This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: ijbLqrZGf3LDcaUBj3hNkcpmoYDTgtfRRXjqVqt8Y38=
Subject key identifier: FB:86:E8:3C:C5:A8:F7:BD:35:5F:70:81:3D:A8:25:AD:32:90:5B:08
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019C42EAE645ACDAC32413D75F625EA33EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 15:00:16 +0000
Manifest this update: Mon 09 Feb 2026 15:00:16 +0000
Manifest next update: Tue 10 Feb 2026 15:00:16 +0000
Files and hashes: 1: Yrcgx8X9stHwgpCHDOsVbc1hluI.roa (hash: ECVF6igxy3y3LufgBVxh6FK9Aw/oP5gnb7fO7cFVtSs=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: Yb6mOXu5TcoA6/giq/LgzI3hZsJuv1BEo4vAJ06G2qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:e6:45:ac:da:c3:24:13:d7:5f:62:5e:a3:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Feb 9 15:00:16 2026 GMT
Not After : Feb 10 15:00:16 2026 GMT
Subject: CN=fb86e83cc5a8f7bd355f70813da825ad32905b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:b4:a5:ca:a6:e7:5c:59:12:cf:62:82:e2:
cd:e2:64:70:ea:d2:22:a2:e5:06:4c:38:3d:c5:76:
23:28:85:20:8c:87:25:89:4b:d6:79:5c:7c:2a:30:
e1:d9:6a:36:7b:73:c6:9e:fb:0e:62:5d:53:ad:9c:
dd:a2:95:16:68:10:a6:87:f9:67:ad:ed:86:94:5d:
c1:72:f9:df:5c:53:85:a5:98:82:1a:b6:47:12:5e:
e1:a6:dd:35:95:af:bb:76:2a:50:4a:83:e5:39:ec:
c9:54:aa:4a:b9:50:30:74:1c:7d:7e:01:2a:95:72:
25:d1:56:b1:77:1f:09:71:37:67:3f:69:e3:48:5c:
09:0a:93:32:2a:e2:c8:de:fd:3c:05:75:b9:ec:0c:
ab:61:19:b5:16:2c:0b:8d:f3:44:05:b1:35:5a:c7:
d9:10:f9:f1:63:0f:b2:ea:6d:08:4d:3d:f5:ac:c2:
df:44:42:3f:7d:5c:0e:21:14:f6:dc:1b:37:21:b2:
55:3c:6d:30:cf:ef:87:9b:10:54:1b:05:c6:33:65:
d7:a8:8e:f5:56:4e:42:af:d2:d9:07:6c:d0:a2:1e:
c1:77:c8:b0:b3:f3:87:a8:1b:9c:24:90:b5:2f:08:
76:b8:c4:8c:f4:45:b3:01:c0:52:68:5b:5c:77:00:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:E8:3C:C5:A8:F7:BD:35:5F:70:81:3D:A8:25:AD:32:90:5B:08
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:57:27:a6:86:c6:2c:86:b5:e5:6e:cc:de:26:16:fd:53:98:
61:fe:15:9b:fe:90:ab:01:ce:37:4e:96:67:36:e4:f4:22:15:
7b:ab:0c:28:cd:31:6d:c4:21:d3:d2:fa:e9:6c:e2:61:7a:66:
b0:13:f4:8c:72:ca:34:6e:ab:92:98:90:64:97:e3:b3:63:99:
6e:b6:69:61:0c:33:49:d5:02:8f:b9:bb:30:59:40:8c:4f:28:
34:60:18:94:b7:6e:36:d7:a0:d6:3b:22:fb:b9:b9:d0:d0:ef:
c7:e7:75:e6:a3:e0:46:e8:47:d6:94:54:a1:41:1d:16:e3:fb:
24:d3:d3:8a:ed:a2:b4:b8:58:99:f6:58:cc:bc:98:9f:08:0d:
cd:4b:57:78:09:20:0f:7d:c9:bf:36:36:c4:ad:dd:d5:da:d0:
59:82:81:83:09:19:8e:ad:52:e2:19:dd:72:ee:4b:14:01:40:
6c:00:53:e5:d4:d7:49:f8:a7:24:3f:82:b6:32:87:7b:17:f2:
bd:40:4e:39:38:fa:cc:5d:30:68:f7:9f:4a:d0:39:24:21:5e:
53:13:b9:9a:a0:90:9b:3b:37:5b:c0:56:8f:de:5f:8d:e2:fb:
ec:0e:5b:a6:d8:e1:b5:c8:4b:d2:b2:fa:36:39:e9:f6:78:2f:
37:98:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:56 2026 by rpki-client