This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: 5Z9Q1geu9pVrvPGsDVktbITCW7I4RtaxuH468RZ3rXQ=
Subject key identifier: 31:FF:68:FC:1D:98:68:CE:72:5F:7E:2C:97:B5:A0:04:99:09:62:B6
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019C42EB7210F3188E511805D230E0E9659B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 133E
Signing time: Mon 09 Feb 2026 15:00:52 +0000
Manifest this update: Mon 09 Feb 2026 15:00:52 +0000
Manifest next update: Tue 10 Feb 2026 15:00:52 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 2WaziI7mFA4kqunvLRMDW6NAcho76mouncdgl3u7Asg=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:72:10:f3:18:8e:51:18:05:d2:30:e0:e9:65:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Feb 9 15:00:52 2026 GMT
Not After : Feb 10 15:00:52 2026 GMT
Subject: CN=31ff68fc1d9868ce725f7e2c97b5a004990962b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:09:db:29:e9:15:88:a1:64:2e:0e:77:c8:a7:
6d:cb:f3:91:25:b2:e8:dd:76:99:82:72:03:20:23:
30:31:20:9b:5a:37:f3:3f:27:d9:16:17:10:88:b0:
66:85:34:f4:6b:9c:da:db:46:3e:ad:c4:a4:be:c3:
7a:7e:29:5b:ca:d0:54:74:b2:d4:aa:ca:e3:4f:58:
b5:36:0a:3e:db:c2:8f:8d:9b:68:14:3b:15:9d:58:
7f:f2:54:14:5d:e5:f8:7c:f3:03:31:c5:50:8c:d0:
cb:21:13:83:9e:9d:46:0b:e4:0a:68:63:6d:86:dd:
5d:f3:52:ec:e5:1a:ab:6a:9f:67:92:44:f3:e8:b1:
9b:fb:49:04:b8:a8:93:c4:8b:fb:3f:38:60:8a:46:
56:93:ff:44:b5:29:5c:35:77:f4:c1:65:b8:7c:bd:
ce:2d:41:18:eb:2d:3a:15:88:07:93:e7:8f:8c:65:
10:d5:b2:5a:03:22:31:41:4b:97:04:55:96:8a:2e:
f0:20:01:26:6f:99:d4:e3:fb:5a:93:dd:2e:87:38:
c1:99:6a:04:7e:1e:f1:5e:ae:15:10:4e:b3:1c:da:
82:6f:94:8b:b5:64:a1:eb:41:eb:72:9a:3e:49:73:
99:e3:7c:16:f2:ba:d9:8c:19:11:7d:3f:c8:e8:24:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FF:68:FC:1D:98:68:CE:72:5F:7E:2C:97:B5:A0:04:99:09:62:B6
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c1:c4:41:8b:44:20:71:e9:5b:4f:57:b9:a1:09:b0:02:2d:
32:44:d7:20:1c:c1:16:59:55:3a:a0:33:30:93:02:91:bc:5f:
57:c0:d3:a6:4a:d1:d6:2e:d5:1a:40:0d:0f:61:5e:02:6b:f9:
99:13:84:a8:09:1b:99:0d:4f:c1:e4:69:0f:6b:32:ca:2d:ad:
fb:52:d9:ce:d5:14:6d:38:a8:fc:60:3f:80:72:33:05:a0:67:
e2:6f:f0:49:a5:e8:88:5e:40:16:2b:5f:c0:62:b8:21:1f:48:
ea:5c:94:fb:f9:d7:58:71:bf:e8:c8:2d:01:76:f9:f7:37:ce:
e8:84:3a:7e:86:d1:47:43:6f:7d:2e:87:6c:e5:37:bd:74:0e:
e5:47:80:45:5d:1d:d1:ec:45:46:7a:a9:80:3e:59:7d:70:be:
4a:60:09:63:14:fc:f6:9d:6a:91:67:a3:4f:4e:fc:6a:e9:24:
6b:ce:8c:7c:2a:4c:88:e0:1c:bd:85:57:b0:ec:c9:c2:c2:70:
9e:b5:2f:a6:45:4d:88:2a:a5:e2:7d:6d:65:4a:a2:1a:40:04:
5d:b3:63:43:72:ab:ce:c1:6e:da:91:d9:0f:77:8c:1f:cf:08:
6e:f7:d0:ec:e8:f6:d5:de:db:3c:68:cf:92:e4:ea:10:9c:03:
8e:2d:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:20 2026 by rpki-client