This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: 74KJ+lZ+MfwxcoOXw/CE6Z5lI9F/gtCq+N2IMcGnByw=
Subject key identifier: 4E:18:E7:68:8F:F2:FF:C2:6A:86:CF:78:7E:F9:5A:AA:2F:AA:A9:BB
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 019C438FEAB968B407F1A44904AE25491574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 18:00:30 +0000
Manifest this update: Mon 09 Feb 2026 18:00:30 +0000
Manifest next update: Tue 10 Feb 2026 18:00:30 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: MKTuUCoMBmxd1Z0VFuV5MEt/KzUHPYuuT+4X8W3Dk5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:ea:b9:68:b4:07:f1:a4:49:04:ae:25:49:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Feb 9 18:00:30 2026 GMT
Not After : Feb 10 18:00:30 2026 GMT
Subject: CN=4e18e7688ff2ffc26a86cf787ef95aaa2faaa9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:7e:26:fb:91:9c:d2:9a:3f:c1:74:a4:26:
9f:60:78:b1:db:63:69:e7:c9:60:0b:e0:bd:cf:02:
97:ca:1a:4c:4c:84:9c:a3:76:b1:2a:35:c5:b5:e4:
40:fe:99:3e:a2:3d:71:35:1d:b0:d6:f7:d1:14:cb:
50:1f:5a:48:0f:e9:73:96:9d:c4:aa:41:d0:9c:b3:
27:f2:d0:f2:cf:be:87:ce:90:d7:24:d6:3f:8f:ed:
12:56:b8:9a:c7:1d:b2:41:fa:7b:36:b9:dd:29:ce:
bd:7d:e4:84:b6:68:14:2d:1f:f3:dc:57:40:22:5d:
af:35:77:15:56:36:d1:40:2b:95:1b:c8:5b:18:00:
d2:c7:bd:28:26:8a:be:a7:39:b6:f0:e9:ec:c6:ee:
6c:69:4d:04:e2:95:7c:0c:af:3e:d6:c6:29:f1:a6:
4d:09:30:9d:0d:93:87:7a:b6:74:d5:d2:fb:4c:8b:
27:c9:56:68:a6:d8:79:04:8c:dc:11:33:24:10:16:
50:f8:92:eb:0f:eb:31:c6:da:a5:a8:2e:f6:08:bf:
ae:c3:b7:3e:1a:23:f1:40:e5:a1:6c:04:e0:87:b1:
d7:db:05:f2:f6:75:81:23:2e:aa:b3:f8:c0:54:7d:
d3:6b:ba:2b:71:79:5c:96:b3:a1:3c:b4:cd:e7:41:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:E7:68:8F:F2:FF:C2:6A:86:CF:78:7E:F9:5A:AA:2F:AA:A9:BB
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6a:13:85:e5:27:77:44:0d:db:27:f5:00:84:4c:01:3f:89:
85:0d:59:3f:6c:f5:06:28:47:d2:ca:62:f4:a8:00:7b:5e:73:
ff:40:90:11:18:03:46:49:7a:77:ca:b5:18:8f:c8:e7:61:e5:
c6:24:92:85:4a:60:99:b6:0f:73:5c:92:52:bc:01:56:42:05:
71:8a:24:80:a9:04:f7:c5:51:01:c1:a3:8d:9d:84:0f:f0:33:
4b:48:d0:a8:9c:68:89:d0:ca:cb:c0:f1:76:bf:b9:54:ee:84:
83:17:46:5b:a0:88:20:38:cb:b3:f5:38:74:66:40:49:ae:f4:
2a:86:79:e7:0f:1b:05:23:10:d5:c6:97:a9:24:63:72:15:e6:
03:05:fe:23:f3:54:77:35:55:f3:6e:21:c0:6c:5e:b6:5e:c3:
a8:34:ff:8a:41:8d:fb:e3:c5:69:ed:c8:05:f5:99:80:ca:62:
d2:41:9f:20:32:3f:80:89:e7:18:96:c5:fb:77:d4:31:72:70:
84:eb:58:6e:21:91:5f:26:ad:5d:e5:25:f5:84:6d:af:56:94:
d8:93:40:6c:d5:9a:e5:fa:e0:de:f4:59:fa:c4:96:21:eb:6c:
ed:7e:9e:fe:30:9c:6d:95:1d:19:c4:42:2b:9e:eb:cc:ca:e5:
88:79:b8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:57 2026 by rpki-client