This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.mft
File: QH0twQwC9ewk9pD59mBVVIZWLlk.mft (raw, json)
Hash identifier: ZV1ooMY7/QDyC6sl5HmRNttt++e2ts6uE3PjLZe2Mx4=
Subject key identifier: C4:51:1F:50:29:03:EC:32:16:47:AE:2D:E5:14:B5:13:80:3D:FB:90
Authority key identifier: 40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59
Certificate issuer: /CN=407d2dc10c02f5ec24f690f9f660555486562e59
Certificate serial: 019C41A266362E34C3C6ABC199D60E4483AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.mft
Manifest number: 150E
Signing time: Mon 09 Feb 2026 09:01:27 +0000
Manifest this update: Mon 09 Feb 2026 09:01:27 +0000
Manifest next update: Tue 10 Feb 2026 09:01:27 +0000
Files and hashes: 1: FtvcAFkah5MC2Z1_PcfWmzKSll8.roa (hash: lAzH9ctEUVZ0nWk96qJfvTNhA1rNNyQ5u0vfPKjJ5TI=)
2: QH0twQwC9ewk9pD59mBVVIZWLlk.crl (hash: 6xhvOdzIyJLd2aFBndnolzTc4aUsojTBdBCqIapemmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:66:36:2e:34:c3:c6:ab:c1:99:d6:0e:44:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407d2dc10c02f5ec24f690f9f660555486562e59
Validity
Not Before: Feb 9 09:01:27 2026 GMT
Not After : Feb 10 09:01:27 2026 GMT
Subject: CN=c4511f502903ec321647ae2de514b513803dfb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:e5:38:7a:ea:1c:d9:68:9c:4c:04:8b:f4:
01:f9:a0:f4:de:fe:b7:10:c8:1c:e2:16:43:0f:d6:
76:0b:30:e8:36:ff:38:31:21:51:c3:47:c1:0f:56:
be:24:fc:4d:21:c7:84:47:0d:c5:d7:31:68:b7:91:
4b:54:58:ed:c2:10:15:0d:50:36:09:4e:ba:e2:5c:
02:71:ed:87:65:40:65:b5:87:55:ff:9a:f5:f1:4b:
9a:42:71:4d:21:f5:32:36:90:6b:1f:cd:ec:bc:56:
08:88:e2:4d:75:ed:be:6d:1b:2f:9f:08:c8:5c:db:
4e:bf:1a:fc:9f:b6:5e:3d:d4:7d:c4:c0:53:99:08:
2c:8b:02:d5:ad:1e:fc:3a:cd:4a:74:3d:48:9a:38:
b9:b7:f1:1d:46:2d:7e:88:bc:75:f3:a2:d1:69:4e:
df:2a:e7:6e:35:56:1e:ce:f5:5e:68:69:d3:df:b2:
0c:ea:b0:27:d9:06:8b:2a:03:52:15:f0:36:2c:4c:
0b:6d:8b:f9:13:af:b9:be:e4:1b:53:4f:31:9f:cd:
cf:24:be:99:b2:32:fc:75:2d:4e:4a:78:6b:ca:19:
38:6d:4a:f3:3d:4f:b4:b7:4e:4f:47:c0:8a:10:fd:
8a:2c:53:63:7e:7d:77:d3:ea:0f:cf:bb:a4:44:4a:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:1F:50:29:03:EC:32:16:47:AE:2D:E5:14:B5:13:80:3D:FB:90
X509v3 Authority Key Identifier:
keyid:40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:51:51:20:f8:5f:63:87:53:a0:fc:19:66:09:41:48:69:
bb:6e:1e:7e:5b:88:6a:35:e9:af:2d:61:2c:96:99:60:ce:3e:
48:cc:9a:42:34:5f:9e:2f:81:80:04:64:61:15:83:5c:9b:a5:
39:80:eb:3e:f4:7f:41:50:b3:f2:6e:ec:17:bb:97:c2:8f:a6:
56:19:df:7c:61:04:17:d2:39:ab:29:6a:91:43:2c:ae:4c:ce:
08:b0:f4:7a:c3:b4:0f:e8:e2:99:eb:12:87:e8:f5:05:a2:38:
d7:9e:77:73:97:57:5e:ad:5e:02:51:32:6a:5d:fc:bb:3f:b2:
26:df:ab:0e:dd:3a:31:54:99:10:18:38:07:bc:9f:42:85:f4:
ad:38:73:ea:9a:1f:c0:51:cd:b9:d1:46:16:2d:a6:dc:2e:2a:
8e:9c:fc:43:24:b3:af:96:bc:f4:3b:4a:f8:1d:39:39:b2:9a:
84:7f:7e:f5:c1:cd:aa:e1:5f:4b:c0:02:53:78:2f:a9:9d:fd:
69:bb:6c:fc:52:84:56:63:6c:c3:bf:f6:6e:b1:49:e0:07:cf:
81:e3:e2:35:7c:95:28:a2:f8:00:2b:a5:c1:65:1d:99:dd:d4:
3b:4d:d1:76:b3:5c:a3:2c:fc:63:f4:71:a2:03:97:d2:7e:e6:
c4:f1:ee:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:06 2026 by rpki-client