This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier: uTWAjR/pzfouJu3g6wuCDM5tivarnxt0Wa2F9fXGQOU=
Subject key identifier: A0:1A:AA:BF:9D:45:D9:3C:58:6A:7D:83:96:97:00:B4:11:98:FF:E5
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer: /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial: 019C439072F7F76ACA9AF73E3169E69D021C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number: 0D14
Signing time: Mon 09 Feb 2026 18:01:05 +0000
Manifest this update: Mon 09 Feb 2026 18:01:05 +0000
Manifest next update: Tue 10 Feb 2026 18:01:05 +0000
Files and hashes: 1: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: U0RNPoo8FpiihlUCDHIzSnW/9pDXOt/vDGHbmAe4fhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:72:f7:f7:6a:ca:9a:f7:3e:31:69:e6:9d:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Validity
Not Before: Feb 9 18:01:05 2026 GMT
Not After : Feb 10 18:01:05 2026 GMT
Subject: CN=a01aaabf9d45d93c586a7d83969700b41198ffe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:3a:eb:62:23:41:b9:d9:cb:64:36:97:b9:
d0:79:92:b7:26:38:d6:7c:45:fc:87:c3:b1:8d:6e:
eb:88:0c:d8:ad:8d:ac:d8:41:66:46:4e:fb:64:2a:
18:77:cf:e1:39:d7:6e:dd:8f:33:46:42:83:b1:1d:
ea:09:c0:33:be:3a:ad:7d:4b:a6:04:03:8d:b8:c0:
57:fe:d0:9a:57:e3:6e:99:c4:e4:1d:7c:4c:53:38:
ff:7b:ee:0e:bd:9a:cc:d9:8e:0a:85:a0:da:ed:1c:
c4:50:97:ac:15:88:b1:c9:e0:33:26:0b:8a:31:42:
27:be:b5:70:90:af:08:1d:b1:f2:a6:8d:98:7d:f7:
52:13:2e:0e:7f:74:22:63:d9:57:ee:44:fb:65:59:
f2:cf:f1:a6:30:44:91:c8:f0:51:f7:49:8d:76:f3:
c6:64:4d:ec:ea:97:6c:aa:5b:e4:ae:27:5f:a8:30:
38:4a:4c:0c:cf:ea:58:2a:b3:21:da:90:30:28:f3:
49:f1:cf:c4:42:8c:a0:2a:a4:56:59:4e:c8:4e:39:
21:fc:1a:29:4f:7f:f9:76:10:f2:1b:c1:e8:8d:e4:
79:2a:b5:45:10:c2:ec:22:68:cc:68:a7:91:f2:bc:
5f:57:c3:9d:dd:43:37:f1:c8:e6:08:91:4e:72:86:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1A:AA:BF:9D:45:D9:3C:58:6A:7D:83:96:97:00:B4:11:98:FF:E5
X509v3 Authority Key Identifier:
keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:14:e3:8c:3d:c8:7f:aa:4c:1d:10:15:50:7d:0a:fc:fb:05:
4c:e1:43:57:2f:28:cb:0c:9c:2b:89:98:c8:c0:3b:b3:6d:c3:
14:59:46:a7:98:dc:fb:4e:16:0e:eb:09:de:9c:45:5b:40:78:
cf:59:6d:3f:7e:47:3e:da:1a:d0:56:95:24:e9:51:dc:ed:06:
3d:41:2d:79:38:f3:cf:51:5b:0d:b1:ac:22:a0:69:0a:1a:c7:
e0:a7:79:4a:ca:4d:6c:b1:ce:bf:82:8b:d9:27:4e:ea:2e:a1:
07:67:91:00:b9:96:42:d0:fb:34:85:71:46:a5:b4:e8:ea:82:
17:05:b6:00:25:bf:0b:15:2f:43:b2:5a:09:6b:17:1f:44:58:
e2:5d:65:5d:c8:a4:61:cf:43:39:81:26:27:22:20:e0:04:86:
66:03:c7:7b:a3:40:f1:72:2f:ca:da:a7:99:ff:5a:73:71:0a:
5a:2d:e4:7e:17:ec:84:18:5e:6d:00:46:b0:8f:67:c6:95:42:
26:2e:a7:cd:bc:ac:a8:cb:17:5b:8a:91:59:74:cb:67:00:f9:
63:a3:97:36:12:4c:e2:e3:0b:b1:17:fb:7a:51:6e:a4:5d:38:
c5:ce:0e:af:ab:9b:0f:c9:42:b3:53:bb:14:19:2b:86:22:06:
88:6f:9e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:47 2026 by rpki-client