This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: fTRgR4jjpsJvKK9UVDtdQCHADmQ9DrFLT34UmXLt6tE=
Subject key identifier: 08:D7:CA:A3:FF:95:DA:BD:72:70:3F:04:57:3D:8B:81:F9:A3:F4:1F
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 019C451036716468A96A73F60BECCD745B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0A8C
Signing time: Tue 10 Feb 2026 01:00:16 +0000
Manifest this update: Tue 10 Feb 2026 01:00:16 +0000
Manifest next update: Wed 11 Feb 2026 01:00:16 +0000
Files and hashes: 1: MdQ19d3eFkD78fJxuXq5iy-2rpM.roa (hash: rp9j2xxR/tRXFv1++j74kJ2PghVMO1/nSR5xC0/6LuE=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: WcEXkB+FfcPRJB2BfwNLFmFa2F3xclnVRPd6w2W8Hfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:36:71:64:68:a9:6a:73:f6:0b:ec:cd:74:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Feb 10 01:00:16 2026 GMT
Not After : Feb 11 01:00:16 2026 GMT
Subject: CN=08d7caa3ff95dabd72703f04573d8b81f9a3f41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:cf:af:eb:39:49:f6:22:39:39:e9:2c:99:
bb:f0:cc:41:31:53:51:41:0e:10:5f:51:64:f1:76:
c2:41:1f:1c:1a:fb:ec:a0:9a:00:13:35:5a:26:58:
5b:31:24:69:1f:74:eb:76:30:b0:4f:1c:6f:e4:09:
e3:95:d6:be:09:9d:56:24:ac:ed:70:d8:84:7b:b1:
b7:6a:eb:4f:11:69:d8:34:ce:ed:1e:a0:a9:42:28:
5a:aa:5d:87:07:5e:54:36:84:bc:5b:de:e6:b2:56:
7d:28:0a:d8:35:55:b8:1f:95:18:52:45:76:c3:b3:
08:ce:d4:f9:63:c6:c8:c6:7f:e6:50:51:13:ad:15:
53:b5:45:6b:0f:b6:e8:4e:cc:be:b0:8e:3f:07:90:
46:56:df:07:9a:e8:f2:ed:12:75:38:e9:95:87:ed:
02:a6:c6:64:61:51:43:b1:6e:f0:f3:dd:4f:c3:04:
38:86:90:a8:1b:49:ca:89:d5:e8:e5:f9:42:96:d5:
3c:bb:21:af:57:f3:de:e7:fb:b6:44:2c:15:89:a7:
34:9c:ae:91:56:f7:99:c8:32:f8:9c:dc:35:d6:84:
84:e0:93:06:a8:7f:1a:e4:90:86:03:f3:52:ae:49:
99:37:e0:5b:ed:3f:b8:78:93:6c:89:62:f1:3c:60:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D7:CA:A3:FF:95:DA:BD:72:70:3F:04:57:3D:8B:81:F9:A3:F4:1F
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2c:25:b3:1a:d7:49:0d:ad:2a:21:bb:86:ad:fa:47:a7:50:
c1:cd:1a:07:1d:6c:2f:c6:e2:17:18:4f:59:36:4e:14:98:4a:
ac:08:c6:c1:22:f2:cd:b8:25:b9:e3:91:4d:2b:ef:1f:af:c8:
ae:6d:a4:36:eb:75:af:f3:e1:82:39:c4:61:69:ee:2c:8c:e4:
c4:a9:43:a1:10:ec:5d:ba:0f:33:b2:9e:e1:f6:51:e1:db:e6:
fb:40:07:5e:d2:da:ff:1b:bf:ae:ed:71:73:3f:a9:fa:2f:85:
6f:63:70:86:99:f9:87:2c:c4:da:51:7d:33:bd:c3:c4:77:e6:
b8:1e:86:a6:9e:1a:be:d3:73:f6:2f:44:42:5c:a4:ad:9b:89:
88:4f:7b:97:98:d9:5e:bf:9e:c7:d7:19:05:6d:52:44:5a:6e:
ce:e4:d1:71:35:ca:0e:29:04:ab:bf:7f:01:e8:eb:e9:6d:18:
e6:ac:2b:88:20:7c:c5:bf:3d:bd:6c:b2:42:fd:e6:00:54:12:
bd:1e:d7:e9:f2:c5:73:e2:fb:7d:e6:77:a1:ac:45:1e:96:c9:
89:8d:d0:cd:68:80:15:c8:57:71:8a:34:d7:a0:87:e5:90:7b:
82:2d:87:a8:3a:1b:c7:1b:1a:a6:7c:eb:27:46:6c:23:4a:06:
04:85:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:23 2026 by rpki-client