This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 8bidqKa+3T2pIXJ0i8xkmpgYQQSKr1Y46m5CcAWrwA4=
Subject key identifier: B0:BE:F2:76:19:A5:98:7A:E1:40:B6:EE:EE:C9:E6:7C:29:E6:8F:BD
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019C41A191FCA123C2A416CB559BE0642E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1873
Signing time: Mon 09 Feb 2026 09:00:33 +0000
Manifest this update: Mon 09 Feb 2026 09:00:33 +0000
Manifest next update: Tue 10 Feb 2026 09:00:33 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: 7M+/9v6y8mXU0OX4vm8bc8HDBvNstI6FFolHyhHLja8=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:91:fc:a1:23:c2:a4:16:cb:55:9b:e0:64:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Feb 9 09:00:33 2026 GMT
Not After : Feb 10 09:00:33 2026 GMT
Subject: CN=b0bef27619a5987ae140b6eeeec9e67c29e68fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:6b:6f:ce:c0:2b:e0:fe:b0:4d:6d:01:2f:
e6:b0:db:72:5a:e4:59:d4:68:4b:4b:27:cf:41:a7:
a9:2b:05:c4:f7:c8:20:4b:33:65:e6:c9:68:c5:ec:
05:64:8d:27:da:12:57:3b:a7:e8:46:aa:ca:80:c2:
73:3d:20:38:43:8c:c7:20:51:d9:f6:04:9c:ed:df:
da:0d:bb:fd:21:33:7a:57:7e:4b:29:b9:6f:b8:f9:
02:2a:2f:f7:bb:fb:3f:d0:3f:5b:f1:76:6a:3f:72:
9b:d2:c7:cd:ae:e0:f1:fc:42:7e:af:56:c4:aa:cf:
69:03:f7:4d:08:cf:b3:3a:17:0e:58:1f:ab:45:93:
a0:33:9a:b5:3f:79:b5:86:0e:2d:7e:bc:aa:61:a6:
f1:dd:bf:f0:04:2c:c7:06:cd:27:f0:d6:dc:43:fb:
c7:97:03:ea:4d:d1:28:bb:75:54:e7:7b:f0:27:c5:
bc:10:8e:37:57:a6:4c:4c:e3:67:ab:f6:2e:43:43:
bd:ae:ad:da:09:05:6d:ca:cb:7e:45:d1:b0:48:44:
ce:02:05:77:81:90:3e:aa:65:61:bd:f7:fe:44:ce:
60:1f:6d:ef:99:4c:88:92:c7:a2:2e:9c:af:39:77:
b8:cf:e4:48:7b:35:0f:f2:03:88:30:4c:00:cf:02:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BE:F2:76:19:A5:98:7A:E1:40:B6:EE:EE:C9:E6:7C:29:E6:8F:BD
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8f:1e:e4:93:64:18:85:18:22:79:96:45:d4:c7:6d:fa:3e:
d0:da:cb:64:55:36:92:a2:95:8c:cb:19:d7:73:09:1f:72:d1:
41:62:01:6d:f4:b7:22:70:e4:e9:67:f7:0f:bc:4f:d9:2a:6f:
72:15:d6:b3:85:0e:3f:50:75:61:21:9f:d3:ed:ed:7b:90:fe:
cf:67:5c:f7:03:b3:75:d7:f7:56:cd:57:38:36:57:b8:bc:01:
c4:1b:80:ed:4e:2d:30:c4:e3:1d:48:b9:2d:f2:ac:b1:a3:81:
63:5b:ad:7e:28:ea:28:95:60:1e:32:9c:a5:f7:6c:d7:09:9f:
ba:0f:38:19:38:ad:3a:96:2f:53:cc:f1:24:a9:d9:8e:90:5f:
fb:64:bb:cf:ae:22:6b:ce:76:9f:ab:85:d9:19:09:c7:f8:0a:
62:6d:5d:5b:be:bd:67:1f:1a:2a:1f:ee:6a:69:e3:72:ff:24:
e0:a4:e8:6e:11:7c:2c:f4:32:4a:04:01:61:7d:e3:e0:6f:e3:
aa:52:ef:fd:17:41:be:d2:f7:95:e0:2d:47:ca:12:c7:0d:61:
ef:6b:4d:40:64:44:4a:8d:4f:a5:05:91:f5:3b:4f:47:25:2b:
89:b6:6e:b3:df:ed:26:ca:c3:59:8f:11:5c:e3:bc:ff:7f:85:
ea:18:6a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBoZH8oSPCpBbLVZvgZC5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjYwMjA5MDkwMDMzWhcNMjYwMjEwMDkwMDMzWjAzMTEwLwYDVQQD
EyhiMGJlZjI3NjE5YTU5ODdhZTE0MGI2ZWVlZWM5ZTY3YzI5ZTY4ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Nrb87AK+D+sE1tAS/msNtyWuRZ
1GhLSyfPQaepKwXE98ggSzNl5sloxewFZI0n2hJXO6foRqrKgMJzPSA4Q4zHIFHZ
9gSc7d/aDbv9ITN6V35LKblvuPkCKi/3u/s/0D9b8XZqP3Kb0sfNruDx/EJ+r1bE
qs9pA/dNCM+zOhcOWB+rRZOgM5q1P3m1hg4tfryqYabx3b/wBCzHBs0n8NbcQ/vH
lwPqTdEou3VU53vwJ8W8EI43V6ZMTONnq/YuQ0O9rq3aCQVtyst+RdGwSETOAgV3
gZA+qmVhvff+RM5gH23vmUyIkseiLpyvOXe4z+RIezUP8gOIMEwAzwJnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC+8nYZpZh64UC27u7J5nwp5o+9MB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA048e5JNk
GIUYInmWRdTHbfo+0NrLZFU2kqKVjMsZ13MJH3LRQWIBbfS3InDk6Wf3D7xP2Spv
chXWs4UOP1B1YSGf0+3te5D+z2dc9wOzddf3Vs1XODZXuLwBxBuA7U4tMMTjHUi5
LfKssaOBY1utfijqKJVgHjKcpfds1wmfug84GTitOpYvU8zxJKnZjpBf+2S7z64i
a852n6uF2RkJx/gKYm1dW769Zx8aKh/uamnjcv8k4KTobhF8LPQySgQBYX3j4G/j
qlLv/RdBvtL3leAtR8oSxw1h72tNQGRESo1PpQWR9TtPRyUribZus9/tJsrDWY8R
XOO8/3+F6hhqAw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:57 2026 by rpki-client