This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: TyrQRhFJ82I5bJnKjUe4huXv3F+M8uuBQmi97pgD2HM=
Subject key identifier: 5A:7B:E6:C7:FC:07:CB:0E:EF:31:DB:05:BB:66:90:66:35:78:F6:40
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 019C44A2D2FF845D2B039BEF3784EFFDE09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 03A6
Signing time: Mon 09 Feb 2026 23:00:47 +0000
Manifest this update: Mon 09 Feb 2026 23:00:47 +0000
Manifest next update: Tue 10 Feb 2026 23:00:47 +0000
Files and hashes: 1: BcVQyrwrHYullQZhoBE1L5P8lQE.roa (hash: 29V5LoBGnauLvwgtP04iC++YohVScFoggyXh/yIZelc=)
2: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: bIE2ysHu4va/+0C2vRr4eFEjhNJ8BNMilNB/B+qGzVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:d2:ff:84:5d:2b:03:9b:ef:37:84:ef:fd:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Feb 9 23:00:47 2026 GMT
Not After : Feb 10 23:00:47 2026 GMT
Subject: CN=5a7be6c7fc07cb0eef31db05bb6690663578f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:ac:d5:06:6b:e6:8b:3a:0a:a3:fc:2f:d6:
f4:ef:24:c7:fc:ab:80:a6:a9:4a:d6:16:a5:fe:64:
fd:ac:33:f6:e8:ee:a1:80:4c:45:a4:74:93:00:65:
e2:17:33:28:46:1c:fd:64:e4:9c:02:28:e2:5e:cd:
a6:8b:3b:d1:10:a7:76:f0:2d:18:6b:4c:07:0d:9b:
d8:ae:15:54:5c:61:0e:ac:33:2c:7d:73:1d:70:d6:
ec:0b:37:98:b1:db:6b:20:58:ad:aa:78:e6:83:58:
89:7c:09:d9:92:08:7b:73:cd:b1:18:9b:b8:5c:7a:
3f:a8:3a:ee:b5:15:90:11:8a:a2:ba:19:4b:38:6f:
fe:d0:20:93:fe:16:80:3f:1c:17:b1:d0:45:e2:aa:
11:91:2e:62:25:02:25:27:2b:e4:aa:c6:da:b5:59:
88:e9:53:50:ae:ff:53:47:54:8b:d6:4c:a1:23:38:
b8:4a:d9:79:cc:21:fb:65:c4:04:59:bb:bc:c3:ee:
15:a5:12:63:33:be:94:8a:30:22:8c:87:dd:41:6f:
cc:e7:45:c8:1c:12:a2:06:6b:a3:a5:ab:1b:51:a7:
e3:ac:6d:c7:35:85:b3:1a:1a:13:05:24:f2:b1:71:
b9:a4:0a:c0:2e:f1:8a:52:1e:eb:13:51:a1:5a:a6:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:E6:C7:FC:07:CB:0E:EF:31:DB:05:BB:66:90:66:35:78:F6:40
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:01:90:78:24:0e:23:9c:93:eb:82:79:d4:13:84:b9:22:
dd:49:12:db:9f:b9:e1:fc:c8:df:df:ff:b0:8e:03:86:b3:36:
76:1a:87:44:ce:18:a8:38:91:a4:95:d8:91:ff:ef:69:f7:07:
a1:e8:09:90:f0:a9:79:57:af:be:70:bf:4b:88:81:19:3c:13:
94:d7:bb:73:f5:aa:f5:1b:ca:0b:5b:e6:76:d1:63:69:33:6b:
72:a4:18:70:89:29:0a:fb:e7:4c:7c:78:55:33:08:00:ab:7c:
8b:70:95:5c:d8:99:9b:9e:fa:48:ca:6e:91:6e:eb:6f:94:4f:
54:00:11:6b:34:24:e9:cd:34:62:b0:1c:00:a7:5d:64:5a:25:
8c:b4:d9:d8:ee:9f:43:a4:43:15:a1:54:ff:0e:69:aa:51:5f:
cf:07:d6:72:3c:50:c5:25:2b:eb:f2:fc:e0:82:e1:1f:9e:91:
53:aa:8c:93:d7:02:c6:c8:7a:2c:3d:e2:7b:ac:f3:9b:65:21:
85:4f:eb:08:fa:9e:b2:ad:4d:3e:b8:a0:2b:db:d2:88:85:ac:
82:d8:2b:5e:50:90:f7:04:d1:e4:6f:3d:b5:11:8e:92:42:f4:
83:64:cd:ac:0b:7e:ce:fe:f1:d4:78:fe:b3:8e:8b:66:d7:fa:
13:c5:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:47 2026 by rpki-client