This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: RsRzRU3XGyC7Wczsw4XO+CsUjT27dTHsB1to9BBCSYE=
Subject key identifier: E6:4F:9B:80:A6:02:74:61:CC:A1:4C:4E:24:34:E2:72:21:7F:F4:88
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019C43592044DCFC8E0C91E42AFE3E81C081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 10E9
Signing time: Mon 09 Feb 2026 17:00:40 +0000
Manifest this update: Mon 09 Feb 2026 17:00:40 +0000
Manifest next update: Tue 10 Feb 2026 17:00:40 +0000
Files and hashes: 1: LKLzayTx02NKt4IYLkBu7eAzfMQ.roa (hash: mj+HEmIxR6MSV3YLRBJoyixi3pfyWUn/3aiy0wIfWXE=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: 1xOLZOdFBDJfAawKdBGOs1zvTvj91kfoM9ptJjhD3h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:20:44:dc:fc:8e:0c:91:e4:2a:fe:3e:81:c0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Feb 9 17:00:40 2026 GMT
Not After : Feb 10 17:00:40 2026 GMT
Subject: CN=e64f9b80a6027461cca14c4e2434e272217ff488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:04:b1:59:bc:06:a0:f6:96:39:82:67:f3:
3b:d0:cf:bc:c7:5a:d1:e9:b3:73:a3:7a:38:ae:41:
d7:8d:e1:95:03:12:6c:4f:8b:67:4e:51:18:37:c1:
39:69:bf:39:d1:54:1a:2f:57:ec:b5:eb:7a:a0:4c:
0c:f7:8c:b3:7b:8f:82:6c:c3:86:ff:78:21:28:e3:
ee:d2:fb:21:b7:f1:88:1f:bb:30:a0:cb:52:48:d5:
fd:72:1b:4f:8b:05:4a:63:78:f2:18:60:84:a2:18:
f0:23:78:f5:99:a0:1f:c5:bb:b0:6e:0e:65:48:d5:
a3:ea:e6:fc:51:5b:17:f7:52:c5:3b:4e:ab:f5:22:
45:7b:ba:85:2b:5a:ed:49:a0:b4:68:05:c6:cd:f9:
23:c8:06:07:a4:e5:cf:4f:bf:7b:24:71:15:8d:73:
0b:e0:23:30:7e:54:6a:e0:5f:f8:db:48:27:46:f9:
1c:17:92:a6:b6:cc:0a:92:66:bc:92:00:37:af:45:
95:a0:58:e8:9c:42:be:d7:93:6b:15:59:b4:fb:cb:
2b:b9:e6:6a:3e:e6:d9:77:50:f9:10:12:a5:e7:bd:
dc:fd:81:e3:ef:99:50:40:fc:38:3d:67:16:cc:af:
49:6d:d7:e5:7e:4a:c1:58:80:c5:7a:f7:0a:88:3b:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:9B:80:A6:02:74:61:CC:A1:4C:4E:24:34:E2:72:21:7F:F4:88
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ab:6b:da:80:ad:66:84:0a:db:06:94:66:42:05:6d:86:1e:
8b:7b:4a:0f:dd:d7:7b:94:11:83:df:86:12:7e:81:75:a5:37:
aa:a0:2a:4a:07:38:84:70:2b:96:7c:3b:7c:43:b8:c2:0f:49:
68:b4:00:39:6e:67:a1:10:78:bf:e4:bf:6b:fb:a2:4f:b6:b3:
8b:6f:2c:44:3b:5a:27:26:92:fe:98:4f:54:39:70:8d:71:6b:
f3:5c:c6:db:08:96:84:77:1c:19:fe:7f:aa:52:b2:4a:00:68:
de:7a:af:64:fb:77:a6:e6:9d:0c:a9:bb:52:16:83:95:81:9c:
76:54:70:ea:33:c7:3e:2d:b1:2a:6f:fa:4f:46:0b:39:6f:27:
cd:46:22:bd:3b:ed:11:be:27:93:3e:38:bc:98:df:a3:ae:61:
59:0f:ba:41:68:8d:df:7e:4f:e5:28:9b:99:90:4f:f3:4d:f5:
ae:81:3f:d8:6d:bc:2d:77:99:3b:c6:8e:bc:40:8d:01:da:e2:
67:a9:65:da:78:83:d7:e4:2e:ba:9c:7c:f9:ae:06:37:fb:32:
0e:5d:58:90:1b:b5:8f:b6:46:4a:5a:47:d8:bc:44:84:bc:2d:
81:16:22:ba:44:7f:96:3b:e2:66:70:85:fb:5c:27:c2:57:f2:
46:9d:72:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWSBE3PyODJHkKv4+gcCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjc0ZjJjNWJlYjk5OTliODY3M2M3NjA3NDNjN2U3ZDMx
Y2Q2NzMwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD
EyhlNjRmOWI4MGE2MDI3NDYxY2NhMTRjNGUyNDM0ZTI3MjIxN2ZmNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6UEsVm8BqD2ljmCZ/M70M+8x1rR
6bNzo3o4rkHXjeGVAxJsT4tnTlEYN8E5ab850VQaL1fstet6oEwM94yze4+CbMOG
/3ghKOPu0vsht/GIH7swoMtSSNX9chtPiwVKY3jyGGCEohjwI3j1maAfxbuwbg5l
SNWj6ub8UVsX91LFO06r9SJFe7qFK1rtSaC0aAXGzfkjyAYHpOXPT797JHEVjXML
4CMwflRq4F/420gnRvkcF5KmtswKkma8kgA3r0WVoFjonEK+15NrFVm0+8srueZq
PubZd1D5EBKl573c/YHj75lQQPw4PWcWzK9JbdflfkrBWIDFevcKiDvOAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZPm4CmAnRhzKFMTiQ04nIhf/SIMB8GA1UdIwQY
MBaAFEEnTyxb65mZuGc8dgdDx+fTHNZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDIt
YTQ4NzUyYjgwNGM3LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDItYTQ4NzUyYjgwNGM3
LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKtr2oCt
ZoQK2waUZkIFbYYei3tKD93Xe5QRg9+GEn6BdaU3qqAqSgc4hHArlnw7fEO4wg9J
aLQAOW5noRB4v+S/a/uiT7azi28sRDtaJyaS/phPVDlwjXFr81zG2wiWhHccGf5/
qlKySgBo3nqvZPt3puadDKm7UhaDlYGcdlRw6jPHPi2xKm/6T0YLOW8nzUYivTvt
Eb4nkz44vJjfo65hWQ+6QWiN335P5SibmZBP8031roE/2G28LXeZO8aOvECNAdri
Z6ll2niD1+Quupx8+a4GN/syDl1YkBu1j7ZGSlpH2LxEhLwtgRYiukR/ljviZnCF
+1wnwlfyRp1yjQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:51 2026 by rpki-client