This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: hXL+cD0LD7jSykifEZsDGXEybYqNl1VFhw6x0APNArE=
Subject key identifier: AE:23:33:3F:90:9C:78:B3:81:6A:81:DD:EF:21:F0:75:BD:BC:68:CC
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019C42469D22E24051EC739F057C40B4A443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 14EF
Signing time: Mon 09 Feb 2026 12:00:49 +0000
Manifest this update: Mon 09 Feb 2026 12:00:49 +0000
Manifest next update: Tue 10 Feb 2026 12:00:49 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: C7Dgnyj2lzqOifvdAcwChmJ0F0PFeKHzfWd9ey+3dNs=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:9d:22:e2:40:51:ec:73:9f:05:7c:40:b4:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Feb 9 12:00:49 2026 GMT
Not After : Feb 10 12:00:49 2026 GMT
Subject: CN=ae23333f909c78b3816a81ddef21f075bdbc68cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:fd:d2:b3:29:3b:42:8e:7a:5b:d1:49:79:
47:6d:bd:01:88:17:60:c4:b4:6b:ad:fe:9a:2e:77:
da:d2:70:3e:8f:26:6f:f0:69:5b:84:02:18:29:e1:
ea:c0:de:0d:19:ea:5a:10:f4:2f:52:20:35:78:d9:
4b:a8:d0:e9:7b:3e:0a:4d:d5:f3:88:37:12:2b:d8:
10:5f:ef:75:0a:90:72:d8:d1:4e:1b:b4:2d:20:99:
e5:4a:02:27:97:e9:bf:6e:cd:4e:1e:00:a2:37:9b:
f1:13:70:18:65:b2:3c:5e:ec:1e:6a:9a:b1:3f:e0:
a0:35:ed:c9:7b:77:1c:6e:28:90:87:89:9f:93:ec:
c3:a0:8e:b9:c9:11:04:40:1d:08:fb:59:02:30:54:
3a:ff:e8:ac:75:96:37:ed:ec:a5:7e:4a:9f:f5:a3:
60:c5:c4:c1:03:7e:e0:eb:ae:03:87:71:28:8f:d3:
a9:ec:6e:60:ce:04:c6:e1:95:0d:07:b7:35:4d:18:
6b:9a:17:26:c1:89:26:68:df:46:4d:bc:15:fd:1b:
16:fe:52:d8:28:82:4d:4f:8d:2f:09:45:6e:80:22:
5f:b2:c9:89:b0:82:f7:34:67:5e:bd:7f:37:c7:04:
92:fd:f4:c0:e6:31:0b:5a:06:74:d8:c3:57:04:f0:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:33:3F:90:9C:78:B3:81:6A:81:DD:EF:21:F0:75:BD:BC:68:CC
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2b:a2:89:e3:31:2d:03:c6:42:a4:aa:e3:c9:14:2a:ce:28:
50:14:73:32:7a:44:95:d0:40:c0:e2:14:d2:c2:47:00:56:94:
15:b6:d8:a2:b3:e0:47:8e:ff:c2:07:08:ef:21:6e:7d:f7:53:
7e:be:38:a5:f4:bb:ff:67:34:82:9c:54:8e:d0:01:08:ba:e8:
2f:a6:f3:6f:da:d9:7c:85:eb:00:54:74:6a:1c:81:bc:45:8a:
02:7f:89:04:00:9f:74:7f:50:c8:58:bd:41:85:09:3b:36:8e:
f5:a4:71:01:16:ef:4c:ba:88:3d:6e:ab:fb:20:16:7c:ab:44:
df:fa:7b:d9:6a:21:2c:f6:4a:0a:c6:60:da:27:8c:b7:c9:45:
0e:ad:96:8b:85:b6:d3:df:85:d6:0b:9d:9f:79:8e:34:3c:71:
06:38:34:ac:34:ee:5b:ce:1d:ff:a9:34:d3:d5:c5:b6:e7:63:
69:69:1a:f5:2f:18:da:7b:d1:aa:42:49:4d:bf:16:46:73:ae:
a0:82:16:83:fc:9b:41:d1:8c:67:0b:d3:74:0c:54:5c:a0:34:
73:de:cb:0c:3a:82:60:ac:f6:b1:57:bb:45:ff:73:7e:dd:f2:
28:34:e6:95:98:9d:19:57:20:d9:b3:de:b9:70:3b:ce:9d:20:
b1:bd:33:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRp0i4kBR7HOfBXxAtKRDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTRjNDc2M2VhMDE4YzNkYzcwMjAzZDA0ZWZlNzFmZDRi
MWIwNjYwHhcNMjYwMjA5MTIwMDQ5WhcNMjYwMjEwMTIwMDQ5WjAzMTEwLwYDVQQD
EyhhZTIzMzMzZjkwOWM3OGIzODE2YTgxZGRlZjIxZjA3NWJkYmM2OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrT90rMpO0KOelvRSXlHbb0BiBdg
xLRrrf6aLnfa0nA+jyZv8GlbhAIYKeHqwN4NGepaEPQvUiA1eNlLqNDpez4KTdXz
iDcSK9gQX+91CpBy2NFOG7QtIJnlSgInl+m/bs1OHgCiN5vxE3AYZbI8Xuweapqx
P+CgNe3Je3ccbiiQh4mfk+zDoI65yREEQB0I+1kCMFQ6/+isdZY37eylfkqf9aNg
xcTBA37g664Dh3Eoj9Op7G5gzgTG4ZUNB7c1TRhrmhcmwYkmaN9GTbwV/RsW/lLY
KIJNT40vCUVugCJfssmJsIL3NGdevX83xwSS/fTA5jELWgZ02MNXBPAOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4jMz+QnHizgWqB3e8h8HW9vGjMMB8GA1UdIwQY
MBaAFKpUxHY+oBjD3HAgPQTv5x/UsbBmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQt
ZGUzNzY3M2M0MDljLzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMjFjOWUtODdmMS00OTgzLTgzOTQtZGUzNzY3M2M0MDlj
LzEvcWxURWRqNmdHTVBjY0NBOUJPX25IOVN4c0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyuiieMx
LQPGQqSq48kUKs4oUBRzMnpEldBAwOIU0sJHAFaUFbbYorPgR47/wgcI7yFuffdT
fr44pfS7/2c0gpxUjtABCLroL6bzb9rZfIXrAFR0ahyBvEWKAn+JBACfdH9QyFi9
QYUJOzaO9aRxARbvTLqIPW6r+yAWfKtE3/p72WohLPZKCsZg2ieMt8lFDq2Wi4W2
09+F1gudn3mONDxxBjg0rDTuW84d/6k009XFtudjaWka9S8Y2nvRqkJJTb8WRnOu
oIIWg/ybQdGMZwvTdAxUXKA0c97LDDqCYKz2sVe7Rf9zft3yKDTmlZidGVcg2bPe
uXA7zp0gsb0zAQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:40 2026 by rpki-client