This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: HoFKC9Lw0RwbEEfLhK8Cc25yw/Orz0PTqptG4flk8Kg=
Subject key identifier: 9F:A7:CD:7F:C5:60:72:D8:C4:0E:06:25:BD:EC:C2:62:3E:01:0B:78
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019C43FE391FD4F153479D883171F62CA412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 04F8
Signing time: Mon 09 Feb 2026 20:01:00 +0000
Manifest this update: Mon 09 Feb 2026 20:01:00 +0000
Manifest next update: Tue 10 Feb 2026 20:01:00 +0000
Files and hashes: 1: U7czUOTZqayV5F4Km_Oxj_WlDUo.roa (hash: WcGm9+GdN6IqYMN7rk3gbjv/CZUu9hkDi4qO4kHYeVw=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: 3FjjBc7GtOa9WJF3DypZATg5Rv95Q8efXHjrfH8/2Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:39:1f:d4:f1:53:47:9d:88:31:71:f6:2c:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Feb 9 20:01:00 2026 GMT
Not After : Feb 10 20:01:00 2026 GMT
Subject: CN=9fa7cd7fc56072d8c40e0625bdecc2623e010b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:0f:69:41:1e:7a:2c:0f:c3:75:04:83:cb:
e6:f3:6b:57:31:60:40:eb:c1:7a:9e:a2:a3:64:2f:
24:7a:88:75:a2:b2:be:d8:d5:6d:f9:d1:7f:a1:1c:
7f:df:2f:34:7f:99:2a:30:c7:0d:1b:d1:dd:c5:2c:
e9:a8:1e:aa:80:ac:d6:c6:d3:5b:f6:29:71:3c:3b:
16:33:b4:c7:d4:21:bf:2a:1b:be:f6:e4:c1:fc:b5:
78:4f:da:df:4c:3f:d9:1f:15:00:d5:57:76:db:73:
71:3d:84:44:a0:bd:ca:da:ba:58:57:49:a4:23:b3:
5b:3d:81:ba:bf:b4:28:aa:d5:86:85:81:4d:66:5f:
bb:1d:9d:f5:32:af:13:d2:33:2b:7f:74:6a:5f:31:
f8:66:68:89:55:3b:a3:0a:1a:9a:35:27:8d:72:8a:
6a:35:dc:f1:de:65:d2:a8:97:38:4c:f8:13:ba:dc:
1c:b8:3b:8b:44:75:21:f5:d1:b8:03:94:78:51:4e:
31:d2:06:46:d3:49:b0:72:23:7c:18:7c:1c:5c:9d:
16:7d:fe:f2:13:d8:ea:27:10:69:3f:f2:46:90:da:
c4:29:73:8a:11:39:cb:15:56:fd:b7:72:08:3f:91:
34:4a:fe:23:c7:df:a6:6f:05:b8:74:84:db:39:1f:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:CD:7F:C5:60:72:D8:C4:0E:06:25:BD:EC:C2:62:3E:01:0B:78
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:74:35:4d:f8:3e:c4:79:57:6d:b1:3e:30:d6:65:dd:43:c5:
6a:4f:a2:19:16:1b:64:8e:27:83:3a:84:60:82:5a:7f:40:e7:
80:34:bc:a5:76:66:c5:b1:7f:df:ee:f2:72:ac:10:4f:6a:21:
5d:a5:58:74:74:00:a8:fb:43:3a:4e:62:5d:51:0b:1d:d0:ab:
fa:46:34:4d:44:73:e2:45:9d:50:58:66:04:6c:b9:45:1c:55:
60:0a:bc:ae:15:0b:00:ee:e0:9b:e5:8e:8b:23:53:dc:8a:ad:
ec:3e:21:eb:d7:f4:13:33:70:a5:e6:a1:b9:09:e8:1e:a4:f7:
37:a9:f6:9d:8d:b7:28:5d:a6:c0:86:8a:90:87:b8:2f:50:59:
5b:99:a5:10:18:58:4c:7e:e9:77:c4:4d:ee:a0:6f:94:0e:6e:
17:be:e8:d9:c6:a4:70:d8:0f:28:31:4f:32:13:6e:b3:0e:31:
7f:49:b8:75:30:a9:e8:c7:6c:23:0d:7f:73:51:95:6d:d4:ce:
12:5e:f3:b7:23:18:29:c5:3d:c2:53:9c:e4:c2:b5:e3:5f:0f:
9a:9e:11:99:3a:cc:1c:86:e5:b3:34:f7:7b:21:98:fc:42:b2:
15:b7:ab:d5:57:ec:a2:7f:96:68:0d:8a:ab:25:01:9c:a1:ba:
b6:e7:bd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:58 2026 by rpki-client