This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: wQbJAyDEbHdYpm7CxXeq9owjlq/7zhdQkY+XMOq2TsE=
Subject key identifier: 35:BF:57:15:C8:03:02:A6:7E:D0:C7:57:9E:FB:09:08:B6:1E:15:E9
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 019C42101968F88DC5CF536A8D07C939A836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 1824
Signing time: Mon 09 Feb 2026 11:01:17 +0000
Manifest this update: Mon 09 Feb 2026 11:01:17 +0000
Manifest next update: Tue 10 Feb 2026 11:01:17 +0000
Files and hashes: 1: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: Wm2u1jijUNXkA6suYIb06JGKEX4F1J6lfup7I4UREzQ=)
2: SzUYKWffDLzD3KfG-tHUGCGVR50.roa (hash: HYko2OtpzwVD1bQm6/aHErTnPd1yFyteka+/4h0Bbfo=)
3: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
4: zrlAYru86sKNfdp41yXXW-vHWVA.roa (hash: OeRsLdUmyVY56D+kTeE010Uoy9wfuuFNR8ruGwb2Hwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:19:68:f8:8d:c5:cf:53:6a:8d:07:c9:39:a8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Feb 9 11:01:17 2026 GMT
Not After : Feb 10 11:01:17 2026 GMT
Subject: CN=35bf5715c80302a67ed0c7579efb0908b61e15e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:48:91:da:2b:fe:a5:0f:b4:88:6e:26:ec:
52:41:ec:af:8d:62:1f:82:e8:f5:7d:4f:d1:76:eb:
a9:71:e8:b9:f2:68:7b:f8:bf:86:37:96:cb:96:3d:
63:00:4a:e1:97:62:f5:73:9a:20:de:dd:5c:5a:29:
85:94:24:06:5d:9e:4a:7d:4f:49:36:bf:72:5a:de:
9f:c5:c1:a0:f3:4d:35:df:fd:3c:47:30:91:17:0e:
bb:51:fa:82:2c:57:fc:d7:ba:64:33:38:29:27:c2:
40:12:97:db:77:32:9b:d2:14:a1:4b:e1:a2:c2:ef:
8e:e7:4d:f6:f3:ab:8f:93:e8:82:6e:e8:2f:16:b7:
75:f0:08:99:19:38:e6:0d:ff:95:78:4f:4e:fd:d8:
05:72:d5:c5:4e:97:76:4d:16:fb:78:16:4f:80:b1:
9e:12:fc:cf:31:c3:71:05:ef:93:8a:8a:a3:da:74:
7a:01:08:aa:1e:b2:6f:2c:a1:e4:35:89:11:d3:38:
24:dd:dd:c5:4e:d7:bb:f2:4f:dd:56:f7:9e:f6:f0:
0e:a0:f6:4e:65:ce:35:8b:1a:d0:5c:8d:8c:7f:dc:
70:4e:c3:f8:0d:12:9c:38:87:29:ea:79:a8:3f:4a:
a2:d5:17:f6:e5:ac:5d:ef:95:4b:5c:5f:5b:5e:8a:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:57:15:C8:03:02:A6:7E:D0:C7:57:9E:FB:09:08:B6:1E:15:E9
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:f8:1e:05:3d:62:19:2d:98:ae:99:ae:08:02:c0:22:2b:
cf:38:d7:9d:9d:17:cc:83:68:d4:53:d5:b0:75:a0:76:5e:5a:
68:7d:36:38:e5:ba:24:e0:8e:69:9f:4b:3c:04:04:e8:74:ee:
61:a0:e8:8a:c3:36:d1:5d:6d:79:3f:2f:e8:1a:12:14:c6:38:
f4:b9:7c:c1:84:5b:1b:2c:86:4d:3b:b4:74:d6:4a:e8:63:db:
2c:29:7e:ea:5c:c6:3b:76:dd:f8:82:05:2f:e4:38:4c:a5:30:
82:16:b7:9f:d1:31:28:d6:5a:ca:79:f1:1c:50:ca:30:22:d1:
1f:16:d9:47:84:64:8e:ce:4c:c0:50:a6:3a:fc:06:c6:cc:cc:
0f:dc:68:f6:2d:52:24:6f:dc:d2:d1:1b:68:f1:8b:b7:72:b0:
6e:b7:50:37:fc:ff:73:4f:a8:99:60:92:39:8a:13:19:73:24:
17:67:37:36:37:7f:95:51:ba:69:24:ba:6f:a0:cd:be:32:f0:
83:53:3c:00:c9:58:0d:65:a6:7e:68:f4:19:3d:bc:17:43:05:
eb:3c:9b:b1:01:e0:39:8d:9a:66:04:4c:45:b0:9a:6b:8b:cf:
66:8b:3c:6a:59:ee:3e:c6:db:74:bb:2e:2d:ec:ba:ca:f1:21:
77:6d:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:46 2026 by rpki-client