This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: kfyb8iMs5BZ0f04JBnSlkiWAoQGWn6RaD+4ihFI4LaY=
Subject key identifier: 57:7A:07:AB:1A:22:C8:D5:7B:6D:56:4A:97:35:F4:E2:E9:65:67:0B
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019C42EB7400FFC77EB010637A7B87CC325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 02D5
Signing time: Mon 09 Feb 2026 15:00:52 +0000
Manifest this update: Mon 09 Feb 2026 15:00:52 +0000
Manifest next update: Tue 10 Feb 2026 15:00:52 +0000
Files and hashes: 1: 5ELmBJPpYA7tVnLsfvJ7WFW-_ng.roa (hash: 5mmbc16KLPR+GEpL460h+oCJig1AkRpH39Lcr2Vr6J4=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: 9Tc4KKSfjJqAyysiqvGCbEDvpfkWWytYwdTHPd77nkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:74:00:ff:c7:7e:b0:10:63:7a:7b:87:cc:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Feb 9 15:00:52 2026 GMT
Not After : Feb 10 15:00:52 2026 GMT
Subject: CN=577a07ab1a22c8d57b6d564a9735f4e2e965670b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:60:c9:32:cf:ff:74:f6:60:4a:08:ce:53:
51:0a:3c:ce:ca:3f:a1:12:33:d0:1c:39:6f:69:a6:
15:6b:de:b5:93:cd:51:12:25:66:0f:8a:97:2b:66:
b0:66:da:e2:01:b9:24:9a:b2:75:de:69:ec:fa:2b:
85:06:8d:34:77:d4:a7:5f:f4:a5:85:05:8a:8a:f0:
b2:aa:0a:2e:95:e3:17:31:8c:ed:76:e5:19:d2:bd:
39:89:70:c9:e4:3a:d0:45:3c:a3:72:2b:29:89:4b:
50:dc:5b:24:85:68:68:c3:1f:72:78:44:4f:f3:51:
c2:3c:f1:75:2f:f0:6b:f5:ce:45:87:94:72:87:81:
cb:3d:93:15:fd:70:59:06:48:ce:2c:8c:6a:f3:2c:
61:9b:7a:fa:14:66:22:df:39:51:8b:09:1b:f9:a9:
6b:1a:99:1e:83:aa:4c:76:b2:e2:9d:c8:87:2e:6d:
1b:9b:28:c3:a5:52:dd:d0:0a:df:af:a3:14:3e:a4:
11:d5:9b:51:5f:34:86:dc:56:65:26:79:1d:be:2c:
48:a8:26:34:bd:93:57:49:cd:d6:2a:fb:49:26:8d:
c2:ae:59:e3:0f:fc:c1:46:04:42:01:98:ed:84:d5:
7d:2c:ca:d5:46:aa:b3:a5:f0:9b:84:fa:21:65:05:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7A:07:AB:1A:22:C8:D5:7B:6D:56:4A:97:35:F4:E2:E9:65:67:0B
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b9:41:bd:5f:db:4e:7a:5f:ef:2a:0c:8f:b3:fe:8c:23:19:
64:35:47:9f:35:02:50:8a:4a:84:87:14:30:6c:57:da:a7:d4:
16:ee:ae:44:99:ff:15:3c:83:f3:95:60:86:2b:84:2a:5e:2c:
0c:95:68:7b:30:4f:f7:11:17:15:2a:f1:ce:bc:b8:e9:7f:84:
47:9f:00:6c:2f:c4:91:d0:f5:59:e4:f1:a9:39:7c:be:64:59:
46:58:55:6e:c9:46:03:c5:c5:02:bc:fc:d3:8e:5c:17:85:96:
57:c7:c3:5d:bf:56:16:9f:1c:e9:1f:b2:20:f0:76:04:c5:dc:
dc:f0:0c:b4:28:b7:7c:b7:f2:66:a0:ef:0d:9b:9a:4b:bc:c5:
aa:1a:c7:83:a1:7b:8d:22:c5:b0:c7:5a:c1:33:99:21:46:41:
3d:19:3a:8f:df:72:8b:f6:bc:79:27:06:80:ff:61:72:21:a9:
a9:76:76:16:76:39:5f:8b:a0:8b:ce:71:74:17:47:fc:8d:51:
24:af:34:2f:6d:21:74:bf:9e:a7:7b:da:7a:88:25:31:8b:74:
d1:b4:da:d4:1e:56:9e:72:73:d3:2f:59:af:4f:c4:d6:e8:e1:
5d:fd:89:1e:31:03:28:6c:f0:01:5a:f1:03:65:5c:cd:8b:ac:
e6:35:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:26 2026 by rpki-client