This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json) Hash identifier: sOYnewqSe8tBGlFWjWNK9kya5OTUr6yySIA0h5cX8ZI= Subject key identifier: E1:53:33:60:BA:5A:E5:A4:A1:93:59:71:06:A3:24:28:5E:11:C4:9F Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7 Certificate serial: 019C4322CA87E1E2401B13B3C2AB599AAD8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: zRs6B0MW8d0CxGeUV1xtxAeYBuGmItLRx4A+2Du3bRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ca:87:e1:e2:40:1b:13:b3:c2:ab:59:9a:ad:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a3517606989eb352f699976f219faec8e350e7 Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=e1533360ba5ae5a4a193597106a324285e11c49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:cd:6a:13:1e:59:18:b1:c7:62:54:19:a8: 5d:d5:52:c4:62:0d:0a:9e:2a:0b:0a:1d:88:b7:88: 75:4b:59:d9:df:f9:2a:3c:2f:a6:4c:34:50:d6:ac: bf:9d:57:7e:1c:0c:60:1a:74:5c:f5:75:f0:ac:12: 99:fa:2c:26:5a:4e:c7:d6:8a:91:a5:e1:de:ff:13: 4e:77:db:4e:4f:a5:8b:9e:55:61:ff:73:89:37:bd: b3:13:67:2b:01:66:67:b0:77:f1:46:b9:ed:8c:65: ea:fd:94:91:ef:f3:0a:9b:4e:5c:5d:18:59:49:9d: f4:82:32:cf:f9:87:93:8f:0c:ce:ec:b5:5c:ab:37: 89:4c:bd:4d:6a:73:bf:5d:a9:da:18:3e:35:b6:2f: b3:25:e1:38:94:ec:75:4b:48:31:0b:e6:5a:f1:fb: 8e:82:ee:9f:c0:26:4b:75:05:ca:40:21:ea:8c:b2: 2d:a7:77:93:64:ea:97:55:aa:4a:17:e0:fc:35:4a: ab:40:b0:be:11:06:23:bd:4e:4c:b6:2c:de:59:44: 35:de:5a:a4:83:29:15:e2:bf:f7:51:7d:2b:c6:de: 2a:73:65:87:dc:e5:1d:e5:42:02:42:56:12:0d:3a: 9e:5b:60:b1:5c:18:68:3b:e2:22:af:9c:74:50:32: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:53:33:60:BA:5A:E5:A4:A1:93:59:71:06:A3:24:28:5E:11:C4:9F X509v3 Authority Key Identifier: keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:50:0e:5b:d7:36:8d:bc:f9:07:a5:21:01:74:12:e5:7d:30: ac:c3:fb:c8:ce:64:57:54:55:3c:e5:12:1b:8e:cc:b5:fb:e3: 51:e4:b3:18:2f:71:8d:5f:e6:b4:46:6b:a8:08:c3:45:e8:1b: b9:94:52:09:3f:80:18:85:54:a9:89:f2:61:96:16:46:ad:73: fd:09:75:d8:3e:3f:6c:5c:4d:25:5f:7d:61:e9:4d:8c:1f:c2: fe:0c:b2:a0:f5:a7:fc:68:f9:af:b3:25:14:31:bf:3f:f6:08: 98:c6:e5:6c:07:bf:e8:cd:2b:07:6c:ff:55:0f:49:a2:0b:c9: f2:f7:e6:ec:c9:85:16:36:33:ea:2a:ca:1c:f6:e2:e0:5f:0f: 11:e7:59:f9:a6:c1:2e:28:16:e6:a3:8f:8d:01:65:c9:3d:fc: ac:c3:13:6a:8b:17:fb:f3:d5:98:28:71:35:2f:21:82:e3:c2: e6:ab:83:1a:c2:fa:99:d5:36:b5:2f:41:32:c2:7c:af:fd:78: a9:4c:87:14:f3:a1:33:b4:1d:1c:5e:18:b1:40:f2:92:de:8a: 5e:0f:fc:55:94:37:c2:29:cd:ea:e7:79:f9:7e:8b:11:77:38: 6e:91:ff:21:41:0b:f4:b4:d4:dd:4c:44:f7:b7:3e:df:3e:a0: 8f:f3:f2:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsqH4eJAGxOzwqtZmq2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl MzUwZTcwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD EyhlMTUzMzM2MGJhNWFlNWE0YTE5MzU5NzEwNmEzMjQyODVlMTFjNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7jNahMeWRixx2JUGahd1VLEYg0K nioLCh2It4h1S1nZ3/kqPC+mTDRQ1qy/nVd+HAxgGnRc9XXwrBKZ+iwmWk7H1oqR peHe/xNOd9tOT6WLnlVh/3OJN72zE2crAWZnsHfxRrntjGXq/ZSR7/MKm05cXRhZ SZ30gjLP+YeTjwzO7LVcqzeJTL1NanO/XanaGD41ti+zJeE4lOx1S0gxC+Za8fuO gu6fwCZLdQXKQCHqjLItp3eTZOqXVapKF+D8NUqrQLC+EQYjvU5MtizeWUQ13lqk gykV4r/3UX0rxt4qc2WH3OUd5UICQlYSDTqeW2CxXBhoO+Iir5x0UDJ+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFTM2C6WuWkoZNZcQajJCheEcSfMB8GA1UdIwQY MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2 LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlAOW9c2 jbz5B6UhAXQS5X0wrMP7yM5kV1RVPOUSG47MtfvjUeSzGC9xjV/mtEZrqAjDRegb uZRSCT+AGIVUqYnyYZYWRq1z/Ql12D4/bFxNJV99YelNjB/C/gyyoPWn/Gj5r7Ml FDG/P/YImMblbAe/6M0rB2z/VQ9JogvJ8vfm7MmFFjYz6irKHPbi4F8PEedZ+abB LigW5qOPjQFlyT38rMMTaosX+/PVmChxNS8hguPC5quDGsL6mdU2tS9BMsJ8r/14 qUyHFPOhM7QdHF4YsUDykt6KXg/8VZQ3winN6ud5+X6LEXc4bpH/IUEL9LTU3UxE 97c+3z6gj/Pyaw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:01 2026 by rpki-client