This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json) Hash identifier: B4jayGOFq8hCdG7ZbgUCEhfnalb5WeytEC8r+hOisk8= Subject key identifier: 49:F0:D7:14:43:1F:79:70:7B:EA:F7:41:A7:9D:5D:C8:69:8B:A4:15 Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61 Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461 Certificate serial: 019C439066F79A51B3335C6DBEF35287255A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft Manifest number: 70 Signing time: Mon 09 Feb 2026 18:01:02 +0000 Manifest this update: Mon 09 Feb 2026 18:01:02 +0000 Manifest next update: Tue 10 Feb 2026 18:01:02 +0000 Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=) 2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: uoa3ETrNh3+B85uKUK7YtV7MX+aa+uXJa6/lgGLflLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:66:f7:9a:51:b3:33:5c:6d:be:f3:52:87:25:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461 Validity Not Before: Feb 9 18:01:02 2026 GMT Not After : Feb 10 18:01:02 2026 GMT Subject: CN=49f0d714431f79707beaf741a79d5dc8698ba415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:33:2a:40:c5:4d:e3:e4:e0:5e:76:3d:00: 44:45:51:8e:59:87:f2:7a:e4:a6:b7:19:0f:8d:45: 0c:24:80:e4:c2:cb:72:56:fa:7a:2c:85:b9:1d:d6: 06:87:40:81:e5:b1:d6:5b:92:bb:3c:84:d5:9f:db: 3e:82:b0:c0:6b:f4:40:77:e4:de:c1:5f:fd:c6:40: 8b:7a:a2:2e:35:2c:6a:61:23:b9:3d:ec:72:9c:d9: 0d:5d:19:b3:d4:aa:e0:0f:df:c1:0c:8b:1d:8a:b3: 0e:27:28:2d:02:81:74:52:b8:f0:05:db:89:bc:98: 9a:ec:d9:5b:37:cf:a4:46:d1:c3:4d:4f:19:ee:2f: 9b:1d:bb:21:07:a2:48:2c:76:60:17:60:11:35:b1: c6:55:97:49:88:92:14:19:e9:8e:b3:30:c8:bb:54: c0:7e:0f:13:06:4f:08:69:6a:80:40:f9:3c:cf:d5: 2a:99:57:a6:cc:85:ed:d0:04:7b:4e:c6:14:e8:b6: 00:23:0c:59:5d:a1:52:2d:9a:03:c6:1b:9d:0a:ec: 9e:1b:61:de:29:7a:15:45:20:c9:6f:90:4e:97:11: a3:9e:01:49:be:28:b6:55:57:f7:3c:70:4d:dd:4e: a9:e5:d7:25:5f:5b:e6:49:b2:65:3f:9a:bb:90:e3: c1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F0:D7:14:43:1F:79:70:7B:EA:F7:41:A7:9D:5D:C8:69:8B:A4:15 X509v3 Authority Key Identifier: keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a1:1c:00:88:27:42:b2:54:41:6b:4a:9d:ab:27:aa:11:26: c9:20:a6:fe:3b:e6:64:d4:b9:56:85:ac:2d:6b:24:86:08:32: 51:28:80:f9:2d:83:92:ea:0c:d3:a1:65:d1:05:da:1e:90:34: 34:1b:22:5d:32:88:6a:96:5f:34:b9:34:37:9d:78:58:46:a7: b9:e0:fe:cd:61:a9:32:7e:6e:14:ec:7f:2e:f9:36:08:a5:db: ef:76:88:c2:6e:78:47:31:d9:88:4d:ef:f7:86:6d:fe:8a:1f: 62:70:9c:f0:c9:d0:6a:ee:6f:69:64:b5:4b:5b:1d:76:1b:c3: 05:45:4a:dd:dc:e0:4b:b5:3e:91:32:d7:18:25:84:81:54:35: 42:f6:6c:42:f1:4a:6c:23:8b:29:36:3f:d6:92:6a:c1:eb:fb: 68:2d:c8:67:3b:cf:bf:92:a0:57:67:fc:c6:87:5e:c6:71:20: 03:36:1e:26:9f:18:08:43:a3:df:5f:1f:df:15:1e:4b:54:91: d2:1a:fe:38:09:e4:0b:f9:ca:cd:2f:3a:ac:ca:b2:85:84:1b: 4d:2f:21:cc:12:08:2b:db:0f:0c:aa:30:42:38:64:f7:19:e5: c1:9e:b9:c9:00:b3:b0:7e:5c:a5:06:ec:ad:c9:50:8a:a0:ef: 05:80:5a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGb3mlGzM1xtvvNShyVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh YmE0NjEwHhcNMjYwMjA5MTgwMTAyWhcNMjYwMjEwMTgwMTAyWjAzMTEwLwYDVQQD Eyg0OWYwZDcxNDQzMWY3OTcwN2JlYWY3NDFhNzlkNWRjODY5OGJhNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlUzKkDFTePk4F52PQBERVGOWYfy euSmtxkPjUUMJIDkwstyVvp6LIW5HdYGh0CB5bHWW5K7PITVn9s+grDAa/RAd+Te wV/9xkCLeqIuNSxqYSO5PexynNkNXRmz1KrgD9/BDIsdirMOJygtAoF0UrjwBduJ vJia7NlbN8+kRtHDTU8Z7i+bHbshB6JILHZgF2ARNbHGVZdJiJIUGemOszDIu1TA fg8TBk8IaWqAQPk8z9UqmVemzIXt0AR7TsYU6LYAIwxZXaFSLZoDxhudCuyeG2He KXoVRSDJb5BOlxGjngFJvii2VVf3PHBN3U6p5dclX1vmSbJlP5q7kOPB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnw1xRDH3lwe+r3QaedXchpi6QVMB8GA1UdIwQY MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt MGE5N2JiZjVmNDU2LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2 LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaEcAIgn QrJUQWtKnasnqhEmySCm/jvmZNS5VoWsLWskhggyUSiA+S2DkuoM06Fl0QXaHpA0 NBsiXTKIapZfNLk0N514WEanueD+zWGpMn5uFOx/Lvk2CKXb73aIwm54RzHZiE3v 94Zt/oofYnCc8MnQau5vaWS1S1sddhvDBUVK3dzgS7U+kTLXGCWEgVQ1QvZsQvFK bCOLKTY/1pJqwev7aC3IZzvPv5KgV2f8xodexnEgAzYeJp8YCEOj318f3xUeS1SR 0hr+OAnkC/nKzS86rMqyhYQbTS8hzBIIK9sPDKowQjhk9xnlwZ65yQCzsH5cpQbs rclQiqDvBYBadg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:36 2026 by rpki-client