This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: rW2ajbpfA2UODAcV+6atJUHHD5ZUvLG4JDq824fsJWI=
Subject key identifier: DF:64:8D:D0:90:76:63:36:10:DF:A9:9E:CD:AE:5B:82:64:E8:9B:AA
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 019C416A84CB364A5A2F834463B197B19A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: BE
Signing time: Mon 09 Feb 2026 08:00:25 +0000
Manifest this update: Mon 09 Feb 2026 08:00:25 +0000
Manifest next update: Tue 10 Feb 2026 08:00:25 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: BMO3P10Tii75davXMWQrHuf20kjz0/HqqSl66FTnhUQ=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:84:cb:36:4a:5a:2f:83:44:63:b1:97:b1:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Feb 9 08:00:25 2026 GMT
Not After : Feb 10 08:00:25 2026 GMT
Subject: CN=df648dd09076633610dfa99ecdae5b8264e89baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:a8:b3:a3:8b:e0:eb:9c:30:9f:da:fb:c4:
17:11:7a:3d:fa:86:1e:9a:eb:e0:83:ad:b9:5f:d9:
e9:3c:87:a9:23:4d:4a:fc:fa:29:00:ff:c3:79:b0:
55:be:4a:cb:e0:ad:9d:dc:fd:43:2d:61:a8:60:d3:
9a:6b:8d:fb:b4:65:5c:7e:7b:b0:2e:a7:51:f7:16:
3c:0e:53:c0:f0:9f:9e:20:9b:32:15:68:5f:27:e1:
02:51:02:91:da:78:c0:58:60:0b:00:c3:bf:e8:7a:
ac:e3:0a:ac:ac:d7:d2:20:35:84:30:fe:11:3c:92:
d3:05:77:76:5f:b3:56:c1:3a:9e:a1:7a:ca:a5:d9:
56:2c:b6:36:2c:6d:9f:43:1c:8a:d5:52:fd:68:4f:
95:5e:35:89:ca:c8:bf:b4:02:53:ad:51:73:ef:ef:
6d:76:da:5d:0e:67:96:d2:78:3d:27:10:54:66:d0:
10:3b:64:d2:fe:da:f1:ee:c2:b3:4f:58:84:55:2d:
bf:64:85:75:40:7d:68:92:6b:c9:cb:19:9b:30:4c:
59:48:e0:2c:35:16:ed:5d:8b:2d:93:5d:9d:59:3f:
9f:eb:76:aa:63:56:3e:62:b1:2c:57:9e:83:58:25:
f1:d7:96:6e:f0:33:71:0d:e3:20:5e:af:c4:4d:59:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:64:8D:D0:90:76:63:36:10:DF:A9:9E:CD:AE:5B:82:64:E8:9B:AA
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:bf:0c:b3:7b:c9:d9:a4:fc:ab:f0:c1:9f:a4:ff:2f:df:
f6:64:0c:dd:35:de:9a:45:fb:a4:b7:ea:e2:e7:9e:de:f9:a8:
9d:f6:f4:fc:9f:5b:62:e3:f9:d5:36:3c:dc:6a:7c:fa:fa:c1:
c2:09:ba:4c:47:64:04:64:bc:df:94:52:a7:5f:c7:4c:f8:43:
eb:33:1e:b1:20:35:7f:6c:aa:5e:ae:98:97:cb:6f:39:97:b4:
8e:bb:14:6e:b5:37:6e:e9:db:83:93:04:63:eb:ef:78:cf:44:
b9:d1:cb:1a:f3:66:a1:90:69:90:a9:ec:58:4e:bb:08:4f:91:
94:e8:25:a9:70:b2:6d:b5:ca:09:b5:8c:d4:db:fe:09:13:77:
c0:47:ea:ac:4c:fd:2c:fc:1b:97:ff:ab:ea:f6:b8:5b:d5:38:
56:b9:63:b0:f0:b7:17:41:85:e1:2a:e5:c5:49:5d:1d:1a:dd:
ac:3c:90:c4:0d:8d:e0:e3:39:d4:5b:0e:15:62:33:3f:b3:1f:
78:29:ab:29:a1:85:e1:9e:7c:d4:13:89:96:ca:15:ee:f8:d1:
04:39:0d:7c:53:2e:7d:7b:05:c5:ee:80:9a:84:73:f3:ab:1c:
f8:37:be:5f:cf:25:a9:d4:3b:2b:11:64:1a:ee:2a:45:d9:12:
ab:e8:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:24 2026 by rpki-client