifier: +H73/bKVJ9dkB9I5SZp/6oMoyKCsoSicrO4NuXfFJtk= Subject key identifier: 29:74:EE:87:45:AF:AB:61:6D:4F:8F:53:BD:57:53:48:68:78:8C:19 Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f Certificate serial: 019C1B70B6D7B0FC344D944E0029721A4AB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft Manifest number: 0486 Signing time: Sun 01 Feb 2026 23:01:37 +0000 Manifest this update: Sun 01 Feb 2026 23:01:37 +0000 Manifest next update: Mon 02 Feb 2026 23:01:37 +0000 Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=) 2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: vfVDKS15Zs6BBphyxeK/6nx81HfD3VJv4sJ01HPs4nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:70:b6:d7:b0:fc:34:4d:94:4e:00:29:72:1a:4a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f Validity Not Before: Feb 1 23:01:37 2026 GMT Not After : Feb 2 23:01:37 2026 GMT Subject: CN=2974ee8745afab616d4f8f53bd57534868788c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:c9:af:b2:07:ad:e3:b4:f8:8a:d6:3f:f3: c6:1c:bd:c7:25:2a:7c:92:d6:27:65:1f:1c:51:ea: 14:20:6f:18:b7:15:2b:91:0e:91:1c:8e:a6:d6:99: 0e:33:a0:db:44:63:4a:67:93:3e:67:5b:5b:54:f2: ee:9b:5f:34:e1:38:8d:97:92:18:04:a8:c9:b2:a0: 24:3f:07:1f:e7:6d:6e:57:b9:88:45:ea:c2:dc:f3: e3:97:90:5f:c7:5e:34:0b:a2:f7:41:cf:f5:7b:34: c8:a4:6f:0a:80:46:5f:5d:aa:24:45:96:9a:6d:27: 16:4d:60:0c:c6:c3:7d:2b:4a:93:8c:e9:8b:03:b0: 47:f6:de:90:13:22:8c:56:08:d9:6d:2e:0c:cb:10: f4:55:c5:78:82:47:31:a6:21:7a:7a:a0:95:27:e1: 09:e8:6c:bc:52:42:6d:3b:a1:98:b9:db:da:55:aa: 61:e3:5a:b7:9a:27:c3:3b:82:86:37:d5:70:42:7f: 0a:a3:ba:c1:d1:bf:73:f8:c4:91:4d:93:c2:26:66: 71:7b:b8:11:9d:8b:52:27:79:97:6e:40:c0:05:b2: 2f:ba:60:b1:9e:56:8b:b7:86:10:10:65:56:4e:7e: c8:92:10:d3:17:d1:b7:4e:a6:cb:fa:24:8a:10:0c: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:EE:87:45:AF:AB:61:6D:4F:8F:53:BD:57:53:48:68:78:8C:19 X509v3 Authority Key Identifier: keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2f:05:06:ff:12:05:87:76:79:7d:ea:e8:65:be:d6:be:31: 68:df:71:7d:9f:e2:de:ac:0a:ae:35:88:9a:7a:6f:96:fd:b6: bd:5e:e8:68:46:31:84:70:6b:b6:f4:0d:2b:a3:75:40:c9:1a: d1:a6:5e:02:fa:ee:6c:ba:6b:72:75:55:4b:11:69:bc:25:c8: a5:ff:1a:f4:9d:f2:d8:92:dd:c4:47:17:ee:13:70:b6:84:86: 89:78:1f:07:14:45:35:af:5e:74:dd:86:bc:80:ef:e2:f4:a3: 04:fc:f1:dd:6e:76:8f:65:3e:b3:6d:6c:15:7f:2e:dc:10:20: 0f:de:64:c4:d7:70:bb:0f:7c:30:c0:b1:9c:aa:65:7d:88:53: d4:9f:25:74:f3:8e:51:fe:60:77:05:31:4b:82:ca:ea:e0:9d: d8:9f:94:d1:6d:e0:02:11:f1:0c:71:40:05:d3:b3:ca:ba:ed: ca:58:4b:4b:c8:6f:32:76:10:4a:57:9c:b1:2b:9a:7c:b7:97: ba:65:3d:67:52:b6:5d:a0:8f:10:81:d9:50:7c:3d:e3:1e:02: cc:94:68:41:ac:ff:fe:e8:ac:26:d5:81:9b:a3:3f:f0:e2:4c: 27:63:b8:b8:bb:4f:70:b1:90:1b:b1:77:c6:6d:6a:36:9c:87: 28:fc:f4:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbcLbXsPw0TZROAClyGkq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxYzk2NDkyYzAwNDA4YWQ1NGQ3MzBjMGViNjI5ZTNhMGI1 MGQ4MGYwHhcNMjYwMjAxMjMwMTM3WhcNMjYwMjAyMjMwMTM3WjAzMTEwLwYDVQQD EygyOTc0ZWU4NzQ1YWZhYjYxNmQ0ZjhmNTNiZDU3NTM0ODY4Nzg4YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39LJr7IHreO0+IrWP/PGHL3HJSp8 ktYnZR8cUeoUIG8YtxUrkQ6RHI6m1pkOM6DbRGNKZ5M+Z1tbVPLum1804TiNl5IY BKjJsqAkPwcf521uV7mIRerC3PPjl5Bfx140C6L3Qc/1ezTIpG8KgEZfXaokRZaa bScWTWAMxsN9K0qTjOmLA7BH9t6QEyKMVgjZbS4MyxD0VcV4gkcxpiF6eqCVJ+EJ 6Gy8UkJtO6GYudvaVaph41q3mifDO4KGN9VwQn8Ko7rB0b9z+MSRTZPCJmZxe7gR nYtSJ3mXbkDABbIvumCxnlaLt4YQEGVWTn7IkhDTF9G3TqbL+iSKEAzfYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl07odFr6thbU+PU71XU0hoeIwZMB8GA1UdIwQY MBaAFEHJZJLABAitVNcwwOtinjoLUNgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQt YTRlMzdjODY3YjA5LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQtYTRlMzdjODY3YjA5 LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAy8FBv8S BYd2eX3q6GW+1r4xaN9xfZ/i3qwKrjWImnpvlv22vV7oaEYxhHBrtvQNK6N1QMka 0aZeAvrubLprcnVVSxFpvCXIpf8a9J3y2JLdxEcX7hNwtoSGiXgfBxRFNa9edN2G vIDv4vSjBPzx3W52j2U+s21sFX8u3BAgD95kxNdwuw98MMCxnKplfYhT1J8ldPOO Uf5gdwUxS4LK6uCd2J+U0W3gAhHxDHFABdOzyrrtylhLS8hvMnYQSlecsSuafLeX umU9Z1K2XaCPEIHZUHw94x4CzJRoQaz//uisJtWBm6M/8OJMJ2O4uLtPcLGQG7F3 xm1qNpyHKPz0sw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:12 2026 by rpki-client