This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: 0ytuokqPvoN0gG/L0OQnbDY5yDSZQpzEW8rFyDdJ7MM=
Subject key identifier: CE:8F:CF:FE:A0:C6:D0:E4:62:6E:21:DC:1D:E7:01:9B:72:D7:A2:70
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 019C41D8DAAEA85F5258FB38AEA021C79B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 10:00:56 +0000
Manifest this update: Mon 09 Feb 2026 10:00:56 +0000
Manifest next update: Tue 10 Feb 2026 10:00:56 +0000
Files and hashes: 1: 1OlpkuQpAVvITqIzbJCzHhbZuaY.roa (hash: 3R+s0povuTwLbXStSvGlYnJbOVvmE0QK+nYMWxPdz1U=)
2: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: AkBJvKo6/UkaHGx/2/sU4ft5kCg3imxM+eLDgvTJI/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:da:ae:a8:5f:52:58:fb:38:ae:a0:21:c7:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Feb 9 10:00:56 2026 GMT
Not After : Feb 10 10:00:56 2026 GMT
Subject: CN=ce8fcffea0c6d0e4626e21dc1de7019b72d7a270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:0d:8b:ee:1a:27:ce:f6:85:86:70:18:af:
a0:ea:94:cf:17:12:42:42:ef:1e:7d:a4:fa:3d:6f:
05:7c:04:b0:be:58:66:f2:a0:fe:e2:4c:1e:3c:73:
78:2f:1c:2e:eb:36:11:96:c6:98:33:5e:98:86:d3:
ca:0b:0d:70:59:ca:5b:ae:51:56:cd:6d:e4:28:a3:
cd:4b:da:1c:49:0a:a3:5b:a2:43:77:f3:03:b5:40:
76:fb:a1:78:c4:33:75:53:d5:0d:e7:bd:98:52:f1:
7e:a1:e3:39:55:0e:85:46:11:93:70:d2:85:34:5c:
60:6f:39:53:21:ee:93:6a:34:ad:99:36:a5:7c:b3:
19:ee:24:79:30:46:37:3e:d7:75:62:91:dc:f0:7a:
ff:81:79:34:e9:b3:f7:33:91:bb:75:bb:d5:80:5d:
1c:81:f9:db:ec:b1:dc:43:91:09:df:ae:c9:dc:62:
d3:8c:61:1b:3f:eb:90:86:35:4c:59:25:66:fa:49:
a5:ea:2b:00:9f:d2:38:12:15:15:c2:f3:bb:1b:1d:
14:13:82:fa:92:93:e2:c7:70:13:b1:ee:1f:47:30:
30:9b:b1:3d:d0:52:54:95:8c:4f:37:38:bc:eb:77:
c8:28:ec:3c:d7:f7:7d:f8:98:2a:57:f9:39:df:13:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:CF:FE:A0:C6:D0:E4:62:6E:21:DC:1D:E7:01:9B:72:D7:A2:70
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:1d:5a:a0:2a:93:e6:71:c2:f5:fd:8f:0a:d3:5e:58:f3:
bf:b7:5b:b3:53:40:d7:14:df:23:9d:7c:82:0b:a3:c0:64:ea:
b5:33:50:08:69:25:75:9e:b4:cf:61:b9:c2:05:fb:06:98:46:
20:7f:57:17:84:04:01:fe:65:15:e3:8b:7b:71:50:40:30:84:
0a:ef:f3:b9:03:0c:4f:c9:94:d1:0e:83:0d:ff:43:62:75:84:
c4:e8:1a:c8:5e:d7:dc:7d:4d:aa:e9:4e:bd:70:b3:14:de:f5:
ca:57:3e:19:0e:bc:ba:2d:0d:c4:ab:e6:18:07:b3:85:e4:5f:
2e:92:14:4d:eb:b5:d3:b5:96:9b:8d:95:ba:ec:19:6c:05:0d:
78:93:5b:2a:b4:98:4d:e3:0a:97:48:46:0c:49:2a:a5:1d:39:
d4:c7:3e:f8:9e:f3:8b:82:e0:79:18:da:ff:9d:2e:8f:79:af:
33:7b:c8:94:a9:d6:29:a2:e0:2b:c8:f7:cc:a6:fc:29:81:17:
ed:6d:ce:e3:d3:e9:bf:81:be:bd:d8:d8:1e:89:a6:17:de:55:
09:67:d8:e0:7e:37:08:ba:59:df:3a:9c:3d:36:6a:a0:f4:b0:
d7:c6:85:53:e8:df:f8:8c:02:76:ef:f2:b0:67:d0:c7:44:d2:
9d:b3:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:09 2026 by rpki-client