This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: Orceu5iDwUlGIAILWBDoSDcgv1FkKrsT9tEWWP5UdS0=
Subject key identifier: 24:22:89:44:77:AB:2B:BF:3A:2C:A5:77:D2:AC:08:FE:16:C6:4E:B9
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019C427DEB4F5BADB2E6DF4B1B8008C3EDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 04FC
Signing time: Mon 09 Feb 2026 13:01:14 +0000
Manifest this update: Mon 09 Feb 2026 13:01:14 +0000
Manifest next update: Tue 10 Feb 2026 13:01:14 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: fGG7QJN7elP1ArvedRgAvsQIMuQa9oEKZPi/fcxT1mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:eb:4f:5b:ad:b2:e6:df:4b:1b:80:08:c3:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Feb 9 13:01:14 2026 GMT
Not After : Feb 10 13:01:14 2026 GMT
Subject: CN=2422894477ab2bbf3a2ca577d2ac08fe16c64eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0b:11:ed:e6:45:92:2b:4e:85:b2:da:6e:f1:
8e:12:22:b2:1d:36:3a:4e:df:ab:17:ba:72:d1:4b:
15:ef:f9:a8:2c:ec:0a:b2:36:af:55:fd:08:64:5e:
48:69:a9:b6:5f:26:03:e5:01:10:77:1a:7b:1c:03:
5f:b1:9e:24:b0:ae:2e:df:28:ba:79:dc:7c:f2:f0:
ad:60:ff:dd:bd:f6:9d:d8:d5:ed:e1:dc:16:63:85:
2b:11:7e:40:fa:dd:a0:66:62:a4:3a:ed:db:10:ad:
7f:b2:63:ad:d0:2f:84:54:6c:8d:47:3b:29:fb:e2:
0e:e5:e5:3d:39:e9:36:30:26:47:e0:d6:da:8e:17:
96:b3:bd:98:97:2b:85:89:12:8e:a5:b1:12:92:c9:
8d:05:c1:69:29:f0:96:a3:56:31:3e:f5:54:4c:41:
54:6e:c3:47:fd:a8:32:9e:11:60:99:0d:75:fd:23:
e6:3f:8c:bb:4d:81:6b:c2:39:3c:52:71:57:bc:d4:
d4:3f:71:42:1e:66:ee:23:fd:c3:b5:46:07:a6:13:
10:ff:62:9f:36:46:b3:8c:10:1a:70:7b:2b:4b:86:
90:82:60:3e:db:81:b9:56:fe:a1:6d:6f:a9:ec:d1:
2f:f2:0e:7f:00:82:43:b8:4f:be:e5:8d:28:fd:1a:
a1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:89:44:77:AB:2B:BF:3A:2C:A5:77:D2:AC:08:FE:16:C6:4E:B9
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b1:9d:78:e5:ac:3e:77:24:ae:67:0a:a9:7f:2a:08:62:82:
17:98:58:b4:4b:e0:34:d9:02:b7:07:6e:99:1e:02:01:07:f8:
71:75:eb:62:79:89:08:be:9e:c1:d5:3d:31:40:7d:b0:71:eb:
07:9c:d4:24:75:46:79:41:fd:b3:7e:73:38:f0:2f:52:1d:db:
40:6d:f7:ee:fa:06:ec:c4:f8:18:13:31:57:4f:31:20:a7:2d:
1d:a0:d3:df:f9:7f:b5:9f:9b:fd:12:2b:92:37:fc:68:89:96:
6e:0c:d5:4e:df:4c:2f:88:0a:d8:a5:35:9d:27:ae:c3:83:41:
34:aa:ba:d3:7c:ea:86:1e:d2:64:a6:9b:38:07:6a:02:14:a7:
1b:50:cb:b5:06:56:69:75:ad:46:bb:bd:bf:ee:5e:64:4e:70:
ac:53:76:e3:25:36:07:76:3d:f8:e7:15:3f:59:cf:8b:89:7c:
7b:0d:0c:de:0a:1a:3a:b0:cd:89:fa:2c:e7:8f:b2:d5:c0:8e:
18:49:cc:36:36:00:cb:53:7d:ef:ad:c0:b8:43:3b:8d:dd:c9:
81:02:b7:ea:0b:ec:01:06:a7:22:d6:ff:59:8e:73:21:d8:ef:
87:1f:61:3d:67:81:b5:68:35:aa:75:c9:ed:e8:67:00:e1:e5:
c1:87:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:23 2026 by rpki-client