This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json) Hash identifier: /tt8zCDWwMFqI13B2ofsNF55zkWyByzm/LCRpMpmGQk= Subject key identifier: 52:18:75:8C:99:05:A3:5F:61:72:A2:E3:55:C7:5A:40:22:2B:1D:68 Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579 Certificate serial: 019C42105EF953A6539D3D7DB2F46CCFE354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft Manifest number: 05BB Signing time: Mon 09 Feb 2026 11:01:34 +0000 Manifest this update: Mon 09 Feb 2026 11:01:34 +0000 Manifest next update: Tue 10 Feb 2026 11:01:34 +0000 Files and hashes: 1: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: mAeMUijNu6lP+3HaU25Z0KsWnfXycZH23Ud6hx9gMq0=) 2: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (hash: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:5e:f9:53:a6:53:9d:3d:7d:b2:f4:6c:cf:e3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419b379a246412810e8a8052a62a39688ca34579 Validity Not Before: Feb 9 11:01:34 2026 GMT Not After : Feb 10 11:01:34 2026 GMT Subject: CN=5218758c9905a35f6172a2e355c75a40222b1d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:67:ff:48:dc:5a:b3:43:13:9b:b3:8f:03:86: 1c:38:68:30:ae:08:4e:7f:e8:2e:a2:11:03:77:9b: 79:f9:66:e7:2f:96:f5:eb:e4:75:67:2e:74:14:03: a2:df:ed:2c:0c:bb:1d:1d:90:eb:0b:7e:3e:6e:58: 8e:3b:4a:58:25:79:76:e4:71:6b:50:ef:4a:e6:98: 0a:9b:c7:fa:a8:2f:76:bb:03:a6:bf:97:de:54:ff: 78:27:2b:3a:9d:33:ab:92:fc:da:72:45:66:b6:b5: 3e:ee:d7:4d:f7:8c:3b:1e:3b:cd:bb:80:87:11:58: f9:90:ad:cf:f2:0c:a6:d6:be:1e:2b:ea:04:b3:f1: 54:46:ed:58:64:25:95:1a:a5:1e:88:7a:ac:20:42: 41:d6:33:0f:8b:3f:83:88:4d:67:6a:a5:4b:de:e6: 31:67:6e:37:01:34:6c:c8:30:47:b3:1c:d6:96:cd: 58:7a:22:e1:3c:b3:b9:e1:1b:e0:99:05:b8:19:d9: e9:2e:2f:0a:cf:f5:88:d8:49:e8:1c:da:5f:65:a5: 63:87:65:0e:60:92:c5:1a:21:4f:d0:99:4f:bb:5b: 5b:3c:de:5b:dc:82:69:78:23:ef:3b:c5:76:e7:6c: 0e:c2:4d:c0:d0:42:e1:03:1f:e5:c8:13:d9:6d:5a: 43:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:75:8C:99:05:A3:5F:61:72:A2:E3:55:C7:5A:40:22:2B:1D:68 X509v3 Authority Key Identifier: keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:cb:62:32:a6:de:e0:2c:34:3f:f5:ea:f9:af:1e:20:93:a4: 05:f4:cf:74:50:28:78:f2:40:94:0a:64:8e:6d:13:6d:3c:ca: b9:8c:67:05:10:f6:48:c3:e9:90:7e:5e:c7:f3:e4:2b:28:5a: e5:ec:27:d9:25:34:17:60:eb:5c:de:41:8c:aa:7a:31:9c:c7: b3:06:c5:09:83:2d:bc:b5:67:05:6c:18:e7:2e:fa:4c:7d:7b: 76:a0:e1:f7:6f:40:d5:97:57:e1:b7:8d:16:25:19:7b:02:2d: b4:6f:78:3f:ca:36:80:f2:24:f7:14:2d:61:fe:e0:d4:99:2a: e2:24:b3:60:ff:6f:f7:36:91:84:d9:aa:91:16:d8:13:57:17: ec:22:4f:86:64:dd:77:39:83:07:f1:d9:58:96:b9:7c:d9:53: 65:76:1e:84:96:79:d8:e9:b2:3a:df:a2:b6:f2:4b:ac:f5:29: 55:5c:1b:63:8c:e9:72:97:5f:17:bf:9c:bc:a3:1a:b4:6c:f2: e6:5c:5e:04:a1:99:61:06:82:90:0e:31:4d:48:1d:56:79:a5: bc:2a:50:19:ce:4e:76:d1:25:85:60:76:25:7a:e3:c7:28:31: d6:11:59:81:81:d2:82:34:ad:10:66:3c:5a:2b:3a:9e:e7:8f: 59:bb:1b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEF75U6ZTnT19svRsz+NUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh MzQ1NzkwHhcNMjYwMjA5MTEwMTM0WhcNMjYwMjEwMTEwMTM0WjAzMTEwLwYDVQQD Eyg1MjE4NzU4Yzk5MDVhMzVmNjE3MmEyZTM1NWM3NWE0MDIyMmIxZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2f/SNxas0MTm7OPA4YcOGgwrghO f+guohEDd5t5+WbnL5b16+R1Zy50FAOi3+0sDLsdHZDrC34+bliOO0pYJXl25HFr UO9K5pgKm8f6qC92uwOmv5feVP94Jys6nTOrkvzackVmtrU+7tdN94w7HjvNu4CH EVj5kK3P8gym1r4eK+oEs/FURu1YZCWVGqUeiHqsIEJB1jMPiz+DiE1naqVL3uYx Z243ATRsyDBHsxzWls1YeiLhPLO54RvgmQW4GdnpLi8Kz/WI2EnoHNpfZaVjh2UO YJLFGiFP0JlPu1tbPN5b3IJpeCPvO8V252wOwk3A0ELhAx/lyBPZbVpDPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIYdYyZBaNfYXKi41XHWkAiKx1oMB8GA1UdIwQY MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt ZmNjODllY2U1OTA2LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2 LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMtiMqbe 4Cw0P/Xq+a8eIJOkBfTPdFAoePJAlApkjm0TbTzKuYxnBRD2SMPpkH5ex/PkKyha 5ewn2SU0F2DrXN5BjKp6MZzHswbFCYMtvLVnBWwY5y76TH17dqDh929A1ZdX4beN FiUZewIttG94P8o2gPIk9xQtYf7g1Jkq4iSzYP9v9zaRhNmqkRbYE1cX7CJPhmTd dzmDB/HZWJa5fNlTZXYehJZ52OmyOt+itvJLrPUpVVwbY4zpcpdfF7+cvKMatGzy 5lxeBKGZYQaCkA4xTUgdVnmlvCpQGc5OdtElhWB2JXrjxygx1hFZgYHSgjStEGY8 Wis6nuePWbsbpw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:00 2026 by rpki-client