This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
File: QcDxLXt-PST_2s2mIykIit-CLGU.mft (raw, json)
Hash identifier: kL6LS5cS4f2QFqT6rhIOVPCj5+AFgg12wf1Y6taGL0o=
Subject key identifier: 0B:41:FC:BD:2E:E6:F1:0C:97:6F:10:66:94:E7:76:DD:B4:05:CB:76
Authority key identifier: 41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
Certificate issuer: /CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Certificate serial: 019C43906FB8F20C35A1D7A5EE705DC14636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
Manifest number: 58
Signing time: Mon 09 Feb 2026 18:01:05 +0000
Manifest this update: Mon 09 Feb 2026 18:01:05 +0000
Manifest next update: Tue 10 Feb 2026 18:01:05 +0000
Files and hashes: 1: QcDxLXt-PST_2s2mIykIit-CLGU.crl (hash: 6h0rU+rOSbHUBizhdERUprKZvSho/eOINdYBmfgVw4U=)
2: xzDsmiUqleZ3an0dKwF9YKrCXbo.roa (hash: uzVprCxWmkZJHSRd+F/qEhtG6NAb2goZTSDgkRcdqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:6f:b8:f2:0c:35:a1:d7:a5:ee:70:5d:c1:46:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c0f12d7b7e3d24ffdacda62329088adf822c65
Validity
Not Before: Feb 9 18:01:05 2026 GMT
Not After : Feb 10 18:01:05 2026 GMT
Subject: CN=0b41fcbd2ee6f10c976f106694e776ddb405cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:7d:80:87:0a:93:86:fa:2b:e5:0d:79:e8:
e5:9f:0b:18:da:52:b8:6d:f0:e1:01:8c:16:89:80:
cb:9b:31:87:3c:4a:f0:a0:6f:c9:93:d2:46:88:7a:
b1:31:63:f8:89:c5:3c:db:cc:1b:47:ef:17:24:9d:
c6:ab:64:d8:0e:de:59:08:fd:9d:a4:2f:6a:e2:75:
ac:0b:59:ef:cf:fd:2e:5b:ae:8d:5d:99:9d:ba:f7:
6f:b0:08:bc:ca:86:d4:16:b0:b8:1e:eb:8d:ed:5f:
be:57:30:48:c8:25:6b:22:d2:77:94:da:99:6f:a9:
c5:3b:55:f4:fc:21:00:8c:ce:78:8c:66:b5:8b:33:
2b:4e:20:26:5c:ab:e8:4e:06:b1:3f:50:50:ad:bc:
f2:af:2d:05:14:04:27:d0:8e:f1:bd:2d:4c:46:ff:
46:6c:1b:3c:41:54:d2:bc:88:7c:03:f6:e3:a8:f9:
29:3c:e3:32:41:b3:41:fe:11:bf:f1:fe:a5:8b:81:
a8:36:b6:35:b6:d7:2a:83:63:9a:50:d7:e2:20:26:
c5:01:82:c3:0d:2f:ce:af:1a:39:8c:20:02:e3:8b:
24:71:0b:12:1e:3c:c6:4d:0b:27:65:21:0a:3f:8e:
7d:6d:93:a6:5f:30:88:6b:d8:27:df:42:1a:88:d1:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:FC:BD:2E:E6:F1:0C:97:6F:10:66:94:E7:76:DD:B4:05:CB:76
X509v3 Authority Key Identifier:
keyid:41:C0:F1:2D:7B:7E:3D:24:FF:DA:CD:A6:23:29:08:8A:DF:82:2C:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcDxLXt-PST_2s2mIykIit-CLGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/99a8fd-bf6e-41da-b92e-ce9ed925e51b/1/QcDxLXt-PST_2s2mIykIit-CLGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0f:d9:d3:98:d2:78:30:90:9d:47:90:a8:06:18:11:8b:96:
07:18:12:d4:7b:1d:09:83:92:14:22:25:26:b9:05:33:ec:77:
66:23:05:c7:7c:a0:b6:cc:37:55:18:ec:61:7a:a8:20:2f:01:
a3:d6:aa:8d:f0:c6:07:6b:a0:2e:47:0c:ab:5e:fd:7a:9e:83:
59:6e:3e:e0:90:46:56:37:c0:04:7b:9d:9c:a4:44:9f:2d:bd:
69:ab:e5:93:88:d2:84:35:5c:3d:db:49:0b:c8:2e:b9:01:44:
1c:56:e5:84:c2:49:a4:3c:99:99:1e:48:5b:c0:ca:65:f9:48:
d5:f7:f0:f3:ff:45:b9:3a:06:b9:5c:6b:32:83:20:d6:6a:51:
6d:60:19:45:a1:72:af:f6:ac:fa:38:e1:4a:85:8d:79:a9:c3:
71:77:71:d1:0c:ea:5e:3b:f4:26:ae:98:dc:8e:30:10:29:55:
f0:12:fa:62:fb:b6:33:71:f5:a3:a5:65:3c:0b:f6:3a:fb:91:
10:28:be:36:ac:98:23:be:f0:5e:c9:9c:ec:30:6d:3d:33:9d:
2a:81:ed:c8:87:b0:40:55:dc:61:d9:55:d7:2c:cd:31:42:25:
a5:00:b2:15:5b:fc:4e:3a:e4:61:77:94:ac:67:5e:44:ac:41:
af:5d:54:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDkG+48gw1odel7nBdwUY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzBmMTJkN2I3ZTNkMjRmZmRhY2RhNjIzMjkwODhhZGY4
MjJjNjUwHhcNMjYwMjA5MTgwMTA1WhcNMjYwMjEwMTgwMTA1WjAzMTEwLwYDVQQD
EygwYjQxZmNiZDJlZTZmMTBjOTc2ZjEwNjY5NGU3NzZkZGI0MDVjYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPV9gIcKk4b6K+UNeejlnwsY2lK4
bfDhAYwWiYDLmzGHPErwoG/Jk9JGiHqxMWP4icU828wbR+8XJJ3Gq2TYDt5ZCP2d
pC9q4nWsC1nvz/0uW66NXZmduvdvsAi8yobUFrC4HuuN7V++VzBIyCVrItJ3lNqZ
b6nFO1X0/CEAjM54jGa1izMrTiAmXKvoTgaxP1BQrbzyry0FFAQn0I7xvS1MRv9G
bBs8QVTSvIh8A/bjqPkpPOMyQbNB/hG/8f6li4GoNrY1ttcqg2OaUNfiICbFAYLD
DS/Orxo5jCAC44skcQsSHjzGTQsnZSEKP459bZOmXzCIa9gn30IaiNGYxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtB/L0u5vEMl28QZpTndt20Bct2MB8GA1UdIwQY
MBaAFEHA8S17fj0k/9rNpiMpCIrfgixlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUt
Y2U5ZWQ5MjVlNTFiLzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85OWE4ZmQtYmY2ZS00MWRhLWI5MmUtY2U5ZWQ5MjVlNTFi
LzEvUWNEeExYdC1QU1RfMnMybUl5a0lpdC1DTEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw/Z05jS
eDCQnUeQqAYYEYuWBxgS1HsdCYOSFCIlJrkFM+x3ZiMFx3ygtsw3VRjsYXqoIC8B
o9aqjfDGB2ugLkcMq179ep6DWW4+4JBGVjfABHudnKREny29aavlk4jShDVcPdtJ
C8guuQFEHFblhMJJpDyZmR5IW8DKZflI1ffw8/9FuToGuVxrMoMg1mpRbWAZRaFy
r/as+jjhSoWNeanDcXdx0QzqXjv0Jq6Y3I4wEClV8BL6Yvu2M3H1o6VlPAv2OvuR
ECi+NqyYI77wXsmc7DBtPTOdKoHtyIewQFXcYdlV1yzNMUIlpQCyFVv8TjrkYXeU
rGdeRKxBr11UJw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:52 2026 by rpki-client