This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: 60IZdNkk+WyhCWJEbNu1vA4Xb4FM6Kgmy2f00vhvflw=
Subject key identifier: FD:27:07:83:06:35:94:EF:20:6F:22:F1:DA:5D:6C:52:5A:3F:29:C2
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019C41D851732BDD890F6EA7D03677B7F883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0B30
Signing time: Mon 09 Feb 2026 10:00:21 +0000
Manifest this update: Mon 09 Feb 2026 10:00:21 +0000
Manifest next update: Tue 10 Feb 2026 10:00:21 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: K/fyI47grOQQmXN+5HSgTMpfGwTdsodpCk7jhGhVH0E=)
2: Tky4vnXZioTC1TXQq96JWTokgHg.roa (hash: aDRCWx0v8/LaP/gIfUVdK0QiOW0vds7flVFVgoIFu/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:51:73:2b:dd:89:0f:6e:a7:d0:36:77:b7:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Feb 9 10:00:21 2026 GMT
Not After : Feb 10 10:00:21 2026 GMT
Subject: CN=fd270783063594ef206f22f1da5d6c525a3f29c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:be:c4:78:1a:f5:a2:ab:54:d2:e0:3c:6a:
05:5d:c3:b7:a2:9c:2d:5e:e1:f0:f8:4d:a0:29:43:
77:13:36:68:78:99:81:0f:df:1f:6d:c6:ff:14:eb:
80:95:56:01:a5:a2:3f:27:7c:be:b4:e1:0d:43:34:
85:c5:79:0a:6b:d1:55:70:bd:13:05:fe:f4:76:5b:
e6:98:66:d0:cb:ad:42:a9:11:f5:13:22:9c:71:32:
f2:9c:ba:a5:44:0f:78:26:47:6b:9a:e5:80:96:99:
7f:1a:9a:94:31:3a:27:71:85:04:30:03:f5:98:4e:
9b:d2:92:7e:fa:b3:ee:27:65:0c:70:29:08:3e:61:
34:83:a1:82:35:2e:db:a3:cd:1a:a4:51:a8:d0:ab:
e1:d7:d8:8d:1f:6d:d8:c9:08:7f:b3:49:22:07:c3:
af:2e:22:87:07:6b:1d:59:fd:96:5b:87:ed:98:3c:
5b:b7:49:91:c6:89:03:f0:fc:84:7c:28:ef:62:ee:
8d:9b:88:f2:6a:1b:45:a3:44:5f:33:92:e2:9b:16:
04:a0:f3:ab:c4:fa:6c:5c:b6:38:c3:1c:9a:8e:44:
53:8d:ad:a1:6e:be:86:7f:6d:93:bc:a2:35:6f:cf:
af:02:7b:63:60:ed:94:0c:ac:44:a6:58:fa:c3:06:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:27:07:83:06:35:94:EF:20:6F:22:F1:DA:5D:6C:52:5A:3F:29:C2
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:5f:d6:60:11:b8:f8:d6:ae:49:e3:87:89:ac:89:28:e9:
ea:c5:96:10:e4:f0:bb:83:f0:e1:71:99:74:26:7c:ec:c0:80:
c7:b1:d4:75:10:db:a2:66:b5:dc:78:0d:64:95:e0:80:53:2c:
15:f0:63:e1:f3:7f:3c:f0:dd:1d:7c:df:62:f0:4c:dc:2b:ce:
8c:9c:60:d5:91:0a:e0:ae:61:c0:d4:55:91:65:39:b3:36:83:
79:2e:42:ec:86:3b:d5:9a:4a:9c:91:a5:99:5a:91:f7:4d:f7:
7b:f7:7c:d9:c2:9a:17:5e:fb:3c:40:a0:05:55:ea:5c:6f:78:
96:a5:f7:18:6a:68:58:ed:65:46:e2:e0:f7:7e:af:ab:56:ae:
00:80:bb:ef:ec:0a:73:12:7e:0b:b8:86:9d:f6:e0:4a:f8:ea:
e9:d9:3c:cf:de:a8:f2:e4:26:d0:c9:a1:77:ae:41:e6:97:56:
ae:f9:6b:c0:41:e8:d1:e4:86:59:40:21:ff:02:60:0b:59:97:
7e:cd:0c:4c:b1:fa:f3:42:96:b5:7a:5c:ef:02:f3:c5:8e:06:
38:af:62:24:a1:04:c4:7d:68:21:72:72:4d:88:fc:1a:f6:1c:
49:f5:e6:8f:37:c6:57:03:fc:ba:cc:02:43:bf:36:45:00:53:
06:2f:c8:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2FFzK92JD26n0DZ3t/iDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5
M2U2ZTMwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD
EyhmZDI3MDc4MzA2MzU5NGVmMjA2ZjIyZjFkYTVkNmM1MjVhM2YyOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ++xHga9aKrVNLgPGoFXcO3opwt
XuHw+E2gKUN3EzZoeJmBD98fbcb/FOuAlVYBpaI/J3y+tOENQzSFxXkKa9FVcL0T
Bf70dlvmmGbQy61CqRH1EyKccTLynLqlRA94JkdrmuWAlpl/GpqUMToncYUEMAP1
mE6b0pJ++rPuJ2UMcCkIPmE0g6GCNS7bo80apFGo0Kvh19iNH23YyQh/s0kiB8Ov
LiKHB2sdWf2WW4ftmDxbt0mRxokD8PyEfCjvYu6Nm4jyahtFo0RfM5LimxYEoPOr
xPpsXLY4wxyajkRTja2hbr6Gf22TvKI1b8+vAntjYO2UDKxEplj6wwZ5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0nB4MGNZTvIG8i8dpdbFJaPynCMB8GA1UdIwQY
MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt
MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi
LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXppf1mAR
uPjWrknjh4msiSjp6sWWEOTwu4Pw4XGZdCZ87MCAx7HUdRDboma13HgNZJXggFMs
FfBj4fN/PPDdHXzfYvBM3CvOjJxg1ZEK4K5hwNRVkWU5szaDeS5C7IY71ZpKnJGl
mVqR9033e/d82cKaF177PECgBVXqXG94lqX3GGpoWO1lRuLg936vq1auAIC77+wK
cxJ+C7iGnfbgSvjq6dk8z96o8uQm0Mmhd65B5pdWrvlrwEHo0eSGWUAh/wJgC1mX
fs0MTLH680KWtXpc7wLzxY4GOK9iJKEExH1oIXJyTYj8GvYcSfXmjzfGVwP8uswC
Q782RQBTBi/I9g==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:24 2026 by rpki-client