This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: uThTjnrTrku5VNnn9DO6uWiNDKEQxmO43ZAkq22FNlM=
Subject key identifier: A3:64:61:55:59:44:1E:38:4B:44:16:93:B1:3D:1D:00:76:ED:A6:0E
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019C416AB3192A12C47E66A6CED5F88FCC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1755
Signing time: Mon 09 Feb 2026 08:00:37 +0000
Manifest this update: Mon 09 Feb 2026 08:00:37 +0000
Manifest next update: Tue 10 Feb 2026 08:00:37 +0000
Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: ohTGl0MEcHLR3vanuTPYgSnZlFHrcLXreMhVEeJaaW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:b3:19:2a:12:c4:7e:66:a6:ce:d5:f8:8f:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Feb 9 08:00:37 2026 GMT
Not After : Feb 10 08:00:37 2026 GMT
Subject: CN=a364615559441e384b441693b13d1d0076eda60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:5a:b1:49:47:2c:43:5e:6c:44:5f:c8:b6:
db:2b:94:84:99:1c:4e:b9:67:93:35:72:dd:2d:f0:
a8:e0:80:43:20:04:16:b0:77:74:64:33:9f:a5:22:
61:5a:c2:ac:b5:be:fb:57:4d:35:45:c3:3c:b9:53:
c1:36:ee:58:8a:35:bc:4a:bf:e7:25:d7:4b:07:33:
e1:3b:63:24:db:83:1c:db:3e:db:60:5a:8c:16:42:
df:2e:ca:94:83:c6:a6:b5:15:f0:3a:17:93:64:0a:
5f:3b:18:72:bd:95:fe:ed:02:96:63:f3:08:4c:79:
7d:4e:82:41:18:69:a5:86:b1:65:54:50:03:e7:d6:
3f:99:ff:9c:d3:3c:49:3f:35:db:87:fa:08:94:3f:
b6:dd:0a:38:46:7c:6b:0d:d1:67:ee:14:39:0f:4a:
33:68:d6:ad:13:a3:d2:40:b1:c7:4c:ad:e1:99:4c:
b0:95:a1:59:fa:82:92:64:cf:45:05:1d:fd:2b:93:
46:98:c4:33:90:8a:03:15:21:3e:55:f9:0a:36:de:
fd:05:53:c4:fa:51:95:6f:c2:e7:2b:13:9d:5a:93:
89:17:dd:26:13:56:a1:61:5e:b3:3e:20:6c:5e:09:
8a:9b:e7:98:55:b1:b2:19:b8:d2:8f:a3:8b:6b:23:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:64:61:55:59:44:1E:38:4B:44:16:93:B1:3D:1D:00:76:ED:A6:0E
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2a:14:23:15:c7:54:dc:74:fe:99:3d:ff:90:7d:69:73:8e:
10:fb:38:bc:6e:66:1b:17:43:16:2d:10:3f:09:c4:6c:f7:6d:
b6:b0:5e:15:e8:b5:4c:95:a6:db:22:b7:6f:a5:90:52:f5:af:
55:c9:88:cb:91:a6:1a:0c:2c:39:7a:1e:c0:f4:03:89:c4:67:
af:a1:b3:86:1e:2c:9a:6e:ab:fa:8a:1c:34:cd:1e:d7:bd:dd:
99:9d:32:e0:3f:e2:51:b2:4e:b9:57:21:6c:7b:79:65:80:63:
e7:38:27:c6:69:d2:2f:ed:f3:54:24:89:22:ed:18:7b:15:d9:
3f:46:fc:d5:5f:da:95:c4:1f:a2:1f:30:cc:ec:98:9c:a8:03:
7f:14:4c:f2:73:6b:5a:6e:54:d6:71:c8:8f:d8:a4:f3:28:cf:
7c:1b:ee:a6:57:38:5a:c4:08:f2:a6:3e:3f:1c:cd:57:2b:10:
73:f0:64:12:dd:2b:f0:a6:89:43:a1:74:9e:bf:fd:18:63:e4:
56:12:d0:72:5a:ed:0e:c6:43:38:f9:30:ab:79:61:d4:96:22:
47:0a:23:1a:00:1c:ce:ea:ea:75:2f:61:4e:3c:84:58:ac:03:
bd:ec:a7:0a:8e:19:15:1a:4a:d5:eb:76:d7:81:89:75:dc:a9:
ba:8b:49:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBarMZKhLEfmamztX4j8x1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl
N2Q5ZTUwHhcNMjYwMjA5MDgwMDM3WhcNMjYwMjEwMDgwMDM3WjAzMTEwLwYDVQQD
EyhhMzY0NjE1NTU5NDQxZTM4NGI0NDE2OTNiMTNkMWQwMDc2ZWRhNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ1asUlHLENebERfyLbbK5SEmRxO
uWeTNXLdLfCo4IBDIAQWsHd0ZDOfpSJhWsKstb77V001RcM8uVPBNu5YijW8Sr/n
JddLBzPhO2Mk24Mc2z7bYFqMFkLfLsqUg8amtRXwOheTZApfOxhyvZX+7QKWY/MI
THl9ToJBGGmlhrFlVFAD59Y/mf+c0zxJPzXbh/oIlD+23Qo4RnxrDdFn7hQ5D0oz
aNatE6PSQLHHTK3hmUywlaFZ+oKSZM9FBR39K5NGmMQzkIoDFSE+VfkKNt79BVPE
+lGVb8LnKxOdWpOJF90mE1ahYV6zPiBsXgmKm+eYVbGyGbjSj6OLayOP3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNkYVVZRB44S0QWk7E9HQB27aYOMB8GA1UdIwQY
MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt
YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw
LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGioUIxXH
VNx0/pk9/5B9aXOOEPs4vG5mGxdDFi0QPwnEbPdttrBeFei1TJWm2yK3b6WQUvWv
VcmIy5GmGgwsOXoewPQDicRnr6Gzhh4smm6r+oocNM0e173dmZ0y4D/iUbJOuVch
bHt5ZYBj5zgnxmnSL+3zVCSJIu0YexXZP0b81V/alcQfoh8wzOyYnKgDfxRM8nNr
Wm5U1nHIj9ik8yjPfBvuplc4WsQI8qY+PxzNVysQc/BkEt0r8KaJQ6F0nr/9GGPk
VhLQclrtDsZDOPkwq3lh1JYiRwojGgAczurqdS9hTjyEWKwDveynCo4ZFRpK1et2
14GJddypuotJcQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:22 2026 by rpki-client