This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
File: qqzbVOF2f1uOzsxeM4LWYR5cjII.mft (raw, json)
Hash identifier: 5wEJNNuNvwfQXeSE/jev60mCGEYZtGGq04+RZGgU0Qw=
Subject key identifier: 72:59:19:ED:F0:97:97:02:25:0B:3A:F0:F3:E1:A1:9B:7F:EF:FA:F6
Authority key identifier: AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82
Certificate issuer: /CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82
Certificate serial: 019C420F9CC83D3732D2D695FD5879CD10D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
Manifest number: 5D
Signing time: Mon 09 Feb 2026 11:00:45 +0000
Manifest this update: Mon 09 Feb 2026 11:00:45 +0000
Manifest next update: Tue 10 Feb 2026 11:00:45 +0000
Files and hashes: 1: BecW4Z3OJKE8mPGOXG-xMCZNoR4.roa (hash: i81QYZ9angiETwhsEQKAuuK5FXt4MFlFdqt+7+uo7Wo=)
2: qqzbVOF2f1uOzsxeM4LWYR5cjII.crl (hash: tTkutyiBYs2beYzznn3JON5btrteHUJrXNq40mPgh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:9c:c8:3d:37:32:d2:d6:95:fd:58:79:cd:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaacdb54e1767f5b8ececc5e3382d6611e5c8c82
Validity
Not Before: Feb 9 11:00:45 2026 GMT
Not After : Feb 10 11:00:45 2026 GMT
Subject: CN=725919edf0979702250b3af0f3e1a19b7feffaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:ab:d0:81:a0:68:1a:9f:c8:ee:29:e3:7b:
0f:0b:73:d6:99:96:8b:9b:13:8f:fd:5f:77:5c:6f:
cb:80:5c:a4:ba:e8:45:ef:8f:8b:85:3f:3d:d2:61:
ba:ae:53:34:13:bb:a4:70:1f:41:4a:21:ce:87:ce:
fc:9f:f1:5f:f6:97:f0:b6:fa:3f:6d:c0:92:02:64:
8a:38:40:fe:9e:1e:3d:4d:15:5d:70:4f:67:e7:df:
9e:25:82:b2:5f:bb:6b:19:3e:d3:24:8c:36:f3:22:
25:f3:16:22:cc:00:20:fd:8c:b4:45:49:ec:f1:c7:
04:48:58:77:41:67:56:0a:48:28:81:d7:a6:06:09:
a8:8d:7a:0f:5b:2d:9f:89:9e:d1:e6:ed:19:78:7b:
24:5d:77:94:d6:1d:bc:a0:52:68:ed:c0:12:ec:b8:
40:21:6d:38:ad:9f:e9:c4:d8:dd:a2:5c:98:26:a7:
b9:35:8e:18:94:fb:8e:67:61:6b:a1:c1:c7:da:a7:
03:ad:08:fe:ce:7a:af:a5:77:33:80:01:70:06:2d:
8a:d9:03:8f:97:97:77:df:bd:4e:d1:d8:31:af:10:
27:46:10:c7:33:a0:20:9d:3c:6b:92:26:ef:7c:2b:
d1:59:8d:37:cc:d0:6f:57:b6:85:3d:c4:f1:47:70:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:19:ED:F0:97:97:02:25:0B:3A:F0:F3:E1:A1:9B:7F:EF:FA:F6
X509v3 Authority Key Identifier:
keyid:AA:AC:DB:54:E1:76:7F:5B:8E:CE:CC:5E:33:82:D6:61:1E:5C:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqzbVOF2f1uOzsxeM4LWYR5cjII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/170483-f5bc-41e6-8c86-39ca843b9c11/1/qqzbVOF2f1uOzsxeM4LWYR5cjII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:95:3d:50:b4:64:a8:9c:5c:20:4d:10:60:a9:62:f5:36:b7:
36:94:f9:b4:e9:b3:83:44:64:af:6e:80:1a:c0:54:99:0e:e6:
f0:46:87:c2:79:ef:03:24:61:7d:43:fa:05:84:89:ca:c6:34:
d4:47:12:15:97:c2:79:c9:56:5b:33:76:8e:3c:08:5f:69:c4:
25:74:19:64:10:06:62:94:0a:a9:a9:bf:cb:4a:f4:7b:db:89:
79:9f:d2:9a:b1:06:7a:a4:7e:b5:31:9f:54:0b:66:41:64:bf:
d5:42:b7:04:80:cb:b6:08:5a:2e:f7:2b:9c:c6:51:67:4e:9b:
e3:5b:b8:e5:35:d4:bc:2a:cc:13:5d:8b:42:dc:69:5b:07:ee:
5c:76:d8:b1:d9:b4:20:4f:91:3b:fb:05:ee:26:76:90:86:21:
4d:ef:36:51:dd:f1:a2:8a:4d:d8:bc:19:01:2a:c8:75:a0:79:
ce:cf:87:e0:cb:1d:25:80:6f:f2:4b:14:ef:47:84:87:5e:c1:
1a:63:84:27:54:9f:1e:3e:09:94:24:a2:d7:96:f3:38:6d:3f:
79:09:8c:3c:b1:55:f6:9f:92:15:92:12:d7:96:a2:b4:ba:9b:
e1:fb:d8:d2:bf:59:e6:2e:5c:38:36:62:20:04:2b:63:02:5e:
89:66:07:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD5zIPTcy0taV/Vh5zRDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWNkYjU0ZTE3NjdmNWI4ZWNlY2M1ZTMzODJkNjYxMWU1
YzhjODIwHhcNMjYwMjA5MTEwMDQ1WhcNMjYwMjEwMTEwMDQ1WjAzMTEwLwYDVQQD
Eyg3MjU5MTllZGYwOTc5NzAyMjUwYjNhZjBmM2UxYTE5YjdmZWZmYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEmr0IGgaBqfyO4p43sPC3PWmZaL
mxOP/V93XG/LgFykuuhF74+LhT890mG6rlM0E7ukcB9BSiHOh878n/Ff9pfwtvo/
bcCSAmSKOED+nh49TRVdcE9n59+eJYKyX7trGT7TJIw28yIl8xYizAAg/Yy0RUns
8ccESFh3QWdWCkgogdemBgmojXoPWy2fiZ7R5u0ZeHskXXeU1h28oFJo7cAS7LhA
IW04rZ/pxNjdolyYJqe5NY4YlPuOZ2FrocHH2qcDrQj+znqvpXczgAFwBi2K2QOP
l5d3371O0dgxrxAnRhDHM6AgnTxrkibvfCvRWY03zNBvV7aFPcTxR3CpFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJZGe3wl5cCJQs68PPhoZt/7/r2MB8GA1UdIwQY
MBaAFKqs21Thdn9bjs7MXjOC1mEeXIyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF6YlZPRjJmMXVPenN4ZU00TFdZUjVjaklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xNzA0ODMtZjViYy00MWU2LThjODYt
MzljYTg0M2I5YzExLzEvcXF6YlZPRjJmMXVPenN4ZU00TFdZUjVjaklJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8xNzA0ODMtZjViYy00MWU2LThjODYtMzljYTg0M2I5YzEx
LzEvcXF6YlZPRjJmMXVPenN4ZU00TFdZUjVjaklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZU9ULRk
qJxcIE0QYKli9Ta3NpT5tOmzg0Rkr26AGsBUmQ7m8EaHwnnvAyRhfUP6BYSJysY0
1EcSFZfCeclWWzN2jjwIX2nEJXQZZBAGYpQKqam/y0r0e9uJeZ/SmrEGeqR+tTGf
VAtmQWS/1UK3BIDLtghaLvcrnMZRZ06b41u45TXUvCrME12LQtxpWwfuXHbYsdm0
IE+RO/sF7iZ2kIYhTe82Ud3xoopN2LwZASrIdaB5zs+H4MsdJYBv8ksU70eEh17B
GmOEJ1SfHj4JlCSi15bzOG0/eQmMPLFV9p+SFZIS15aitLqb4fvY0r9Z5i5cODZi
IAQrYwJeiWYHMw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:40 2026 by rpki-client