This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: dsW/V81AbPC5cK1TvljSN8uAB2/39KLadrdRSDjSSDo=
Subject key identifier: 81:B1:6B:41:FB:F9:36:BF:E1:46:79:0D:C5:0F:1A:82:1E:24:1F:C4
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 019C1D5E67681A5D3C02115136BC05096E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 1800
Signing time: Mon 02 Feb 2026 08:00:51 +0000
Manifest this update: Mon 02 Feb 2026 08:00:51 +0000
Manifest next update: Tue 03 Feb 2026 08:00:51 +0000
Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: P9TnlufWV/7rbnzM8PH1K0h4Xm7S947NCObB52HEYpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:5e:67:68:1a:5d:3c:02:11:51:36:bc:05:09:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Feb 2 08:00:51 2026 GMT
Not After : Feb 3 08:00:51 2026 GMT
Subject: CN=81b16b41fbf936bfe146790dc50f1a821e241fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:c1:20:c5:f5:e0:0f:f6:f5:06:6e:2c:1b:
8a:4a:2e:da:5a:fc:98:c5:2b:55:ab:a1:2c:85:e6:
97:c2:08:8d:bc:81:0a:68:42:d0:e5:11:ed:01:65:
f0:d2:d4:2a:af:80:d7:9e:7f:ab:eb:9e:57:4f:27:
3b:36:1c:74:d7:f7:d8:ce:de:5e:bb:6c:7b:8a:e4:
b4:7c:9d:f8:e9:20:ba:87:95:2a:08:36:78:10:3b:
6d:fa:e9:37:85:d7:94:c5:8d:b2:6e:02:6b:4d:56:
94:fe:93:cd:48:76:85:05:65:3f:c5:d8:2f:e3:4d:
18:b5:97:f3:6f:61:4d:6f:0e:05:93:46:f6:fa:88:
de:07:6b:b8:69:7d:1c:19:5f:3a:54:ee:b3:9b:6a:
8c:73:fd:e2:08:99:6c:39:d2:3c:72:fd:a1:73:b3:
69:88:c4:87:37:54:e5:72:43:ce:05:c3:22:0b:0a:
b0:24:57:3c:aa:06:71:aa:bd:43:af:4e:21:6e:6a:
c7:d4:3c:61:a6:9e:4a:b6:77:5f:a1:8f:c5:72:cb:
c9:79:e3:25:1e:36:b8:35:54:81:07:64:a7:d4:e4:
89:80:08:85:4b:ae:d5:21:56:08:30:38:26:49:57:
b2:d9:38:32:74:bc:53:5f:48:c8:8b:32:49:d3:d0:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:6B:41:FB:F9:36:BF:E1:46:79:0D:C5:0F:1A:82:1E:24:1F:C4
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3a:17:8d:eb:5a:8e:3e:c9:44:38:ab:32:fc:ff:7a:c7:97:
ca:5a:1b:ad:fe:74:3e:da:9e:cc:46:5f:47:6c:1b:18:3e:70:
64:18:bf:4f:32:aa:b4:60:94:e0:be:84:f4:ca:e6:a2:12:b5:
1b:28:df:28:d6:c2:cc:e8:45:f4:c4:94:0b:88:aa:a2:2a:64:
4d:eb:83:94:05:3d:65:a7:be:1c:db:49:57:55:86:e4:e0:3d:
b5:29:93:17:14:8d:eb:e0:c3:df:23:05:d6:f5:b5:99:ee:86:
57:85:49:83:34:f0:11:45:51:29:43:62:94:06:a8:30:2b:b9:
04:86:eb:56:21:a6:63:ba:34:50:bb:3d:0a:e3:97:8a:e9:f1:
5f:0a:09:04:fc:f2:9d:78:68:51:24:18:d2:c3:25:6b:c1:2a:
e9:31:27:f9:9c:f1:59:80:70:dc:e3:4e:3a:42:a0:3c:6d:6b:
5b:dc:fc:b0:25:32:00:3b:32:71:9c:b0:c3:5f:4a:0b:fb:a4:
d6:01:74:6b:81:21:cf:c2:44:9c:36:ed:04:31:cd:a2:f1:45:
18:6b:5e:cd:5a:87:42:19:78:8c:bd:df:65:83:e0:c6:38:c1:
fa:73:0c:85:9d:1c:29:39:8f:8b:40:b2:e7:43:6a:c9:09:f7:
57:94:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:16 2026 by rpki-client