This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json) Hash identifier: 3c3lIM1Z4QNdYecRWn15WSTU9dWaalcG15szbUC+tys= Subject key identifier: EA:3D:1B:E7:37:F8:82:F8:21:06:E8:39:B8:57:05:86:B4:D7:51:11 Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45 Certificate serial: 019C4358D4C7B14E83EC80CAAD87FAFE617C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft Manifest number: 0C6B Signing time: Mon 09 Feb 2026 17:00:20 +0000 Manifest this update: Mon 09 Feb 2026 17:00:20 +0000 Manifest next update: Tue 10 Feb 2026 17:00:20 +0000 Files and hashes: 1: 1-0rpJ3YEaAi9o2lzWV5eBX7W0iE.roa (hash: seOih4wjhJ6V5ThAImMQ9eV74z3GC26duBl8NYe046I=) 2: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: RMfu3HcnKAGaOIZ8qCJHV3HgJjAjUPtfTQezEb/ts+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d4:c7:b1:4e:83:ec:80:ca:ad:87:fa:fe:61:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45 Validity Not Before: Feb 9 17:00:20 2026 GMT Not After : Feb 10 17:00:20 2026 GMT Subject: CN=ea3d1be737f882f82106e839b8570586b4d75111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b2:1f:b8:84:0e:08:82:83:61:f7:7b:13:94: d0:a8:bd:bb:5f:b1:e3:b0:09:d6:b0:1a:4a:e2:9b: 05:47:95:f2:c5:d0:ff:ee:b7:fb:37:60:8f:6a:29: bd:43:57:87:00:4c:93:b6:67:0c:c8:8a:7f:94:a5: 79:ee:30:f4:3c:15:e9:04:09:e5:23:68:37:38:f3: 8a:3c:80:10:36:be:71:0b:9f:52:79:6b:6d:f4:97: 0d:50:0b:5e:c6:d0:4e:5d:16:02:b9:46:91:4c:1d: cd:a1:a5:a6:d8:96:cc:34:eb:14:0f:d6:6c:0d:90: d8:ae:45:a4:9f:b6:b2:6e:d2:fe:02:d4:a3:c2:f9: 0c:3a:94:5d:7f:f3:95:4d:cd:4a:11:df:6f:a7:45: 63:d0:f8:50:5c:97:a9:8b:74:29:e6:bd:2e:3f:da: b8:9f:85:29:14:4c:cb:3c:0e:50:1a:0d:7a:22:ac: 1c:31:8f:3c:c8:4b:3f:1f:c2:40:47:1c:8b:bb:b6: 4c:fb:7b:e4:e5:3d:d7:9e:42:fb:82:f9:ab:58:e8: cd:ef:48:8d:77:90:74:e6:0a:2d:c2:5a:63:3f:73: ad:33:74:b2:e4:c9:d9:51:5e:ea:e3:f5:c0:31:14: d7:3d:ce:e6:f1:71:1e:ed:54:28:4d:b6:bf:ed:e1: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:1B:E7:37:F8:82:F8:21:06:E8:39:B8:57:05:86:B4:D7:51:11 X509v3 Authority Key Identifier: keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:06:6d:1a:92:23:af:3e:c2:4a:40:bc:e1:9d:50:c5:b4:c4: fe:ea:cb:7e:eb:1d:cb:4b:53:a3:be:d3:6d:12:32:45:4e:33: 22:43:e9:72:53:b0:16:0e:59:0d:a9:70:54:45:45:7c:ef:ee: 27:d6:1a:22:97:f0:18:52:8a:3e:43:b3:74:e5:30:e0:d6:95: 3b:0e:ee:5a:9b:9a:93:15:7d:78:be:9c:fa:01:09:8f:83:ff: ce:df:59:05:77:98:ef:54:4f:1e:fc:7c:10:ff:26:fa:df:f6: a1:bf:e3:a3:dd:20:a6:8b:f1:c8:c7:5c:53:81:fd:5d:64:17: c3:09:b6:e2:aa:f9:30:01:f5:f0:7c:44:99:20:b7:2e:54:ca: ce:d2:04:cf:df:d5:fe:3b:e2:82:ed:e1:64:05:d1:90:2f:fd: 34:54:aa:35:f6:b1:9e:94:3d:60:a8:73:57:a7:e9:ac:d8:37: bd:72:d7:18:f5:0d:01:e6:61:86:7f:54:7d:b7:6a:06:9d:19: 21:70:a3:f3:5a:11:85:3d:e7:ef:7c:4d:a0:99:01:a9:d0:44: ff:44:0c:40:bf:4a:c7:06:11:1b:ce:f0:ef:f3:39:e6:67:25: d6:41:55:9e:c1:51:83:72:78:1c:48:2c:87:54:7e:93:fb:2f: 71:68:00:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNTHsU6D7IDKrYf6/mF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk MWRmNDUwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD EyhlYTNkMWJlNzM3Zjg4MmY4MjEwNmU4MzliODU3MDU4NmI0ZDc1MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07IfuIQOCIKDYfd7E5TQqL27X7Hj sAnWsBpK4psFR5XyxdD/7rf7N2CPaim9Q1eHAEyTtmcMyIp/lKV57jD0PBXpBAnl I2g3OPOKPIAQNr5xC59SeWtt9JcNUAtextBOXRYCuUaRTB3NoaWm2JbMNOsUD9Zs DZDYrkWkn7aybtL+AtSjwvkMOpRdf/OVTc1KEd9vp0Vj0PhQXJepi3Qp5r0uP9q4 n4UpFEzLPA5QGg16IqwcMY88yEs/H8JARxyLu7ZM+3vk5T3XnkL7gvmrWOjN70iN d5B05gotwlpjP3OtM3Sy5MnZUV7q4/XAMRTXPc7m8XEe7VQoTba/7eHlDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo9G+c3+IL4IQboObhXBYa011ERMB8GA1UdIwQY MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3 LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwZtGpIj rz7CSkC84Z1QxbTE/urLfusdy0tTo77TbRIyRU4zIkPpclOwFg5ZDalwVEVFfO/u J9YaIpfwGFKKPkOzdOUw4NaVOw7uWpuakxV9eL6c+gEJj4P/zt9ZBXeY71RPHvx8 EP8m+t/2ob/jo90gpovxyMdcU4H9XWQXwwm24qr5MAH18HxEmSC3LlTKztIEz9/V /jvigu3hZAXRkC/9NFSqNfaxnpQ9YKhzV6fprNg3vXLXGPUNAeZhhn9UfbdqBp0Z IXCj81oRhT3n73xNoJkBqdBE/0QMQL9KxwYRG87w7/M55mcl1kFVnsFRg3J4HEgs h1R+k/svcWgAbA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:34 2026 by rpki-client