This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: aaw/My00mrwChP8vAy7S2X70jkqBqIAvH8E1hYk+TUM=
Subject key identifier: 8A:53:9C:91:C2:3D:2D:95:B8:73:19:E0:CE:9B:86:23:39:08:F3:E6
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 019C427DA2FCDB36680F5FEC6DBB4CBE3358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0516
Signing time: Mon 09 Feb 2026 13:00:55 +0000
Manifest this update: Mon 09 Feb 2026 13:00:55 +0000
Manifest next update: Tue 10 Feb 2026 13:00:55 +0000
Files and hashes: 1: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: BbCUjlaHdUlPvk3FqUrK8o7Cj18vScz50rnqbNYwOHA=)
2: xQVJZ8XeKi_qZ897AqedzU_uyhs.roa (hash: XTuOm3CC6G0L/jW20RlJG4su70zRym46AnwfyGu3Vek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:a2:fc:db:36:68:0f:5f:ec:6d:bb:4c:be:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Feb 9 13:00:55 2026 GMT
Not After : Feb 10 13:00:55 2026 GMT
Subject: CN=8a539c91c23d2d95b87319e0ce9b86233908f3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:fb:4f:79:ef:1b:78:c3:58:93:a1:9f:fa:
a5:eb:d7:82:e0:10:4d:0b:91:8c:80:93:c6:83:a0:
a4:24:a7:64:f3:26:88:a7:61:70:ae:aa:2d:c5:da:
73:35:4d:ec:1b:5a:f6:69:fb:94:e8:17:44:c0:25:
04:f6:b7:af:6e:70:01:39:88:2b:2f:b9:c2:ef:a8:
77:d0:92:38:f8:3e:74:4e:28:51:cc:b6:58:4f:06:
9b:7c:69:3d:4b:bf:1c:c1:a4:54:ea:49:b0:61:7f:
3e:37:bd:9b:8e:fc:c8:38:fa:42:86:67:1c:62:e6:
35:42:4d:33:6a:20:12:d7:70:a5:68:b2:d3:c2:a8:
9f:8a:07:a5:13:b7:a9:12:8d:cb:5d:16:aa:40:3e:
84:c4:6b:dd:20:74:3a:01:a2:0a:0f:20:0a:4a:68:
b6:87:e5:54:15:39:e6:fe:55:80:21:0c:70:b1:d4:
6b:7a:7b:f6:88:a1:ae:fa:c5:29:0e:75:5c:49:0b:
de:ba:77:95:d6:67:ed:01:f0:87:0d:8e:4a:71:9b:
fa:f5:fc:5f:48:77:98:3b:f8:9d:88:17:95:ad:75:
0c:b8:3f:72:cb:62:5c:94:20:84:87:a3:be:79:10:
d7:86:75:b8:4e:a8:49:72:84:f5:e6:5f:89:21:a5:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:9C:91:C2:3D:2D:95:B8:73:19:E0:CE:9B:86:23:39:08:F3:E6
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:3d:36:35:28:53:8a:6d:24:66:46:49:c1:82:2e:7d:ba:
63:9d:c6:88:e3:94:d2:b9:b1:3e:1f:4c:cc:4c:39:b7:1c:1a:
bf:7a:ee:c5:9e:0d:65:1f:a5:39:87:11:31:27:eb:b0:4d:41:
3c:88:b6:c7:24:b9:ab:c3:3b:43:12:ac:30:07:1a:db:a8:cf:
dd:6f:01:46:7d:63:4c:e0:36:c6:77:05:72:b3:b2:b1:b1:0c:
68:10:d5:ee:f9:6c:4d:b1:1c:f9:ec:90:08:36:f5:1e:33:03:
37:3c:52:1e:ed:c0:06:c0:ea:aa:1e:a5:9e:35:80:ab:5d:ea:
79:9f:4d:ef:d9:95:32:b8:09:31:df:42:e9:1e:bf:2f:3a:2d:
ab:7c:e8:45:e1:61:03:7e:ff:c5:70:c9:ae:f5:0d:21:32:0d:
a5:f2:30:c1:86:fc:cc:1f:ee:11:ed:50:ad:de:ae:90:ed:5a:
77:38:33:ca:cd:99:f5:4c:63:bf:53:a8:8f:6a:a6:30:38:11:
4e:e0:54:25:16:b2:7d:d3:2a:2a:db:19:2c:62:67:70:91:b1:
47:2e:c3:a3:f9:58:52:22:e5:20:c7:65:22:c3:21:cf:6b:5d:
a6:5a:78:75:21:7d:48:e5:86:5e:70:8d:e6:0c:7a:64:3a:6b:
cf:ad:1c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfaL82zZoD1/sbbtMvjNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMGY5N2U2MzUwODIxOWI5NmNiYjIxMDYzNDNmNWUxYjZk
YzVhNGYwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD
Eyg4YTUzOWM5MWMyM2QyZDk1Yjg3MzE5ZTBjZTliODYyMzM5MDhmM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluD7T3nvG3jDWJOhn/ql69eC4BBN
C5GMgJPGg6CkJKdk8yaIp2FwrqotxdpzNU3sG1r2afuU6BdEwCUE9revbnABOYgr
L7nC76h30JI4+D50TihRzLZYTwabfGk9S78cwaRU6kmwYX8+N72bjvzIOPpChmcc
YuY1Qk0zaiAS13ClaLLTwqifigelE7epEo3LXRaqQD6ExGvdIHQ6AaIKDyAKSmi2
h+VUFTnm/lWAIQxwsdRrenv2iKGu+sUpDnVcSQveuneV1mftAfCHDY5KcZv69fxf
SHeYO/idiBeVrXUMuD9yy2JclCCEh6O+eRDXhnW4TqhJcoT15l+JIaXa5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpTnJHCPS2VuHMZ4M6bhiM5CPPmMB8GA1UdIwQY
MBaAFKoPl+Y1CCGblsuyEGND9eG23FpPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMt
ZjUxMWZkNjg4ZWRhLzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMtZjUxMWZkNjg4ZWRh
LzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRc9NjUo
U4ptJGZGScGCLn26Y53GiOOU0rmxPh9MzEw5txwav3ruxZ4NZR+lOYcRMSfrsE1B
PIi2xyS5q8M7QxKsMAca26jP3W8BRn1jTOA2xncFcrOysbEMaBDV7vlsTbEc+eyQ
CDb1HjMDNzxSHu3ABsDqqh6lnjWAq13qeZ9N79mVMrgJMd9C6R6/Lzotq3zoReFh
A37/xXDJrvUNITINpfIwwYb8zB/uEe1Qrd6ukO1adzgzys2Z9Uxjv1Ooj2qmMDgR
TuBUJRayfdMqKtsZLGJncJGxRy7Do/lYUiLlIMdlIsMhz2tdplp4dSF9SOWGXnCN
5gx6ZDprz60ccA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:03 2026 by rpki-client