This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: y5oGy0Yg3YYCrXd3i9ICX/InqE+hDZ8emUobAj7gEcc=
Subject key identifier: B2:81:62:14:96:5B:7E:BB:31:8A:99:EC:1C:61:7D:C6:2B:82:AF:BD
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019C439093095D21394F786808438C77105A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 18:01:14 +0000
Manifest this update: Mon 09 Feb 2026 18:01:14 +0000
Manifest next update: Tue 10 Feb 2026 18:01:14 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: yQJlDHiQIsF5RtFNClp9UZkRu0OAm0iXSetP6LVi0Q0=)
2: LHItdF87GeyP1buZP_fcY5a5ENU.roa (hash: jW7AxvuXoer7YvOlLBJ0mSJBoA6utjjp501DZ9uoG5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:93:09:5d:21:39:4f:78:68:08:43:8c:77:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Feb 9 18:01:14 2026 GMT
Not After : Feb 10 18:01:14 2026 GMT
Subject: CN=b2816214965b7ebb318a99ec1c617dc62b82afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:60:f5:2e:2d:3a:86:52:25:22:f5:1d:fb:
12:8a:3a:b0:ff:1c:35:43:c7:0e:d7:fa:c3:1c:e2:
f5:9b:7a:2f:20:74:20:00:c7:22:2b:5a:97:23:88:
dd:5e:36:4c:5e:cb:19:4a:74:31:7a:53:0f:e5:50:
4e:bb:a3:a6:f4:10:52:45:9d:4f:ec:57:0d:59:02:
85:e9:4a:b3:f9:82:a1:39:3b:fe:d6:16:df:ef:c9:
e9:ad:52:7e:da:0c:70:a7:c9:ec:07:75:ef:f3:0b:
32:0f:40:fa:8f:93:f6:58:3e:67:57:34:27:2d:66:
21:a8:82:6c:82:16:ea:67:96:ba:71:05:ad:62:96:
b5:29:dc:aa:1f:ce:b8:6a:81:a1:87:82:c5:c1:19:
5b:0c:82:b6:48:1f:13:f3:7e:8d:7a:df:5d:4d:51:
b1:dc:c6:20:d1:22:cf:06:56:04:8d:9b:67:f4:4e:
14:20:5a:ef:3a:86:6f:1e:9c:da:5d:4d:41:19:08:
49:3c:47:bb:66:c5:c0:b8:85:af:cd:90:04:92:a3:
6e:ef:ca:d5:a1:62:03:d7:94:ef:5e:af:09:f9:78:
fe:8c:0a:16:1c:32:cc:c8:a1:02:7a:c6:41:58:4a:
03:12:ed:27:73:ac:b6:ea:52:d6:a3:3b:46:0a:c4:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:62:14:96:5B:7E:BB:31:8A:99:EC:1C:61:7D:C6:2B:82:AF:BD
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:a5:59:1b:f9:9d:04:59:61:26:44:1c:e2:2b:47:62:29:
24:c3:56:3f:01:e5:4d:8f:4d:a7:ce:3f:28:99:ad:63:24:88:
01:b1:5f:b8:a5:a2:cf:2b:c6:ed:60:cd:b0:79:01:a5:d8:29:
32:0d:13:f3:02:15:30:58:05:04:94:bd:d7:9e:1c:57:c7:6b:
46:8c:0a:26:37:ea:88:2d:6e:8b:94:7a:e9:b1:e1:34:fe:47:
29:0c:8e:15:51:de:f3:19:32:e8:37:6a:a4:98:8a:9f:d9:2e:
16:1e:60:ee:28:a4:aa:de:fb:13:c8:42:f4:fe:61:ec:ed:11:
1d:e7:16:16:92:84:8e:d7:9b:3a:df:59:cc:8f:aa:e9:80:6c:
11:71:4d:6b:37:75:e2:f7:45:d8:05:dd:68:4e:ad:e9:b4:c6:
39:66:91:59:54:37:07:49:12:2e:31:b4:ba:4a:fe:6a:e5:53:
19:93:82:89:c2:cb:df:c1:49:c9:d6:4e:33:2f:15:6e:90:93:
d1:fb:ec:c1:2d:30:7f:dd:1a:bb:49:2d:d0:12:1d:b6:f5:7d:
02:eb:40:1a:cd:ba:a8:61:45:6b:c8:05:56:3b:97:5f:3d:70:
1f:e5:01:77:b4:e1:5d:36:b2:ca:ae:06:71:80:2d:64:e0:f1:
73:c6:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:43 2026 by rpki-client