This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File: qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier: G4pWdE01Lmn1rWjnsF6NgvIO6iHcbfa37JWUyDefmB0=
Subject key identifier: 85:72:A4:6C:00:42:C8:F6:C7:76:3E:49:55:0C:30:A6:F3:26:2A:CA
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer: /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial: 019BF53E8363E03190E3D5BA20B8D2E38CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number: 17F5
Signing time: Sun 25 Jan 2026 13:01:13 +0000
Manifest this update: Sun 25 Jan 2026 13:01:13 +0000
Manifest next update: Mon 26 Jan 2026 13:01:13 +0000
Files and hashes: 1: 1NvxVfbgzX3B2umfhkugjM1Ndt8.roa (hash: eJgXwibre0wnDjBDy8eibyL2XVfQ9w6WUfIwOfEC1/g=)
2: 24lvsSxh7MUVQcE3eg7_Djq-Tso.asa (hash: Hjss/TGOcmwG6GtuhM5X9Ph0gtLBzHScnu3DTiqPa9c=)
3: 36K8uvuxLLbczf1YXC_ASJxPbng.asa (hash: 870+pBNRKYWmY6ePML/QQK6e/MrQo9VBr7qVr3BXzBw=)
4: FWYopd6TlSta9pASbYNvraqyvNM.asa (hash: I8ABTTre9KM0IJfOp7PT39kOwRj4TE5ZVbXeJW/G+gk=)
5: WejJJbiVIVBvqcAo9H2Ft-eq30w.roa (hash: JdWw00hlc+ApcItp8TIS28rgQX0UUCuS32HYbDrb1Yk=)
6: jaSX7XYiEHoA7tLRMZ4FmzvpH8Q.roa (hash: M7LvfJJsOKZWEYP7z3dZkFRXXMBuWl1FzF5qPTUm5UU=)
7: opuCCMcW2_WxPhJsfHpsveIPJOk.roa (hash: Ln2QBI28PVqcs7LQQVU47oAWi74sYxDyz9uXHVwYm+Q=)
8: qO7fP4JYDSwOkwNU79mWRjM64pA.roa (hash: BxE3oHxaS3QLL7K/vl+6ZKbsDqNKFO/W+KaSLMWTYFI=)
9: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: nNHky5QyxJcrPO6uPUulyU9eV1HNOLd3+ODrrS6zryk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:83:63:e0:31:90:e3:d5:ba:20:b8:d2:e3:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Validity
Not Before: Jan 25 13:01:13 2026 GMT
Not After : Jan 26 13:01:13 2026 GMT
Subject: CN=8572a46c0042c8f6c7763e49550c30a6f3262aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1e:78:e5:81:ef:c6:5e:c6:3c:3d:14:25:90:
4b:ac:da:86:92:75:fb:3a:c2:71:00:43:46:5c:ef:
67:04:76:c6:0e:60:1a:10:72:a8:0f:63:91:46:7c:
12:00:b9:44:20:8d:d9:2e:ff:39:77:eb:09:cf:ad:
7c:f5:41:e3:7c:da:26:33:fc:5d:c2:59:a0:c8:e8:
5b:ac:e7:47:0f:7c:6c:79:e8:6b:96:84:26:5f:f7:
c5:f1:ac:b9:1b:64:28:c6:6a:b3:50:f5:fd:2d:b4:
c0:87:87:df:2d:14:da:5a:43:15:fa:dc:64:d3:f0:
95:66:87:ab:29:17:e5:41:4e:e6:c3:a3:e3:4d:be:
a4:ae:f9:cc:b0:c8:68:21:e1:e0:27:b2:57:4d:44:
a5:16:4c:54:17:e5:bd:5c:fc:fe:4e:64:2a:f1:3d:
8f:42:67:88:c7:7a:bc:8d:4e:fb:2b:62:74:41:a0:
d2:5a:e0:f5:d0:87:d2:f2:c5:99:ad:2c:10:07:60:
9e:b8:33:4b:e4:2b:14:f9:3d:28:99:59:58:23:76:
25:01:da:6d:59:44:49:8e:db:81:6c:64:c4:58:6a:
79:38:8d:b8:e8:df:58:cd:bd:bf:af:78:8d:0c:01:
5d:e7:a4:cc:c8:a9:de:18:8f:73:90:ab:fc:14:4c:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:A4:6C:00:42:C8:F6:C7:76:3E:49:55:0C:30:A6:F3:26:2A:CA
X509v3 Authority Key Identifier:
keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:47:22:96:02:57:a8:02:a6:94:6b:08:fc:78:32:70:59:
6e:e2:40:ec:42:23:5e:76:1e:ee:34:37:94:16:a7:56:0d:c8:
cf:23:8f:b1:ee:31:26:88:47:55:b8:10:ee:56:25:99:f4:78:
e9:cc:09:d7:cc:ca:f2:20:a0:a6:a1:63:c5:66:cc:94:ea:ff:
ff:de:86:87:f7:3d:ca:59:f9:40:2d:fc:62:44:84:17:89:fb:
0d:2b:a2:00:42:d9:99:16:1c:87:58:2a:69:8a:c0:3e:f2:e2:
a3:ce:3c:c8:d5:d0:d0:f1:6d:94:25:e1:45:d1:01:ee:f5:5a:
22:ed:38:cf:8e:21:23:82:10:ad:64:f5:9a:0e:da:de:be:fb:
01:2d:26:e5:f7:d2:28:2d:16:b8:a9:ed:a7:5e:ec:5e:28:bc:
89:e3:84:c7:bd:29:26:fb:d5:24:a2:b8:8e:ad:59:ab:6d:66:
c6:b9:8d:e4:89:24:66:c2:82:c2:78:83:c3:d2:8b:91:f8:04:
a3:25:28:87:22:be:f1:fc:98:87:92:bd:7b:b1:7b:48:e6:29:
41:0f:af:e9:72:dd:b6:8e:71:9a:e0:50:ef:78:77:17:88:9f:
64:49:24:e8:16:7e:5d:f3:ce:00:3a:e9:19:9c:5c:2d:81:6b:
42:7f:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:30 2026 by rpki-client