This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: 0qv/frVf2Tl9OUAJPZMVbRG3CvbmaS6auO5/auYRPJw=
Subject key identifier: B4:CE:0D:B4:A0:F7:45:17:50:94:4F:A0:3F:74:92:64:42:BB:07:2C
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 019C420F82E24637FD2271C069F0392291D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 11:00:38 +0000
Manifest this update: Mon 09 Feb 2026 11:00:38 +0000
Manifest next update: Tue 10 Feb 2026 11:00:38 +0000
Files and hashes: 1: fksKXRKS55Q1EzjRDTMK_vqizsE.roa (hash: ofAdtnCLELO0txtL3rvBXK9EQmnTv0xBnbEG6eay9CA=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: G2R177Wc+D1axf+VjQknxeimmJxHpb1sJ78GZC+YSS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:82:e2:46:37:fd:22:71:c0:69:f0:39:22:91:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Feb 9 11:00:38 2026 GMT
Not After : Feb 10 11:00:38 2026 GMT
Subject: CN=b4ce0db4a0f7451750944fa03f74926442bb072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:70:41:94:b2:f0:97:e0:b0:79:27:45:b7:
f0:1a:82:f9:30:55:c4:8f:94:d8:d0:3d:df:d0:a5:
1b:06:2f:2a:df:ca:81:11:0b:03:29:a3:f3:69:0d:
b4:3e:67:55:d7:95:ad:f1:f4:ec:56:59:49:55:4f:
f5:83:11:67:42:99:92:23:8a:6f:d8:78:13:fe:6d:
c8:73:55:a8:04:72:39:b9:b2:4f:8c:4a:d1:bf:d6:
24:63:bf:25:40:90:6e:25:95:cd:b2:9b:a8:47:06:
a9:f3:ae:67:db:3d:76:83:c7:8d:eb:7d:88:ab:ba:
14:a2:fc:32:af:21:86:f7:92:9c:88:4b:54:b6:01:
df:b0:91:85:88:7f:b1:5d:12:97:c6:9b:b7:6d:f2:
04:09:b4:c2:34:1e:cb:f6:4d:d1:45:74:c1:96:f3:
84:87:e8:b6:10:ab:18:d5:df:7f:ae:d1:36:d9:84:
2b:c6:b9:e4:8f:c5:7d:a4:35:68:be:e2:4c:c1:9d:
9b:14:0c:f1:73:55:39:db:9c:7a:05:f8:8b:05:51:
a9:11:c9:db:66:bb:d2:59:fd:bf:e9:69:86:e0:08:
95:bf:5d:cc:ee:df:d2:d1:d9:9e:35:4c:02:5a:69:
34:a2:90:d5:3b:d7:36:c9:5e:87:b8:91:a2:84:1a:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CE:0D:B4:A0:F7:45:17:50:94:4F:A0:3F:74:92:64:42:BB:07:2C
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:df:99:2c:ec:7f:1e:2b:93:2f:8a:dd:fc:54:4a:0c:45:
c5:82:5f:c6:70:87:c2:bb:d1:45:19:0e:b1:f6:84:2e:a8:69:
42:ee:ea:c6:bf:b6:b6:e3:03:4f:16:16:7d:1c:9f:ae:c1:df:
c4:16:5e:94:3d:0c:0a:a6:36:71:0a:52:5e:82:c9:6c:0d:b3:
48:87:05:32:94:50:dd:53:f4:d4:2c:6f:e3:b9:7a:f4:f6:04:
d3:47:9e:da:4c:15:9a:67:40:2b:6c:32:7f:12:2e:d6:f8:7b:
a3:4f:e8:1a:fe:69:67:1d:5e:35:3d:e2:4e:80:6d:ac:05:95:
59:b1:4b:6c:56:18:6c:02:d7:04:6d:b1:b7:a7:34:47:09:7d:
97:1e:a1:73:a3:3a:86:77:4f:aa:c7:52:80:fb:f6:6f:e9:5c:
7c:ea:e8:37:08:56:ff:8d:75:b6:1a:05:9b:67:9f:40:56:5c:
b6:16:32:80:27:e3:a8:6c:fd:a0:48:51:3c:e9:cb:5e:60:7a:
10:18:63:2c:04:36:36:a1:a0:ac:78:d9:04:11:df:48:79:a6:
15:5c:e5:eb:18:a9:14:72:3c:02:af:ca:19:c9:af:71:70:da:
d4:23:f6:ff:89:a4:d4:f6:0d:6d:79:ea:e0:a2:4c:db:38:c9:
67:b3:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:23 2026 by rpki-client