This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: bz5JYTCRq/bXSOrd6OSJ/W1nTEv/yRGd8boYLvAJ6Ps=
Subject key identifier: DE:33:BA:AE:D1:B1:33:95:C2:C5:1C:ED:D1:D9:CF:05:DA:6A:52:A7
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 019C432210810BBDE4236508EC247225004F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 16:00:31 +0000
Manifest this update: Mon 09 Feb 2026 16:00:31 +0000
Manifest next update: Tue 10 Feb 2026 16:00:31 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: GO8X46LM/eIYYYXxAvU9UAG77NPE6B3A6x3eEggwna0=)
2: V4BV10qPY6b-JooJZeWPBE6lJrE.roa (hash: 38wboqA2Afge4PlNQaN9faMSSzNBTQwT1DwZQqM/Oco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:10:81:0b:bd:e4:23:65:08:ec:24:72:25:00:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Feb 9 16:00:31 2026 GMT
Not After : Feb 10 16:00:31 2026 GMT
Subject: CN=de33baaed1b13395c2c51cedd1d9cf05da6a52a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:84:b0:56:63:dc:48:a5:73:98:f0:b1:f3:
41:db:73:a9:ff:ac:f1:56:fc:84:ff:99:97:97:50:
c7:77:3a:ec:f3:7f:aa:5d:6e:34:d2:cb:6a:d0:ba:
6f:52:ea:63:9e:51:ab:4c:3e:a5:13:b7:f1:0c:3c:
a8:92:dc:97:50:5d:a6:2c:58:42:a3:bb:b2:86:92:
45:c9:e8:81:b2:7e:c4:28:94:68:92:51:d6:16:1f:
a6:0e:13:49:7c:8f:a3:85:2a:9d:19:34:44:b8:5e:
7d:2c:a1:a8:69:78:1c:25:7e:24:6c:bf:12:b1:c3:
27:27:a1:de:28:ba:72:b3:ec:e9:64:af:65:33:00:
f8:5a:5e:a0:80:91:5d:c5:38:e9:2c:14:f4:33:bb:
2f:51:4b:72:cf:d1:8f:df:83:b5:97:55:5a:1e:e7:
b0:7d:4d:03:65:e0:c7:6c:69:76:42:30:6e:6d:4c:
fa:cd:45:a9:93:9e:4c:d3:09:97:25:62:93:90:4d:
67:7b:f5:86:4a:fe:51:09:22:47:13:e8:a6:24:09:
0a:d0:e8:11:25:30:0d:e8:c7:9e:45:78:3f:b7:69:
44:f7:d6:2b:6a:27:26:11:a7:a3:92:5c:6a:2d:13:
fd:40:2c:88:42:d7:14:cb:a7:9e:a0:1e:f6:fd:34:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:BA:AE:D1:B1:33:95:C2:C5:1C:ED:D1:D9:CF:05:DA:6A:52:A7
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d4:5a:a6:f1:23:8a:97:a8:1b:f5:65:92:90:a4:5d:4c:c1:
b1:fa:26:c4:4e:e6:68:c2:e0:a7:e5:50:71:ec:ab:a5:4a:ed:
c8:2b:c9:0e:63:d3:c8:fc:95:6d:e1:4b:a6:77:6a:4e:e4:18:
07:b3:5e:f2:01:f0:90:26:f5:d6:f2:be:b6:3f:7d:4e:35:d9:
97:51:04:1f:8c:9c:82:63:aa:2b:5b:cf:04:1d:3b:c5:fe:8d:
86:f5:e1:8e:49:08:13:41:b6:b9:db:07:5a:2f:92:55:8c:7a:
6e:06:4b:d0:65:54:5e:34:05:24:83:33:7a:4b:40:ca:22:5a:
34:b5:90:78:6d:e8:fa:72:ea:33:48:75:de:1e:cc:eb:a5:f6:
0e:11:47:b7:be:ae:c4:4b:97:09:7b:89:36:8b:8d:4f:64:e0:
66:7c:a3:85:2c:79:14:cf:e7:f2:65:08:c4:0f:9c:30:2f:92:
e9:f5:26:c3:0c:21:27:9c:af:69:97:4a:c6:9f:6a:2d:d0:97:
ba:0f:e4:ec:cd:12:91:3b:21:97:86:cb:cc:3d:32:c7:d3:25:
0d:9b:ed:2c:3d:c2:7b:87:10:06:07:85:1d:dc:04:d2:e4:88:
fb:d7:98:02:ca:95:29:1b:f7:25:43:aa:b4:3e:52:69:25:01:
0a:63:05:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIhCBC73kI2UI7CRyJQBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTFmOTZmOTFjNGEwOWY5NzljNWIxODVjMjZjYjAwYWUw
Zjg2YmYwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD
EyhkZTMzYmFhZWQxYjEzMzk1YzJjNTFjZWRkMWQ5Y2YwNWRhNmE1MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ6EsFZj3Eilc5jwsfNB23Op/6zx
VvyE/5mXl1DHdzrs83+qXW400stq0LpvUupjnlGrTD6lE7fxDDyoktyXUF2mLFhC
o7uyhpJFyeiBsn7EKJRoklHWFh+mDhNJfI+jhSqdGTREuF59LKGoaXgcJX4kbL8S
scMnJ6HeKLpys+zpZK9lMwD4Wl6ggJFdxTjpLBT0M7svUUtyz9GP34O1l1VaHuew
fU0DZeDHbGl2QjBubUz6zUWpk55M0wmXJWKTkE1ne/WGSv5RCSJHE+imJAkK0OgR
JTAN6MeeRXg/t2lE99YraicmEaejklxqLRP9QCyIQtcUy6eeoB72/TSWZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4zuq7RsTOVwsUc7dHZzwXaalKnMB8GA1UdIwQY
MBaAFEKh+W+RxKCfl5xbGFwmywCuD4a/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUt
MWUwZWQ5ZjM0NGZjLzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUtMWUwZWQ5ZjM0NGZj
LzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtRapvEj
ipeoG/VlkpCkXUzBsfomxE7maMLgp+VQceyrpUrtyCvJDmPTyPyVbeFLpndqTuQY
B7Ne8gHwkCb11vK+tj99TjXZl1EEH4ycgmOqK1vPBB07xf6NhvXhjkkIE0G2udsH
Wi+SVYx6bgZL0GVUXjQFJIMzektAyiJaNLWQeG3o+nLqM0h13h7M66X2DhFHt76u
xEuXCXuJNouNT2TgZnyjhSx5FM/n8mUIxA+cMC+S6fUmwwwhJ5yvaZdKxp9qLdCX
ug/k7M0SkTshl4bLzD0yx9MlDZvtLD3Ce4cQBgeFHdwE0uSI+9eYAsqVKRv3JUOq
tD5SaSUBCmMFJw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:36 2026 by rpki-client