This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: DHOUX98vY8BS5SK1y7XjOkhuA0jx7ceqdaZ5oPXSvGY=
Subject key identifier: F9:22:21:00:4F:88:EF:4B:94:97:E3:24:9D:C4:5D:F8:2D:4F:99:8A
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 019C42EB1B5E0C1D5EF61422DE5EEA7C288A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 06E6
Signing time: Mon 09 Feb 2026 15:00:29 +0000
Manifest this update: Mon 09 Feb 2026 15:00:29 +0000
Manifest next update: Tue 10 Feb 2026 15:00:29 +0000
Files and hashes: 1: bin4sOPD5OKGfACXCfj3DQEIKBY.roa (hash: VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: mBmLlSIHVQBf4ltI/YanN8XTjkczN5vChVgv7YYsg+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:1b:5e:0c:1d:5e:f6:14:22:de:5e:ea:7c:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Feb 9 15:00:29 2026 GMT
Not After : Feb 10 15:00:29 2026 GMT
Subject: CN=f92221004f88ef4b9497e3249dc45df82d4f998a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:4c:38:14:31:c9:6a:d2:c4:3b:ac:c8:4c:
1b:4c:6b:1a:fb:f7:16:58:5a:de:61:ed:6e:0d:3f:
c6:1b:16:16:98:a9:6a:d4:c0:a0:79:48:2c:83:91:
0f:ce:bd:bc:28:66:b2:80:4b:3b:f2:56:0e:c4:bf:
29:f0:22:d4:87:57:fb:75:e7:2b:56:2b:49:88:cf:
dd:33:86:77:d9:19:76:44:24:0d:c9:7c:fb:20:3b:
8a:15:74:a6:05:cc:bd:a0:c2:ef:96:0a:8b:f1:1f:
ce:5b:96:20:75:82:4b:4d:a0:ea:01:d2:25:37:7d:
54:17:1b:47:d2:05:12:fc:01:05:79:2a:a2:60:4f:
9c:0c:0c:6e:40:59:59:2b:09:4d:ab:2a:70:df:1a:
c7:92:c3:60:a7:10:3d:77:27:80:0b:96:60:66:af:
03:79:f0:41:87:8a:ef:f7:6f:80:d3:5c:fe:3c:14:
86:b2:75:5d:ac:2b:cc:a6:17:2d:64:4d:10:7d:f6:
44:50:8f:05:5d:35:80:95:6a:9a:e1:8c:91:a2:d3:
d7:08:53:54:b5:f9:94:cc:d7:e8:b0:79:1d:e8:24:
df:d2:2e:46:23:1f:87:42:b9:61:b1:1e:99:43:df:
24:07:cc:4e:03:9c:19:db:f8:00:84:10:7c:17:73:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:21:00:4F:88:EF:4B:94:97:E3:24:9D:C4:5D:F8:2D:4F:99:8A
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:9a:37:c7:a3:14:3e:37:0a:9f:2f:c8:03:dd:7f:8f:74:
f6:aa:e8:2e:ac:37:e3:f9:f4:e1:74:2d:4d:29:67:95:46:a8:
ed:b7:cc:f1:b5:c0:4b:58:c0:09:53:1c:44:f8:b1:5e:96:56:
30:0c:ab:80:c0:8f:b1:ae:07:bf:ce:f0:47:c9:2c:85:dc:16:
c1:4a:2e:43:41:27:37:49:79:6d:71:cb:77:a8:df:d8:b3:c5:
c8:4d:39:6c:48:2e:f1:c7:2c:c7:d5:2d:fe:29:d4:7d:1d:5c:
8c:30:a5:cc:fd:77:ff:7d:f2:e4:5d:5b:96:57:97:54:bc:9b:
6a:84:d7:66:d6:b9:5a:5f:1c:61:5a:72:20:0d:b0:9a:74:fb:
fb:e9:ff:95:61:a2:85:e6:ba:d0:a9:af:90:e7:b2:90:c5:b9:
33:cd:be:15:08:d4:79:19:24:f8:c5:0a:d2:c5:17:96:49:9f:
2a:93:dc:f2:24:db:7b:c2:0a:5f:9c:ea:3e:d7:32:4b:bd:17:
b7:fd:14:b4:28:7a:7f:42:bf:2b:78:d0:a6:c2:69:cc:83:e2:
f1:3e:0b:79:91:0e:fa:02:14:35:98:72:78:ef:2a:9b:fd:64:
f4:b6:a2:4b:d0:ad:92:06:6a:eb:1a:b7:7d:3b:f2:1b:3d:44:
ec:a8:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:11 2026 by rpki-client