This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: rErYRH7xPj5GFL5SmVx9oLAdd+jPb8zW/XDxRQqYKXM=
Subject key identifier: FE:E9:44:01:81:2E:9F:50:59:0C:7E:36:49:6F:2D:18:0F:4A:08:2E
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019C1BDE1642E19A281D54066CBAFD0B37DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 17FD
Signing time: Mon 02 Feb 2026 01:01:05 +0000
Manifest this update: Mon 02 Feb 2026 01:01:05 +0000
Manifest next update: Tue 03 Feb 2026 01:01:05 +0000
Files and hashes: 1: ByaMG3qQvevk7AvgHB70KjoE3A0.roa (hash: p1aG6j/NLPI3cpBHB5DlRAwLBJWnR2mOUIqEzPqPSI4=)
2: QCoF-rujbi30mxySq-53A2Un6G0.roa (hash: JvBfOTcTs7nWh8mPAtftbN8wivlXScDpGBs3k9Clm0w=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: oioG7MFqntC70nswyrRxyiCqQcr1Yj1BV6S11QmdmOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:de:16:42:e1:9a:28:1d:54:06:6c:ba:fd:0b:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Feb 2 01:01:05 2026 GMT
Not After : Feb 3 01:01:05 2026 GMT
Subject: CN=fee94401812e9f50590c7e36496f2d180f4a082e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:19:1c:ee:28:b9:33:5c:df:6f:34:86:54:
68:0c:ba:de:c1:26:54:81:6b:7d:97:e4:cc:52:53:
32:c6:dc:5b:30:99:f5:95:53:bf:3b:4e:50:fb:95:
44:b2:76:62:1c:9a:84:3b:3f:75:29:d8:5a:5d:9d:
00:4a:38:e4:b0:f5:ef:5e:5d:11:4c:e4:35:4d:bd:
52:0a:3f:c6:4e:c0:58:75:4a:bc:06:17:88:fe:9a:
7b:a6:e1:57:e6:74:cf:39:b5:e2:3b:e0:5f:ca:89:
e9:70:f7:7a:3c:f5:3b:6f:f1:77:6d:af:7b:ed:b6:
9f:bb:b9:a4:28:af:a3:fa:6d:9b:fd:9e:ac:38:07:
a1:b2:ff:69:01:9e:2b:f0:56:90:58:63:b7:80:f7:
88:fd:1b:a5:31:65:5b:8b:b4:14:32:77:73:dc:13:
4c:1f:69:de:30:0c:1e:b8:f1:07:bf:f4:a5:33:3a:
d5:65:ef:08:a0:6f:d4:d9:98:8f:46:17:0a:88:3a:
7a:4b:fc:86:55:84:eb:63:f0:cf:03:7b:61:32:8d:
97:fe:09:d6:da:d5:5a:5c:b9:23:d6:63:05:5f:a8:
a0:af:72:d7:21:85:ae:97:e3:e9:a5:10:1d:d5:3d:
75:9a:ee:5a:af:34:5a:da:8a:6e:d2:70:85:26:c5:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:44:01:81:2E:9F:50:59:0C:7E:36:49:6F:2D:18:0F:4A:08:2E
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d3:eb:16:fa:70:9d:f4:90:e4:f5:62:dc:95:16:fc:ce:e7:
59:fd:aa:a6:b0:e7:c2:59:5a:2a:59:92:18:e4:b1:f4:e9:5f:
f6:1f:0d:ac:20:31:6d:e8:41:a5:fa:b8:0a:3d:a4:dc:66:80:
de:48:bd:18:46:09:b7:60:53:5a:86:d4:0b:c2:77:71:c7:52:
09:ff:1e:bc:6e:42:c5:a0:43:3b:e1:31:07:9e:b0:2f:fb:aa:
4c:34:65:1d:1c:2d:d0:13:85:e7:7b:e2:ac:be:0a:be:84:91:
1e:79:c8:34:14:6a:05:67:b2:fc:90:f7:20:46:dc:a6:35:8c:
d5:fd:df:2e:be:07:48:64:7b:71:2d:22:42:9b:d4:47:54:f3:
33:57:3d:c9:db:b7:3a:d0:a4:39:0d:5f:93:68:1a:89:15:96:
8e:98:5d:28:41:72:de:50:5a:a9:fb:26:bb:76:61:47:b0:26:
b3:13:b4:3a:ff:95:d6:4e:ae:ba:e4:41:34:3b:b9:28:76:e8:
9d:12:9e:87:dd:a4:27:eb:22:87:bc:3d:ac:0b:13:d2:8e:7f:
a6:0b:8a:dc:50:cd:d2:ed:c3:b4:fd:28:69:c8:4f:46:d0:4c:
cb:8c:ac:ae:b3:cf:53:47:75:fd:ff:0d:ab:f7:52:ad:df:d4:
45:92:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:22 2026 by rpki-client