This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier: +bv3Dvcr9f54XLSFYBuQ01NwDS+PdIfLpg4yUB1D4ow=
Subject key identifier: 9F:CF:D5:55:CE:31:89:77:AE:72:B7:34:B1:1D:34:81:23:F7:CD:E3
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 019BF2AAC18C9F27183E96032668CF709528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number: 0C69
Signing time: Sun 25 Jan 2026 01:00:35 +0000
Manifest this update: Sun 25 Jan 2026 01:00:35 +0000
Manifest next update: Mon 26 Jan 2026 01:00:35 +0000
Files and hashes: 1: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (hash: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4=)
2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: 5mTmHVGZOwxa98mO5nh8CK271ic5CXlslH/FudSHmM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:aa:c1:8c:9f:27:18:3e:96:03:26:68:cf:70:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: Jan 25 01:00:35 2026 GMT
Not After : Jan 26 01:00:35 2026 GMT
Subject: CN=9fcfd555ce318977ae72b734b11d348123f7cde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:c9:80:a5:df:57:03:be:56:0e:c0:3e:70:
24:14:96:e2:46:ed:8d:02:09:bc:41:45:f1:e1:5d:
53:06:a6:f8:ef:be:a4:a6:f9:aa:20:d5:90:93:1b:
83:bf:ba:c5:f6:1b:f5:ed:6b:40:cd:19:d6:bd:ab:
31:fd:75:11:54:fd:ec:c8:cb:ae:7d:3b:33:e5:a9:
48:38:85:2e:a7:30:17:69:a4:bd:ab:2b:b0:be:b9:
f9:3d:7f:8e:1b:e9:fc:31:43:95:e2:c3:56:a5:89:
e6:53:21:db:2c:e1:10:b3:d4:a0:8e:f2:97:3c:84:
1c:38:44:e1:b1:8b:b5:11:09:40:c1:84:10:66:d9:
c1:82:52:f4:ef:01:25:cc:14:20:4c:ef:4f:88:4a:
cb:8f:5b:8f:7c:ff:82:25:3c:61:80:2c:e5:a4:8e:
9e:aa:e6:9b:75:1d:19:6b:43:63:fd:64:91:73:9a:
10:58:b3:e7:22:2e:6e:05:8a:cd:01:93:2e:f5:a4:
b1:7a:52:aa:01:a7:0a:3e:85:44:9b:75:bf:ac:fb:
51:b2:50:a8:25:e0:ee:4d:3d:98:2b:ba:45:92:73:
72:98:d6:97:3d:cb:0b:18:9e:f5:e8:38:16:d7:c6:
0b:35:09:72:16:b0:ea:23:73:22:ca:2f:ba:c5:59:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:D5:55:CE:31:89:77:AE:72:B7:34:B1:1D:34:81:23:F7:CD:E3
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ab:a6:07:84:f4:e9:4d:4b:7f:da:fa:ff:11:0a:12:d1:46:
d9:03:87:23:d9:db:78:c4:6a:91:1f:3f:8b:22:e6:ab:75:d5:
09:4a:9f:be:95:d0:66:5b:6f:d5:ae:43:ca:66:2d:ff:89:b9:
ed:7c:61:bb:20:a5:b6:64:b5:96:93:f5:e9:b6:4a:aa:8c:cd:
8a:f2:66:f6:35:82:9f:89:09:fb:2c:67:c0:e6:4e:bf:4c:22:
77:c2:3c:a2:09:ff:05:46:a9:92:18:e2:9b:c2:0d:c8:54:b2:
30:be:c2:7a:6d:07:8a:21:f4:d7:1b:d0:e4:d5:9f:81:60:fd:
1b:65:48:bf:fe:f8:cb:29:91:ce:df:9f:4f:6e:53:88:6b:83:
5b:4f:dc:9b:cd:19:32:6f:b0:be:8d:4c:9e:c3:8b:2b:6b:3f:
32:fd:10:c1:45:d8:a8:5b:41:be:85:4a:e2:1b:5e:18:b8:b2:
65:dc:dc:80:0f:d3:3a:20:d4:51:62:9a:73:cf:5d:7a:03:04:
b8:5d:54:bc:1c:d2:8d:43:08:74:68:31:19:7e:3d:74:8b:2a:
fb:40:62:5c:5a:9c:b5:12:a2:9d:88:11:ea:0f:08:11:30:d3:
4a:0c:59:5f:21:41:ce:26:62:b5:d5:9b:78:39:ec:d1:13:1c:
83:39:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:45 2026 by rpki-client