This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: ui5/LWfGvp+8aRaeiBn9evfjfGkC5jZOn/fX32RARo4=
Subject key identifier: 2B:F0:CD:20:90:FA:D4:84:E6:D6:9A:2E:F9:4E:4C:CA:5F:06:87:EA
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019C42EBA20CDEA20ACA811595DF7758978C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 03FD
Signing time: Mon 09 Feb 2026 15:01:04 +0000
Manifest this update: Mon 09 Feb 2026 15:01:04 +0000
Manifest next update: Tue 10 Feb 2026 15:01:04 +0000
Files and hashes: 1: BXXFULcigDb5p-TWyxWoIQ6jZxg.roa (hash: +TJHe9rjVEZ47iPSt4ggCrDY9EnLTa/nFFdzzuzo8HA=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: cjQWbMucBlmLANmQ0UxZtqr2lW4B/FEPNwUpN3nZa7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:a2:0c:de:a2:0a:ca:81:15:95:df:77:58:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Feb 9 15:01:04 2026 GMT
Not After : Feb 10 15:01:04 2026 GMT
Subject: CN=2bf0cd2090fad484e6d69a2ef94e4cca5f0687ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:3b:12:40:60:18:1b:87:d7:33:26:47:7e:
6e:14:4f:d8:2d:1a:02:5b:ab:e7:6e:c6:43:b4:ad:
db:60:77:bf:59:2f:54:27:76:27:34:c1:b5:e1:37:
8e:e0:05:fc:15:53:46:67:98:14:03:74:4e:df:f0:
c6:23:6c:78:65:32:0f:6a:38:0c:b9:92:31:33:13:
4a:64:02:e1:1f:fa:23:2b:b6:71:81:df:12:44:84:
a8:a3:a2:8c:61:71:c4:ca:bc:69:a7:16:36:54:4a:
ae:31:e6:b5:da:80:43:d5:2b:22:59:f4:2f:98:71:
68:a7:40:81:ba:fa:c2:a3:93:a7:58:34:09:a8:49:
73:e5:3a:28:85:2f:18:f3:09:fe:f9:81:fa:09:13:
99:05:1c:49:de:97:e2:28:9f:f9:cf:cc:7e:98:71:
6f:f2:97:82:89:16:db:d0:a3:f9:5d:de:e7:65:ea:
b0:2a:c3:7c:71:ca:dc:0b:a0:3f:f2:ca:2f:cb:3b:
50:4f:cd:7b:73:bc:66:e6:78:07:20:81:36:6a:10:
64:94:dd:d2:2b:43:bf:ee:d1:4f:c2:80:ed:16:03:
af:5f:fe:0f:ee:d4:b5:ee:4c:f7:ff:0c:02:8e:64:
85:7a:09:5e:84:07:f0:37:7f:02:9e:a7:35:44:35:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:CD:20:90:FA:D4:84:E6:D6:9A:2E:F9:4E:4C:CA:5F:06:87:EA
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4c:5e:7d:6f:7b:e5:41:4b:fc:35:4f:99:de:27:58:b1:d7:
bb:7d:90:0d:a3:22:eb:05:e8:02:2f:f3:16:1f:6c:75:c9:5e:
95:81:23:26:fd:41:f9:23:94:98:a9:3a:4e:64:5f:c2:a4:c0:
a9:50:47:6a:66:9c:d5:4c:7a:9f:f7:b2:a1:1b:2b:7c:87:62:
ba:fa:98:eb:66:c1:58:3d:b0:19:e7:af:30:33:fb:18:00:14:
e1:7d:8c:3d:3f:d5:7a:30:4b:d6:1c:26:08:da:d1:e5:9e:c4:
f5:ae:d0:7a:09:7a:f1:fe:85:39:ea:cf:06:76:70:1a:38:15:
3f:0c:64:12:43:5b:0e:8f:cf:25:5f:27:63:2b:1a:89:95:dd:
6b:d0:5c:63:4c:f5:8c:38:f3:34:88:5e:73:de:77:11:ba:59:
c9:07:9f:d5:3c:d3:bd:db:89:28:c5:2f:ff:82:58:e1:d3:df:
30:da:71:00:02:dd:dc:aa:be:a1:06:0a:9c:33:8b:5f:26:cd:
b3:cc:3d:ee:b4:ad:e6:71:96:f1:e5:a8:24:c9:79:4b:83:44:
70:d7:67:d9:2e:e6:5e:41:1f:48:61:6b:80:35:67:e6:e6:82:
42:75:d1:14:43:7d:b4:0d:ed:65:17:d9:8c:ce:4f:df:9e:82:
cb:41:75:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:59 2026 by rpki-client