This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json) Hash identifier: D94L7M7vbF9rBDSIYaJEGfx3U6d5PdMtvEUNSL20xKA= Subject key identifier: 20:D1:40:24:97:5A:4A:23:F9:2B:13:B3:E6:82:14:75:68:9D:AE:21 Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Certificate serial: 019C43FE003B86EECB0AE086CC1E10924CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft Manifest number: 0B85 Signing time: Mon 09 Feb 2026 20:00:45 +0000 Manifest this update: Mon 09 Feb 2026 20:00:45 +0000 Manifest next update: Tue 10 Feb 2026 20:00:45 +0000 Files and hashes: 1: 21R_t7vKnYEIDQebm-7zjxxy-lo.roa (hash: uGSGk5iT+FrqnBLQlW6LsLr35tMh1jia+p+sY2P//70=) 2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: VdVOp/mazFHgE45NxUNj/f/Jb4WNBuuzUxpcsrnrtTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:00:3b:86:ee:cb:0a:e0:86:cc:1e:10:92:4c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4 Validity Not Before: Feb 9 20:00:45 2026 GMT Not After : Feb 10 20:00:45 2026 GMT Subject: CN=20d14024975a4a23f92b13b3e6821475689dae21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:35:25:24:5e:5b:b8:c7:b1:a9:b4:5b:e6:02: 50:7b:1b:30:09:09:4f:3e:b5:03:44:52:ae:ec:27: 94:13:4d:ca:d6:fa:bc:97:43:d8:a6:23:79:f1:56: fb:94:63:07:67:9c:ad:16:59:f9:e5:65:eb:5e:19: 2b:85:8d:a6:a8:78:70:d4:d4:61:04:12:6a:2d:ef: e6:02:3c:98:32:98:26:65:d2:26:4d:38:f5:68:95: 18:88:89:cb:56:50:62:e5:36:6d:d8:ac:ee:11:90: 20:02:a1:3b:9f:09:dc:8c:a2:19:d9:ad:87:31:88: 6e:81:b6:4b:5b:52:88:d3:a1:3d:85:1a:00:14:8c: d2:f7:93:35:3a:ff:62:18:72:cb:40:8d:0d:b2:0c: 36:59:a0:03:86:6c:3f:49:85:09:19:6c:a8:28:2c: a0:d8:db:6b:47:90:ce:b4:05:63:c3:13:eb:b9:8a: 20:1e:93:8a:ea:05:2d:87:8a:91:b2:ce:7d:29:3a: 29:b7:ef:84:ff:16:97:52:02:ea:4c:3b:6b:4d:10: 36:d2:6b:9b:11:fe:83:de:6a:df:ab:80:57:4d:10: 7f:4a:50:33:f2:45:e2:75:c6:48:fa:0c:3e:c8:d9: 03:e1:a9:c1:b7:6e:8a:1c:92:24:7d:94:a6:24:ee: cc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:40:24:97:5A:4A:23:F9:2B:13:B3:E6:82:14:75:68:9D:AE:21 X509v3 Authority Key Identifier: keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2a:7e:91:00:08:57:33:3b:f4:78:89:0f:53:30:cc:37:7c: c4:fa:4a:40:ee:85:72:82:94:7f:85:97:25:d8:90:ca:a3:d8: 9a:51:e7:35:c1:84:94:4f:9e:bc:3b:e7:7b:5c:60:77:e1:1a: af:cb:9e:e4:70:08:85:fd:ff:92:a2:90:e8:8a:fc:9a:02:ce: 44:84:16:80:9e:fe:01:84:85:b9:56:3b:49:77:e7:91:d7:a9: 32:bc:ef:95:ec:96:e9:0e:b6:b5:b7:a5:35:77:fb:55:6c:96: a9:99:94:6b:ab:65:a7:e4:b9:78:3d:bc:ba:9d:5d:58:20:77: fd:db:d2:2a:aa:f8:8f:30:70:0e:fa:77:7a:33:12:ff:15:5f: 79:00:56:20:b9:ec:8c:1a:3d:d7:35:41:72:54:bb:34:6d:a6: af:99:07:af:3d:f6:41:44:e1:da:61:94:5a:ee:d4:7f:38:4c: f1:2a:24:6e:de:55:1f:6e:17:8a:23:54:fa:e6:51:d9:0c:03: 4d:ce:cf:80:47:ba:65:74:ba:95:0f:2a:a3:a4:d8:5f:de:3d: db:ec:a2:65:90:4b:c4:fd:8b:4a:49:b1:0f:17:8c:ae:98:a5: 39:d5:71:46:c5:bd:22:54:b2:f2:cd:c6:d4:05:0b:b0:d1:8c: 82:c0:da:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/gA7hu7LCuCGzB4QkkztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2 MDJmYjQwHhcNMjYwMjA5MjAwMDQ1WhcNMjYwMjEwMjAwMDQ1WjAzMTEwLwYDVQQD EygyMGQxNDAyNDk3NWE0YTIzZjkyYjEzYjNlNjgyMTQ3NTY4OWRhZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjUlJF5buMexqbRb5gJQexswCQlP PrUDRFKu7CeUE03K1vq8l0PYpiN58Vb7lGMHZ5ytFln55WXrXhkrhY2mqHhw1NRh BBJqLe/mAjyYMpgmZdImTTj1aJUYiInLVlBi5TZt2KzuEZAgAqE7nwncjKIZ2a2H MYhugbZLW1KI06E9hRoAFIzS95M1Ov9iGHLLQI0Nsgw2WaADhmw/SYUJGWyoKCyg 2NtrR5DOtAVjwxPruYogHpOK6gUth4qRss59KTopt++E/xaXUgLqTDtrTRA20mub Ef6D3mrfq4BXTRB/SlAz8kXidcZI+gw+yNkD4anBt26KHJIkfZSmJO7MdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDRQCSXWkoj+SsTs+aCFHVona4hMB8GA1UdIwQY MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt NDc5NzRmNWM3MDRhLzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSp+kQAI VzM79HiJD1MwzDd8xPpKQO6FcoKUf4WXJdiQyqPYmlHnNcGElE+evDvne1xgd+Ea r8ue5HAIhf3/kqKQ6Ir8mgLORIQWgJ7+AYSFuVY7SXfnkdepMrzvleyW6Q62tbel NXf7VWyWqZmUa6tlp+S5eD28up1dWCB3/dvSKqr4jzBwDvp3ejMS/xVfeQBWILns jBo91zVBclS7NG2mr5kHrz32QUTh2mGUWu7UfzhM8Sokbt5VH24XiiNU+uZR2QwD Tc7PgEe6ZXS6lQ8qo6TYX9492+yiZZBLxP2LSkmxDxeMrpilOdVxRsW9IlSy8s3G 1AULsNGMgsDaIA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:24 2026 by rpki-client