This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.mft (raw, json)
Hash identifier: sw1By8twjs9N98G23dgc3lE19MJ4+ofL246SmoYlcfc=
Subject key identifier: C5:19:6C:03:DE:38:96:76:3B:1B:72:33:5D:69:5C:13:27:0B:A4:AB
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019C43592B471F3A1BB2D8EEAC546FACB98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 17:00:43 +0000
Manifest this update: Mon 09 Feb 2026 17:00:43 +0000
Manifest next update: Tue 10 Feb 2026 17:00:43 +0000
Files and hashes: 1: VyKqzxZ8-5ygWJNcg4AE05d6_mE.roa (hash: eTq1Nu+al+6xzFG/LttgMYk2x81Ow2Yalg2eI2MZJbI=)
2: qd_ImBI0BQeiouHnTRGCTe-BPzk.crl (hash: 0WvgTK7fWUrv7YBi4wiIWDkYjPVpt3duIF0lzMnkmpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:2b:47:1f:3a:1b:b2:d8:ee:ac:54:6f:ac:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Feb 9 17:00:43 2026 GMT
Not After : Feb 10 17:00:43 2026 GMT
Subject: CN=c5196c03de3896763b1b72335d695c13270ba4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:39:46:f8:60:cb:27:2f:41:73:88:59:49:
cb:cb:b9:da:94:86:08:3b:06:e0:46:80:e8:48:52:
0b:7b:49:b4:bb:da:a7:92:e6:15:97:4b:1d:41:54:
36:7d:9c:40:45:de:69:0e:8c:2d:f6:f1:9d:c3:69:
37:15:dc:77:04:74:3a:67:3e:09:a9:35:c4:3e:e8:
6f:6f:28:14:47:d6:b6:fc:b3:a0:79:a6:c0:c8:02:
be:be:50:b0:9f:35:ff:10:45:5d:b2:c1:f8:99:60:
fb:fb:31:a8:98:d5:5f:c9:f3:08:69:16:dc:28:53:
cc:55:21:ff:e1:f6:ea:72:fe:86:00:71:a3:88:0e:
7f:5a:e5:0c:60:bc:69:8b:35:18:f0:90:f0:eb:3c:
d3:cc:77:09:5d:01:81:85:a3:c8:f7:b5:68:55:8f:
43:04:6a:f5:76:47:f0:10:06:32:99:0c:92:fd:77:
16:ac:16:5f:82:0b:88:5f:11:eb:b6:6e:ab:93:6b:
46:4f:dc:b1:96:ea:10:21:69:3c:2a:0e:5e:45:0f:
63:6b:46:05:ae:70:b8:af:37:06:4a:1e:8c:c6:c7:
dd:24:e0:3c:ef:ed:be:eb:a6:03:92:b5:15:72:3d:
6f:39:42:2f:b0:3f:ec:88:02:4a:23:5a:e0:c6:ba:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:6C:03:DE:38:96:76:3B:1B:72:33:5D:69:5C:13:27:0B:A4:AB
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:64:2d:3d:5d:6d:aa:37:c3:d5:63:f7:0f:a1:55:2c:5f:
67:6f:d4:e0:69:7f:2b:6a:78:cf:f8:23:6c:d9:12:25:ef:b9:
7f:a2:a3:17:59:fb:a5:07:74:18:68:99:8b:76:da:da:85:bb:
6b:c2:5f:9f:4d:84:46:ac:63:68:8f:2b:aa:7d:e3:5d:2a:87:
1b:5d:85:48:a8:18:af:88:df:17:f1:b0:2a:6b:14:a2:f9:d0:
28:5f:4e:b5:b0:bf:fc:8b:0d:61:e9:92:d7:82:4d:7d:2c:e6:
9c:90:f5:f0:88:98:33:5d:d0:61:ab:77:9f:ae:6b:d9:be:1c:
61:0a:10:6d:e7:cc:86:10:7f:bf:f7:b4:26:1d:2f:0d:60:25:
fb:40:01:88:58:4b:2a:71:a2:79:43:1e:77:ed:9c:c9:fa:eb:
1f:79:75:bc:ee:f9:cb:9c:cb:14:9b:9a:86:08:f9:fb:de:5b:
8d:9f:d2:03:a0:64:14:a3:19:85:8b:8c:2d:96:85:b5:0f:ac:
12:b0:e5:6c:87:1a:03:e9:7d:3f:2d:21:4c:60:36:b0:e9:3a:
42:a6:05:bd:aa:a8:9c:9d:08:16:20:69:95:3f:a3:a7:12:e3:
22:98:f5:2f:f6:0b:a1:5c:fa:e7:17:9a:f9:e5:a4:11:78:f8:
84:7d:77:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWStHHzobstjurFRvrLmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGZjODk4MTIzNDA1MDdhMmEyZTFlNzRkMTE4MjRkZWY4
MTNmMzkwHhcNMjYwMjA5MTcwMDQzWhcNMjYwMjEwMTcwMDQzWjAzMTEwLwYDVQQD
EyhjNTE5NmMwM2RlMzg5Njc2M2IxYjcyMzM1ZDY5NWMxMzI3MGJhNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuk5RvhgyycvQXOIWUnLy7nalIYI
OwbgRoDoSFILe0m0u9qnkuYVl0sdQVQ2fZxARd5pDowt9vGdw2k3Fdx3BHQ6Zz4J
qTXEPuhvbygUR9a2/LOgeabAyAK+vlCwnzX/EEVdssH4mWD7+zGomNVfyfMIaRbc
KFPMVSH/4fbqcv6GAHGjiA5/WuUMYLxpizUY8JDw6zzTzHcJXQGBhaPI97VoVY9D
BGr1dkfwEAYymQyS/XcWrBZfgguIXxHrtm6rk2tGT9yxluoQIWk8Kg5eRQ9ja0YF
rnC4rzcGSh6MxsfdJOA87+2+66YDkrUVcj1vOUIvsD/siAJKI1rgxrpoqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUZbAPeOJZ2OxtyM11pXBMnC6SrMB8GA1UdIwQY
MBaAFKnfyJgSNAUHoqLh500Rgk3vgT85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGIt
NzA0NDAzZmZmODJlLzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mN2Q1OGUtMzNkYS00MzE5LWI1NGItNzA0NDAzZmZmODJl
LzEvcWRfSW1CSTBCUWVpb3VIblRSR0NUZS1CUHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiP1kLT1d
bao3w9Vj9w+hVSxfZ2/U4Gl/K2p4z/gjbNkSJe+5f6KjF1n7pQd0GGiZi3ba2oW7
a8Jfn02ERqxjaI8rqn3jXSqHG12FSKgYr4jfF/GwKmsUovnQKF9OtbC//IsNYemS
14JNfSzmnJD18IiYM13QYat3n65r2b4cYQoQbefMhhB/v/e0Jh0vDWAl+0ABiFhL
KnGieUMed+2cyfrrH3l1vO75y5zLFJuahgj5+95bjZ/SA6BkFKMZhYuMLZaFtQ+s
ErDlbIcaA+l9Py0hTGA2sOk6QqYFvaqonJ0IFiBplT+jpxLjIpj1L/YLoVz65xea
+eWkEXj4hH13gQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:03 2026 by rpki-client