This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json) Hash identifier: 5cZhhIH+piEnSsrkPFojphwd8BWfXI9RGLylucWyWMM= Subject key identifier: 58:9E:C4:4B:50:A5:E3:BC:50:A5:90:13:3C:4D:63:AB:9B:51:AD:1C Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c Certificate serial: 019C427DF13658D0B4A15F527E21A0E4DEBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft Manifest number: 03FB Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: FnIJHGEqLgxxrDQ6pnGjGFTf5vCNkAbrt4rPjFnnFU4=) 2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f1:36:58:d0:b4:a1:5f:52:7e:21:a0:e4:de:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=589ec44b50a5e3bc50a590133c4d63ab9b51ad1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:fd:59:91:4e:23:b0:08:da:b3:4f:b7:89: 18:2c:d6:03:14:43:31:12:b4:b8:61:39:a8:74:f7: 62:52:86:7e:e1:c0:89:90:26:a3:ee:a5:a3:0d:70: 7e:39:ff:ff:c5:28:0e:d5:11:cd:1d:be:87:bf:d2: 2a:74:57:3d:e4:8d:61:f6:05:6f:ba:b2:97:7b:53: 66:8f:77:ac:13:db:c7:c1:5a:72:8b:19:dc:f2:95: 3a:4c:b8:c3:3b:35:75:73:28:b0:6b:42:7c:01:23: 40:ad:3c:66:cd:57:d2:e0:9e:cd:ee:ce:a5:c2:8b: fb:4f:52:8f:02:b0:21:59:14:bc:b5:de:22:70:62: ac:d2:86:42:e5:36:47:13:ed:d9:a6:0e:59:1d:a3: d2:14:57:9f:b5:be:d8:ed:ca:a2:ab:7b:6c:c1:70: 8c:9a:83:65:c6:f5:ae:87:f9:db:58:ba:ab:62:6c: d7:a8:7b:bc:2e:ab:87:ca:a0:5d:06:69:a5:af:80: 27:e6:e4:47:9f:39:44:2d:47:60:02:ca:4f:3b:61: e3:b3:cf:c9:4b:fe:ac:e6:5f:a6:75:ce:67:43:06: e9:3e:f2:05:e2:0f:a6:c3:10:e0:1f:51:f9:4b:0d: bf:3f:6d:fb:ed:13:8a:12:b5:78:27:9f:d2:6a:7b: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:C4:4B:50:A5:E3:BC:50:A5:90:13:3C:4D:63:AB:9B:51:AD:1C X509v3 Authority Key Identifier: keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e8:71:ef:aa:99:5a:ba:76:f7:85:48:c1:47:bb:6b:c9:02: 88:3a:a4:26:e4:61:60:e4:8e:10:0c:69:0b:af:8b:cc:81:f3: 08:dc:88:d6:f1:9b:4a:00:c7:80:d6:aa:15:da:0c:e0:c2:6c: aa:b8:74:7e:81:42:fe:68:cc:50:31:98:12:41:05:cc:b4:2c: 01:41:9e:f5:2a:48:9e:64:08:93:dd:e0:53:f3:1c:65:1b:09: 78:ed:54:91:9a:d2:2b:4c:e1:9f:87:19:88:94:01:08:62:ec: 6f:74:f0:e2:ed:6b:b3:11:22:0b:fc:b8:d8:af:89:2a:87:5b: 70:3a:e5:62:1e:1b:10:64:75:8a:fa:fe:3f:91:b3:da:56:6c: 53:20:6f:d4:c1:7b:54:5e:00:6f:4e:7c:62:a9:a1:72:7c:56: 06:df:80:71:62:aa:fa:60:81:16:22:48:9f:db:f7:6a:5f:f5: be:9f:e2:c1:51:49:16:be:4e:6f:79:76:03:1c:a0:74:a4:8a: 53:f5:6d:3d:89:9e:9d:10:b2:9f:70:35:df:1c:0b:31:43:e4: e5:6d:72:22:9b:63:02:1d:1e:fc:fc:1d:00:db:a9:11:73:5b: 36:d9:6e:5c:a0:a0:e0:d9:b7:74:0e:90:f7:73:21:a4:2c:3b: 2d:0b:36:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffE2WNC0oV9SfiGg5N67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx YTcwM2MwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD Eyg1ODllYzQ0YjUwYTVlM2JjNTBhNTkwMTMzYzRkNjNhYjliNTFhZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwar9WZFOI7AI2rNPt4kYLNYDFEMx ErS4YTmodPdiUoZ+4cCJkCaj7qWjDXB+Of//xSgO1RHNHb6Hv9IqdFc95I1h9gVv urKXe1Nmj3esE9vHwVpyixnc8pU6TLjDOzV1cyiwa0J8ASNArTxmzVfS4J7N7s6l wov7T1KPArAhWRS8td4icGKs0oZC5TZHE+3Zpg5ZHaPSFFeftb7Y7cqiq3tswXCM moNlxvWuh/nbWLqrYmzXqHu8LquHyqBdBmmlr4An5uRHnzlELUdgAspPO2Hjs8/J S/6s5l+mdc5nQwbpPvIF4g+mwxDgH1H5Sw2/P2377ROKErV4J5/SanufjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiexEtQpeO8UKWQEzxNY6ubUa0cMB8GA1UdIwQY MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuhx76qZ Wrp294VIwUe7a8kCiDqkJuRhYOSOEAxpC6+LzIHzCNyI1vGbSgDHgNaqFdoM4MJs qrh0foFC/mjMUDGYEkEFzLQsAUGe9SpInmQIk93gU/McZRsJeO1UkZrSK0zhn4cZ iJQBCGLsb3Tw4u1rsxEiC/y42K+JKodbcDrlYh4bEGR1ivr+P5Gz2lZsUyBv1MF7 VF4Ab058YqmhcnxWBt+AcWKq+mCBFiJIn9v3al/1vp/iwVFJFr5Ob3l2AxygdKSK U/VtPYmenRCyn3A13xwLMUPk5W1yIptjAh0e/PwdANupEXNbNtluXKCg4Nm3dA6Q 93MhpCw7LQs2jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:43 2026 by rpki-client