This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: QagwQPEWqkOsniOCUV1TJcT795fxDmmMc3SbpmBGaQo=
Subject key identifier: B8:8E:D8:CA:68:65:E6:A5:44:C3:DD:EF:10:87:6F:7A:4D:69:AA:D0
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019C4390B1520AB0FB7F201CE2319188F101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0C1E
Signing time: Mon 09 Feb 2026 18:01:21 +0000
Manifest this update: Mon 09 Feb 2026 18:01:21 +0000
Manifest next update: Tue 10 Feb 2026 18:01:21 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: fC8XgTpIWbiCdD0faXHH0ep3IWbzKgq3qUji3o1RrnU=)
2: nPnN-mV_c2-YF1lYIozKulfXb-I.roa (hash: Vt2SDSHBDDSYSW6xQWsdmfz8p7B5Lt8QbmhuE6bmJeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:b1:52:0a:b0:fb:7f:20:1c:e2:31:91:88:f1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Feb 9 18:01:21 2026 GMT
Not After : Feb 10 18:01:21 2026 GMT
Subject: CN=b88ed8ca6865e6a544c3ddef10876f7a4d69aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:90:df:b1:aa:de:46:85:65:83:df:af:9c:57:
41:69:b3:23:fe:b2:70:86:60:7e:f0:96:81:1b:91:
4a:cf:91:7f:59:7a:81:06:61:38:c6:8a:38:65:63:
cc:19:a8:b9:90:37:85:a3:b2:4a:13:ad:88:4d:58:
33:a0:f1:52:b8:ad:34:6d:f1:c1:38:6c:bc:e8:41:
db:42:6b:88:3f:3a:5c:fe:b7:00:53:cb:76:f5:23:
e9:d0:10:0b:ad:31:3f:44:f1:9d:2f:d2:e4:da:dd:
ec:d7:52:f0:98:e3:cc:cf:9e:07:8c:3c:ee:c4:80:
da:68:37:c6:e2:b1:ad:fa:f4:ff:df:19:73:90:c5:
a5:e0:3a:a7:b8:91:28:6d:61:10:bc:4d:fc:d0:fa:
79:d9:80:0e:82:ff:15:dd:ef:fb:04:19:1e:fe:4d:
1c:ef:4f:d7:8d:ba:b7:df:f6:1e:d5:9d:28:18:19:
3a:6c:90:8b:0a:32:e6:eb:14:2c:a3:53:a3:94:e6:
fe:cd:ee:9c:c8:6c:80:5e:47:cb:5d:09:65:40:50:
a8:ae:15:be:a0:03:40:35:a6:9c:0a:87:44:12:62:
07:7d:5b:9c:d5:55:63:72:18:31:1a:86:ce:7a:3d:
a7:c4:a6:6a:c6:d1:5d:c7:52:8f:7c:78:23:52:98:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:D8:CA:68:65:E6:A5:44:C3:DD:EF:10:87:6F:7A:4D:69:AA:D0
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:b1:36:5b:74:be:24:61:6a:38:7b:c8:81:95:31:dc:3d:
35:f7:a5:0c:db:fd:2c:51:4e:ff:c2:3c:00:c9:78:2f:34:05:
b0:e5:71:cc:bc:be:48:07:72:cf:2c:1d:34:f7:17:41:01:77:
fd:87:f5:fb:b7:7e:37:99:5d:5f:66:07:d9:66:4b:05:2f:da:
bd:48:53:dd:38:16:07:a6:d4:a3:1c:27:b1:cb:b3:11:d6:a7:
0d:af:d0:dd:0b:3b:6d:b9:0b:83:9e:a9:fa:e9:73:09:1b:10:
41:ee:d0:37:12:23:ca:6e:e9:0a:fe:ee:a7:bd:59:31:12:67:
36:98:36:2c:40:45:df:34:8c:a9:69:ec:b4:65:05:f8:f7:35:
16:4f:2e:7c:7e:2a:5f:f1:9f:09:c6:63:cf:aa:7d:74:72:e9:
d9:45:23:82:e4:71:b2:46:a9:50:af:d6:ca:39:e3:35:16:fd:
e5:29:fc:a6:e6:d7:72:89:02:66:05:9a:03:94:30:2f:f9:8f:
dd:cb:bb:fa:4e:6d:73:ad:de:0a:13:41:8e:9f:9b:3b:24:e7:
13:df:1d:b6:5a:de:78:6e:c3:87:10:6e:f2:bd:65:67:03:ce:
a5:0b:bc:de:bd:84:0b:31:e8:97:d2:67:d5:c5:ad:4d:9a:80:
61:62:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:25 2026 by rpki-client