This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
File: qqlyrDzBD3FspJhQRaXwgktgyh8.mft (raw, json)
Hash identifier: VOg25ewQRE34NVtIXt/0EMuNjLOMszNGmL3zo5V8pWs=
Subject key identifier: 78:D6:45:20:A3:56:6C:9B:C3:07:48:51:49:B6:2E:F7:C3:2C:79:82
Authority key identifier: AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
Certificate issuer: /CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Certificate serial: 019C40FD4CECA9B16DBD1DDFD936F76BAB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
Manifest number: 031B
Signing time: Mon 09 Feb 2026 06:01:07 +0000
Manifest this update: Mon 09 Feb 2026 06:01:07 +0000
Manifest next update: Tue 10 Feb 2026 06:01:07 +0000
Files and hashes: 1: 7W24_Rf5Ko2iEUxEGRog5wJv6lg.roa (hash: dJfyXH3Ih6KNLcTIHiS1qro2e4tZl7n+nF8SgkkUKW8=)
2: qqlyrDzBD3FspJhQRaXwgktgyh8.crl (hash: mMsbaVR1qF/gGP9qpHxlOWMlNIiLsMzut9zO97Ebodo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:4c:ec:a9:b1:6d:bd:1d:df:d9:36:f7:6b:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa972ac3cc10f716ca4985045a5f0824b60ca1f
Validity
Not Before: Feb 9 06:01:07 2026 GMT
Not After : Feb 10 06:01:07 2026 GMT
Subject: CN=78d64520a3566c9bc307485149b62ef7c32c7982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:e2:06:c1:b4:2a:7e:1f:5e:cb:e8:fc:b6:
9c:03:a4:90:8d:37:66:9f:c8:06:79:d1:15:aa:9f:
c3:b6:5e:38:ed:80:21:7b:9b:ae:e5:3f:b7:9b:21:
6a:ca:6e:af:fb:a5:ea:c5:d9:8d:01:32:eb:b6:87:
0d:91:d1:f7:67:e9:ed:da:a9:df:62:b6:8f:25:2b:
5e:52:ab:a7:88:90:96:93:66:f9:d4:60:d7:48:50:
be:c6:17:3e:98:6a:83:42:45:1e:2d:a7:74:e6:a1:
46:da:29:56:14:d8:c8:f5:5f:43:c4:79:0e:bb:8d:
04:65:9f:87:08:07:24:c0:53:10:92:4c:6d:b5:07:
1c:32:47:24:02:b4:5b:5d:d5:82:c4:3e:49:e5:2e:
62:63:5f:f7:71:5a:30:86:b5:88:08:34:41:b7:93:
8d:30:b8:68:d1:5b:26:c6:f0:07:ef:47:19:c0:1e:
5b:5b:97:52:8e:24:c6:33:d9:bc:83:a4:d5:be:45:
b9:35:63:b1:1e:ad:7a:fd:a3:32:b3:57:4d:fb:89:
d9:1c:41:ec:c5:33:fa:f7:e0:c4:44:f9:61:7b:9b:
64:8a:1b:3c:ff:cc:eb:94:90:73:59:62:fb:c4:a7:
66:d0:3a:42:14:6e:16:a0:75:b9:80:20:be:a6:81:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:45:20:A3:56:6C:9B:C3:07:48:51:49:B6:2E:F7:C3:2C:79:82
X509v3 Authority Key Identifier:
keyid:AA:A9:72:AC:3C:C1:0F:71:6C:A4:98:50:45:A5:F0:82:4B:60:CA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqlyrDzBD3FspJhQRaXwgktgyh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d09fb9-f3fa-45b8-a5cd-77b489249fa4/1/qqlyrDzBD3FspJhQRaXwgktgyh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bd:ee:de:c7:82:da:1c:01:69:a7:b4:a0:88:34:2e:69:4e:
11:88:9e:c2:54:19:2e:83:ae:99:74:61:bd:9e:c7:d3:4d:c4:
fb:04:9b:64:04:30:2a:62:ad:f7:b7:22:61:dd:ba:d5:6d:1f:
b1:a7:6a:e5:85:e6:7e:77:f2:53:2c:27:5d:15:b2:ad:ce:4f:
f2:88:ee:cc:9c:e1:73:01:20:c3:a6:4d:e6:d9:df:9f:1c:bf:
c8:4b:03:c1:3d:df:2c:b1:34:47:5e:0d:62:ee:98:a7:53:1e:
b0:fa:b8:fb:f7:88:4b:21:82:b9:f6:48:84:71:0b:32:b6:1f:
22:67:62:40:21:30:ef:2c:ec:32:07:f9:0b:5a:d7:5f:bb:f0:
62:ef:fe:40:d3:0e:dd:15:c0:e4:9a:38:ee:23:ad:2e:58:51:
ae:19:2d:33:db:91:e8:b5:3b:2f:d0:66:66:d5:f5:16:dc:5a:
7b:5e:d7:26:93:6d:c7:a2:89:98:e6:f4:12:47:27:ca:2b:45:
a1:d2:4d:8e:5e:fd:65:ef:53:0f:87:01:61:ea:94:3b:4f:40:
96:a3:df:d6:4c:e0:89:02:3e:f1:12:1b:04:53:0f:7c:5f:47:
0e:a0:a5:ca:e1:b6:32:b1:e6:bd:92:26:d2:07:13:03:8d:dd:
ef:91:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:00 2026 by rpki-client