This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: qK8S1/xL9o1A20uPb0vY5/U4IEw8dOhq7maDfDHXyYc=
Subject key identifier: 0D:7D:A8:6E:63:4C:CC:FF:9D:B4:29:6B:5E:01:0E:A6:CC:88:5A:55
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019C420F959C5FDAFB06F1A040EAE8BC89A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 11:00:43 +0000
Manifest this update: Mon 09 Feb 2026 11:00:43 +0000
Manifest next update: Tue 10 Feb 2026 11:00:43 +0000
Files and hashes: 1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: b7xkZNFXMu74cDiZI/4dMGYITgPhmCtJWQ+cXyeGgxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:95:9c:5f:da:fb:06:f1:a0:40:ea:e8:bc:89:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Feb 9 11:00:43 2026 GMT
Not After : Feb 10 11:00:43 2026 GMT
Subject: CN=0d7da86e634cccff9db4296b5e010ea6cc885a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:3b:c0:9e:63:23:96:22:79:8c:01:eb:da:
6b:57:ce:70:20:1c:ef:8e:e5:65:01:15:92:fd:2c:
b6:af:51:54:3a:fb:1c:53:13:0a:e0:b4:42:db:b0:
51:b7:ad:69:4a:a0:ac:e8:05:39:61:6b:69:a0:d4:
8e:ae:41:b6:00:ba:7e:a4:02:ab:11:fd:8d:cd:f4:
1e:a6:fa:e2:f6:33:23:be:89:75:a4:b1:ae:f1:e9:
f7:14:75:a4:c6:32:8b:b4:0f:0d:7d:63:26:cc:36:
51:8c:ff:94:c5:3a:77:63:b8:1e:d7:57:05:c9:66:
48:fc:27:36:48:5e:ff:b7:21:f8:37:3d:18:f5:48:
a6:fd:a6:a2:6d:6d:4f:49:5c:00:93:d9:5b:ed:fa:
25:05:4e:08:e8:0e:a1:07:7c:4f:19:c3:11:87:e9:
2a:9d:ca:be:ef:cd:c3:98:23:23:ea:55:8a:17:7f:
b9:2d:24:f6:45:72:8b:07:68:f0:64:b7:24:0f:65:
a3:a8:dc:b7:05:f4:b2:9d:fb:99:90:d2:03:2e:64:
72:e2:d5:b2:bf:cb:b4:e0:8a:16:e5:f7:4b:ff:18:
ad:79:a7:40:fc:7f:c2:da:dc:d5:c6:03:f7:f4:6b:
71:d6:ac:04:5c:9d:82:8b:81:1c:e3:33:eb:95:d7:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:A8:6E:63:4C:CC:FF:9D:B4:29:6B:5E:01:0E:A6:CC:88:5A:55
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3e:3c:ec:fd:aa:da:d8:df:a7:58:48:f0:7f:94:88:da:41:
dc:46:53:43:c3:ad:e7:e9:9e:b9:80:31:9b:fb:81:57:71:3f:
3d:19:81:02:c3:37:53:77:27:8c:ed:f0:ea:df:58:90:0d:53:
10:53:30:c1:e8:52:47:f5:f7:68:d1:60:8c:94:31:f9:2a:af:
05:6d:4b:d0:49:67:38:9d:96:13:97:fb:92:68:85:d9:6a:a0:
92:ba:29:a9:ec:1b:db:28:d3:6e:b7:65:be:0e:fe:26:19:c6:
2f:aa:b8:30:58:b9:0a:7d:5a:57:87:67:b7:9f:97:87:c3:88:
4b:b7:1b:e1:56:3a:ae:c8:cd:ca:47:0c:f8:fd:61:90:ab:bd:
ed:78:9d:f7:bb:c8:ae:74:1a:8d:ef:66:46:38:cb:82:28:68:
d7:5e:da:58:82:c4:02:75:dd:60:82:bc:cb:b9:ec:be:2b:ca:
93:2e:03:03:05:49:24:05:ce:49:23:9f:ef:98:99:6c:49:81:
d8:58:8d:ab:11:e3:63:0e:4f:23:dc:5d:68:94:dd:49:cc:a8:
e5:b1:f6:8b:e4:01:75:b4:ff:e1:92:6f:d0:9d:19:88:d1:fc:
32:f9:1b:d4:63:0b:8f:5d:af:6f:86:a1:11:ee:38:84:73:0d:
a1:69:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:35 2026 by rpki-client