This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: U8F42pBuJbsdAPUga0VoYV4f4McmOVPT81sFRYNIFNk=
Subject key identifier: CA:94:11:9C:4F:7C:48:0D:B7:86:A5:74:30:31:21:EF:9C:DD:5F:BE
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 019BF3867B3BFDBAF2DCAB28EA013E763EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 1310
Signing time: Sun 25 Jan 2026 05:00:35 +0000
Manifest this update: Sun 25 Jan 2026 05:00:35 +0000
Manifest next update: Mon 26 Jan 2026 05:00:35 +0000
Files and hashes: 1: 0sWjJb905jqzQqAPMLxDrrjWBMk.roa (hash: Zma9KLmjg5EV1eKmRL4soE5jPO+CVQlU/IWoQZY27PQ=)
2: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: sFRd+1ab/7T6E0HkkVRfoJufCyNijZx4cjtxxmqQWTs=)
3: V2xIm0MXuFbznin5m4AbMt91R94.roa (hash: MPiaxxk7o8f5I+HVf8eWEZiYR8UOsfetA4mv9WmhsH8=)
4: bWmOOPKyQMv70URwqTZU8sllHjY.roa (hash: yQ8N3UwrqjLlEaxQHxKpVivx2+Lei1qK8l2tgkVbZiM=)
5: jr2Bs93kCy1qM5dGaxCmTxVRCPs.roa (hash: JQrsYENJWrVuw6dKCnfSnh8ynO6digQQI/K1CgLtuIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:86:7b:3b:fd:ba:f2:dc:ab:28:ea:01:3e:76:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Jan 25 05:00:35 2026 GMT
Not After : Jan 26 05:00:35 2026 GMT
Subject: CN=ca94119c4f7c480db786a574303121ef9cdd5fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:be:5d:6c:e5:1a:d3:e7:19:b6:df:0a:3e:
de:70:83:d7:bc:e5:fb:d9:16:7b:9a:73:ad:88:8c:
93:5b:50:aa:6f:bc:5e:11:89:93:56:71:35:9c:2d:
68:7c:90:db:d3:b6:88:e5:6c:8d:ed:9a:81:41:e7:
45:03:ea:1f:f8:a0:bc:b2:26:93:34:14:a8:c8:a5:
4d:b8:ed:f7:f9:45:01:a6:a9:44:d7:9b:94:9d:95:
22:63:61:38:7e:6c:f8:7b:4f:15:5b:80:7f:b9:52:
53:f8:cc:2c:eb:0b:09:86:6e:bf:5d:8a:26:23:b8:
f8:c9:f9:96:fa:3f:e5:cd:66:3f:f5:33:b9:73:fd:
c4:47:b6:26:f0:9d:53:d3:4f:0d:8e:e4:d2:47:c9:
1b:94:b5:f8:d5:3e:33:c9:ea:75:3f:e5:b1:4c:5f:
a6:34:f9:92:72:2c:dd:5e:5c:c2:bd:7f:3a:af:3f:
ed:93:66:7b:b0:71:a4:35:29:10:a2:e5:dd:47:3e:
f7:88:23:43:12:2a:1e:be:5d:65:91:a2:2e:5c:4c:
39:b3:cc:fc:64:75:33:c3:a1:59:61:78:d4:23:6d:
7f:a7:52:30:bd:39:c0:86:bd:73:83:2e:71:7d:23:
13:56:a6:74:ee:bc:38:1a:9c:db:dd:c6:59:74:33:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:11:9C:4F:7C:48:0D:B7:86:A5:74:30:31:21:EF:9C:DD:5F:BE
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:33:94:b0:d4:be:7c:79:2e:4c:85:84:21:a6:a8:51:e4:
30:7e:40:0d:39:9e:1b:4a:3e:b8:9a:43:c6:d6:28:38:7d:df:
0f:ae:07:2e:1b:db:aa:65:7c:75:21:fd:7c:ab:6d:97:4b:38:
f1:62:3a:35:25:90:1f:e0:ed:e9:56:05:84:b0:bd:d2:6c:d8:
a3:ce:c6:d7:2c:fa:42:24:ec:c6:a4:df:94:11:65:d1:60:19:
dd:53:7e:15:55:f7:1a:a5:92:67:b7:73:08:79:eb:7a:62:55:
c6:db:92:c9:18:4d:a3:f8:db:6d:1c:20:a8:74:24:8b:f3:de:
10:99:c9:64:f3:25:de:0d:55:40:b0:24:99:f5:56:07:a6:67:
06:0c:7c:35:db:16:cb:22:94:0c:bc:dd:21:ee:26:4e:80:e9:
92:5b:a9:30:65:02:19:fd:93:c5:74:47:f8:57:da:02:de:de:
b0:b7:58:61:3a:9b:84:af:8a:b6:89:c6:50:1f:71:70:8e:3d:
40:f6:78:7e:d0:66:98:b5:a6:99:42:26:7e:f7:a2:66:d6:aa:
e6:e3:1a:62:ef:6b:8b:6e:8f:cc:83:c9:46:d4:be:30:41:e8:
c9:2d:c6:b0:0f:f2:84:0a:e2:ff:eb:94:cd:e6:aa:25:87:57:
7d:12:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:55 2026 by rpki-client