This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json) Hash identifier: PgkNTzzbK7lLjoOD9ckqm8BbVBpo2lX9DjxJr68Pm+Y= Subject key identifier: A9:71:D3:66:B7:09:7F:2F:91:39:B0:D2:97:70:3D:31:9C:32:17:64 Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52 Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52 Certificate serial: 019C439048754A76295A6B384EF0E5081E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: stS9t33ivT6MDIFXwhLmCmsl32uh8zyEX4PODXKZLDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:48:75:4a:76:29:5a:6b:38:4e:f0:e5:08:1e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52 Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=a971d366b7097f2f9139b0d297703d319c321764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:3e:df:3d:38:6a:14:33:8e:a1:18:ce:d1: cf:38:00:a3:ef:59:f8:5d:e9:7e:29:7f:6a:6d:99: 91:37:18:04:68:3d:07:4d:20:6d:62:93:4e:80:d3: 9a:f0:c4:f3:23:e4:7d:c0:fb:7d:e9:e8:de:25:55: 71:76:5b:c8:65:d9:ef:e2:22:49:e3:49:e7:c4:a5: 6b:c3:a5:02:7d:5d:23:c1:ea:5f:4f:61:b7:81:0e: b4:b4:62:9f:3f:9e:46:df:34:ab:d4:1e:c1:3e:07: a3:7d:c5:71:f6:94:1a:80:27:17:b8:ab:04:85:43: 13:72:1d:8a:e4:b2:6b:02:7a:51:67:04:39:0d:13: 3e:fd:3c:da:aa:eb:4f:d4:9b:0e:6d:14:4e:18:b6: d4:6e:74:24:fa:4d:5f:08:54:83:92:37:ec:9a:ca: 94:88:36:13:14:c4:40:a7:2c:37:1a:81:98:cc:37: 71:99:dc:94:7d:36:46:b2:20:eb:66:9c:26:dd:8a: 0e:87:71:e3:f8:8b:27:47:6c:6c:5e:90:5d:64:78: 54:ed:54:df:ae:ac:d5:db:08:d3:e1:f7:42:55:f0: 12:24:b6:6f:a4:0d:ef:bd:67:0d:df:1d:bc:ad:14: 88:62:b1:46:54:67:7a:1d:cc:a9:e8:34:0c:e5:20: e5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:D3:66:B7:09:7F:2F:91:39:B0:D2:97:70:3D:31:9C:32:17:64 X509v3 Authority Key Identifier: keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:74:2d:16:c9:db:67:c7:39:d3:c0:a4:9f:69:1e:90:07:87: 4f:35:a0:1e:87:a3:12:fb:b5:58:7e:d4:1c:b7:28:5a:c2:8f: ee:f0:f1:85:6a:9a:bc:ed:aa:ca:eb:61:ca:72:4b:4b:ee:57: 6d:70:58:44:d9:24:6b:cc:96:5d:df:28:27:29:99:8c:e9:2f: fc:ae:eb:ad:74:c8:26:e6:9f:9e:54:82:ee:b2:81:ac:ae:aa: 8b:65:96:78:7f:a5:7f:1d:14:83:75:b1:d5:a7:8d:83:47:72: fb:19:12:ff:16:99:5e:ca:01:1a:db:2d:22:48:da:67:74:2f: 1f:81:34:45:4b:44:01:0d:57:c1:81:51:e1:ae:e6:20:f0:9f: ed:41:0c:24:8f:07:30:dc:d5:50:bb:a0:a0:34:02:96:1a:de: 9f:0b:a5:98:7b:0a:1f:d8:17:5c:34:18:6e:23:5c:e8:ea:6a: 74:cb:fb:fa:bc:4e:6f:09:72:64:bf:83:49:21:f2:c6:3c:f4: 8d:72:0a:1c:24:66:83:94:06:da:91:55:20:57:b0:63:f7:0b: 96:2c:7c:e9:77:69:1f:9f:6b:7c:e2:7c:c3:f2:65:dc:47:66: ec:ec:71:3d:50:bc:75:c0:23:42:e9:f5:21:05:71:09:a0:a8: 40:35:35:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEh1SnYpWms4TvDlCB6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZTcxNTYxMmE2YTY5NzE0ZjVlM2YyZTRjYmM0OGZjZTg0 YTZmNTIwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD EyhhOTcxZDM2NmI3MDk3ZjJmOTEzOWIwZDI5NzcwM2QzMTljMzIxNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvao+3z04ahQzjqEYztHPOACj71n4 Xel+KX9qbZmRNxgEaD0HTSBtYpNOgNOa8MTzI+R9wPt96ejeJVVxdlvIZdnv4iJJ 40nnxKVrw6UCfV0jwepfT2G3gQ60tGKfP55G3zSr1B7BPgejfcVx9pQagCcXuKsE hUMTch2K5LJrAnpRZwQ5DRM+/TzaqutP1JsObRROGLbUbnQk+k1fCFSDkjfsmsqU iDYTFMRApyw3GoGYzDdxmdyUfTZGsiDrZpwm3YoOh3Hj+IsnR2xsXpBdZHhU7VTf rqzV2wjT4fdCVfASJLZvpA3vvWcN3x28rRSIYrFGVGd6Hcyp6DQM5SDliQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlx02a3CX8vkTmw0pdwPTGcMhdkMB8GA1UdIwQY MBaAFELnFWEqamlxT14/Lky8SPzoSm9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ZmI5YzMtNmM5Yy00MzllLThjY2Et ZDk5YTIxOThhNjhkLzEvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ZmI5YzMtNmM5Yy00MzllLThjY2EtZDk5YTIxOThhNjhk LzEvUXVjVllTcHFhWEZQWGo4dVRMeElfT2hLYjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3QtFsnb Z8c508Ckn2kekAeHTzWgHoejEvu1WH7UHLcoWsKP7vDxhWqavO2qyuthynJLS+5X bXBYRNkka8yWXd8oJymZjOkv/K7rrXTIJuafnlSC7rKBrK6qi2WWeH+lfx0Ug3Wx 1aeNg0dy+xkS/xaZXsoBGtstIkjaZ3QvH4E0RUtEAQ1XwYFR4a7mIPCf7UEMJI8H MNzVULugoDQClhrenwulmHsKH9gXXDQYbiNc6OpqdMv7+rxObwlyZL+DSSHyxjz0 jXIKHCRmg5QG2pFVIFewY/cLlix86XdpH59rfOJ8w/Jl3Edm7OxxPVC8dcAjQun1 IQVxCaCoQDU16g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:30 2026 by rpki-client