This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: LeKS8bv77WF4zh68SKvuFrTUoJ4ylWvalrzYmQdL+Ck=
Subject key identifier: CB:27:BF:3C:1A:BD:AA:88:4C:FF:60:9D:40:94:22:98:F4:C9:3B:1F
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 019C3641EFA35DD6ACA505BA07A76D593F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 09E1
Signing time: Sat 07 Feb 2026 04:00:16 +0000
Manifest this update: Sat 07 Feb 2026 04:00:16 +0000
Manifest next update: Sun 08 Feb 2026 04:00:16 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: /gg5By85mdWVUL+9qizAodjflUpgVgOGXApq/edbnWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:36:41:ef:a3:5d:d6:ac:a5:05:ba:07:a7:6d:59:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Feb 7 04:00:16 2026 GMT
Not After : Feb 8 04:00:16 2026 GMT
Subject: CN=cb27bf3c1abdaa884cff609d40942298f4c93b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:1b:60:c5:f0:07:4c:dc:83:d8:a8:86:60:
47:13:bd:51:71:d7:08:7d:fe:6f:d0:5d:b6:ba:b1:
b3:be:ce:05:07:23:16:8f:6f:41:d8:54:4b:8f:65:
9d:b8:c6:fe:bb:aa:61:cc:ef:36:b5:bc:b6:3e:29:
10:e3:7e:00:29:22:fd:9a:11:74:fd:f6:5b:3a:8e:
5f:56:c3:c4:6e:50:99:da:bf:52:a7:3a:cb:c2:bd:
df:ad:30:45:0b:e8:c2:bb:00:fc:95:c3:cd:56:4d:
b5:5c:76:f5:ed:b9:16:ab:ec:7c:8b:9f:2c:69:d3:
f2:26:6c:a8:a4:79:81:9a:9e:18:b8:a1:11:41:a6:
e3:d2:ed:87:06:47:9a:b7:2d:cf:ff:40:b0:50:71:
35:d1:df:17:01:0a:f4:44:80:c5:44:47:27:82:34:
bd:de:db:d1:ea:80:18:af:72:a0:6b:b6:a7:1f:3c:
4b:51:e0:41:6c:47:b6:17:11:3e:0e:4a:1d:df:4e:
44:81:bb:db:99:55:21:df:42:5d:7e:e4:1e:8c:87:
38:9b:af:47:b3:9d:ef:12:09:94:34:be:8b:35:fa:
b3:b1:ef:51:eb:19:c8:1f:41:b5:8a:d4:c2:7e:81:
33:5d:c7:3a:70:c0:e4:d1:5a:38:1a:bd:e3:ff:7e:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:BF:3C:1A:BD:AA:88:4C:FF:60:9D:40:94:22:98:F4:C9:3B:1F
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:17:56:4c:16:5c:cb:00:0a:b7:0e:60:8b:84:9c:ef:16:7b:
41:ec:bf:fd:c4:4b:7c:6b:56:5b:07:3a:81:4a:dd:9c:52:66:
ed:2a:e8:9a:b7:b5:4f:78:49:82:22:a0:47:1f:39:ef:e6:91:
6e:ff:cb:52:da:81:4f:c2:0f:6f:89:8c:7c:8f:82:bd:3b:f7:
d3:99:22:9e:a1:dd:18:23:65:0a:ce:e3:b1:a9:6f:1d:e9:f3:
0c:1e:65:2f:c9:15:23:be:cf:99:73:a9:2f:a6:0b:d6:3b:8b:
39:fb:c1:c1:c4:98:5f:c7:3f:27:53:4d:83:c6:67:9c:b2:ce:
00:af:e0:82:7c:50:7c:b7:bd:e8:5d:13:94:56:47:c6:64:dd:
e6:fc:b7:ba:4b:33:ed:f6:e7:bc:4b:7c:d3:9a:fb:03:9f:94:
de:8c:d4:ca:d0:ce:8b:0d:9a:33:3f:b0:52:ba:93:d7:0c:37:
72:d1:d3:76:29:44:e1:fc:74:7e:0f:92:b8:35:bc:5c:59:c6:
69:1c:68:4a:49:4a:a9:f3:79:05:3e:38:c5:f1:62:1b:c1:26:
a4:a7:c1:22:94:ed:5b:db:63:a3:b8:9e:61:38:da:3b:9e:61:
e6:d4:ac:fe:ef:48:4e:ac:b0:87:c6:89:82:60:52:c6:1e:36:
74:cd:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 12:16:54 2026 by rpki-client