This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: mQYIjAQYO51L+EhPb/t26rwyCvCeTKAF+0lD9DG2SB4=
Subject key identifier: 3F:3D:FC:9F:E8:C6:A5:96:EF:AB:A2:08:2A:70:5A:82:2D:14:8B:5E
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019C44DA07D6F854CB1E1134FC123411A7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 154F
Signing time: Tue 10 Feb 2026 00:01:05 +0000
Manifest this update: Tue 10 Feb 2026 00:01:05 +0000
Manifest next update: Wed 11 Feb 2026 00:01:05 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: TmgxAnZEOI1Jh5elVqpCEek7RBDWZXiujpF5vVqf4PE=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:07:d6:f8:54:cb:1e:11:34:fc:12:34:11:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Feb 10 00:01:05 2026 GMT
Not After : Feb 11 00:01:05 2026 GMT
Subject: CN=3f3dfc9fe8c6a596efaba2082a705a822d148b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:32:5d:e5:2c:ae:71:aa:2f:eb:09:12:63:
af:b6:7f:0b:25:1c:49:54:ed:9b:2a:f8:f5:5d:35:
58:95:61:9d:e0:6f:59:3d:d4:25:6c:b6:79:f9:9b:
0a:88:45:ae:a3:70:25:05:34:da:54:8d:14:22:a7:
b3:2c:2f:b0:39:0f:73:e6:69:c0:4c:63:fe:b3:90:
21:e4:f6:36:2b:a6:49:ef:62:2e:91:50:a1:5a:0c:
7d:b7:9e:3a:7d:27:d3:61:16:be:fb:85:47:03:83:
cf:2b:48:da:01:35:0b:4c:30:64:73:74:d2:f0:6b:
3d:4f:45:e2:80:a5:55:1d:ec:06:ae:83:c2:8c:ee:
9b:5f:55:cd:77:e4:ec:67:60:81:36:da:d0:cf:bf:
bd:ab:17:07:1e:70:8a:11:2f:3d:e7:0d:64:a4:bd:
3d:f3:72:44:4f:24:23:a8:1f:f4:19:8a:2f:72:62:
74:30:86:59:d7:15:c9:8a:7f:ea:65:cf:79:e6:d3:
05:85:8e:24:67:0b:b7:c6:dd:ca:56:ac:e8:22:40:
2c:b9:c2:f5:9f:85:ac:fd:95:22:7d:70:16:3d:dd:
1b:5c:39:f0:5b:6c:23:13:2e:e6:5d:6c:95:f0:88:
d1:f1:2b:50:07:97:48:12:c4:62:b1:c7:cd:14:12:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:FC:9F:E8:C6:A5:96:EF:AB:A2:08:2A:70:5A:82:2D:14:8B:5E
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:7d:21:70:cb:86:e2:08:4f:35:17:b3:33:d4:c1:40:16:c8:
44:81:cf:c3:cd:d4:0e:59:c8:23:fe:0d:f0:05:62:b7:c9:57:
40:70:14:4f:83:51:d0:37:e1:58:4a:93:62:35:1d:e9:fc:14:
a1:77:50:d8:18:69:0d:0d:51:78:e5:a6:b4:eb:2e:f8:dd:af:
06:b1:a0:84:69:c7:ae:19:82:e1:61:37:0e:6e:4c:1c:2a:58:
65:42:ea:23:45:ad:a4:9d:73:33:89:25:1f:62:52:b8:c5:f2:
c3:bc:d5:6b:35:5b:f2:0e:6d:e8:33:2e:8a:05:a8:74:37:08:
74:08:ea:47:a1:d6:fc:f9:d0:75:04:c8:88:42:d8:2f:04:44:
ce:75:fd:59:ed:76:2e:8f:3b:39:d6:92:62:bd:b1:f6:79:81:
22:51:2d:d3:16:66:f0:f7:a3:1b:17:45:f1:10:de:fc:7e:66:
30:3c:63:7a:46:1a:86:fb:29:0b:4c:76:b7:f6:30:86:5a:75:
f6:fd:60:d2:cd:6e:d0:d2:ee:72:79:47:a7:4e:02:69:ae:9b:
6a:f4:e1:c2:8f:d6:14:d7:1c:17:96:57:1c:50:89:e4:e6:8e:
b5:7f:fb:ac:42:6e:b1:14:a2:86:15:40:cf:ae:cc:77:01:ee:
86:0e:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:59 2026 by rpki-client