This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: 82oNnBafNFXNb/pqHHDrLHR2hsSJgzMxstpiXXIt+jY=
Subject key identifier: 4E:87:21:D9:FB:6C:C5:0B:4A:1B:34:23:27:11:D4:C8:CD:E7:46:3E
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 019BF2E2335A659E0073D6AB8B849AA9C258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 075B
Signing time: Sun 25 Jan 2026 02:01:08 +0000
Manifest this update: Sun 25 Jan 2026 02:01:08 +0000
Manifest next update: Mon 26 Jan 2026 02:01:08 +0000
Files and hashes: 1: PQdW3fTMZ13TWSUvk8S2hfNtwRQ.roa (hash: XMlY7t5WFdS3QblU6+ZYwPDb6Jh7eDJdJacxYqHmJQo=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: Qr7cmP7p3YDOgHydlNYtIJCYrjz+JS0sLHFDLIcaj5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e2:33:5a:65:9e:00:73:d6:ab:8b:84:9a:a9:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Jan 25 02:01:08 2026 GMT
Not After : Jan 26 02:01:08 2026 GMT
Subject: CN=4e8721d9fb6cc50b4a1b34232711d4c8cde7463e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e9:f2:37:ed:0c:8c:f0:b7:39:d4:68:ec:35:
3d:43:26:3a:59:c1:28:9c:2a:02:2e:55:a2:db:34:
5f:94:aa:02:7a:d9:09:20:a5:04:e4:9b:37:f6:d2:
d7:71:4d:27:50:0b:a9:6b:f3:94:6d:a8:c2:4e:71:
eb:39:82:95:f8:f5:e6:a2:47:08:c3:45:b4:b7:77:
49:ef:c8:e7:f3:29:ef:40:14:90:32:5c:21:65:95:
d5:2c:b9:13:e6:b2:c2:47:e1:df:dc:78:9a:c3:10:
1b:d3:5f:02:a7:0c:62:de:f3:2a:7a:e6:c3:40:2b:
95:18:a3:9c:99:48:2d:a9:b0:1b:10:fe:fe:aa:9f:
c8:5b:c7:2a:33:a5:b0:eb:76:74:ed:f7:93:06:9a:
62:ba:f3:8f:cd:80:58:ed:c1:e0:88:89:35:7e:fc:
bf:b7:f7:2c:8a:fb:fe:11:1f:83:4b:77:10:4c:e1:
83:c4:4a:ec:08:86:4a:90:60:e5:55:18:83:66:56:
98:02:9f:0b:04:4e:30:63:0e:27:87:dc:4c:56:a2:
2e:7d:59:1e:3f:fb:97:a9:e8:ce:da:e3:9e:17:56:
f5:ac:bd:f7:0b:28:c3:4a:2b:85:ec:a6:9a:cf:cb:
89:ba:81:db:c7:78:23:ff:46:60:28:31:e7:45:51:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:21:D9:FB:6C:C5:0B:4A:1B:34:23:27:11:D4:C8:CD:E7:46:3E
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f9:2c:e5:28:0b:21:bd:9c:26:e4:49:ee:5e:cf:78:7c:00:
72:b8:91:67:7b:04:f3:06:62:fa:cd:63:19:cf:81:42:ab:ad:
5f:ba:a0:a0:e3:e6:5b:3e:4b:b8:53:cc:39:90:4a:e2:7f:cb:
e2:d9:4d:69:8c:84:0b:d5:2b:d9:ef:30:57:25:a4:23:67:a2:
e0:c8:e4:c6:8f:bb:76:ba:42:4e:db:2e:c7:f1:7e:80:a1:d8:
53:88:00:30:47:e4:2c:ee:07:1a:ee:2d:38:4c:d6:ac:51:53:
31:2e:40:cb:72:62:36:7c:92:f1:37:a0:24:b1:73:b6:3f:c2:
59:53:63:aa:4c:8e:54:b1:32:93:a1:07:0c:52:df:e9:26:d4:
cd:70:13:94:cb:46:66:cb:ca:6c:9d:71:b5:fa:15:11:3a:b3:
78:24:13:a9:e0:68:de:96:17:c9:b4:9c:1f:7d:31:f5:93:52:
79:4e:78:d1:c2:78:4b:6d:7a:6e:01:62:f5:89:9f:44:9c:9b:
69:29:df:4c:da:1c:f3:da:f9:a0:ca:93:c9:fe:45:af:58:61:
6c:dc:5c:04:65:31:1a:01:28:2f:0f:e8:1b:bb:16:78:e3:78:
20:a5:d9:c5:5e:22:3d:40:3f:4a:21:c5:06:cb:ac:35:ce:43:
c9:bf:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:35 2026 by rpki-client