This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: jjGzWD1MagZvJF7jK1AkoiwcU1VXgBW+b/BwsbSrqww=
Subject key identifier: 8B:3F:05:32:48:07:2C:7F:5B:A3:B2:D7:6B:52:B6:0A:01:0D:84:C8
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019C40FCC86DD43597E7FDB6D7DE34EF3CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 14EA
Signing time: Mon 09 Feb 2026 06:00:34 +0000
Manifest this update: Mon 09 Feb 2026 06:00:34 +0000
Manifest next update: Tue 10 Feb 2026 06:00:34 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: hgEUf9OYD4jalH9NG0vp82thHaN0nToFpX6/VvThZEQ=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:c8:6d:d4:35:97:e7:fd:b6:d7:de:34:ef:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Feb 9 06:00:34 2026 GMT
Not After : Feb 10 06:00:34 2026 GMT
Subject: CN=8b3f053248072c7f5ba3b2d76b52b60a010d84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:17:f2:68:6c:68:05:73:c8:83:14:35:03:
7d:d6:14:49:58:da:cb:5c:b5:d7:22:ef:1e:25:12:
59:8f:1f:bc:ca:f9:0b:02:ac:11:98:64:5f:59:44:
98:21:f3:db:7a:35:6b:21:0f:41:9a:b8:63:fd:55:
4b:7a:57:88:15:b6:72:33:06:c6:b2:27:eb:74:19:
81:e3:eb:d0:6f:01:4a:e0:7e:05:4e:a2:e3:59:fe:
9b:83:d0:e3:c8:7b:28:2b:52:6d:70:e2:aa:b3:83:
fe:8e:a9:19:50:e1:d5:f6:7c:77:91:be:9a:70:d6:
47:8f:20:06:e7:e2:8e:71:14:ed:3a:af:cb:c9:14:
e5:26:7b:7f:48:57:03:16:72:2b:cb:a4:91:f7:e6:
a0:db:a4:59:0c:d2:3b:cd:35:2c:08:0d:d4:08:24:
b4:84:d3:03:74:a1:0a:f1:5e:d2:70:69:6c:26:b9:
e4:9d:01:aa:2d:55:c7:6a:9e:02:21:a9:f8:e5:93:
6b:07:5b:4d:d4:94:42:48:6d:b5:93:54:e6:9b:0e:
34:22:31:75:0b:34:db:34:e1:17:f0:0c:a3:fd:aa:
10:bf:66:35:62:b5:b5:8e:8f:91:69:60:a1:03:21:
da:23:d4:39:c0:af:3c:8f:bd:68:d4:5c:62:19:54:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3F:05:32:48:07:2C:7F:5B:A3:B2:D7:6B:52:B6:0A:01:0D:84:C8
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:4e:e3:b5:cb:35:35:ee:65:b8:0c:0f:cc:5d:d6:91:27:
3a:a3:9c:30:88:42:cb:b7:99:ec:75:02:e9:35:39:8f:39:96:
6a:67:91:97:1c:74:37:d3:69:80:ec:08:39:88:6a:03:e7:98:
a1:48:7f:a4:d5:d4:56:f2:20:a5:3f:37:8f:1f:5a:40:a0:61:
d4:5d:0c:07:7a:a4:a3:16:bd:4e:75:94:6d:1d:a5:cd:e4:6f:
bb:10:7b:8b:b2:ca:cf:29:fd:76:09:68:fd:3b:89:b3:73:41:
64:9b:a2:ea:4c:e9:08:5c:57:60:4e:98:59:0c:51:d9:89:77:
15:ac:03:6f:f1:07:95:cd:c7:82:19:89:13:1d:99:f1:d6:61:
73:8e:c1:3b:e4:50:7f:3c:ac:33:1f:aa:d7:47:71:c3:16:e8:
9b:b7:4d:e2:8a:78:a4:38:be:da:9a:38:ba:a2:f1:1d:0e:89:
a3:02:bd:19:ff:49:c0:4b:42:48:e4:e9:fa:a3:c2:3d:a8:5c:
bc:5a:a4:7b:8c:35:3c:f8:29:02:dd:5a:36:f6:2b:d2:d4:eb:
d6:17:4d:a5:74:83:c3:c7:2a:54:e9:df:e3:ab:0c:0a:7b:1a:
59:af:bd:09:0c:44:d1:d6:58:71:3e:f5:c6:1a:fd:c7:2d:b0:
f0:65:2f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:47 2026 by rpki-client