This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: R273NpWLDotzOfDm4bkeiBSNWGz2QJgGiycx3LeFtIY=
Subject key identifier: FB:C5:8B:A0:D0:58:3C:B6:4C:83:EB:30:19:1C:65:2C:67:A2:A3:DE
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 019C427DBA112FA3B07894F390AAF252854F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0DDB
Signing time: Mon 09 Feb 2026 13:01:01 +0000
Manifest this update: Mon 09 Feb 2026 13:01:01 +0000
Manifest next update: Tue 10 Feb 2026 13:01:01 +0000
Files and hashes: 1: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: 0nMfysBamMj0iK9m9Yf6KKiMpWcxtWQs98lx1nZmiz4=)
2: ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa (hash: 4Ym0wTobeB1H+GWUNtcZZO3RjaiOd4ZAgsLU5dSiWcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:ba:11:2f:a3:b0:78:94:f3:90:aa:f2:52:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Feb 9 13:01:01 2026 GMT
Not After : Feb 10 13:01:01 2026 GMT
Subject: CN=fbc58ba0d0583cb64c83eb30191c652c67a2a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:98:b3:96:0a:f1:11:aa:0f:ae:c0:06:2d:
2b:8e:cc:1a:c2:2f:3e:c7:2b:db:ad:17:2f:74:a4:
16:55:2a:4a:63:1a:28:c7:2b:c2:6e:52:cf:ff:65:
65:e9:c7:2b:b7:fe:55:e9:60:4f:ce:37:2e:b1:d2:
d7:db:b5:21:87:78:c6:ab:3a:0e:34:0a:ec:f1:bb:
9a:3a:b6:1e:b0:f6:83:94:25:59:94:7a:d6:59:be:
b2:b4:db:d3:74:3f:7d:bb:1a:6b:50:5d:7d:33:fd:
49:b9:91:a5:26:13:c9:df:7e:cc:78:46:fa:17:1d:
a8:38:7d:33:dc:a4:43:02:e4:33:f7:33:7d:35:03:
e4:69:00:d9:45:90:a3:21:cd:c1:b0:9d:6d:fa:d7:
c3:15:ca:a8:20:e4:d5:2d:5b:38:09:a2:4c:f3:82:
34:6c:70:88:22:91:89:b0:79:ca:89:df:4a:03:d6:
5e:af:1b:26:7e:da:0b:de:2e:94:25:2d:8a:cb:bc:
63:ba:2c:5d:84:b9:03:3a:13:43:9f:6d:ce:3e:bb:
2d:87:91:f7:76:34:40:32:ad:82:fe:f9:b3:8e:ca:
8f:b6:32:55:fb:fe:e0:19:d5:e3:12:f9:b4:6e:d6:
4a:d4:0b:0c:16:6f:ac:48:7a:86:18:69:b0:53:bc:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:8B:A0:D0:58:3C:B6:4C:83:EB:30:19:1C:65:2C:67:A2:A3:DE
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:06:b8:f7:81:1d:34:8f:df:4b:12:1e:81:a9:66:b5:c3:4b:
f1:af:90:9c:c0:da:4f:0d:15:8a:db:6b:d9:c0:a7:a5:a5:7a:
2e:89:9f:bb:ec:79:74:81:d4:83:58:7b:9c:15:bf:70:6e:7a:
1c:24:29:4f:1d:63:42:30:83:c5:39:47:98:af:02:9c:3b:c8:
3d:ec:15:3e:b4:95:ef:e6:3d:68:af:1c:c5:64:d4:d6:dc:87:
0c:e7:23:44:38:bd:2c:49:2d:d8:2f:86:60:1e:e4:84:2a:79:
46:4b:47:0f:0c:66:4f:4b:2b:e8:6a:25:b1:4c:f4:98:38:40:
ee:b4:4b:fe:78:a5:40:a6:39:9b:cc:79:90:ff:f5:86:99:8e:
51:19:02:1f:e7:3c:e1:66:4c:6c:7d:4a:0e:ee:e5:22:05:54:
f0:84:f3:ae:08:48:74:5b:28:61:77:28:7f:2a:c4:0d:20:3e:
f8:03:25:5c:eb:b3:25:dd:e3:7d:c4:97:13:59:9d:f8:87:85:
54:b2:fa:e4:f9:27:44:1e:94:cd:4d:1f:e2:2d:5c:98:1d:0e:
11:58:36:0c:dc:95:5a:64:66:fb:88:89:05:a1:8c:3d:b1:85:
20:ca:16:e4:47:16:99:b0:b4:88:c6:ac:72:05:e4:82:32:7a:
b6:12:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:43 2026 by rpki-client