This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: GqOXD/FMiirdtE0aAbQeIuO3w4xbaPbyXGy6mlc1pf8=
Subject key identifier: 95:D1:E8:6E:0A:D8:AB:D8:ED:0E:8C:1D:E9:43:44:40:30:05:52:2C
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019BF3F5A135AF56C7732F8698DF1708A9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 17E6
Signing time: Sun 25 Jan 2026 07:01:59 +0000
Manifest this update: Sun 25 Jan 2026 07:01:59 +0000
Manifest next update: Mon 26 Jan 2026 07:01:59 +0000
Files and hashes: 1: 33AkLs4T5_ew6mnnyWq5Pd5URH0.roa (hash: D7jZ0XkJNtIAmG30h9W8QSsDeq/g0BH6iSc+/oPyUco=)
2: HnCge9v0VMFv4p4n7gbHmPrHGJY.roa (hash: d62k4x4IFTUWXOO9eicQRIOUN/u5FXiup6Gnw1Q4kpc=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 5oxig8nZV+qgud+Z5Co0Jlf18sstqVliplIWMK9yUZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f5:a1:35:af:56:c7:73:2f:86:98:df:17:08:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jan 25 07:01:59 2026 GMT
Not After : Jan 26 07:01:59 2026 GMT
Subject: CN=95d1e86e0ad8abd8ed0e8c1de94344403005522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:16:31:e5:1b:35:14:81:e2:e7:d6:ca:c6:
83:51:3f:78:cb:33:96:3c:dc:c7:48:ed:37:c3:80:
5f:21:a2:b8:63:01:c9:9f:d9:2e:ba:70:19:36:ef:
bf:92:67:d0:0c:76:3f:7f:ce:be:ed:4e:eb:43:f3:
0a:72:ff:96:2e:6d:c9:db:1e:4e:79:b0:47:1e:6d:
54:8c:35:f3:ec:4c:57:ba:07:d8:ee:ae:9a:be:e3:
85:e3:e3:ac:5e:e0:ce:4b:06:b2:9e:51:21:6e:46:
02:5d:94:93:ab:cb:e3:0f:81:3a:f8:0f:38:cb:44:
b2:8d:ca:bf:67:93:68:fd:8d:ad:b3:b9:20:54:b9:
23:d7:44:8d:43:c6:25:a9:cb:11:b8:26:66:ba:15:
f6:d8:e4:17:e5:7d:7d:71:07:81:85:41:e7:6e:e4:
90:37:3f:c4:b9:82:ff:fa:70:84:42:ed:13:26:40:
aa:32:de:fc:12:de:00:70:7d:ce:f6:ef:ae:51:d4:
82:0b:1b:c0:d5:20:9e:f8:0f:78:dd:2b:8f:99:28:
dd:77:5d:3b:f8:3a:e5:6f:ec:32:40:84:a6:bd:ce:
36:d7:06:43:85:0e:ea:53:dc:fa:88:80:77:2e:13:
01:e2:68:45:70:d0:29:44:7b:8a:fa:d2:c0:df:e5:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:E8:6E:0A:D8:AB:D8:ED:0E:8C:1D:E9:43:44:40:30:05:52:2C
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:7c:34:66:cd:13:de:d5:c6:d0:46:9a:df:2e:65:bf:78:
97:30:05:37:89:1c:3c:a4:d0:d1:fc:23:41:81:1b:2e:75:06:
bb:08:e6:09:91:dc:de:c7:4d:9e:59:a7:8b:65:41:12:86:fb:
e5:c7:bc:86:2f:1e:ee:ef:b9:db:a1:c7:fb:3d:0c:9e:07:ac:
53:35:d2:e4:f6:5a:92:5c:98:34:c1:8a:89:99:cd:10:c9:a3:
96:2d:a7:17:f7:8a:cd:4f:5c:6c:79:d5:ee:03:cd:91:47:6a:
ea:ad:9e:9e:df:70:c4:aa:6c:f9:29:d9:50:fe:f9:c0:ce:0b:
65:8c:a0:51:03:5e:7b:e8:5d:4c:01:6f:5e:39:3a:fd:05:29:
96:cc:34:29:22:dc:c4:ac:26:7b:7c:e2:22:c1:c6:fc:bb:73:
48:e0:df:71:0c:d1:ef:e3:d4:77:36:7a:7f:b9:62:09:82:10:
97:f5:24:cd:4a:3a:a0:0d:6f:b2:ac:0d:c3:db:b4:ad:50:62:
e0:77:53:a7:d6:b9:0a:a9:49:ab:f5:df:95:4f:e4:32:7a:f0:
ba:d0:64:ef:a9:69:6f:6b:43:cb:cb:e8:65:a7:4c:8e:84:22:
4f:51:83:5d:fb:4d:bd:4b:db:40:fe:93:e4:ba:c2:2f:4f:ee:
78:7f:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:38 2026 by rpki-client