This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: Th9fiyhsB9bZavhPvgGX0AUbX/1b3xL2dVFa+/MBwNs=
Subject key identifier: D4:2A:D7:C0:0B:07:8A:D6:85:22:61:F0:07:84:16:99:4B:11:C5:72
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019C44D9C508E0F460C20DE155DB8177A709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1811
Signing time: Tue 10 Feb 2026 00:00:48 +0000
Manifest this update: Tue 10 Feb 2026 00:00:48 +0000
Manifest next update: Wed 11 Feb 2026 00:00:48 +0000
Files and hashes: 1: 9p7dGXDhhIMjMpnYQ1dR4KNOndM.roa (hash: v32tTh04pVTtA27giNDJzrAPLcEj/C1fD9RHh94I4MU=)
2: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: He5q+ILETNEEkTzrTUr4r5SgbRuXR1YCCvjvJqksRVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:c5:08:e0:f4:60:c2:0d:e1:55:db:81:77:a7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Feb 10 00:00:48 2026 GMT
Not After : Feb 11 00:00:48 2026 GMT
Subject: CN=d42ad7c00b078ad6852261f0078416994b11c572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:e7:b9:cd:8e:be:a4:ff:ba:f3:a7:8e:cd:
bf:82:96:49:c5:87:fd:c3:a6:0e:da:ba:68:64:1a:
ec:0e:75:06:ff:4c:ee:64:92:f5:e4:87:aa:e1:2a:
98:64:ec:54:3a:ed:de:e2:04:fa:23:a2:80:3c:32:
92:7e:29:06:41:70:26:26:d9:95:c2:a7:87:56:0b:
e6:be:24:1e:09:d1:ff:25:4d:16:fd:8b:c4:84:62:
9a:4d:fe:8d:12:51:cb:e9:47:9a:93:7b:60:2e:cc:
8c:1d:7b:b7:65:b1:b2:34:f8:7a:ab:1d:81:a6:66:
8c:f1:ba:e3:9e:53:92:bc:12:db:fd:f5:64:dc:29:
54:31:8f:5e:bd:70:0b:78:1f:ca:57:42:0d:f4:50:
e6:f6:6f:74:0b:90:af:99:af:95:2f:ee:d0:43:76:
91:b4:d3:51:0a:99:9c:c3:4a:5d:62:b7:e0:83:cd:
b7:61:ba:db:95:bb:2d:da:5c:38:ba:31:94:7f:5c:
c0:c3:f1:3d:8a:5a:2c:50:7b:7c:29:ef:76:d0:c9:
d7:2d:87:6e:41:c6:78:7c:40:0f:d1:d7:d2:7c:28:
eb:5c:71:25:44:22:40:38:54:a9:b0:40:9c:72:23:
fc:6e:36:cb:0f:e4:77:2c:ea:91:19:8a:c8:16:8e:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:D7:C0:0B:07:8A:D6:85:22:61:F0:07:84:16:99:4B:11:C5:72
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:59:ae:5f:30:70:28:47:fb:a1:ce:28:f8:aa:08:18:a7:05:
2f:d5:f9:43:a8:66:c7:00:c5:92:21:ce:c5:95:aa:f9:d5:80:
75:a1:9f:3e:fc:58:2e:9f:fe:a5:14:f6:ec:88:72:20:72:1b:
47:2b:6e:10:fe:4b:54:ca:da:1b:45:78:f3:ed:34:b0:ba:c0:
d7:84:14:96:06:3a:b7:23:a5:2e:01:87:56:9f:0c:e2:3e:07:
6b:da:09:18:d6:8f:bc:2b:4d:90:84:ec:ee:c0:8b:53:8d:e9:
00:4b:55:72:22:32:cd:07:40:f2:35:86:bd:f3:dd:b3:bd:e8:
31:3c:fe:64:69:95:16:4e:92:9e:cd:99:88:21:78:b1:aa:e0:
4b:5d:ed:74:9b:57:87:22:4b:3c:57:8a:95:34:90:83:ba:15:
9b:1e:e3:b9:32:3a:03:82:87:4e:ef:70:9c:7e:e8:75:39:7c:
29:17:00:c1:18:d2:ff:b1:b6:c5:08:73:43:c0:1e:5e:aa:b3:
8f:98:ed:e8:b9:d4:d4:9e:fe:af:34:07:09:a5:cb:54:7f:bb:
4d:f1:e1:f2:3e:c7:eb:c1:99:a4:3c:e8:8c:74:6e:f7:63:fb:
fe:8d:05:4d:38:30:77:26:42:01:2e:2a:21:61:92:2d:a3:92:
e5:a3:f8:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2cUI4PRgwg3hVduBd6cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0
OGRkNmMwHhcNMjYwMjEwMDAwMDQ4WhcNMjYwMjExMDAwMDQ4WjAzMTEwLwYDVQQD
EyhkNDJhZDdjMDBiMDc4YWQ2ODUyMjYxZjAwNzg0MTY5OTRiMTFjNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+vnuc2OvqT/uvOnjs2/gpZJxYf9
w6YO2rpoZBrsDnUG/0zuZJL15Ieq4SqYZOxUOu3e4gT6I6KAPDKSfikGQXAmJtmV
wqeHVgvmviQeCdH/JU0W/YvEhGKaTf6NElHL6Ueak3tgLsyMHXu3ZbGyNPh6qx2B
pmaM8brjnlOSvBLb/fVk3ClUMY9evXALeB/KV0IN9FDm9m90C5Cvma+VL+7QQ3aR
tNNRCpmcw0pdYrfgg823Ybrblbst2lw4ujGUf1zAw/E9ilosUHt8Ke920MnXLYdu
QcZ4fEAP0dfSfCjrXHElRCJAOFSpsECcciP8bjbLD+R3LOqRGYrIFo5Z2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQq18ALB4rWhSJh8AeEFplLEcVyMB8GA1UdIwQY
MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt
YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw
LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFmuXzBw
KEf7oc4o+KoIGKcFL9X5Q6hmxwDFkiHOxZWq+dWAdaGfPvxYLp/+pRT27IhyIHIb
RytuEP5LVMraG0V48+00sLrA14QUlgY6tyOlLgGHVp8M4j4Ha9oJGNaPvCtNkITs
7sCLU43pAEtVciIyzQdA8jWGvfPds73oMTz+ZGmVFk6Sns2ZiCF4sargS13tdJtX
hyJLPFeKlTSQg7oVmx7juTI6A4KHTu9wnH7odTl8KRcAwRjS/7G2xQhzQ8AeXqqz
j5jt6LnU1J7+rzQHCaXLVH+7TfHh8j7H68GZpDzojHRu92P7/o0FTTgwdyZCAS4q
IWGSLaOS5aP4Pw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:30 2026 by rpki-client