This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: aDCGx5Rq3pwzJlwjS64vGvSWf4Qab5jlJGgvZ221W9A=
Subject key identifier: 79:DD:F8:B5:11:4A:0B:85:5F:B0:7A:EC:CE:8E:6D:85:FA:27:94:F6
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 019C420FC15B0EE4804CB12AF5E2597CDB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: A4
Signing time: Mon 09 Feb 2026 11:00:54 +0000
Manifest this update: Mon 09 Feb 2026 11:00:54 +0000
Manifest next update: Tue 10 Feb 2026 11:00:54 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: EuhHSCRrNHYhrqTz5fsTBw2+53Qh0u/l1/N8W3YqfGU=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:c1:5b:0e:e4:80:4c:b1:2a:f5:e2:59:7c:db:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Feb 9 11:00:54 2026 GMT
Not After : Feb 10 11:00:54 2026 GMT
Subject: CN=79ddf8b5114a0b855fb07aecce8e6d85fa2794f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:54:33:8d:35:87:2c:bb:25:7f:0c:7a:7a:
05:70:21:93:99:04:02:38:ee:9d:3c:25:a9:23:6f:
e1:93:27:2d:fb:b5:71:dd:ba:0a:2b:f8:27:96:23:
f1:78:80:13:22:b4:df:d8:25:24:c8:4c:33:71:64:
53:c0:03:38:d8:12:6c:d4:e2:fb:6f:ea:5c:7b:92:
34:a6:e0:81:79:86:ef:02:24:8a:70:55:5e:0b:15:
36:65:1f:6c:4d:ee:84:b8:ec:3e:b5:9f:66:7a:91:
ef:7e:4e:8c:b6:f3:fa:80:d8:d5:ee:02:68:20:d3:
dc:6c:ae:9a:84:c3:2a:15:cc:c7:e3:6e:14:f8:ff:
f3:54:de:45:b9:20:7c:09:92:23:ce:af:15:4c:79:
47:91:90:01:b4:43:b7:95:bc:93:be:7a:d2:89:f2:
9e:ef:08:ca:dd:71:09:c7:39:e2:d7:c1:7e:ae:3f:
2e:92:dc:be:47:f3:1a:6d:ea:a3:01:0e:32:3e:27:
6f:e8:e4:ba:4c:69:1f:19:e8:12:73:e9:f2:dc:a4:
28:12:6b:b8:1a:a4:4c:c6:5d:73:b9:12:07:bc:55:
2b:0b:45:91:cd:6d:04:c9:0e:9c:b1:2e:19:f0:60:
d3:c0:e7:b6:60:17:b4:1c:23:52:5d:e4:30:60:19:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DD:F8:B5:11:4A:0B:85:5F:B0:7A:EC:CE:8E:6D:85:FA:27:94:F6
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:c6:d8:90:4e:37:02:30:57:75:59:90:99:e7:34:f0:24:
40:b9:17:10:d8:fd:b2:d6:c8:94:af:d8:8a:b0:23:f3:f5:a9:
04:64:20:d5:75:1c:d2:2b:25:f3:47:b9:83:88:a2:83:cd:4a:
99:de:71:e6:f3:86:68:2d:52:04:7a:a1:f4:d0:2b:1c:61:9d:
1d:5f:cc:a9:db:be:80:52:10:d0:ee:08:c3:6d:45:b0:9b:0a:
00:5c:0a:41:35:01:68:c1:9a:65:a3:e3:4a:6b:25:7b:51:c1:
40:fa:1c:25:52:3a:76:1d:4e:78:0c:ed:59:76:f4:86:0f:4d:
cc:c1:7f:5d:81:4f:42:d9:4f:45:2f:1d:80:42:ef:93:80:4f:
f1:65:02:81:cf:87:05:cb:19:b9:0b:18:c5:52:6e:f4:61:f1:
13:ca:e4:93:1e:03:a2:10:b8:18:82:7b:bd:4d:70:8c:a8:e6:
bd:c6:cc:70:de:7b:f3:ed:f0:47:52:69:4d:2e:d9:be:c6:6c:
d3:c9:1a:0e:9b:3f:21:58:47:d6:e2:f0:3a:8e:11:e5:f8:52:
b0:59:92:43:77:3a:f8:4e:74:58:5a:c6:b5:e9:2c:4d:e5:b9:
8d:4e:96:73:f4:91:a5:66:f4:be:e0:f9:e7:48:4c:ac:ea:5e:
f3:a6:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:04 2026 by rpki-client