This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: akYqdNRA1JA9zVrsYPH1bbB9bAKUGBBEe9l5vllFua8=
Subject key identifier: AC:D9:96:33:69:DE:39:6E:1F:5A:A2:93:A3:23:CF:2B:95:09:9F:FD
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019C435935BEA9ECE539C406FE3735E20316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 13E0
Signing time: Mon 09 Feb 2026 17:00:45 +0000
Manifest this update: Mon 09 Feb 2026 17:00:45 +0000
Manifest next update: Tue 10 Feb 2026 17:00:45 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: 33lFI10Ua9Po7M9mE4UANmn9sUZVhoxUK96Qr746uyQ=)
2: t87-StaNkWoIrvxpm-LKJGpGKeM.roa (hash: r4gMZM/MRHYsjQV9QPuG6dWd9zz5OkmUPJF3gcNO56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:35:be:a9:ec:e5:39:c4:06:fe:37:35:e2:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Feb 9 17:00:45 2026 GMT
Not After : Feb 10 17:00:45 2026 GMT
Subject: CN=acd9963369de396e1f5aa293a323cf2b95099ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:3d:d3:7e:68:ec:e1:6f:bd:19:9a:b2:27:
4f:bd:0d:ef:2a:c4:7f:3c:55:64:37:61:4c:ac:89:
92:63:8e:95:d8:f4:9f:ee:1a:f2:06:0d:6f:b2:d0:
83:12:ef:af:df:b5:8c:bb:e9:be:a8:e5:1b:6c:40:
66:41:d2:52:38:8a:3a:47:71:b2:e8:8e:d4:6e:8f:
99:c9:a8:1d:ce:cd:b1:91:a8:47:48:b4:08:64:e7:
3c:84:c8:33:bf:b0:07:37:4b:fe:61:f2:09:86:4d:
28:f9:dc:a9:80:fe:17:15:f6:17:4c:f3:ee:67:fa:
33:7c:dd:e2:03:09:d6:22:d9:fd:ef:f5:87:5c:4c:
13:2e:f4:85:51:d3:13:6a:f3:e1:15:62:de:ac:28:
aa:20:05:21:30:89:36:3a:bf:e2:50:0b:0d:31:09:
5d:ce:07:4d:18:b0:ac:2a:8a:5b:44:28:a4:c6:20:
6b:58:92:f9:58:ae:7d:c5:63:0f:ac:03:54:a5:83:
76:bf:c4:b9:55:21:fe:3c:57:76:69:56:00:24:32:
d3:ec:15:4e:20:c0:b5:7a:60:2a:3f:12:41:0a:95:
fb:e1:2a:ea:20:c7:5c:e3:90:d1:7d:b7:16:8f:3e:
72:62:90:c5:6a:4d:f1:52:8c:0b:18:5b:8b:5c:74:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:96:33:69:DE:39:6E:1F:5A:A2:93:A3:23:CF:2B:95:09:9F:FD
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6a:3d:4f:f1:91:4f:9e:55:dd:1f:cf:16:34:f0:e1:7c:6b:
4b:59:8b:fe:b3:56:47:75:da:98:42:93:60:11:96:33:3c:e8:
02:e1:90:62:df:ec:2c:b6:a8:55:db:dc:c4:a3:9b:6c:d5:4f:
2a:c0:ae:d0:3b:c4:89:7e:6d:e2:41:2a:e2:a1:ce:cd:f1:70:
c3:43:af:6f:2a:22:7e:7f:6c:5c:f1:8e:49:76:0f:3d:ee:71:
bd:ee:c9:bd:47:17:28:6b:18:8e:0b:bc:fa:19:d0:9d:8a:84:
f9:9b:58:f2:96:6a:3f:99:6e:7a:ab:c0:05:9b:88:a5:2c:1e:
30:38:bb:50:06:ac:4b:a1:7b:9f:0f:86:4c:a4:e1:90:44:86:
a2:24:8e:0a:70:c7:8d:0a:0d:49:b2:4f:7f:13:27:ce:d3:fb:
fe:47:ab:da:1e:97:08:f8:bc:10:84:54:9c:78:61:29:65:a4:
6b:f7:41:c7:f6:2b:df:b5:79:c9:a5:19:35:a9:ba:b7:1d:c0:
2c:66:2e:69:e3:d0:9b:a0:65:10:1f:5e:82:b6:5a:cc:ef:8e:
f7:c0:27:c4:4f:9f:63:05:75:ac:fa:67:0d:09:7b:86:4c:ef:
c2:37:49:23:4d:f4:60:3a:f8:97:dd:27:31:14:6c:9b:76:29:
b0:22:2a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWTW+qezlOcQG/jc14gMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk
Y2NlOTkwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD
EyhhY2Q5OTYzMzY5ZGUzOTZlMWY1YWEyOTNhMzIzY2YyYjk1MDk5ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+I9035o7OFvvRmasidPvQ3vKsR/
PFVkN2FMrImSY46V2PSf7hryBg1vstCDEu+v37WMu+m+qOUbbEBmQdJSOIo6R3Gy
6I7Ubo+Zyagdzs2xkahHSLQIZOc8hMgzv7AHN0v+YfIJhk0o+dypgP4XFfYXTPPu
Z/ozfN3iAwnWItn97/WHXEwTLvSFUdMTavPhFWLerCiqIAUhMIk2Or/iUAsNMQld
zgdNGLCsKopbRCikxiBrWJL5WK59xWMPrANUpYN2v8S5VSH+PFd2aVYAJDLT7BVO
IMC1emAqPxJBCpX74SrqIMdc45DRfbcWjz5yYpDFak3xUowLGFuLXHTwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzZljNp3jluH1qik6MjzyuVCZ/9MB8GA1UdIwQY
MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct
NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3
LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWo9T/GR
T55V3R/PFjTw4XxrS1mL/rNWR3XamEKTYBGWMzzoAuGQYt/sLLaoVdvcxKObbNVP
KsCu0DvEiX5t4kEq4qHOzfFww0Ovbyoifn9sXPGOSXYPPe5xve7JvUcXKGsYjgu8
+hnQnYqE+ZtY8pZqP5lueqvABZuIpSweMDi7UAasS6F7nw+GTKThkESGoiSOCnDH
jQoNSbJPfxMnztP7/ker2h6XCPi8EIRUnHhhKWWka/dBx/Yr37V5yaUZNam6tx3A
LGYuaePQm6BlEB9egrZazO+O98AnxE+fYwV1rPpnDQl7hkzvwjdJI030YDr4l90n
MRRsm3YpsCIqOQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:55 2026 by rpki-client