This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: xzbPIhkAf7/OZa7dJlpFfbebNtVbBj8o9fCRxj0Pzak=
Subject key identifier: 5F:71:CC:E3:00:DE:94:7F:E8:71:96:5A:BC:29:C5:79:20:6C:86:69
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019BFC8A33228F159FF028589FE58ADA9403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 17F1
Signing time: Mon 26 Jan 2026 23:01:14 +0000
Manifest this update: Mon 26 Jan 2026 23:01:14 +0000
Manifest next update: Tue 27 Jan 2026 23:01:14 +0000
Files and hashes: 1: E2EZMSzil8xzd1f_ZPOUKocZU-0.roa (hash: JgMBhhLpoO+yr4hgNf1ty5vp4R+3BqGLZpT/xULTOiU=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: od/XEpL/FwIW8Qkx2jL+2VhOAcgAvI0XzmvW+UbRzeQ=)
3: oEGHzzf1fvFVFaFctvR_EGF3YRU.roa (hash: w6zWg3Nf+b7IZjvHBsFGQ9oohPa6DL7QQgOqamD3en8=)
4: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fc:8a:33:22:8f:15:9f:f0:28:58:9f:e5:8a:da:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jan 26 23:01:14 2026 GMT
Not After : Jan 27 23:01:14 2026 GMT
Subject: CN=5f71cce300de947fe871965abc29c579206c8669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:bd:ce:8f:79:b3:7f:75:e2:f5:aa:b9:ef:
5c:c1:62:7d:60:26:9d:33:18:6e:67:7c:0e:2c:0f:
bd:6c:39:15:9f:17:55:e2:61:0d:d8:25:76:7f:e6:
d9:28:95:8f:6d:0e:0a:be:56:79:7a:e7:a5:97:42:
f5:e5:49:2e:ea:06:2e:12:a5:6a:c7:71:c0:58:6a:
4f:29:60:6a:79:eb:70:10:62:c4:0e:11:72:f0:16:
9a:3b:f1:3f:d9:20:7d:d5:89:2a:b8:3a:0c:a5:e1:
ec:f6:da:73:ab:19:66:00:3f:d6:f7:8d:0b:00:9b:
bc:7c:0b:1d:ed:92:79:d0:f9:6c:d4:1f:b3:31:30:
53:5e:90:ed:d2:11:41:b7:10:2f:23:b3:79:c0:09:
61:b2:b4:0c:d2:6a:60:7a:4b:89:e5:46:58:3b:4e:
dc:91:43:8c:fa:18:d2:19:26:b2:c3:a6:37:2d:03:
ab:dd:b2:27:cd:24:ce:78:21:79:f1:63:98:01:29:
83:3c:f6:c8:44:ba:83:ba:f7:6e:8e:63:fe:03:2e:
68:11:d4:41:a0:b8:8d:51:4a:8e:4b:64:d7:84:15:
85:ef:c1:25:39:a6:37:99:9f:ba:5e:c8:6e:33:58:
9c:3e:49:f3:ab:cc:d5:99:42:f1:c4:eb:e7:09:29:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:CC:E3:00:DE:94:7F:E8:71:96:5A:BC:29:C5:79:20:6C:86:69
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8a:63:35:6c:4b:38:ae:5f:dd:d6:79:36:cb:df:e7:c5:6e:
91:83:94:64:36:fb:61:d6:ef:93:71:44:cb:dc:49:3f:94:0d:
c8:6b:66:47:ee:a0:61:fe:7e:ce:2c:d5:98:b0:28:80:7b:f7:
33:94:24:ca:53:55:3e:f2:61:ca:d1:e8:5b:21:04:53:21:fb:
11:ad:76:4c:f7:99:2c:71:b5:07:13:d8:7d:68:51:5d:50:52:
79:02:1b:28:68:9e:2f:5b:d6:17:73:ed:53:39:9b:d8:9e:08:
8a:cb:06:01:a2:31:c5:0f:a7:0f:79:32:4f:ca:bc:0a:f6:6f:
11:d3:87:0d:d1:b7:5f:21:69:95:8e:d7:60:d0:bc:3b:52:26:
ae:16:40:36:0d:43:ce:b5:7b:93:17:d7:5e:ef:bd:a8:db:c3:
3a:92:97:a8:6c:ba:60:0e:2b:0d:10:e1:2b:8d:b6:d5:b8:c1:
4f:5f:b6:ea:56:13:53:93:68:9c:0d:c6:1b:1f:6b:9f:cd:54:
99:5f:85:ad:af:5a:b0:43:1c:30:9d:24:04:ca:91:e3:af:37:
ab:78:b5:0e:f4:1b:b3:d4:fe:a5:59:b3:95:45:84:10:6b:0d:
f2:09:72:14:2d:9c:7f:2f:1c:05:c6:79:e9:d3:d8:96:75:f7:
4b:6a:8c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:46 2026 by rpki-client