This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: EWDBKyvyb847C6MYN0ievtAGujDAxrbAKPqXVUTCLXQ=
Subject key identifier: B5:96:6C:BC:EE:C3:91:70:DD:F4:1B:8A:15:5C:A9:F5:67:C8:19:DB
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019BFAD2BAD89798EF1498ACC1051979BB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 13CA
Signing time: Mon 26 Jan 2026 15:01:12 +0000
Manifest this update: Mon 26 Jan 2026 15:01:12 +0000
Manifest next update: Tue 27 Jan 2026 15:01:12 +0000
Files and hashes: 1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: N3AQ7QMy7sncbPccIr9TjAGiYOdbad7hkUZBR39cBro=)
5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:d2:ba:d8:97:98:ef:14:98:ac:c1:05:19:79:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 26 15:01:12 2026 GMT
Not After : Jan 27 15:01:12 2026 GMT
Subject: CN=b5966cbceec39170ddf41b8a155ca9f567c819db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:27:fa:3d:f7:a2:00:ba:be:27:35:6c:9a:
fe:d0:69:f0:d8:14:1a:cf:7e:44:a3:eb:d0:2e:08:
ee:88:d3:f9:f7:79:ee:ee:a2:aa:37:1b:4d:2b:cf:
d2:99:3b:2b:0c:f2:43:76:3d:be:11:e8:8d:d9:83:
5c:a5:46:01:2c:51:77:3f:9a:f9:f0:9b:86:03:90:
06:4a:6f:f2:01:36:f2:49:58:31:ef:5f:b5:da:16:
9f:4a:1a:ee:9f:a8:11:d1:28:75:07:f4:a2:1d:f1:
54:6c:8c:82:06:ee:bc:28:6f:26:e8:c7:8a:ba:5c:
d7:a5:67:e6:aa:ab:83:1c:86:ec:28:5d:2e:c2:1e:
d1:8b:f1:66:31:b0:20:91:7a:7b:02:2e:1f:58:8d:
51:8e:a7:de:ff:4f:3f:22:1e:5a:d5:56:26:f1:95:
37:ad:de:63:df:47:45:7b:11:6c:9a:a4:9b:87:af:
5a:e8:fc:c2:d7:99:04:02:d9:fd:11:8c:a9:a3:17:
17:3b:10:e3:d4:73:97:1d:fe:68:f6:47:57:e5:d3:
dd:ac:f2:fb:21:31:1d:81:9b:06:da:de:b5:7a:ca:
04:e7:b6:99:0d:31:30:1c:a8:9a:5c:80:1e:47:d7:
1a:05:2a:75:c8:74:7f:e6:cd:8c:50:e1:41:00:c3:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:96:6C:BC:EE:C3:91:70:DD:F4:1B:8A:15:5C:A9:F5:67:C8:19:DB
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:0c:5e:c1:bd:c0:8a:da:46:92:c5:2e:dc:b6:9d:66:4b:
38:91:62:2d:26:ae:ea:18:d8:e9:0f:f1:ef:35:ae:0d:00:2c:
aa:e1:c3:3d:3c:65:85:f1:1f:35:1b:53:33:a6:9b:72:62:78:
23:2d:05:7f:a6:73:44:59:c1:20:15:3a:4e:34:50:f1:71:9b:
a3:52:64:e0:f7:fe:5a:f5:7c:9e:bc:67:e5:9f:57:45:26:17:
ae:e1:fd:9e:00:18:02:0c:f9:79:4a:8c:df:4b:f4:b5:f8:12:
4d:12:79:de:ca:98:0d:d6:05:16:6a:65:b6:24:5e:4e:91:e8:
a7:83:55:b3:56:50:61:61:ef:35:b8:3e:1a:21:8d:4b:2f:0b:
31:f4:1f:2d:e4:9f:82:ae:4d:f9:7d:82:43:c9:e2:32:ee:64:
c2:4e:fc:92:17:78:70:9c:4f:37:af:17:42:31:08:49:1d:c2:
ff:4d:6e:22:a5:f7:e8:3e:90:4c:82:86:87:69:27:5f:e8:ac:
3d:dd:27:83:3f:27:b1:0c:0a:07:7b:05:d7:35:69:f9:86:be:
00:76:28:0f:36:8f:98:aa:9c:15:da:ff:41:96:d5:60:2a:ad:
23:63:3a:54:3e:d2:4c:03:06:9b:ab:b7:f6:09:17:55:50:1b:
41:be:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:06 2026 by rpki-client