This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: 7xKWdhw++BEAY+sMRApSNAX/za7ISxSVuJFMdETxP1M=
Subject key identifier: EA:45:9E:6B:F7:D4:81:64:4D:A0:BD:54:8A:12:15:F0:D7:C6:45:D6
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019C435949C1D6F5A102F190F3B91292E5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0F2A
Signing time: Mon 09 Feb 2026 17:00:50 +0000
Manifest this update: Mon 09 Feb 2026 17:00:50 +0000
Manifest next update: Tue 10 Feb 2026 17:00:50 +0000
Files and hashes: 1: 4d9-6h6RHLAtIkxDu8GiYTASn8o.roa (hash: gqqQTnXdL5PKtQ8KN/lbpQCpkcfM5mWMVs9m29iW+Pc=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: hjNXWESW83aZmO6KpH+IZLit3lZLJ2+qgUNCg6JOJeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:49:c1:d6:f5:a1:02:f1:90:f3:b9:12:92:e5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Feb 9 17:00:50 2026 GMT
Not After : Feb 10 17:00:50 2026 GMT
Subject: CN=ea459e6bf7d481644da0bd548a1215f0d7c645d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:18:24:cb:9d:d7:65:38:49:2c:5b:92:1f:
39:22:d5:9a:6e:f4:1f:b4:ca:29:fd:fe:0e:0d:2c:
f2:f1:79:fc:05:da:df:7c:43:ff:60:c9:7f:bc:85:
e6:5f:b3:65:e0:82:77:08:d9:4b:c4:e2:fe:e7:a2:
36:44:70:05:3f:07:02:df:16:4c:5b:46:6e:67:0c:
a0:c4:10:fa:3d:e9:16:43:2a:b3:c0:91:ea:c1:b2:
74:93:c0:ae:16:15:22:36:2a:aa:16:66:80:d8:56:
c0:fb:60:3e:16:fb:c3:c6:eb:94:35:d4:1c:00:d0:
d4:e2:f3:ec:d2:e8:42:84:ac:06:57:d9:33:d4:ad:
d2:f8:53:88:c6:32:b8:4e:8f:af:be:0a:77:55:07:
b8:af:3a:80:06:b7:e3:b3:b4:83:a5:a2:a4:dc:05:
11:d1:e5:65:e8:e4:ad:cd:16:20:98:d6:2a:e2:fb:
8a:9e:f0:f6:68:9f:35:c5:56:6e:1e:ea:6a:ab:d6:
c4:3e:ab:75:c4:28:34:19:9e:37:48:a2:35:3b:9e:
fe:57:b2:5b:40:d7:33:80:88:4d:82:61:8b:d2:4c:
1d:b0:e3:a7:76:34:7f:b5:70:c3:23:66:2a:44:9f:
d0:34:c9:2a:6a:71:82:d8:43:fc:5a:7b:2e:59:c9:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:9E:6B:F7:D4:81:64:4D:A0:BD:54:8A:12:15:F0:D7:C6:45:D6
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cd:6c:31:ed:39:19:1c:d6:41:a8:07:20:d6:99:1e:9b:db:
39:4f:d4:0b:b4:2b:60:07:d4:8c:8b:b9:27:64:c0:5e:e7:92:
64:ee:de:be:62:ba:2d:b0:d3:7a:f0:2d:c1:fb:38:d6:ce:5f:
d4:9d:e4:6c:f9:7f:b3:c6:f2:c9:8b:89:a1:a7:8c:0f:f9:67:
26:a6:1c:0e:ab:9e:45:39:3b:27:4c:9b:45:80:e4:cc:8f:d3:
7d:ae:66:bf:bb:a7:4a:45:ad:ed:84:ec:29:ba:48:8c:ca:0d:
35:79:23:5a:7c:5c:8f:d1:e3:1b:71:31:65:26:90:18:f3:3c:
02:74:40:4b:db:ff:fe:39:1d:bc:03:67:b4:9e:e8:c0:37:13:
4b:b9:29:33:54:31:2b:54:b1:7e:ad:11:e3:3d:6a:8a:36:c3:
35:33:fd:5f:5c:c5:93:a8:41:d3:95:f3:4d:70:6d:87:a5:9f:
be:36:da:99:4a:87:c2:04:16:49:50:b0:91:52:db:76:16:3f:
09:27:48:45:3c:b7:a1:39:bb:3d:9b:18:bc:b3:f1:ea:fb:7a:
d4:0a:d2:fe:e3:8d:25:e1:2e:1e:b3:a7:8f:b7:e8:8c:94:c4:
fc:19:e1:4d:a0:12:d6:fc:0f:05:e6:d2:d2:e5:83:e0:32:0f:
72:90:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:36 2026 by rpki-client