This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json)
Hash identifier: olXh+EnwNGUCeCtvV9BAfsBdUGRITh0cFpuLK6tSvm0=
Subject key identifier: CB:0C:A3:96:45:4F:9E:7F:93:01:2A:03:C8:92:6C:7A:23:A7:4F:62
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019BF3502FA8FE3241726B15AEEAC01DC2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
Manifest number: 17F3
Signing time: Sun 25 Jan 2026 04:01:17 +0000
Manifest this update: Sun 25 Jan 2026 04:01:17 +0000
Manifest next update: Mon 26 Jan 2026 04:01:17 +0000
Files and hashes: 1: McQ1AOjlDwgZAqlNis7OMo30suU.roa (hash: kGOcDaGd4zml/SDFoCa1hnu+S2pYCxdCLjhcJL3obkE=)
2: QpTFRpA9uABw6SMgaV6IlnX_vis.roa (hash: TOAItdlVxhXYv/YnF+MA3X2Gct1/6NhAFmObWetq83A=)
3: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: N9yRa7uuRuY0y6paVXA/XuonwStZhiczfbLv3fG47cE=)
4: SPId_SWHbv84MaBpzxcBFitrFiA.roa (hash: fkjaLtVx/IVOE485FOawltfAwHKBTGzzIXUgCRCBDeg=)
5: cG9BC3mPASM_CkvRXof0sXUINJw.roa (hash: sgg0z5UHn6yQVPp/qpMZihkOU41GW4END6RL7Ox6z0o=)
6: f29PnhieHj8gf7nMidK2SiSNGy0.roa (hash: viJ1zKo2vqeN02E+94BwKGHJ2kj6imNzNckR8era648=)
7: j08EFOK752NdNFSst6YNuuXIs94.roa (hash: 0wWKhhQHCzxymtCQpY/jgYYzRMgggbOAbZE2X/jvESk=)
8: j_4e-cHrRW8pa1vPdno6QNA6COA.roa (hash: 2gJBd6kFIIU+NIm5lLvJg7KFt9BNIEGUsPjy6D65viY=)
9: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (hash: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0=)
10: v5kyyRAO3nRwLZjdmYWqF2PE6Xw.roa (hash: cz8wU8VfVi/UOhj8fUTgjFjn3D6rtrlh0ujcQlLWPWA=)
11: verD4dllUKtJY4jERuVqMHIGsA8.roa (hash: 0dS1K2MVZgnLEuMNPYaIkaEVG/87H3eBx2PQTjkcFYU=)
12: wMyT5ecrU-MyY2aIqpaR2gM9BBE.roa (hash: judBddHifVmvZE7sb5oOlv25s69wDyj3YDkdXm4InqI=)
13: yZA0HBaI7ewJVMFH6xGJBGIEm-0.roa (hash: v+7QGrfogBuQHCRs9HfcjlbYvYarXV2nq9CdEFLldrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:2f:a8:fe:32:41:72:6b:15:ae:ea:c0:1d:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 25 04:01:17 2026 GMT
Not After : Jan 26 04:01:17 2026 GMT
Subject: CN=cb0ca396454f9e7f93012a03c8926c7a23a74f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:97:e6:97:04:3a:86:42:94:5b:2e:a3:ec:
7e:14:65:1e:53:fb:55:2f:85:4e:02:1e:ae:f7:83:
bd:f4:4b:3c:82:8a:2d:28:d3:0d:f9:8b:47:2a:a3:
6d:14:82:fd:22:a0:0f:ed:a4:82:5c:d6:e3:00:cc:
a6:64:a7:88:39:4c:f8:76:5c:5e:a8:10:21:f6:5c:
6d:cb:33:20:c3:ca:79:8a:e0:a8:7a:b3:8a:30:f3:
cb:4c:0d:d9:e9:62:ee:20:0c:e4:51:2c:45:44:0c:
7c:66:35:50:53:bf:19:6c:e5:89:f1:d8:02:3f:11:
f5:f4:63:a7:df:64:a6:38:44:7a:7e:d7:c0:b1:a9:
4e:8c:b4:a1:c4:90:12:78:17:67:93:1e:14:f9:00:
af:6a:5f:8d:32:a4:6f:1e:a2:70:0c:a6:a3:eb:a1:
45:b2:63:8d:4e:05:42:ca:12:d3:fc:11:ab:ed:3d:
9a:4b:c0:a2:ff:c1:67:32:5a:d7:c8:6a:98:19:f1:
5d:9c:01:41:8f:1a:6d:97:22:fb:86:17:19:c0:dd:
e5:e0:cf:3b:0b:78:4a:dc:b6:94:93:ae:bd:37:e7:
8d:0f:b7:0f:7a:9a:d2:e8:fb:a2:03:26:15:7b:b6:
56:9c:65:24:c9:e2:59:c9:e9:30:b1:c8:a8:27:98:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0C:A3:96:45:4F:9E:7F:93:01:2A:03:C8:92:6C:7A:23:A7:4F:62
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:f5:76:4f:39:69:98:32:48:bb:d9:e6:e2:88:79:71:08:
26:5d:45:a1:dd:41:bf:48:5e:54:65:ff:88:c3:7d:b7:03:e5:
44:2f:61:94:e6:c9:45:ab:d8:dc:38:a1:08:63:d3:ec:04:62:
89:65:4e:8a:43:f5:df:dc:19:11:26:d3:02:32:10:c2:02:8a:
da:71:4b:57:c0:de:9e:bf:06:c9:28:1c:2f:88:17:72:01:fe:
19:cf:2c:d5:52:cf:3d:2f:25:de:2f:b7:b3:b9:15:5b:39:20:
9f:46:f1:ad:4d:33:61:e9:24:da:ad:89:bc:f3:59:f1:ab:57:
eb:ce:fd:12:d8:8c:db:75:0c:6a:6a:e9:f5:0a:d0:88:2e:94:
93:07:5a:80:08:25:e6:68:ab:1b:0e:2f:6d:fb:2f:fe:77:f0:
76:c6:09:a9:f9:06:e9:bb:3a:9e:88:98:34:e9:22:2b:c2:14:
d8:c2:bd:7d:39:18:10:e8:78:05:5d:dc:10:23:5d:6d:e2:f8:
08:8f:18:3d:a7:a9:b0:8e:96:22:26:99:9d:43:ca:03:98:bf:
23:46:a9:90:59:0d:68:f9:c9:77:7c:4c:71:66:78:cf:37:2a:
84:69:80:9d:00:3d:43:3c:89:76:20:ca:61:dc:4a:b6:7b:b7:
b1:6f:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:54 2026 by rpki-client