This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json) Hash identifier: xSP32rPnHZ9gxhl85HuZwbdrzhA2bIfvYTYgVvV0h7w= Subject key identifier: 08:33:9B:13:F1:E4:BB:DC:54:AF:FB:5C:C3:23:45:1A:EA:9F:57:9A Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Certificate serial: 019C420F580E99F1F4ED32CFC6DFCA4A6332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft Manifest number: 0CF3 Signing time: Mon 09 Feb 2026 11:00:27 +0000 Manifest this update: Mon 09 Feb 2026 11:00:27 +0000 Manifest next update: Tue 10 Feb 2026 11:00:27 +0000 Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: JSXTffVRY5xfa4t3YeOa+/6s5QmcsvXQ0ps1dE19+nE=) 2: r8_Pkht5LvuIUKkXxWRZPNhds_A.roa (hash: NBzWUBYoQAPM9L8l3h0b1Ywu4V34+t30OZWBM39xvCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:58:0e:99:f1:f4:ed:32:cf:c6:df:ca:4a:63:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581 Validity Not Before: Feb 9 11:00:27 2026 GMT Not After : Feb 10 11:00:27 2026 GMT Subject: CN=08339b13f1e4bbdc54affb5cc323451aea9f579a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:50:a8:c7:12:31:d9:db:6d:44:4c:45:b1:75: 74:c9:71:f1:98:f1:70:88:bc:e6:53:7e:33:02:11: ca:67:92:98:3e:a5:bc:77:fd:a1:86:2e:eb:79:b3: 36:4b:a1:a5:ce:09:42:1c:83:49:2e:47:a9:13:49: 99:e0:32:c7:fd:79:a2:85:a6:7e:19:2c:15:da:bf: 09:e8:58:1a:34:25:ce:06:32:fa:94:ac:32:9a:f4: e5:9f:e2:51:70:c9:07:16:2b:43:86:3e:46:f1:c4: 0f:1d:7d:1b:85:72:cc:86:0d:1a:46:c3:98:36:57: 6c:fa:02:0f:8b:9c:13:77:b3:b2:5c:2a:05:3b:b4: ba:f8:0b:22:be:15:19:92:2a:0f:59:2c:da:32:38: 97:42:d0:ce:b6:62:3d:48:25:cf:6c:ec:b3:97:25: a2:76:cf:6d:2c:ef:c6:2d:71:00:0b:2d:dd:7a:ab: c9:c5:a7:7e:8a:17:a0:c3:23:6b:aa:0b:ff:22:c1: 98:16:18:7d:68:96:ad:b7:2d:de:e3:9a:23:99:a1: 87:bd:42:20:23:dc:7d:6c:1d:32:73:1b:10:cc:68: a9:0a:39:fe:55:ab:e8:19:5c:1a:b7:ef:99:77:97: d4:c1:2c:4d:12:f7:b1:74:63:1a:cc:10:5d:99:5a: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:33:9B:13:F1:E4:BB:DC:54:AF:FB:5C:C3:23:45:1A:EA:9F:57:9A X509v3 Authority Key Identifier: keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:37:72:91:27:7b:e2:4b:c2:f7:3d:6e:71:5f:d6:bf:4c: 25:8a:2d:4b:a4:1e:26:24:3b:90:48:ad:b9:60:47:bd:ba:04: 5c:d7:52:60:71:3e:dd:79:30:c4:74:44:1e:0d:dc:cc:6e:02: b4:28:f8:e5:18:e6:14:19:3f:e2:dd:d7:82:40:d9:7f:b6:08: eb:f7:4b:77:e9:a3:5d:d0:6c:24:53:b9:77:0c:21:c8:07:f5: 8a:7a:6c:43:7b:a1:53:3e:df:02:02:4c:86:dc:25:f3:63:50: 95:21:d7:f2:56:29:9f:45:ff:66:89:a5:db:bd:22:06:0f:17: 82:d4:01:14:23:f2:e1:7b:5d:7f:cd:5a:0e:eb:61:42:2f:b2: 15:bc:1b:47:9f:5b:27:e6:d0:e3:00:ee:51:58:ff:be:bc:cb: 3d:68:30:5e:0c:6e:76:f9:c1:88:78:cc:34:f9:f6:d9:8d:7b: 6e:6e:97:3b:35:f6:3e:c8:84:5f:d2:03:33:7c:55:80:2a:4e: 39:33:45:e5:bd:9d:64:58:c6:12:cf:9b:0d:cb:3d:e4:ee:d7: f7:77:bb:f4:3f:b9:bf:26:4d:48:1f:ab:ae:1c:15:d7:37:68: 08:36:d2:a8:bf:a7:d2:c6:49:cb:fc:99:ff:2c:71:91:46:3f: 4a:f5:f8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1gOmfH07TLPxt/KSmMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3 Nzc1ODEwHhcNMjYwMjA5MTEwMDI3WhcNMjYwMjEwMTEwMDI3WjAzMTEwLwYDVQQD EygwODMzOWIxM2YxZTRiYmRjNTRhZmZiNWNjMzIzNDUxYWVhOWY1NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51CoxxIx2dttRExFsXV0yXHxmPFw iLzmU34zAhHKZ5KYPqW8d/2hhi7rebM2S6GlzglCHINJLkepE0mZ4DLH/XmihaZ+ GSwV2r8J6FgaNCXOBjL6lKwymvTln+JRcMkHFitDhj5G8cQPHX0bhXLMhg0aRsOY Nlds+gIPi5wTd7OyXCoFO7S6+AsivhUZkioPWSzaMjiXQtDOtmI9SCXPbOyzlyWi ds9tLO/GLXEACy3deqvJxad+ihegwyNrqgv/IsGYFhh9aJatty3e45ojmaGHvUIg I9x9bB0ycxsQzGipCjn+VavoGVwat++Zd5fUwSxNEvexdGMazBBdmVp2KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgzmxPx5LvcVK/7XMMjRRrqn1eaMB8GA1UdIwQY MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0s3cpEn e+JLwvc9bnFf1r9MJYotS6QeJiQ7kEituWBHvboEXNdSYHE+3XkwxHREHg3czG4C tCj45RjmFBk/4t3XgkDZf7YI6/dLd+mjXdBsJFO5dwwhyAf1inpsQ3uhUz7fAgJM htwl82NQlSHX8lYpn0X/Zoml270iBg8XgtQBFCPy4Xtdf81aDuthQi+yFbwbR59b J+bQ4wDuUVj/vrzLPWgwXgxudvnBiHjMNPn22Y17bm6XOzX2PsiEX9IDM3xVgCpO OTNF5b2dZFjGEs+bDcs95O7X93e79D+5vyZNSB+rrhwV1zdoCDbSqL+n0sZJy/yZ /yxxkUY/SvX4Cg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:21 2026 by rpki-client