This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: WS6jcCbOaMTVeSQ8SHSPjydFcZqMiT9Ma0WJGQvVq70=
Subject key identifier: 63:A0:F1:2F:ED:D8:47:64:DD:45:71:C7:65:93:D3:9B:C6:56:F6:E5
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019C43902CF3CF258D316A54DB3CD114B83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 18:00:47 +0000
Manifest this update: Mon 09 Feb 2026 18:00:47 +0000
Manifest next update: Tue 10 Feb 2026 18:00:47 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: PMcIruS5TmwaSMgefrbsvoHFYMQ28Gu/B9p+1vgXK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:2c:f3:cf:25:8d:31:6a:54:db:3c:d1:14:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Feb 9 18:00:47 2026 GMT
Not After : Feb 10 18:00:47 2026 GMT
Subject: CN=63a0f12fedd84764dd4571c76593d39bc656f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:63:5c:b5:6e:ca:8a:ec:50:00:86:fb:ce:
92:bf:d4:7d:e3:ce:28:ba:89:94:68:f0:a7:46:3a:
31:49:14:8f:a5:8b:1f:00:22:1b:11:32:27:38:a9:
23:e1:03:27:12:fd:4d:7d:9e:2b:ab:7f:ad:92:d2:
ea:6f:2f:87:93:87:ac:fe:8e:34:4f:aa:ea:ba:78:
50:4a:7b:30:cc:33:99:78:8f:ae:7f:06:da:68:75:
da:75:98:ad:3e:5c:4f:69:23:25:0d:d1:cd:e5:e6:
57:7e:f3:17:de:d5:32:11:6f:58:6b:70:dc:a4:f7:
5c:15:9d:e0:4c:07:72:32:5e:96:f7:d5:a6:ef:5a:
84:50:25:0a:24:8a:84:13:d5:b1:7a:e1:f7:fe:db:
a4:e5:08:e7:0a:55:76:74:7d:23:64:5a:6f:42:43:
f8:d4:1e:ee:d2:f8:16:33:60:66:e2:fb:4e:cc:eb:
6c:39:fc:f4:af:dc:4b:27:ab:8b:c2:35:e2:79:ab:
60:5e:07:35:de:be:0c:76:bd:1e:8b:68:b3:53:f4:
a0:b7:37:1f:18:dc:d8:3e:08:25:b6:f4:be:f9:85:
83:c5:84:2a:91:c5:b0:44:54:19:a9:38:de:3a:a5:
53:be:ca:3f:14:60:e5:55:cc:90:9b:f5:74:81:e6:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:F1:2F:ED:D8:47:64:DD:45:71:C7:65:93:D3:9B:C6:56:F6:E5
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:45:f5:c1:2b:97:4b:3e:70:03:c2:5f:19:e8:19:f7:4d:
c3:53:81:b9:b9:c1:0e:75:41:98:a4:e1:a6:00:ff:5e:ee:c4:
4c:4a:bb:64:67:25:1e:fe:ba:d3:a8:57:6a:86:be:74:42:c7:
2c:af:33:8b:ec:ad:0c:68:36:84:ba:c3:29:69:34:d4:06:d5:
8e:3d:ff:bf:20:d3:a0:ed:ae:e4:98:7f:46:a9:1e:65:85:85:
31:28:7f:97:4b:8d:64:08:bf:93:a6:0e:94:bf:e3:30:84:41:
fe:11:ae:06:98:70:8a:26:08:8e:ef:b5:57:08:96:4c:e3:a3:
bd:7a:f3:33:3c:fa:2a:dd:f6:81:b7:46:26:d6:9f:a0:10:62:
59:f5:14:35:e3:bf:8a:d3:01:e9:ed:97:5c:1c:25:03:2d:f1:
f0:d1:90:62:49:56:ab:13:79:e2:5d:64:03:b5:16:06:2f:92:
57:72:67:ae:5a:03:da:c1:d4:e9:ab:87:43:2a:c5:28:3f:e9:
6b:82:fd:66:aa:7c:5d:ff:59:79:93:65:d6:ee:e3:c1:c7:4b:
23:2c:7b:2c:96:d4:ac:6c:c8:b6:20:1c:38:8e:e0:38:13:a1:
90:25:ab:ac:12:7b:df:57:38:22:a2:d8:68:b1:4c:af:92:e2:
36:db:66:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:29 2026 by rpki-client