This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json) Hash identifier: aH5vDRhYukDN8UJm5GE6IcbAPpvDlMSHgAcmGrpXsFk= Subject key identifier: 1C:25:3E:B7:7C:76:28:16:38:C8:52:A9:31:CA:22:DC:C2:C0:FC:8E Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb Certificate serial: 019C4358B6EBD61ADE4EED7E6EC4CFD08071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft Manifest number: 06F1 Signing time: Mon 09 Feb 2026 17:00:13 +0000 Manifest this update: Mon 09 Feb 2026 17:00:13 +0000 Manifest next update: Tue 10 Feb 2026 17:00:13 +0000 Files and hashes: 1: 1-sDuDT5PyDWTrrUoYprkpEdUV2I.roa (hash: eAjODYNfh7Im2wLs/xUeEWebYtl3ElP2ajyZCTGNlyc=) 2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: y48fqOQx+H1YRTXi+SMdTTa1bQhViZXfdJsOJiytHyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:b6:eb:d6:1a:de:4e:ed:7e:6e:c4:cf:d0:80:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb Validity Not Before: Feb 9 17:00:13 2026 GMT Not After : Feb 10 17:00:13 2026 GMT Subject: CN=1c253eb77c76281638c852a931ca22dcc2c0fc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:b3:7a:dd:3c:0d:1d:2f:d1:0f:6b:d8:d0: ac:be:7b:d4:30:54:2f:84:17:e3:5c:7d:a0:97:ba: e0:2f:0b:93:81:97:a1:30:ea:96:db:20:1d:b6:aa: 66:de:87:4e:38:a4:1c:36:bb:fa:16:1a:55:bb:de: c0:6e:2f:3f:c1:03:e6:03:af:04:04:19:fd:89:5d: fb:35:65:cd:f6:5d:a4:02:ce:16:e2:e2:46:10:b4: 07:07:61:cb:75:fe:1a:f8:46:77:e8:80:aa:76:9f: f0:fe:ce:10:34:e4:e1:b3:78:58:e4:4f:56:45:cf: d3:ce:41:fe:14:fb:05:39:20:44:fe:64:9c:09:10: 97:55:88:e7:31:70:d1:c4:65:69:0b:9b:95:eb:6f: 43:59:89:af:11:6e:32:ca:11:91:ce:9f:56:65:e3: 46:6b:8b:84:5e:95:52:78:da:82:58:c3:f0:0b:b9: c0:61:ad:7e:ea:a3:2d:a6:30:4a:fb:c9:66:f0:4a: ee:3b:44:01:8c:e3:46:c3:cc:6b:c7:00:f1:18:83: 9b:3b:0c:c5:f2:62:40:d2:61:d4:d0:9c:95:e7:d0: 75:68:66:ca:95:ee:30:f2:b0:55:7b:1a:79:36:57: 95:7e:ed:50:77:77:7e:07:50:e1:fb:b3:ff:98:5e: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:25:3E:B7:7C:76:28:16:38:C8:52:A9:31:CA:22:DC:C2:C0:FC:8E X509v3 Authority Key Identifier: keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:23:86:6c:4d:7d:ff:d4:02:da:6e:fa:51:af:c3:b2:c8:e8: 82:e6:dd:92:ab:1d:d8:35:56:ae:c7:43:24:d6:95:90:6e:d6: 5b:2d:52:bb:64:15:1e:5d:e1:9e:f5:23:c5:bc:fc:29:7a:77: 4e:6b:5b:fd:f3:a9:6d:a5:9d:76:fb:61:83:38:f6:03:bf:33: 67:e1:84:e1:1b:f1:78:81:56:96:84:c6:ee:58:76:5b:ad:9a: e3:f9:59:7a:2e:0f:17:40:7d:7a:08:7e:78:04:a7:95:f3:60: c8:c7:ed:0b:b4:4f:2a:1a:2d:20:60:ff:73:ec:22:30:00:8a: 18:82:fc:54:34:12:a9:9e:9c:55:86:05:11:f3:49:54:91:ab: 06:6e:a2:bd:e1:2a:c4:0f:fb:c5:cd:0b:fb:0d:6e:e9:e0:e4: e0:3d:ce:1e:d3:d7:fd:d9:88:4f:33:4b:dc:c5:6d:46:a7:f7: 6b:9e:bf:63:71:4e:2c:3f:8c:7d:c2:a0:04:7e:4e:2e:41:b4: 8e:d3:1f:00:b2:b4:e8:44:c0:56:e1:99:85:cb:d9:17:53:7b: bc:11:37:4e:13:4d:d9:fc:5b:34:00:43:35:54:c9:bc:f8:73: 3d:d4:26:c4:5e:be:87:41:70:9e:5c:44:67:18:a4:ea:6b:c2: 91:ae:db:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLbr1hreTu1+bsTP0IBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi MzQ0ZWIwHhcNMjYwMjA5MTcwMDEzWhcNMjYwMjEwMTcwMDEzWjAzMTEwLwYDVQQD EygxYzI1M2ViNzdjNzYyODE2MzhjODUyYTkzMWNhMjJkY2MyYzBmYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzimzet08DR0v0Q9r2NCsvnvUMFQv hBfjXH2gl7rgLwuTgZehMOqW2yAdtqpm3odOOKQcNrv6FhpVu97Abi8/wQPmA68E BBn9iV37NWXN9l2kAs4W4uJGELQHB2HLdf4a+EZ36ICqdp/w/s4QNOThs3hY5E9W Rc/TzkH+FPsFOSBE/mScCRCXVYjnMXDRxGVpC5uV629DWYmvEW4yyhGRzp9WZeNG a4uEXpVSeNqCWMPwC7nAYa1+6qMtpjBK+8lm8EruO0QBjONGw8xrxwDxGIObOwzF 8mJA0mHU0JyV59B1aGbKle4w8rBVexp5NleVfu1Qd3d+B1Dh+7P/mF5XuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwlPrd8digWOMhSqTHKItzCwPyOMB8GA1UdIwQY MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCOGbE19 /9QC2m76Ua/Dssjogubdkqsd2DVWrsdDJNaVkG7WWy1Su2QVHl3hnvUjxbz8KXp3 Tmtb/fOpbaWddvthgzj2A78zZ+GE4RvxeIFWloTG7lh2W62a4/lZei4PF0B9egh+ eASnlfNgyMftC7RPKhotIGD/c+wiMACKGIL8VDQSqZ6cVYYFEfNJVJGrBm6iveEq xA/7xc0L+w1u6eDk4D3OHtPX/dmITzNL3MVtRqf3a56/Y3FOLD+MfcKgBH5OLkG0 jtMfALK06ETAVuGZhcvZF1N7vBE3ThNN2fxbNABDNVTJvPhzPdQmxF6+h0FwnlxE Zxik6mvCka7bow== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:25 2026 by rpki-client