This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json) Hash identifier: FeEN2PzZfDFaMTiKZFV34x2bPE2yUibZmpoh2aGaOKI= Subject key identifier: F0:0C:5B:01:60:DA:04:D3:24:93:AF:10:C4:B0:8F:9D:EF:58:A1:7E Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Certificate serial: 019C41D88AF564A522A121898BC9FAD1C3ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 10:00:36 +0000 Manifest this update: Mon 09 Feb 2026 10:00:36 +0000 Manifest next update: Tue 10 Feb 2026 10:00:36 +0000 Files and hashes: 1: WlS5ojL7gDl1onOWJD5o8wyANuo.roa (hash: NX+jbIhhBEnEZTj9qhHO6FgUtaMrjfCgiQz82eLbv/s=) 2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: kOS92ZFy0yla1nb03NfNZJ/34NNkCEuss4ihJlunxCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:8a:f5:64:a5:22:a1:21:89:8b:c9:fa:d1:c3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c Validity Not Before: Feb 9 10:00:36 2026 GMT Not After : Feb 10 10:00:36 2026 GMT Subject: CN=f00c5b0160da04d32493af10c4b08f9def58a17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:c9:c9:a7:c1:5f:e5:ff:1a:02:d6:08:cd: af:48:bb:a7:df:63:53:ea:96:20:25:47:31:37:ae: 80:a5:50:de:64:a5:c8:42:a5:00:48:f0:67:eb:0a: bc:29:d1:b4:bf:be:ea:dc:0c:17:5b:be:c9:80:23: 40:77:78:c8:f9:44:cb:0a:94:d9:38:2d:4e:28:af: 4f:1d:8f:fc:d8:f3:bb:c4:f0:2a:d6:33:f8:b7:cf: f3:31:7f:bc:ed:02:bc:ea:93:86:9e:32:b3:8c:0c: e2:a2:f6:fa:3a:92:51:41:7c:b3:86:84:03:94:8a: 53:28:31:ea:7e:75:a2:f2:62:d4:2f:70:0f:8a:a6: 35:fc:71:15:55:77:27:eb:40:66:71:2b:35:8c:3a: fe:e7:0c:8f:53:13:04:cd:6e:2b:04:21:70:92:ce: e9:4c:ec:d0:45:8c:09:f6:d1:7a:17:89:db:d4:31: ee:c5:c9:92:e9:76:c5:c6:a7:8c:24:f0:45:b3:7a: 0d:7b:6f:14:d0:3b:88:0c:5d:82:24:e7:7e:9b:44: 9b:18:f6:93:73:16:a6:e9:a7:63:4e:3c:19:06:ff: ff:34:e6:1d:da:72:02:ed:78:06:f1:6d:ec:74:02: 61:dd:5c:a4:0a:76:33:2d:0a:26:0b:33:2b:0a:4e: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0C:5B:01:60:DA:04:D3:24:93:AF:10:C4:B0:8F:9D:EF:58:A1:7E X509v3 Authority Key Identifier: keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:34:67:98:41:a6:33:a5:b3:77:32:33:42:80:51:5e:47:2e: 45:c5:2c:3c:23:51:a4:8c:42:08:b6:99:97:11:f7:11:5c:84: d5:f1:2e:a0:a7:25:65:c7:1c:ad:12:70:73:a6:e1:7e:4a:94: 2c:8e:21:89:17:ba:66:dc:45:cd:7b:91:97:39:6d:82:c6:3d: 44:64:5e:d7:16:9c:39:e5:84:49:08:5a:55:3f:2c:cd:73:c5: 3d:1d:55:9b:4e:d6:c5:c8:c3:36:f6:ab:23:cf:46:ce:11:f4: d2:a8:f5:28:c5:a6:d4:5d:fe:5d:45:d7:48:7c:51:f7:69:05: c6:61:6f:b8:52:70:38:a9:47:ca:37:29:98:4d:3b:41:31:a0: fe:b1:fe:ae:f0:97:2b:d4:92:d6:62:c2:cd:d5:fd:eb:f0:9c: dd:75:0c:24:9f:ed:68:64:af:eb:8e:e8:d9:40:5d:23:12:4e: 16:84:7f:f5:f2:49:65:dc:1a:91:36:47:b0:10:05:05:4f:52: 13:2e:52:27:82:cb:9f:62:9a:dd:65:2b:71:ac:05:0c:74:3c: 4b:c2:6b:70:8e:ce:b5:57:e3:19:eb:c7:7a:0b:62:e8:81:27: 7f:1a:a2:82:77:0e:6b:9c:74:a0:75:a2:34:7c:e3:e3:7b:cc: 11:14:67:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Ir1ZKUioSGJi8n60cPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy ODk3NmMwHhcNMjYwMjA5MTAwMDM2WhcNMjYwMjEwMTAwMDM2WjAzMTEwLwYDVQQD EyhmMDBjNWIwMTYwZGEwNGQzMjQ5M2FmMTBjNGIwOGY5ZGVmNThhMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXJyafBX+X/GgLWCM2vSLun32NT 6pYgJUcxN66ApVDeZKXIQqUASPBn6wq8KdG0v77q3AwXW77JgCNAd3jI+UTLCpTZ OC1OKK9PHY/82PO7xPAq1jP4t8/zMX+87QK86pOGnjKzjAziovb6OpJRQXyzhoQD lIpTKDHqfnWi8mLUL3APiqY1/HEVVXcn60BmcSs1jDr+5wyPUxMEzW4rBCFwks7p TOzQRYwJ9tF6F4nb1DHuxcmS6XbFxqeMJPBFs3oNe28U0DuIDF2CJOd+m0SbGPaT cxam6adjTjwZBv//NOYd2nIC7XgG8W3sdAJh3VykCnYzLQomCzMrCk6QWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAMWwFg2gTTJJOvEMSwj53vWKF+MB8GA1UdIwQY MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4 LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjRnmEGm M6WzdzIzQoBRXkcuRcUsPCNRpIxCCLaZlxH3EVyE1fEuoKclZcccrRJwc6bhfkqU LI4hiRe6ZtxFzXuRlzltgsY9RGRe1xacOeWESQhaVT8szXPFPR1Vm07WxcjDNvar I89GzhH00qj1KMWm1F3+XUXXSHxR92kFxmFvuFJwOKlHyjcpmE07QTGg/rH+rvCX K9SS1mLCzdX96/Cc3XUMJJ/taGSv647o2UBdIxJOFoR/9fJJZdwakTZHsBAFBU9S Ey5SJ4LLn2Ka3WUrcawFDHQ8S8JrcI7OtVfjGevHegti6IEnfxqigncOa5x0oHWi NHzj43vMERRnOA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:25 2026 by rpki-client