This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: 5WA5fKPpO1eJM+ipj0hZKER4b6REiB6aRpMs8/xe6L8=
Subject key identifier: AC:58:6B:03:A9:BF:9A:85:AE:98:8A:C0:57:1F:65:82:7A:35:AD:9F
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 019C43901D6481DDEB61A197AB8B7BEA8A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1295
Signing time: Mon 09 Feb 2026 18:00:43 +0000
Manifest this update: Mon 09 Feb 2026 18:00:43 +0000
Manifest next update: Tue 10 Feb 2026 18:00:43 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: nHlPTsBeA3hXxUdqWUS8daxi+dNAeTENmqDrDCofbzk=)
2: f7TRcxcu5eFFG3edJtWO5LjNKUc.roa (hash: RBZM0y5g0NU2rB7JA5FE3fTKLxia7y0PmMp6qlYV9vo=)
3: kaCQ02B6gGfO7Q-84pz4Ur-huUU.roa (hash: EdGjBuxGJOuKZYVXyp/XaU7JSLAitiAqjCSTwhWKNJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:1d:64:81:dd:eb:61:a1:97:ab:8b:7b:ea:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Feb 9 18:00:43 2026 GMT
Not After : Feb 10 18:00:43 2026 GMT
Subject: CN=ac586b03a9bf9a85ae988ac0571f65827a35ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:24:c5:3a:df:bb:e0:73:a6:45:4a:7d:23:
e0:6c:fc:16:d5:f0:bb:13:54:db:50:a9:d1:40:3c:
82:29:b5:81:f7:44:79:32:95:1a:9d:37:45:39:e2:
ab:0b:5f:9e:cc:23:ff:ab:30:43:b1:9d:48:fc:db:
34:31:12:f3:03:96:87:78:8b:47:2b:68:34:64:37:
e4:76:c3:8d:18:89:4c:72:9a:72:63:88:d2:d4:10:
0f:76:04:84:ae:81:0e:9a:6c:39:51:27:af:b0:5c:
6d:a6:86:b9:41:33:f4:f8:41:90:39:c9:c3:53:b1:
df:a5:b5:cb:f7:aa:88:cb:3d:05:10:40:2b:f6:92:
ea:98:65:6a:17:37:96:d4:15:01:a4:6a:8f:82:20:
c1:cc:f1:5f:2d:37:8b:36:97:3d:c7:61:f9:4e:db:
18:18:7c:5f:b0:c7:18:c1:7c:16:db:0d:b4:cf:68:
d2:6b:e9:f0:e5:af:dd:cf:8c:63:aa:53:b7:10:a9:
f7:15:f9:af:82:4d:d0:e3:81:c7:85:cb:de:c9:a7:
66:fc:65:24:fa:03:7e:39:78:e8:3b:9b:df:03:7c:
63:aa:05:41:eb:74:ed:23:27:bd:19:50:fa:a8:bc:
78:af:67:73:91:1f:b0:8c:0c:7f:82:ff:8f:24:84:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:6B:03:A9:BF:9A:85:AE:98:8A:C0:57:1F:65:82:7A:35:AD:9F
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7e:81:78:d0:62:df:8a:22:bf:34:34:3b:79:c5:e3:7b:78:
12:92:e0:89:d8:d9:de:12:00:1d:1c:f9:d3:dd:d0:18:ed:f7:
ed:1c:e9:82:01:7c:94:55:35:35:a5:43:ed:f4:23:08:83:bb:
15:8c:31:a4:f0:60:fe:78:e5:0e:c9:14:df:ee:f9:02:93:e4:
dc:4c:0c:64:5a:10:45:03:d6:4e:8e:2f:95:a8:34:1e:b9:f7:
ad:5d:65:53:83:46:4a:11:d1:6e:0f:df:63:85:bc:7b:57:a6:
0d:d4:9d:e3:61:76:06:3d:06:33:b5:5c:ac:2d:4a:85:e2:39:
0a:0c:37:d6:c2:e0:bf:7c:52:ca:5a:82:df:f8:b3:17:cb:7b:
ae:01:e0:05:dc:e6:c3:c9:d5:ce:9d:f6:ab:2d:f0:8d:df:e0:
28:8d:f3:b2:3d:a0:14:52:06:5c:8a:82:d1:9b:59:40:1a:ab:
af:4a:d6:5d:5d:2f:0f:99:79:a4:ed:cc:6a:93:5b:df:36:50:
66:53:19:42:45:4f:ba:11:d4:2f:66:19:60:59:f5:02:d9:e8:
00:33:05:13:f5:aa:b5:4a:a1:d5:d6:3e:38:59:85:15:de:11:
1a:de:ff:1a:65:fe:37:f8:13:43:ba:23:e3:7b:47:67:ca:1f:
8b:08:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:06 2026 by rpki-client