This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: efnKUsQpzJI5Be9L4D1uGswRb/ZD0CmUGSO3qW6Jqsc=
Subject key identifier: 75:AF:EF:F2:94:A4:F5:9C:0B:AD:54:4C:E9:3A:8E:C1:EE:33:4A:E7
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 019C45479969FD7493784FB0AF740B22A2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 14A4
Signing time: Tue 10 Feb 2026 02:00:46 +0000
Manifest this update: Tue 10 Feb 2026 02:00:46 +0000
Manifest next update: Wed 11 Feb 2026 02:00:46 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: XHuaNzFHAKviApRh8QDjqi9x+XjxyK9rpKxnr5Lz3Rc=)
2: fpHmAafjOGhBaMS1gbhoimd-T64.roa (hash: tNORG3Af35zgXnyNJfcnl9XFHgufLnvK+eM/0nmyONM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:99:69:fd:74:93:78:4f:b0:af:74:0b:22:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Feb 10 02:00:46 2026 GMT
Not After : Feb 11 02:00:46 2026 GMT
Subject: CN=75afeff294a4f59c0bad544ce93a8ec1ee334ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:0b:7c:ca:b3:ab:d3:61:87:fd:5d:bc:5d:
6a:8d:b3:f7:e2:89:04:90:82:d8:6a:cf:51:d7:00:
83:57:78:0b:53:fd:ca:be:49:f2:05:4d:48:e7:69:
72:00:e1:5f:a0:d7:3c:81:d2:07:01:eb:cf:4b:31:
94:75:e6:ff:c7:84:86:9b:49:38:4b:10:fc:02:4b:
5a:ac:fd:e2:25:b2:cb:6c:3d:fe:d0:fc:b8:8e:50:
02:56:fc:fb:b6:b8:e3:69:6d:ed:e0:df:e8:20:df:
f5:bc:a0:f3:60:81:26:1e:9c:da:ad:a2:20:cf:3e:
c6:41:75:c2:1b:af:72:ba:25:2b:53:e8:25:5e:bd:
ee:7c:13:76:57:4c:d7:46:f1:09:e2:50:c1:2d:c4:
af:93:24:00:7c:cf:4f:c3:55:ca:c0:15:95:81:aa:
c9:a5:85:6a:c6:d6:60:86:fc:f6:be:2c:f0:0b:2f:
ef:70:ac:ec:d6:ef:4a:52:47:e6:b6:50:25:af:e0:
7b:66:0c:df:e5:94:4d:fd:78:f2:cf:75:dc:23:c4:
ef:f7:49:7b:5a:26:20:70:7c:45:65:24:31:9c:c0:
75:d4:5d:7b:7f:35:e7:dd:ef:ea:f1:d0:6f:e0:bd:
97:a0:69:21:93:d3:eb:1b:a0:b7:d0:70:f2:13:bd:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:EF:F2:94:A4:F5:9C:0B:AD:54:4C:E9:3A:8E:C1:EE:33:4A:E7
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:df:9b:f9:2e:12:25:f3:77:36:6e:0c:9e:a6:31:7c:ef:d1:
42:0f:2b:c3:a9:75:e3:ad:88:d3:86:a8:bf:d8:5e:41:87:69:
63:8f:04:9f:89:db:43:90:64:91:0d:73:3f:fd:fa:3c:12:7f:
ce:2b:2f:b2:f5:c7:a9:c4:51:25:03:76:f4:9e:bd:d4:16:f3:
11:65:04:0a:c1:04:15:89:25:80:23:f7:47:4d:b6:0f:47:97:
cb:b0:aa:a4:31:14:af:d3:cf:0c:d9:18:b0:c9:7d:2c:e3:67:
b9:64:13:4b:7d:5b:3f:a5:06:b2:91:e2:29:fc:c3:0a:39:70:
3f:49:7b:85:cd:26:12:6c:bd:ce:db:5d:26:93:aa:71:3c:99:
0c:e4:69:7e:8b:0d:d2:b8:62:9a:43:48:94:aa:ef:2a:1e:63:
ed:56:80:71:8f:df:33:de:ff:e8:c3:4b:4d:f8:6e:34:5a:20:
f5:78:11:2a:5f:01:4a:c9:70:55:63:cd:3c:18:2a:22:79:00:
b6:2c:e5:39:0b:f3:d8:ee:7d:b6:68:f0:d7:fc:b1:90:a9:76:
71:15:5b:40:2a:83:11:56:82:f9:eb:c1:b0:55:e1:07:b9:cd:
e3:0e:48:b3:49:b1:7d:10:25:14:de:2f:be:07:67:da:65:bc:
0d:41:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:52:29 2026 by rpki-client