This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: W4UaImlqyCGCfoymu1bHbjtogH4PYPm3pkcd5d4ab3U=
Subject key identifier: 0A:4D:26:FC:FE:94:03:3B:65:CD:F4:08:2A:E5:10:2D:19:6B:96:A2
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019C41D9009EAFECEAF936F632C5DAB37EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 15D9
Signing time: Mon 09 Feb 2026 10:01:06 +0000
Manifest this update: Mon 09 Feb 2026 10:01:06 +0000
Manifest next update: Tue 10 Feb 2026 10:01:06 +0000
Files and hashes: 1: brwHnJn9j349deS3lmnqCOoNhq8.roa (hash: m2Te8mjf6FkoLB1a3b50ZNfCC4MLvjshErjN5GPxq0M=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: EnRQFsAnZ7BgIHvVILB+wCa1rHQWiek1U5jhQ32s4dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d9:00:9e:af:ec:ea:f9:36:f6:32:c5:da:b3:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Feb 9 10:01:06 2026 GMT
Not After : Feb 10 10:01:06 2026 GMT
Subject: CN=0a4d26fcfe94033b65cdf4082ae5102d196b96a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:cf:83:74:4c:76:fd:af:e5:54:b0:77:0f:
d0:6e:64:58:07:da:05:f7:6a:f9:6e:96:ec:c8:77:
69:21:9e:e5:60:0c:33:e8:f9:34:a1:be:0f:1a:f7:
9b:3a:26:14:06:b0:63:47:56:4d:05:41:fe:9c:c0:
07:e9:df:83:54:96:51:46:2a:a3:7b:31:ee:b8:d0:
82:66:ad:0d:98:f8:9b:85:b1:27:15:ed:64:58:95:
c5:c4:9f:c8:6a:65:aa:fd:03:1a:5f:83:01:d2:8e:
a6:c9:f0:72:23:87:82:49:d7:46:af:1f:d3:fe:fb:
d6:e6:a9:95:11:97:51:46:d6:14:06:8c:30:f9:cd:
51:e6:63:87:75:b6:1f:66:d6:a9:b0:82:be:ab:93:
03:39:cf:5d:31:09:67:1f:a1:0d:87:2f:3d:63:94:
b4:39:70:2b:bf:ae:37:39:ef:0f:47:1e:ee:69:48:
00:f0:8a:56:bd:26:11:ae:6f:52:cd:eb:f4:bd:a2:
e4:1c:f7:2f:ff:5a:98:6f:d8:db:10:69:be:ea:38:
ae:4c:1b:3f:ce:1d:c1:57:2d:a9:7a:c8:f3:22:63:
46:b1:8f:50:95:e3:a0:ab:d8:fc:c5:95:3a:25:b7:
9a:ba:59:77:64:ea:52:e5:ee:40:47:0d:d7:b6:1d:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:26:FC:FE:94:03:3B:65:CD:F4:08:2A:E5:10:2D:19:6B:96:A2
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a3:5b:a4:46:b8:21:2a:df:0d:55:7c:f4:05:02:52:3a:02:
2f:5f:08:85:d1:ab:be:e6:0f:f9:52:6b:78:7e:7a:78:8a:12:
4f:f3:a7:a6:b8:c9:f0:cf:b2:1c:6d:60:ca:15:56:94:cc:f8:
4b:74:21:28:7b:8c:c7:4e:e8:37:7a:cb:55:50:70:20:68:31:
37:19:93:7b:c1:18:76:fe:9c:f1:fb:9d:d7:01:63:14:ae:4e:
57:00:35:e5:88:93:2d:ba:bd:8d:ee:fb:55:da:ae:d6:1e:f4:
20:3f:25:e5:e3:1a:6e:69:66:57:7d:65:c3:ac:b7:c3:f1:b9:
4a:b4:60:8e:09:18:02:ef:77:9a:25:43:84:84:06:f8:36:c4:
c3:c3:03:5e:a8:94:29:a7:8b:d5:52:85:f1:63:ec:e9:04:f4:
af:a9:58:84:bb:73:be:a8:c8:37:b8:ce:08:83:c2:1f:b5:0f:
76:bf:66:9d:a4:ca:d5:ce:c0:05:0a:e0:69:f9:d4:26:db:48:
ac:be:82:2a:7d:42:dc:40:a1:f2:ed:83:db:ea:1d:72:13:f0:
27:07:64:29:f2:84:1e:f4:6e:a2:25:ad:9d:6e:4c:4e:49:37:
a6:8e:90:4e:c9:99:33:54:9b:c6:83:43:5b:69:11:6d:de:a1:
8c:b1:d6:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2QCer+zq+Tb2MsXas36qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm
MzE1YjcwHhcNMjYwMjA5MTAwMTA2WhcNMjYwMjEwMTAwMTA2WjAzMTEwLwYDVQQD
EygwYTRkMjZmY2ZlOTQwMzNiNjVjZGY0MDgyYWU1MTAyZDE5NmI5NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa7Pg3RMdv2v5VSwdw/QbmRYB9oF
92r5bpbsyHdpIZ7lYAwz6Pk0ob4PGvebOiYUBrBjR1ZNBUH+nMAH6d+DVJZRRiqj
ezHuuNCCZq0NmPibhbEnFe1kWJXFxJ/IamWq/QMaX4MB0o6myfByI4eCSddGrx/T
/vvW5qmVEZdRRtYUBoww+c1R5mOHdbYfZtapsIK+q5MDOc9dMQlnH6ENhy89Y5S0
OXArv643Oe8PRx7uaUgA8IpWvSYRrm9Szev0vaLkHPcv/1qYb9jbEGm+6jiuTBs/
zh3BVy2pesjzImNGsY9QleOgq9j8xZU6Jbeaull3ZOpS5e5ARw3Xth3DhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApNJvz+lAM7Zc30CCrlEC0Za5aiMB8GA1UdIwQY
MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt
Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm
LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6NbpEa4
ISrfDVV89AUCUjoCL18IhdGrvuYP+VJreH56eIoST/OnprjJ8M+yHG1gyhVWlMz4
S3QhKHuMx07oN3rLVVBwIGgxNxmTe8EYdv6c8fud1wFjFK5OVwA15YiTLbq9je77
Vdqu1h70ID8l5eMabmlmV31lw6y3w/G5SrRgjgkYAu93miVDhIQG+DbEw8MDXqiU
KaeL1VKF8WPs6QT0r6lYhLtzvqjIN7jOCIPCH7UPdr9mnaTK1c7ABQrgafnUJttI
rL6CKn1C3ECh8u2D2+odchPwJwdkKfKEHvRuoiWtnW5MTkk3po6QTsmZM1SbxoND
W2kRbd6hjLHWGw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:38 2026 by rpki-client