This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: avDeK6w7UEH2nGvaWNPomDatqncNvmhsnLF75X5r/sY=
Subject key identifier: D9:AD:B0:86:36:75:33:1A:5B:58:7C:D6:42:1B:6C:20:EB:91:C5:9D
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019C438FAA1B8DCF0BBD0CF420E8ACCC2C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 18:00:14 +0000
Manifest this update: Mon 09 Feb 2026 18:00:14 +0000
Manifest next update: Tue 10 Feb 2026 18:00:14 +0000
Files and hashes: 1: l8Y52p5aI63FDuq51m4qJ-mPHY4.roa (hash: wSpWuBqn1Tlul2t7+8SYMlOp535GnFPP8F8ir7MJTSU=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: S0hKU/09umkVd/LOuuWGovGvfms4IRvCFKyK66Up19E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:aa:1b:8d:cf:0b:bd:0c:f4:20:e8:ac:cc:2c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Feb 9 18:00:14 2026 GMT
Not After : Feb 10 18:00:14 2026 GMT
Subject: CN=d9adb0863675331a5b587cd6421b6c20eb91c59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:99:5f:ad:d0:fe:15:bc:82:4a:47:e2:e4:5b:
d0:af:44:cc:d3:fa:6d:a0:6a:60:03:4c:c7:b7:b8:
5f:d9:8e:39:c2:6b:ed:fa:05:18:c7:2b:61:52:47:
a2:1a:67:6b:68:6c:3f:a9:1f:45:dc:b4:67:b9:06:
9b:7c:87:bc:14:f4:37:ec:1e:66:87:d5:f3:09:8b:
36:d5:cf:b8:1f:81:25:f7:7b:3d:38:ea:2d:8c:10:
2b:10:41:2c:ab:6c:c3:e8:44:32:82:37:6a:02:a1:
e1:4b:cd:b7:b4:fa:a3:79:0c:91:94:e5:3d:81:cb:
0a:a7:4a:0b:6e:90:36:5c:ec:0f:f2:7a:35:f6:e3:
1f:63:28:c7:da:bf:1d:ac:b7:00:40:cf:ec:28:d5:
4d:9a:56:2e:93:16:8c:c7:88:ab:ed:11:79:5c:d9:
54:4a:66:e6:df:00:82:4e:71:49:21:1a:85:de:d4:
df:00:c2:f2:e0:75:a8:14:ef:d2:bd:3d:9e:d8:db:
26:ed:32:8a:82:79:58:4b:67:ec:99:37:b1:e8:e5:
ed:5d:23:2f:d5:28:0a:a9:3a:bf:78:3f:a8:b8:d6:
3b:99:1b:8c:68:12:cf:e2:6a:51:99:be:0f:e3:70:
19:83:05:b9:c8:6c:b5:dd:c1:16:54:88:fe:88:25:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AD:B0:86:36:75:33:1A:5B:58:7C:D6:42:1B:6C:20:EB:91:C5:9D
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:cd:60:54:84:5e:4f:e4:e5:37:fc:fb:98:81:96:d5:2d:
bc:3c:41:53:63:d7:1e:97:ba:f3:05:4c:5b:2d:68:7d:8c:b0:
3f:26:9c:5f:ca:b1:01:58:36:96:21:fb:c3:fc:ea:7f:91:40:
ba:aa:ed:b0:9c:92:51:8b:60:19:ab:9f:0c:e7:6b:bd:7f:d4:
bc:31:9f:1c:19:b3:1f:00:58:9f:3b:30:7f:0e:62:ee:8b:fe:
9c:d0:05:83:6b:b0:2e:e7:96:1f:cd:d9:94:b8:07:8d:12:70:
e1:fc:81:fe:06:bf:06:23:6c:e0:e3:55:2a:74:57:30:75:c3:
cf:2d:99:38:b2:62:4d:d4:d2:1b:f0:50:ef:42:fa:e7:b9:0e:
8c:01:b8:1e:9f:45:82:9f:1d:53:dd:7f:5c:9c:d3:f5:6e:c6:
d6:9a:6a:a1:98:66:a5:ec:31:4d:04:1d:c9:92:1f:25:63:fa:
7e:1a:34:4a:58:32:e0:42:88:d6:8a:9c:b6:a4:f4:75:ac:0c:
ef:64:85:ab:27:9a:e7:0b:0d:24:1b:83:55:d7:3b:d9:55:f5:
ae:c5:67:bd:81:c4:20:63:2f:b2:93:9e:26:41:8f:62:3f:3a:
b3:0d:ab:05:f2:92:46:7a:a7:7f:d5:76:a7:91:d3:80:70:85:
08:6e:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:50:01 2026 by rpki-client