This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: PGHGKyZMm2guNCxm4u19bgjFfwD8uPYplBQ4qgxy/i4=
Subject key identifier: AA:B5:59:DC:AA:4D:D8:59:7D:54:4E:FA:85:AD:99:BF:1B:B9:A5:F5
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019C43591F5A3A227B3C78A3B7D63C7BE9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0475
Signing time: Mon 09 Feb 2026 17:00:40 +0000
Manifest this update: Mon 09 Feb 2026 17:00:40 +0000
Manifest next update: Tue 10 Feb 2026 17:00:40 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: rUaNauw36vkm95NM4OZSUTjOk0dNdc+etn63aHZbvyo=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:1f:5a:3a:22:7b:3c:78:a3:b7:d6:3c:7b:e9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Feb 9 17:00:40 2026 GMT
Not After : Feb 10 17:00:40 2026 GMT
Subject: CN=aab559dcaa4dd8597d544efa85ad99bf1bb9a5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1e:56:80:0e:1b:89:cb:c1:33:62:ec:46:11:
04:17:5e:4c:3c:0a:74:68:2e:47:7a:80:aa:87:84:
b7:2f:22:f0:11:c6:59:da:70:d3:de:31:5e:64:32:
e5:01:fc:4e:6c:74:44:7e:c1:a9:9a:7f:77:62:52:
17:b6:55:c9:81:e6:4a:5f:d5:03:cd:cd:06:55:35:
50:d2:04:b0:63:ee:23:e5:74:84:2a:75:bd:1a:cb:
b4:37:8a:65:8f:4f:27:7d:72:1d:80:1c:f6:a8:e2:
cb:cc:b7:2c:32:dd:e0:1d:bb:87:45:81:3d:d3:63:
41:14:99:c7:2c:95:2c:80:a3:d3:cc:5d:b8:da:a9:
d3:5a:39:37:a1:91:6c:73:5a:e1:12:a8:42:ea:69:
b0:2a:4e:02:c8:d1:79:05:7b:73:a6:33:35:3b:40:
22:01:31:33:97:74:79:a6:1f:fa:05:9a:d3:ab:a9:
4a:45:0d:74:c9:08:b6:67:61:c7:11:6d:7a:5f:4b:
8e:82:2f:d2:70:62:b2:19:03:9c:c0:81:df:00:29:
e2:3f:59:8c:9e:24:2f:d0:a8:9f:0c:47:b1:c3:16:
2c:e2:33:fe:3e:e8:f4:c3:71:c7:45:f3:c0:07:e1:
3c:dc:4b:f6:79:93:40:b9:bf:51:18:da:7c:8f:ef:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:59:DC:AA:4D:D8:59:7D:54:4E:FA:85:AD:99:BF:1B:B9:A5:F5
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:11:03:ec:3a:c7:53:4a:87:2c:f0:db:f4:5d:15:3d:13:
85:0c:2a:e5:81:bc:37:c5:04:02:80:19:fe:16:19:0b:4b:d6:
a0:ef:9c:ef:5c:33:3c:9f:5e:90:e5:96:2c:5a:fb:aa:f2:02:
fe:66:22:a2:8b:71:7d:b1:0a:b1:8d:82:d2:32:2c:5e:d4:60:
9d:5f:78:d9:dd:68:57:fe:54:52:59:ed:cb:b8:7a:77:15:fb:
54:7b:be:b3:91:8c:e0:0b:2b:f0:59:f6:45:67:a4:5d:a2:53:
ce:5a:1b:70:cf:1b:65:6f:2f:90:90:5e:02:a6:d2:29:06:b9:
60:df:22:2e:86:3b:bf:36:49:24:15:a1:62:3e:6d:0e:aa:29:
32:eb:e8:f0:db:be:32:e3:36:f7:5e:fb:f7:2d:3b:f5:3f:30:
80:ce:62:45:a1:f1:ca:3f:95:5b:5a:3f:b3:a4:dc:51:6a:34:
a5:62:ad:16:ad:c4:2e:20:6d:86:fc:03:2c:a4:2d:6c:c3:67:
05:87:c0:69:49:af:6c:06:b9:db:21:c6:97:39:a8:a1:c7:1d:
99:97:26:03:09:dc:ec:a7:36:0c:e6:70:da:72:91:b8:71:c1:
9f:05:f0:0d:e9:34:2e:29:2e:c3:dc:d1:c4:5e:6d:f0:1f:55:
b6:2b:36:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWR9aOiJ7PHijt9Y8e+n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD
EyhhYWI1NTlkY2FhNGRkODU5N2Q1NDRlZmE4NWFkOTliZjFiYjlhNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7x5WgA4bicvBM2LsRhEEF15MPAp0
aC5HeoCqh4S3LyLwEcZZ2nDT3jFeZDLlAfxObHREfsGpmn93YlIXtlXJgeZKX9UD
zc0GVTVQ0gSwY+4j5XSEKnW9Gsu0N4plj08nfXIdgBz2qOLLzLcsMt3gHbuHRYE9
02NBFJnHLJUsgKPTzF242qnTWjk3oZFsc1rhEqhC6mmwKk4CyNF5BXtzpjM1O0Ai
ATEzl3R5ph/6BZrTq6lKRQ10yQi2Z2HHEW16X0uOgi/ScGKyGQOcwIHfACniP1mM
niQv0KifDEexwxYs4jP+Puj0w3HHRfPAB+E83Ev2eZNAub9RGNp8j+/iUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq1WdyqTdhZfVRO+oWtmb8buaX1MB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4YRA+w6
x1NKhyzw2/RdFT0ThQwq5YG8N8UEAoAZ/hYZC0vWoO+c71wzPJ9ekOWWLFr7qvIC
/mYiootxfbEKsY2C0jIsXtRgnV942d1oV/5UUlnty7h6dxX7VHu+s5GM4Asr8Fn2
RWekXaJTzlobcM8bZW8vkJBeAqbSKQa5YN8iLoY7vzZJJBWhYj5tDqopMuvo8Nu+
MuM291779y079T8wgM5iRaHxyj+VW1o/s6TcUWo0pWKtFq3ELiBthvwDLKQtbMNn
BYfAaUmvbAa52yHGlzmooccdmZcmAwnc7Kc2DOZw2nKRuHHBnwXwDek0Likuw9zR
xF5t8B9Vtis2bw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:48 2026 by rpki-client