This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier: cYQcGAcLtWtabuCjo2ZoxBBBEjsp0RBXTmq2n0UNu4s=
Subject key identifier: B2:E5:D2:23:03:6B:0C:92:FF:71:10:A2:43:8E:EE:B6:FB:33:39:19
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 019BFE0A32636675F51973B755431A45566D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number: 0FE6
Signing time: Tue 27 Jan 2026 06:00:39 +0000
Manifest this update: Tue 27 Jan 2026 06:00:39 +0000
Manifest next update: Wed 28 Jan 2026 06:00:39 +0000
Files and hashes: 1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=)
2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=)
3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=)
4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=)
5: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (hash: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc=)
6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=)
7: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=)
8: lTzV12OyW6xdIWMBiN9FukKZ0iQ.roa (hash: QQ84Zgi4BUbvoffh1ymJ43nM7iuXA7F8Sv6Ix0cOmoQ=)
9: nSjVDFl1BI5CSQcD_T-hlpq60Tg.roa (hash: TDSKC81PAYDavcfZed5v/E88qBB6XxHDAxUBaCYBTgk=)
10: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=)
11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: q6WsQ+/iP31STJDp+rstcv3gZ3YHuUbw9RwKfuoNH+4=)
12: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=)
13: zz2ubIWIT2y3LrPgWA-Wvq86OMs.roa (hash: FQoneHTBSyuTPA9+pRMwse2b3ajv2eaAnyk8ybdQibM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:32:63:66:75:f5:19:73:b7:55:43:1a:45:56:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 27 06:00:39 2026 GMT
Not After : Jan 28 06:00:39 2026 GMT
Subject: CN=b2e5d223036b0c92ff7110a2438eeeb6fb333919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:08:f8:da:6e:25:6e:a7:97:ec:8e:ee:a1:
21:79:7b:e3:59:42:f9:23:8e:0b:8e:14:cb:94:50:
65:68:fc:28:9e:6f:13:f8:13:fb:2f:0c:e5:53:8b:
56:45:60:55:34:84:ec:c0:01:78:75:59:89:45:29:
ba:3a:ce:87:c3:85:5b:d4:8e:94:b7:ba:41:16:2d:
38:1e:77:d7:53:6c:0b:cd:c6:32:f1:c5:73:4a:78:
14:3e:0a:83:3f:2e:78:17:c3:7d:8a:95:75:a5:20:
72:66:41:9a:4e:f1:4f:67:76:dc:4f:ea:e3:74:e0:
f3:53:c2:53:30:e3:de:0a:88:67:1b:1b:9a:c3:48:
81:9d:60:b4:44:b9:37:d2:26:a0:ef:1f:be:87:68:
66:09:20:33:fe:86:c0:b7:57:72:dd:cc:8f:a9:2e:
dc:fc:07:97:89:77:52:c3:2c:1e:b2:17:9c:0b:f7:
2d:c5:3a:5b:11:58:a5:f0:69:61:b7:58:51:3c:db:
f9:08:8e:89:e5:cf:7a:c7:6b:ca:54:2f:3e:50:40:
80:de:37:f0:e9:08:1d:0f:64:3d:90:b4:6c:3c:14:
33:44:be:d5:db:62:30:d2:d5:8a:7e:99:3b:aa:02:
bc:aa:67:d5:00:65:2e:3f:45:8f:c6:94:eb:a3:3b:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E5:D2:23:03:6B:0C:92:FF:71:10:A2:43:8E:EE:B6:FB:33:39:19
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8b:5b:16:d4:21:4c:0b:39:db:af:6e:85:67:bd:91:24:d9:
fb:26:4f:99:ff:6e:e1:6b:4f:1e:8f:13:ad:1f:af:96:9e:5a:
a2:6f:3e:8a:46:18:0f:80:04:9b:ab:0f:1d:eb:84:66:29:8d:
ed:2f:4c:58:e1:c6:fb:68:23:e6:b0:b5:94:3e:07:1f:00:80:
11:25:08:00:7a:63:76:3e:33:0d:ce:96:3e:20:01:6e:82:ca:
11:bb:17:25:cb:e5:03:26:29:21:e0:f5:fb:80:27:a0:21:fa:
5f:4e:28:8a:e5:7d:30:0d:87:8c:7c:2a:75:3f:56:65:3d:89:
22:3e:4f:95:fe:fb:97:5b:0b:71:4d:5a:d6:d1:c7:93:2a:04:
00:0d:dd:cb:ac:4a:6e:1d:f6:46:f9:96:c3:81:da:43:a6:a4:
a5:43:87:6c:24:3e:a0:fe:ed:38:14:81:18:6a:e5:e5:89:89:
07:e5:a9:63:24:6f:f0:0b:b7:5b:0b:47:15:f4:a7:6c:8a:21:
42:11:9d:ed:85:bf:1c:78:fc:e9:90:f5:1e:25:a0:00:10:85:
70:1f:5c:06:16:5d:ee:ab:59:86:04:17:45:17:a1:44:73:37:
1d:58:4a:80:7e:ad:c2:38:1f:69:9a:24:38:4e:b1:16:cc:f9:
af:0f:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:24:09 2026 by rpki-client