This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json) Hash identifier: 8MfHFLmw4aXvvdphvlomuGIakpP8uckU0DA0UdKp0tk= Subject key identifier: F6:E0:D6:21:52:CA:D8:BC:FC:86:9B:DE:9E:10:E6:91:64:4A:51:CA Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c Certificate serial: 019C432291AE140A783D10D0D97C86FB65F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft Manifest number: 053E Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: 7oAq0A77mfkuQcW2GRTM7G3giSD07zLvDy2dAHqI2IU=) 2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:91:ae:14:0a:78:3d:10:d0:d9:7c:86:fb:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=f6e0d62152cad8bcfc869bde9e10e691644a51ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:1e:da:6b:72:9c:66:82:88:e4:34:9a:68: bc:d2:d0:61:36:be:3d:a5:67:eb:0c:9e:ca:9c:a2: 25:e3:65:23:b0:e9:9e:d0:af:71:99:16:a0:f5:09: 50:07:a7:44:c9:fb:7d:59:72:0b:d4:42:88:0d:8e: b5:41:09:58:e7:c0:74:d8:d8:4b:2e:76:b0:7c:d8: b2:af:2c:2e:64:33:67:65:d7:b1:18:0b:5a:bc:05: 7e:c1:27:88:f2:2a:9e:51:c0:98:0b:f1:75:07:2a: ce:4c:09:c2:6a:01:33:ff:2f:ec:13:f8:af:e3:98: 9c:d1:a0:08:e7:92:01:a0:17:54:50:12:59:20:ea: 32:9f:b3:ae:47:f6:fd:e6:06:8c:24:81:2d:64:d7: fd:6c:2b:3f:1c:75:41:da:28:cb:be:c0:29:fa:e8: ce:dc:fe:2b:bc:96:dd:ee:29:49:f9:b3:49:e7:30: 3e:3d:4e:22:c9:e0:41:38:35:60:b9:f5:a5:60:d3: 1e:ae:57:1a:be:59:a7:fb:b7:4f:3d:5b:de:dc:e2: 63:2e:de:98:dc:d4:50:fb:63:43:c3:ac:09:da:0d: ac:11:ed:77:96:c6:8b:16:89:5e:1e:01:59:60:7a: 43:68:ca:bc:ad:ba:ee:4f:e4:73:8e:af:8c:bf:35: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E0:D6:21:52:CA:D8:BC:FC:86:9B:DE:9E:10:E6:91:64:4A:51:CA X509v3 Authority Key Identifier: keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e2:3c:f9:e0:de:de:ba:3c:9b:e1:36:3f:08:c1:10:5d:74: b5:a4:ff:21:a0:f4:22:2b:6c:4e:bd:a9:3a:ff:8d:a2:5e:57: 19:25:4c:22:04:29:6a:ea:80:a8:50:dc:82:db:6c:88:15:b3: 4a:34:d2:21:37:4f:ed:be:a8:dc:b0:d3:d5:9d:d2:0b:70:d9: dd:f0:3f:a1:e8:c8:91:4a:a1:5d:7b:ca:4e:c2:52:e4:8b:3a: a1:03:fe:50:88:72:0a:3a:cb:5d:b2:e8:22:7e:dd:d5:88:39: f5:3d:c5:18:a7:f0:bf:ee:db:29:d0:03:d6:17:d7:09:92:d5: c8:c0:15:71:21:40:15:42:27:3b:bc:69:c4:eb:a6:0c:4d:79: b1:2b:55:f1:90:eb:be:a1:69:8b:9b:20:44:6a:59:3b:5c:37: 95:3f:fa:cd:43:a8:36:f0:64:16:41:3d:54:f5:36:75:a7:c0: c5:3c:13:29:6d:ae:cc:3c:5e:3f:f0:a2:ac:47:f1:40:69:13: ed:f8:b2:f2:71:7c:c8:0b:d1:18:fd:2c:74:7e:78:7f:c7:05: 26:8d:d3:72:2b:bd:50:53:f5:30:e3:e4:94:37:01:8e:ae:7d: 19:a1:96:f9:b6:96:e2:57:3f:05:73:fe:a2:7b:37:a4:a2:d7: 5b:ef:eb:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpGuFAp4PRDQ2XyG+2X4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGNkNGQxYmQzZGYyOWFkZDQwNzViNjhmMjlhZjkwNzA0 NzQ0M2MwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EyhmNmUwZDYyMTUyY2FkOGJjZmM4NjliZGU5ZTEwZTY5MTY0NGE1MWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswse2mtynGaCiOQ0mmi80tBhNr49 pWfrDJ7KnKIl42UjsOme0K9xmRag9QlQB6dEyft9WXIL1EKIDY61QQlY58B02NhL LnawfNiyrywuZDNnZdexGAtavAV+wSeI8iqeUcCYC/F1ByrOTAnCagEz/y/sE/iv 45ic0aAI55IBoBdUUBJZIOoyn7OuR/b95gaMJIEtZNf9bCs/HHVB2ijLvsAp+ujO 3P4rvJbd7ilJ+bNJ5zA+PU4iyeBBODVgufWlYNMerlcavlmn+7dPPVve3OJjLt6Y 3NRQ+2NDw6wJ2g2sEe13lsaLFoleHgFZYHpDaMq8rbruT+Rzjq+MvzWwDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbg1iFSyti8/Iab3p4Q5pFkSlHKMB8GA1UdIwQY MBaAFELc1NG9PfKa3UB1to8pr5BwR0Q8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2Yt ZmI5OGZlM2RiYzE0LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yOTdmMWUtOTIyYi00NWI0LTg5M2YtZmI5OGZlM2RiYzE0 LzEvUXR6VTBiMDk4cHJkUUhXMmp5bXZrSEJIUkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+I8+eDe 3ro8m+E2PwjBEF10taT/IaD0IitsTr2pOv+Nol5XGSVMIgQpauqAqFDcgttsiBWz SjTSITdP7b6o3LDT1Z3SC3DZ3fA/oejIkUqhXXvKTsJS5Is6oQP+UIhyCjrLXbLo In7d1Yg59T3FGKfwv+7bKdAD1hfXCZLVyMAVcSFAFUInO7xpxOumDE15sStV8ZDr vqFpi5sgRGpZO1w3lT/6zUOoNvBkFkE9VPU2dafAxTwTKW2uzDxeP/CirEfxQGkT 7fiy8nF8yAvRGP0sdH54f8cFJo3Tciu9UFP1MOPklDcBjq59GaGW+baW4lc/BXP+ ons3pKLXW+/rXg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:50 2026 by rpki-client