This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: tYgW6TopC/d5VarDEF1JIjSE2/tQlebVkUbeJNR/7E4=
Subject key identifier: 9D:FB:D2:0E:1F:D5:01:7B:A2:80:50:BC:92:07:20:BE:A2:36:C6:FE
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 019BF6884A1B01B7C7D87784A52C65E7C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 0996
Signing time: Sun 25 Jan 2026 19:01:25 +0000
Manifest this update: Sun 25 Jan 2026 19:01:25 +0000
Manifest next update: Mon 26 Jan 2026 19:01:25 +0000
Files and hashes: 1: 1M-oRRQHQN7WzAJ9drZIYs_Ib5w.roa (hash: NTj3YD9SP7WkKzIuO7OWJNyQJyk6W1qPJFmHH+wxA0s=)
2: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: AMGVRH8zTGJKCYWszEWrc28RvuMJMJU9vcDbBU0Pk60=)
3: iwD6fP31_W6vGOoxTT3gqLJk_fA.roa (hash: Ome1S1/zjD0FqoPD1PIvZmNPsQ9h6oMkpIMHg8bHlAs=)
4: wSoD-Yyuw9oe0PzcTbDZo2JGCUk.roa (hash: Jy2GHX21npd0zGLUhRjI0tTL90Zy1A+Gk3cU0DE8+Os=)
5: yb0ajEg9z1jtc-eQZB_4deWv04s.roa (hash: JbsHaJRAdxnzkcLyQJbT2pfp0LO9DsZ4+5HMZ4E0Gmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:4a:1b:01:b7:c7:d8:77:84:a5:2c:65:e7:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Jan 25 19:01:25 2026 GMT
Not After : Jan 26 19:01:25 2026 GMT
Subject: CN=9dfbd20e1fd5017ba28050bc920720bea236c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:f1:e0:76:de:ed:53:fd:92:32:de:b7:c9:
ed:c5:7c:81:9d:77:cc:2e:1c:ff:8b:8a:03:0a:96:
d0:b0:cc:17:32:64:3c:f5:20:de:73:10:86:a0:67:
67:a3:48:23:58:21:f4:a5:cc:06:6e:b0:7a:4f:bf:
69:db:d7:70:89:8b:da:b8:73:25:79:74:36:f6:e3:
f2:99:5a:d5:94:80:08:d0:49:44:10:84:4a:a8:c5:
e2:00:57:7f:c7:f8:ff:91:ac:9e:d3:21:70:3f:9e:
19:48:54:33:32:3e:0f:92:a9:c9:92:84:56:50:ca:
2f:80:6c:7e:90:c1:28:05:63:99:5f:90:52:6c:59:
87:05:93:fa:2a:f4:ba:86:4b:9c:92:76:d9:73:36:
a6:de:be:af:3f:a6:d2:29:f9:e8:8b:41:ae:b6:12:
f5:63:e3:47:d9:69:dd:12:35:79:45:9d:41:fd:72:
01:02:3a:0e:6a:2d:20:50:a9:24:6c:74:a2:aa:25:
7d:b7:ae:f0:11:d0:1a:3f:c8:98:e8:62:de:48:d8:
be:d7:44:bf:53:91:a9:36:79:26:0b:52:b2:66:a4:
8f:c7:6e:49:30:1c:66:65:e3:7e:bd:a4:b9:b2:1a:
1d:80:ae:e0:91:26:ca:81:45:23:1f:63:75:8d:3e:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:D2:0E:1F:D5:01:7B:A2:80:50:BC:92:07:20:BE:A2:36:C6:FE
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dc:e3:ab:cc:1f:82:0c:12:58:9e:6b:5b:1a:b1:23:b2:61:
7a:ed:3d:bb:9a:e4:c5:77:5e:61:d5:76:74:77:c4:d6:22:09:
89:3f:a6:f9:8a:e6:b5:83:5e:d3:2b:33:54:ae:fa:b5:dd:64:
75:7c:8b:ec:e0:f1:59:90:7f:e9:c2:2d:5c:25:e2:3c:a5:d6:
26:db:7e:80:5c:24:a2:0b:64:f8:da:b1:c5:87:e1:d3:d6:01:
df:97:8a:b6:65:10:d1:cd:73:69:c2:8b:c0:13:86:e6:24:06:
2e:9e:b4:c3:e5:a2:de:01:f1:59:eb:d4:9c:e4:9c:f2:31:09:
03:f3:1d:58:0d:51:8b:45:01:0d:06:d2:df:45:19:38:24:dd:
61:b6:a3:2d:69:76:80:bb:b8:f0:74:45:26:a1:56:4b:f2:3a:
0e:80:54:27:80:6f:d6:fa:3c:ac:6c:ad:3e:a8:df:ab:60:6f:
9b:e8:3c:df:19:0e:dd:1d:0e:a4:bf:c6:bb:10:3f:e5:9e:34:
bc:a1:30:36:96:e2:c4:71:f5:81:e4:5e:e9:53:44:26:44:d7:
81:1d:50:b6:4e:68:dd:5c:41:c5:2a:9f:f9:24:5a:9f:13:94:
d7:df:87:07:d6:3c:cc:af:b1:1b:56:3f:d4:b1:ca:81:4a:b2:
7b:e2:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:34 2026 by rpki-client