This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: wN3ADDmv9YW0+rh/kFAlDesDzffLF2QDAK4BuwtkPEw=
Subject key identifier: 07:19:45:C2:6B:D9:99:DE:47:61:43:A1:6D:4A:FF:49:DB:86:AA:79
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019C42102EB38A9B9C12E96C3AA150CF0BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 11:01:22 +0000
Manifest this update: Mon 09 Feb 2026 11:01:22 +0000
Manifest next update: Tue 10 Feb 2026 11:01:22 +0000
Files and hashes: 1: N2Jr9JHJPtRC7fzBYWdORmPSK-U.roa (hash: fc9tBn+6SqJqfSW/GpPBz9lgPSF51UDlJcUc1bmbePQ=)
2: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: IvUHhTWkb21nhcRrXaxQ2Rv9wdoQ4tG00k2R+wicpBo=)
3: vm0Cb1QlvcUWqTlVtMYvi0tSg50.roa (hash: vUmX5+CcNp91eGp6cheOPjkV7E2OfS28ZKb/y8YQp0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:2e:b3:8a:9b:9c:12:e9:6c:3a:a1:50:cf:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Feb 9 11:01:22 2026 GMT
Not After : Feb 10 11:01:22 2026 GMT
Subject: CN=071945c26bd999de476143a16d4aff49db86aa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:0a:f0:a5:18:bb:08:a4:72:e2:2e:c5:06:
79:87:cb:16:4c:b8:eb:aa:32:b4:ad:47:e7:0b:08:
e8:18:f9:3c:d8:58:c4:49:e7:4d:fb:84:70:46:15:
e8:df:4c:c9:31:1d:a9:61:52:b5:37:52:b8:64:24:
03:03:35:4f:58:2f:17:43:3e:b3:d2:46:99:e3:67:
18:ff:2c:20:97:d3:85:be:ba:ae:98:c7:41:25:90:
a8:1e:95:57:89:21:ad:38:f6:26:a8:aa:61:c0:c8:
3a:3f:c7:7f:c1:5c:75:f4:6c:3a:2d:5a:5f:df:fb:
87:e2:ef:b3:18:b1:d1:cf:f8:97:01:d1:e8:77:e8:
e9:17:18:a1:3d:22:91:a6:2d:de:d3:53:91:81:b4:
ce:37:c8:3f:ed:2d:4a:97:67:ef:1b:1d:43:94:19:
72:d4:e2:5b:33:09:9b:4f:fc:a7:07:28:be:01:da:
36:f5:fe:32:8c:26:9f:bb:f4:9e:16:eb:ba:2a:6d:
6b:ee:1e:a2:c6:13:d5:19:fb:87:31:87:66:85:b2:
aa:1a:ac:4e:7c:f6:b6:5e:53:27:45:55:53:55:78:
c8:c2:b3:32:f0:33:21:72:c0:2c:ad:a6:65:61:ed:
35:a4:b2:c2:fd:30:93:96:a2:c7:d0:80:85:52:81:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:19:45:C2:6B:D9:99:DE:47:61:43:A1:6D:4A:FF:49:DB:86:AA:79
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:e5:2d:d1:2d:f5:ef:ff:9a:da:e6:ed:38:77:a7:20:32:
00:f7:af:7e:63:26:9c:57:b5:0b:5d:f6:92:cc:bc:61:2c:08:
9e:b0:ba:4e:ef:6f:9e:68:aa:a0:1a:41:16:12:47:63:6e:36:
77:f3:e5:65:2a:a7:76:9c:97:a5:66:67:85:75:a3:30:4e:09:
0a:63:9d:25:3a:f3:9f:32:ef:1c:f0:4d:79:29:fb:35:6c:26:
cf:df:9b:a1:ba:a9:28:6c:d2:b7:3a:dc:08:a2:57:c3:7c:92:
0c:bf:3d:d1:f8:2d:b7:ab:3c:60:c6:0c:bd:5d:c5:21:84:fe:
e0:e4:45:7c:47:0d:3f:e2:6e:72:d2:fc:c2:2c:5d:5d:f9:84:
27:44:53:6c:94:96:0b:1d:85:2b:a1:56:ac:7e:e9:28:02:52:
91:3e:d1:fc:da:9a:5f:a8:83:31:87:76:fb:14:8b:f2:61:1e:
b3:cc:a2:6b:66:71:35:7c:7e:9b:b4:51:ba:19:1b:c7:93:93:
e4:2c:69:07:6e:27:89:7d:18:9d:83:21:58:e6:53:a7:fc:e6:
6b:e4:fe:54:5c:d6:b7:9d:76:84:66:22:32:fd:03:c0:61:bd:
40:45:15:bd:d6:d3:2c:56:bb:a5:9f:06:57:32:04:64:1a:d8:
7c:54:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:01 2026 by rpki-client