This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: oFuW6XGE9Q814LYP2nxNaQP78iwcl93NluQvlzm8BSM=
Subject key identifier: 5F:17:04:FA:83:38:1A:2E:0C:A9:2E:B3:85:47:9D:CF:8E:A9:4A:D6
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019C41A1C19165C71EA96FDEDEEFF8493C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 09:00:45 +0000
Manifest this update: Mon 09 Feb 2026 09:00:45 +0000
Manifest next update: Tue 10 Feb 2026 09:00:45 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: +WD0joqB4locN3sXRURX2sGbT9ZltPAorcyGxqMNvPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:c1:91:65:c7:1e:a9:6f:de:de:ef:f8:49:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Feb 9 09:00:45 2026 GMT
Not After : Feb 10 09:00:45 2026 GMT
Subject: CN=5f1704fa83381a2e0ca92eb385479dcf8ea94ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:ac:00:5d:d9:8e:15:50:62:82:f4:ba:aa:
a2:9a:bd:55:2d:8e:74:07:90:7e:30:d1:b3:8a:7b:
3a:94:d9:92:2a:29:1d:1b:43:32:52:c8:c0:fb:dc:
ff:57:8e:74:91:36:87:01:3d:97:fb:1c:5c:62:64:
61:6e:7d:e2:32:7e:a0:32:42:69:35:66:27:f6:a3:
03:19:80:ed:70:7a:77:88:34:29:b3:5b:50:b0:5f:
25:4c:d3:08:21:64:3b:3d:a2:24:de:4b:04:14:f7:
9f:8b:58:dc:b6:f3:52:86:05:9c:e8:e0:cd:ea:31:
62:96:cd:55:16:73:37:0a:e5:08:8b:4b:33:f8:d5:
63:23:39:fe:56:1a:7a:8a:c4:73:82:af:55:29:de:
ab:1c:44:c8:28:8c:00:d3:61:ae:79:57:a8:2c:a8:
e0:17:c8:cf:f9:d7:99:a2:74:96:da:92:b1:87:dd:
8b:37:6d:e5:b6:6c:8f:47:0c:95:a2:3a:c6:c1:bd:
fb:85:e9:f7:97:70:7e:87:43:de:76:2e:7e:a1:71:
5d:02:69:1b:c2:3a:0b:a5:24:fc:f6:81:d7:3b:f6:
f4:cc:3e:a7:2b:56:77:cd:2e:a6:e4:bb:e0:1b:f0:
96:40:93:47:de:e2:f2:ce:43:de:59:43:59:e1:09:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:04:FA:83:38:1A:2E:0C:A9:2E:B3:85:47:9D:CF:8E:A9:4A:D6
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d4:55:17:ba:27:bc:5f:31:29:1a:7c:98:0c:e9:eb:dd:ec:
72:af:23:56:48:5e:10:ab:21:1c:54:ac:dc:f9:0b:c9:a6:07:
a5:c7:52:fa:9e:1f:92:68:4a:16:68:fe:64:6f:76:91:b8:1e:
6a:ad:5b:a4:63:91:b2:ee:82:6e:1a:90:7b:b0:8e:5a:60:11:
1b:aa:12:15:4f:d6:af:86:d3:54:1c:de:cf:b4:15:e7:14:2a:
94:16:0e:da:8a:10:86:d4:6d:6b:36:74:fa:0c:f5:0b:bf:0b:
6a:ef:35:61:a9:5f:f5:54:1f:c8:57:a3:ee:1a:60:63:f0:32:
69:3f:83:85:fd:4f:e1:cc:86:87:d9:fe:eb:52:d6:9b:82:25:
cc:f0:89:b1:91:fd:ef:e7:0d:09:2c:6b:81:31:9c:7b:ac:94:
d6:a0:50:99:14:74:9d:cb:32:13:c9:e1:00:f3:c9:59:76:61:
4b:bd:63:42:0c:b1:b2:25:4a:53:d4:b7:ac:88:c1:83:a6:74:
27:d3:4a:bd:49:aa:e3:a6:76:b8:92:d4:81:5e:ca:4c:4b:d6:
56:e6:24:8b:86:c0:54:7d:9d:62:82:0a:4e:3f:0a:f5:00:d9:
0c:77:d2:97:d0:bb:22:25:5d:d7:79:6d:4d:18:5e:a5:10:f4:
e4:0e:eb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:55 2026 by rpki-client