This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: 2JkxUf8tUCQdNEYjSkJ8ilzCRpVM4lsdgAGHPUKlOMI=
Subject key identifier: 8F:AB:BF:B6:22:BE:B7:34:86:07:3D:D8:51:59:96:D8:D5:6D:50:50
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019C1CF16C3A97EBF2592ACEBEDD4636437B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1802
Signing time: Mon 02 Feb 2026 06:01:49 +0000
Manifest this update: Mon 02 Feb 2026 06:01:49 +0000
Manifest next update: Tue 03 Feb 2026 06:01:49 +0000
Files and hashes: 1: UcL950VNXfeGMnUK-Fw9xlceECk.roa (hash: TqMsl3SUxzJ1mWiGN+NQ2Ox32wjkXQIKVSEw4efBhJ8=)
2: Voryts3H0G0caI1RibG37Pl0zCw.roa (hash: xHSS1anAiTiInjkGpFXJvjSgMKLNfODVMCr5KM1vL48=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: j+pOKcw731a1ctkg4I7DcjswxAXSKFfnQl5q+gukoZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:f1:6c:3a:97:eb:f2:59:2a:ce:be:dd:46:36:43:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Feb 2 06:01:49 2026 GMT
Not After : Feb 3 06:01:49 2026 GMT
Subject: CN=8fabbfb622beb73486073dd8515996d8d56d5050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:a4:a7:86:f4:25:b5:c0:83:b6:e5:17:2a:
d1:28:3e:ca:f5:25:0b:bc:48:b6:35:34:a9:d5:77:
df:b7:4a:d7:81:1b:be:bd:00:30:36:30:57:e5:07:
db:97:56:61:e2:11:ac:81:da:03:21:26:ac:f6:b4:
1f:ab:76:ed:0f:9a:96:9f:79:3d:f2:bb:55:88:4d:
ec:47:95:b1:45:7b:b9:23:67:dd:b6:37:71:0f:af:
76:53:e4:93:96:f1:cf:77:98:2f:85:69:25:7b:88:
52:9c:45:82:e3:08:f3:ee:10:ab:d4:f0:46:5b:31:
7c:6b:0b:5e:2c:01:62:28:82:ad:e1:c2:7b:88:d8:
bd:9c:a6:c5:ac:07:84:45:0f:15:e2:da:a6:e7:d3:
06:1d:5d:a9:d4:1c:66:c7:5d:d9:76:5d:4c:fd:98:
60:33:5b:54:87:ab:c1:48:3a:7f:0a:d9:85:ce:13:
91:ef:05:2f:b7:3f:b3:e9:1e:f3:fe:3f:fe:6f:97:
e6:31:9d:3f:95:9b:4f:03:1a:e9:2c:8f:54:d9:31:
2c:c7:48:d2:32:ba:3d:5c:4e:af:71:a2:e4:38:c1:
a4:b1:dd:44:dc:aa:0d:5e:2b:aa:0c:40:4b:8a:fd:
69:d8:22:bc:8c:32:d4:93:7b:3b:ce:ab:f4:b4:8d:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:BF:B6:22:BE:B7:34:86:07:3D:D8:51:59:96:D8:D5:6D:50:50
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:24:57:73:b3:e9:07:f8:16:a5:f9:de:e5:2c:93:74:ca:50:
1a:d3:e0:5a:20:a8:b2:42:e4:9e:64:21:c8:e7:61:c4:92:81:
c8:24:c8:92:09:f7:0c:3c:46:64:a1:7c:23:43:bf:62:7e:8a:
a7:35:90:a2:14:56:da:ea:b0:39:a3:d0:1f:f6:9f:2c:a2:75:
23:80:98:9c:17:83:aa:18:a4:1f:9c:36:6d:bb:9c:f0:84:cc:
2f:f4:76:6c:0f:bc:cc:10:2a:74:6a:4d:fa:35:76:80:c9:2b:
2b:f4:df:11:0f:2a:f9:dc:b9:12:7c:33:e8:7c:89:df:73:db:
b3:d2:a6:12:00:55:86:d0:a8:fa:cd:5d:11:79:c8:c9:73:57:
6e:22:a9:ce:9c:56:c7:2e:de:c3:66:f4:d5:d3:7d:35:11:36:
28:8e:f3:5c:54:20:2b:ff:56:36:f3:36:4d:3c:8c:bf:12:1b:
8b:17:79:d4:82:bc:01:c8:3b:c2:7d:32:c5:bd:0c:be:13:47:
e8:97:42:09:03:3a:8f:1e:87:95:7d:7b:65:6b:de:04:f9:a7:
ea:54:b4:9d:00:3f:8f:2b:72:ed:48:9a:a0:80:52:af:6e:fa:
38:f3:24:eb:84:dc:bc:87:7f:d9:c8:43:4c:58:67:ce:3a:ce:
31:21:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:52 2026 by rpki-client