This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: uO1bSvj0N468e2PM7hKY8rB1Pcu1OV8O/WmH0kuw8AQ=
Subject key identifier: 02:2E:3F:CA:5C:9A:81:06:18:84:5C:DA:61:EA:FA:6F:47:86:E7:6D
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019C43907BAB16D3C0258C58E5DDBCC71156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 18:01:08 +0000
Manifest this update: Mon 09 Feb 2026 18:01:08 +0000
Manifest next update: Tue 10 Feb 2026 18:01:08 +0000
Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: QKjb2JMXGivGNVT2ELf1tCkw+oLL+YCBRFJSeDJlnLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:7b:ab:16:d3:c0:25:8c:58:e5:dd:bc:c7:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Feb 9 18:01:08 2026 GMT
Not After : Feb 10 18:01:08 2026 GMT
Subject: CN=022e3fca5c9a810618845cda61eafa6f4786e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:59:d8:7e:38:62:b4:5a:cc:aa:70:61:f3:
36:bc:5d:fd:e0:7a:ba:f9:8f:ef:3f:a1:84:98:c4:
ea:09:e2:15:9b:99:43:e9:42:b2:6d:ee:52:f6:cc:
9d:e9:1c:8e:58:3c:e0:11:d9:15:02:49:45:b0:27:
2d:cf:49:3e:41:33:92:48:20:ae:18:58:87:4f:d3:
be:08:7a:9c:9c:52:73:2e:8c:47:53:4f:fd:7f:d7:
2e:78:e2:6b:ec:ca:7e:7f:af:db:13:cb:95:56:be:
67:4f:10:1c:c5:17:3e:d7:bd:68:c8:16:dc:4e:1a:
45:f9:71:b8:f3:d1:07:14:11:21:a1:35:10:5a:3e:
dd:9f:f8:a7:b6:c0:75:c9:d8:40:57:f1:61:1f:db:
1f:97:b1:42:ca:db:98:76:a9:8d:1d:b7:09:81:37:
bc:3b:54:f9:45:92:65:81:6c:03:96:65:1e:f8:72:
7b:1b:0f:c3:a9:d7:19:7f:82:95:cf:9a:db:9d:77:
68:fd:fb:da:5c:57:14:8d:32:98:a3:f3:67:9d:d0:
4e:23:53:f1:a9:ba:58:84:3a:2f:30:17:f8:79:bf:
56:2e:82:20:53:af:37:f3:54:13:7f:3d:ee:99:c7:
64:4e:ba:ce:a1:17:94:2f:03:09:8a:de:82:94:04:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:3F:CA:5C:9A:81:06:18:84:5C:DA:61:EA:FA:6F:47:86:E7:6D
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5d:df:dd:ee:a9:d4:5f:84:9c:5b:57:bc:b5:ee:11:f5:49:
58:04:4c:19:64:ad:15:ea:47:f3:b8:c8:52:1e:b1:42:dc:a3:
da:0e:06:e8:9f:e0:08:80:8a:85:f7:84:9d:90:d2:87:f7:65:
d2:84:5b:15:4e:fd:81:b4:92:05:96:0a:5e:18:72:10:dd:e8:
3b:b1:f9:96:c9:ae:8f:73:6f:2a:fe:5f:9d:05:97:10:2d:42:
c2:b1:ea:51:21:2d:cf:6c:ad:e9:0a:75:3f:ea:29:a4:f9:b9:
c8:e3:8b:b9:c9:85:94:bc:bc:68:3f:bd:6b:92:02:45:24:ad:
83:1e:d8:12:21:27:cb:05:4d:2f:c4:0d:62:b6:da:2d:f8:fa:
ee:fc:2e:d3:84:64:ab:b1:26:82:b7:f2:09:60:72:9a:7e:e2:
22:3e:c0:35:8f:3a:eb:50:aa:e2:1b:f2:a7:db:ff:ef:7c:6d:
38:f1:96:7f:94:5d:ce:61:a0:bf:5b:34:dc:32:f0:c5:f1:7b:
35:41:e6:f6:63:98:11:10:d1:3a:b1:bd:2c:df:02:e0:2a:9d:
9c:0b:c4:1d:24:6f:57:99:04:62:ed:b1:74:95:0f:ce:23:30:
4c:c7:5c:2f:81:99:83:e6:17:89:dc:aa:36:9f:18:71:ef:fb:
aa:bc:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:47 2026 by rpki-client