This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier: agA1CUdf/kOG7h2P+8cJGNtVn61VtJWWyiEd11cGH9U=
Subject key identifier: 61:92:FF:49:65:86:45:C2:1E:65:D4:1C:1B:DF:F0:83:A1:8D:D0:64
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 019C42B4444879BCBEE7A173E098994475D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number: 045F
Signing time: Mon 09 Feb 2026 14:00:36 +0000
Manifest this update: Mon 09 Feb 2026 14:00:36 +0000
Manifest next update: Tue 10 Feb 2026 14:00:36 +0000
Files and hashes: 1: 1-DN9R_xhKOI4mV80WkUcPVaagQc.roa (hash: ASJpdR212uLae0GK1ckKJRJ0hpliZAorVI6HruZ1pYo=)
2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: QnrLGRQpicVIjNC7ORE4MMR/aGtC908J1wRbDjIsGnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:44:48:79:bc:be:e7:a1:73:e0:98:99:44:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: Feb 9 14:00:36 2026 GMT
Not After : Feb 10 14:00:36 2026 GMT
Subject: CN=6192ff49658645c21e65d41c1bdff083a18dd064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:e3:c3:76:75:3e:f1:7f:5c:2a:57:f4:bf:
ca:56:32:b5:6a:b8:64:26:6c:05:d8:52:10:8d:ae:
0b:66:ca:ac:b8:5a:f5:e5:a2:e6:9e:0f:5c:19:9d:
c8:e2:ee:f7:79:02:9e:cd:30:33:dd:28:9d:16:f2:
45:ad:f0:88:4c:74:cd:74:8a:4a:19:18:aa:2e:ab:
f0:a6:b8:fa:6c:56:ac:34:83:9e:c7:d4:d3:6c:bf:
35:4a:06:46:96:cb:ad:bf:d0:da:7e:ad:a3:57:99:
ae:dd:34:cb:7e:74:f7:a5:d4:9c:64:cd:2b:6e:e8:
3e:6c:02:17:f9:c2:d4:c2:27:7b:5c:1f:6c:fe:d6:
3c:20:fc:fc:1d:c6:df:4d:6f:8d:59:40:cd:7d:b4:
b2:d9:75:bf:ca:64:bb:cd:6a:f8:3c:f5:98:af:44:
d6:21:3f:9c:96:e2:05:a4:c5:23:1b:f8:92:a2:bc:
70:33:7b:30:5f:af:1d:d1:7c:4f:b9:1a:2b:33:dc:
c4:df:a8:72:d1:d2:70:0a:f8:3d:7d:67:3a:69:f5:
56:ca:8c:69:1e:b6:e8:61:82:ed:87:84:d3:08:21:
1b:ee:eb:7a:8b:da:28:8c:f2:d6:b2:25:a2:c5:02:
05:77:99:22:19:90:b5:5c:8e:59:fc:32:c1:cf:bd:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:FF:49:65:86:45:C2:1E:65:D4:1C:1B:DF:F0:83:A1:8D:D0:64
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5c:eb:f2:64:26:ea:fe:5b:23:53:60:cc:fe:66:89:0a:b3:
af:12:87:eb:24:e5:57:a6:a7:09:ae:3b:8d:d3:13:1e:bb:55:
54:33:a0:8d:b1:0d:66:d7:3c:3c:96:e9:d5:cc:2b:74:fb:aa:
b1:2c:71:b8:78:c9:a3:16:0b:31:cd:58:82:a9:ec:0e:b0:41:
73:ca:33:66:d4:44:4e:3c:73:41:eb:c3:b4:4d:b2:b7:da:1f:
af:bc:6e:43:eb:4e:b3:78:79:1e:b7:c1:49:3f:ba:95:95:8c:
42:ab:f9:6d:8e:55:da:5a:0c:c6:6e:70:e4:dc:ee:54:9e:63:
52:c4:a8:f7:ad:d0:73:ac:49:43:40:52:11:76:8c:4c:16:6a:
b7:3d:4f:f3:ca:75:f2:b2:18:be:95:87:3a:36:38:28:7b:8d:
4b:06:a7:d7:31:49:e8:6f:96:ae:af:ab:5a:11:77:39:48:7d:
07:20:e2:1d:de:14:fe:cf:03:b9:c1:b7:eb:1c:ac:2b:57:25:
42:d3:73:9d:7e:6c:b2:36:56:46:99:50:3d:ae:63:26:ed:04:
b5:e6:28:21:45:97:81:a4:5c:a7:18:9d:c4:16:46:e7:19:bf:
7c:98:11:12:4b:c1:9f:12:9f:cd:9a:5b:d9:7d:89:14:ac:1d:
5b:01:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:56 2026 by rpki-client