This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json) Hash identifier: pf2CFt8AgXlcp3pWfA2z/vBQ+U4CXmp5K37Ae8mISUg= Subject key identifier: C2:00:83:B6:68:9D:3B:53:63:2A:CF:34:42:47:78:1D:58:01:13:B1 Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Certificate serial: 019C42B47279BA783252CC8BFA9BB45910C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft Manifest number: 1464 Signing time: Mon 09 Feb 2026 14:00:47 +0000 Manifest this update: Mon 09 Feb 2026 14:00:47 +0000 Manifest next update: Tue 10 Feb 2026 14:00:47 +0000 Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: c4YJMd6Qaj9aOsiBIGvzUBdKmvGJf6u0QS+A/MvRNx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:72:79:ba:78:32:52:cc:8b:fa:9b:b4:59:10:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624 Validity Not Before: Feb 9 14:00:47 2026 GMT Not After : Feb 10 14:00:47 2026 GMT Subject: CN=c20083b6689d3b53632acf344247781d580113b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:49:ec:1b:27:e9:e8:6f:d5:e7:f1:e0:09: 54:90:22:83:ef:79:fd:a3:34:68:55:13:fa:50:39: 21:2e:fb:9b:05:89:a9:88:e9:4d:4d:a7:9f:56:94: 0d:b1:0b:e3:d8:71:a4:73:cc:42:80:a5:c8:fd:9a: 65:a8:d8:dd:49:cf:a2:96:24:71:d0:6a:0e:a8:d3: c4:1d:d7:90:61:36:c6:81:6f:d1:5d:b9:42:33:9e: 9d:83:c3:07:8d:ac:c0:88:7b:a7:82:ef:c4:78:7b: 10:a7:08:93:6e:64:92:96:eb:b9:ec:15:60:6d:1a: b5:08:91:3b:43:ae:e4:2a:53:3e:ee:c3:05:fa:f3: 46:ec:09:53:32:10:2b:b5:6b:f0:49:ea:13:17:c6: 16:3f:0f:48:43:93:55:65:43:49:7a:cd:f1:28:2e: 58:4f:9b:e8:e6:84:96:85:27:5e:6b:af:2e:93:cf: 7a:d6:00:d3:89:a5:b1:3a:b6:35:79:67:77:13:a1: e2:15:23:40:65:ea:63:39:b7:b1:ae:3a:c9:51:fa: 8e:47:36:19:13:a5:ba:c2:03:d3:1d:0d:c8:98:b2: 7a:47:e2:29:c1:3c:70:9f:ca:a6:99:20:1f:76:9f: 08:31:39:0f:ba:68:e6:c6:b9:38:d2:70:95:fb:e8: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:00:83:B6:68:9D:3B:53:63:2A:CF:34:42:47:78:1D:58:01:13:B1 X509v3 Authority Key Identifier: keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8c:b0:48:be:0e:fc:e7:a4:20:24:45:ee:54:59:c4:b9:f3: 34:48:1e:2d:2e:e8:93:00:aa:8a:19:f1:f8:63:66:41:60:27: e1:4c:05:92:65:37:8d:8f:38:a0:0d:a9:89:03:3d:e9:b0:94: f6:69:f5:df:26:8f:50:1f:0e:46:d9:db:52:b3:dc:34:3b:36: 4a:04:a7:d3:d0:b9:44:4c:16:fe:30:c5:ba:ed:f2:60:e1:3b: 54:85:e0:ee:b2:25:69:0d:3f:53:f9:ae:2e:8a:95:2b:01:74: 9e:bd:a1:91:f1:f6:11:6e:b0:b2:7c:ac:1f:ba:00:c2:71:08: 9c:26:8f:20:3b:2d:65:84:b4:01:c6:44:d5:cd:c9:20:44:53: 4a:58:3d:3c:8e:f9:ac:18:25:b9:83:dd:7f:c3:b3:2b:0e:23: e1:ff:f8:d5:ab:8e:24:6b:57:f0:71:6d:d2:1c:97:05:4c:cb: 74:9e:d4:b1:76:e8:a4:f0:57:f6:42:e0:8a:90:4e:6e:3c:c9: 8c:74:fa:dd:b3:c6:8f:e1:93:3c:4d:36:34:bd:fa:30:18:ab: e3:f5:ca:c1:f4:d9:3b:79:d8:1b:d5:de:16:bb:ce:35:aa:69: 06:32:fc:33:78:77:64:5c:62:ae:1b:1c:08:fe:45:bb:ce:22: 4d:b7:0f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHJ5ungyUsyL+pu0WRDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZDBhNWY0ZThmN2UxM2M3Y2I1MzVjNjRmNzllMjBiM2Yw MWQ2MjQwHhcNMjYwMjA5MTQwMDQ3WhcNMjYwMjEwMTQwMDQ3WjAzMTEwLwYDVQQD EyhjMjAwODNiNjY4OWQzYjUzNjMyYWNmMzQ0MjQ3NzgxZDU4MDExM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaxJ7Bsn6ehv1efx4AlUkCKD73n9 ozRoVRP6UDkhLvubBYmpiOlNTaefVpQNsQvj2HGkc8xCgKXI/ZplqNjdSc+iliRx 0GoOqNPEHdeQYTbGgW/RXblCM56dg8MHjazAiHungu/EeHsQpwiTbmSSluu57BVg bRq1CJE7Q67kKlM+7sMF+vNG7AlTMhArtWvwSeoTF8YWPw9IQ5NVZUNJes3xKC5Y T5vo5oSWhSdea68uk8961gDTiaWxOrY1eWd3E6HiFSNAZepjObexrjrJUfqORzYZ E6W6wgPTHQ3ImLJ6R+IpwTxwn8qmmSAfdp8IMTkPumjmxrk40nCV++iJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIAg7ZonTtTYyrPNEJHeB1YAROxMB8GA1UdIwQY MBaAFKrQpfTo9+E8fLU1xk954gs/AdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMt YjdlZjA0MmM4NTdiLzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMtYjdlZjA0MmM4NTdi LzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIywSL4O /OekICRF7lRZxLnzNEgeLS7okwCqihnx+GNmQWAn4UwFkmU3jY84oA2piQM96bCU 9mn13yaPUB8ORtnbUrPcNDs2SgSn09C5REwW/jDFuu3yYOE7VIXg7rIlaQ0/U/mu LoqVKwF0nr2hkfH2EW6wsnysH7oAwnEInCaPIDstZYS0AcZE1c3JIERTSlg9PI75 rBgluYPdf8OzKw4j4f/41auOJGtX8HFt0hyXBUzLdJ7UsXbopPBX9kLgipBObjzJ jHT63bPGj+GTPE02NL36MBir4/XKwfTZO3nYG9XeFrvONappBjL8M3h3ZFxirhsc CP5Fu84iTbcPDQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:51 2026 by rpki-client