This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: TzvsaBgMVHdqcUBeMVcQIWUF5DSZcaVo27tlohncT9A=
Subject key identifier: C8:DD:B0:4D:DE:54:8C:42:F8:E4:4D:69:B3:F4:D2:8E:75:F7:15:62
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019BF3BD87E82BDCCD75AA8469E6030D7D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 13D0
Signing time: Sun 25 Jan 2026 06:00:43 +0000
Manifest this update: Sun 25 Jan 2026 06:00:43 +0000
Manifest next update: Mon 26 Jan 2026 06:00:43 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: yStxrFok8MbB+HEnejFBKQO16yTMnsan7WZYor7JKXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:87:e8:2b:dc:cd:75:aa:84:69:e6:03:0d:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 25 06:00:43 2026 GMT
Not After : Jan 26 06:00:43 2026 GMT
Subject: CN=c8ddb04dde548c42f8e44d69b3f4d28e75f71562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:8c:27:74:52:db:0b:f7:9f:bf:e3:31:2a:
42:c2:4c:d6:35:00:71:17:e2:17:01:fe:72:61:68:
19:fc:1b:77:a3:61:11:db:26:de:3a:cd:6a:4d:75:
b9:17:70:9b:a0:2b:1d:a0:45:57:29:95:52:e0:f6:
0e:a2:e2:55:03:9d:d9:c2:e2:b9:a6:ec:55:e4:06:
b2:b8:58:1c:53:73:d0:e9:87:2a:26:be:fe:0d:7d:
f2:1b:38:68:02:e5:72:c4:da:1c:4d:19:2f:6c:3d:
d3:7e:4c:d5:25:cf:54:a1:8f:56:26:3f:34:dd:db:
d9:4b:eb:75:0b:a2:7c:15:ed:02:ea:f5:90:39:2c:
0e:8b:5b:c3:08:28:13:fe:32:86:23:07:fa:5d:6a:
8c:04:e8:8e:a4:1f:1c:3b:db:cb:cf:0b:9a:f5:09:
de:84:1f:ae:a8:17:c3:2e:7c:be:4a:7a:31:7d:93:
f4:76:7c:21:55:29:3d:55:fa:84:b7:0b:31:91:1c:
fa:e3:2d:95:ee:73:45:04:87:5f:d8:cd:7b:35:75:
15:93:d5:3b:40:f4:a8:ba:83:7a:d0:32:cb:6a:d8:
75:1e:57:2c:36:d2:80:50:87:2f:7d:dc:8e:c2:5e:
b4:37:6b:a9:5e:82:79:30:19:39:b1:a4:00:4e:70:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DD:B0:4D:DE:54:8C:42:F8:E4:4D:69:B3:F4:D2:8E:75:F7:15:62
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9f:51:34:6a:00:02:50:fd:a1:48:f2:f8:da:39:05:c4:55:
f5:89:01:de:be:ac:b8:d5:b7:3f:71:5a:ae:32:4c:2d:c0:43:
82:b4:0b:2f:43:ff:b3:10:d0:e0:48:e7:57:15:49:e2:95:94:
4a:a5:36:c8:c1:61:e1:aa:55:7f:46:f9:64:d0:11:fa:6e:90:
51:82:9b:63:b2:b5:07:36:9d:b5:15:e3:da:26:ab:99:5f:d6:
0b:8d:e9:b6:30:f9:51:02:8c:bb:5a:bb:92:3b:8b:34:cb:70:
3e:2f:2e:60:60:c3:81:a7:44:11:50:86:8c:a1:fc:b9:f3:25:
fd:90:36:74:aa:a8:8b:80:db:cd:06:bc:34:bf:c2:35:fa:c6:
d7:f7:71:31:8e:33:cc:85:b6:bd:3e:95:c2:be:cf:1a:d0:c0:
92:cd:31:e8:f5:30:2e:5e:3f:cc:23:28:6a:77:c7:76:03:1c:
85:f6:a1:69:d9:b2:0b:5b:b1:e2:54:6b:c3:e0:15:f1:d0:e2:
81:d5:27:ab:c0:db:f4:0f:41:aa:40:3b:03:ed:69:19:71:b4:
a5:13:07:2c:8b:cf:7b:c7:60:48:e9:61:42:1b:05:ff:ff:cf:
7e:a1:bd:6e:b7:fe:ed:20:00:17:b6:09:cc:c7:ea:8b:15:67:
39:24:cc:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzvYfoK9zNdaqEaeYDDX0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjYwMTI1MDYwMDQzWhcNMjYwMTI2MDYwMDQzWjAzMTEwLwYDVQQD
EyhjOGRkYjA0ZGRlNTQ4YzQyZjhlNDRkNjliM2Y0ZDI4ZTc1ZjcxNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtACMJ3RS2wv3n7/jMSpCwkzWNQBx
F+IXAf5yYWgZ/Bt3o2ER2ybeOs1qTXW5F3CboCsdoEVXKZVS4PYOouJVA53ZwuK5
puxV5AayuFgcU3PQ6YcqJr7+DX3yGzhoAuVyxNocTRkvbD3TfkzVJc9UoY9WJj80
3dvZS+t1C6J8Fe0C6vWQOSwOi1vDCCgT/jKGIwf6XWqMBOiOpB8cO9vLzwua9Qne
hB+uqBfDLny+SnoxfZP0dnwhVSk9VfqEtwsxkRz64y2V7nNFBIdf2M17NXUVk9U7
QPSouoN60DLLath1HlcsNtKAUIcvfdyOwl60N2upXoJ5MBk5saQATnBGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjdsE3eVIxC+ORNabP00o519xViMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ9RNGoA
AlD9oUjy+No5BcRV9YkB3r6suNW3P3FarjJMLcBDgrQLL0P/sxDQ4EjnVxVJ4pWU
SqU2yMFh4apVf0b5ZNAR+m6QUYKbY7K1BzadtRXj2iarmV/WC43ptjD5UQKMu1q7
kjuLNMtwPi8uYGDDgadEEVCGjKH8ufMl/ZA2dKqoi4DbzQa8NL/CNfrG1/dxMY4z
zIW2vT6Vwr7PGtDAks0x6PUwLl4/zCMoanfHdgMchfahadmyC1ux4lRrw+AV8dDi
gdUnq8Db9A9BqkA7A+1pGXG0pRMHLIvPe8dgSOlhQhsF///PfqG9brf+7SAAF7YJ
zMfqixVnOSTM5w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:54 2026 by rpki-client