This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: 7IfiuXaDoBz2t8czZf1Cs8jxeJWWl9SvqeIQC9Yd3bk=
Subject key identifier: 00:96:B3:5D:CF:FB:72:4B:DC:92:7C:C0:E8:FF:C1:4A:70:71:F9:6E
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019C43591DCD86E702F4DC8213220B7704E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 17:00:39 +0000
Manifest this update: Mon 09 Feb 2026 17:00:39 +0000
Manifest next update: Tue 10 Feb 2026 17:00:39 +0000
Files and hashes: 1: 5DE_W6pAcWsoXSwOt7MJk1c52UM.roa (hash: xF+d5aYH+/051lwctUkQ5P94uH29GuKQimWqiTvacVc=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: EoI2Oa6xyAmPxdsUsmB8RF854ud5MO5I4Pe4a4Bv7tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:1d:cd:86:e7:02:f4:dc:82:13:22:0b:77:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Feb 9 17:00:39 2026 GMT
Not After : Feb 10 17:00:39 2026 GMT
Subject: CN=0096b35dcffb724bdc927cc0e8ffc14a7071f96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:e5:10:92:19:5f:64:11:23:2e:53:c4:b9:
f7:56:df:dd:09:20:0c:1c:d5:d0:67:df:9a:91:ed:
ab:c2:7e:98:77:81:d5:fb:ab:28:c8:e6:07:59:4c:
64:7f:11:90:67:7c:69:f1:16:d6:3d:44:05:17:7c:
d4:07:12:98:73:75:47:d4:92:3b:9d:83:bb:14:75:
c2:fd:d3:7b:fd:b7:c5:a2:d2:72:7a:e3:51:97:5b:
b6:06:f9:bf:72:35:a4:4b:05:df:ad:47:ee:23:f8:
0f:21:11:41:9c:4d:13:d7:9b:10:a2:2b:be:d2:3e:
58:75:10:8d:e1:fa:e7:ee:8c:71:11:b0:46:3d:10:
ef:3e:0e:41:f6:62:63:ca:66:48:30:88:da:ed:bd:
ab:99:f7:f8:d3:4c:87:18:f9:f7:9b:5a:dd:19:ef:
d6:c8:0b:ab:14:c0:06:8b:5a:6f:da:b9:1b:89:d2:
19:ae:5b:70:7a:42:57:90:29:38:7a:c2:2d:f1:b9:
09:75:ee:00:da:2e:54:5a:08:32:28:7b:4e:4a:8c:
c6:50:87:71:9d:68:59:d0:f7:39:aa:2b:6a:17:74:
b9:ce:8a:64:cc:fd:6a:17:0d:64:a9:95:8c:4e:1a:
2b:1c:b7:ef:bd:4f:23:dc:7d:be:7c:28:86:3c:0e:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:96:B3:5D:CF:FB:72:4B:DC:92:7C:C0:E8:FF:C1:4A:70:71:F9:6E
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:ee:d7:18:5c:db:19:7b:a5:8f:18:1f:e4:67:76:cc:e9:
1a:ce:88:c2:92:69:17:15:da:12:61:e1:7e:c7:a2:93:cc:42:
33:37:2a:dd:25:33:97:17:5c:10:db:35:99:12:84:38:3f:cc:
0a:b7:5e:c7:11:f2:24:ad:1d:4e:0e:14:41:6e:f2:86:43:32:
26:36:6a:cd:9c:54:e1:df:cc:8e:4c:f5:a1:af:65:ae:09:31:
7d:3c:66:c2:bf:54:30:ed:66:cb:0a:b3:35:dc:12:c0:7b:5a:
ff:80:83:5f:05:77:77:c0:4d:9b:ef:8e:e5:f2:a6:44:3a:12:
62:7e:25:7b:b0:fa:2e:26:b3:9c:89:a0:95:1c:79:c5:8f:df:
12:72:85:80:46:22:2f:ca:07:2f:04:95:1e:0f:bd:df:64:30:
ca:82:b8:23:93:99:52:4f:5a:44:53:53:7f:b5:f2:53:ce:82:
47:32:28:e1:a0:d5:8f:ee:9c:d3:7a:1b:a7:a4:37:de:93:81:
7e:44:fb:ae:b8:07:29:46:1a:fb:83:81:77:d3:22:8d:17:e2:
2c:b0:97:eb:c2:6c:29:a6:46:b6:e4:d4:c3:a3:d3:23:48:38:
d3:36:49:6e:f7:27:f1:a5:37:82:67:df:5c:a6:5f:c4:ff:01:
d8:02:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:39 2026 by rpki-client