This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: UMF3pvH5L/+HkQ3JwBGTd6jW95wpihGZZwwmPk/WXjE=
Subject key identifier: 4E:CF:48:78:9D:9C:61:63:12:F5:B4:53:43:D1:FF:9C:C3:50:ED:C4
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019BF5ABCA1AF688D9C3AABE39CAE98FA154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 15B8
Signing time: Sun 25 Jan 2026 15:00:34 +0000
Manifest this update: Sun 25 Jan 2026 15:00:34 +0000
Manifest next update: Mon 26 Jan 2026 15:00:34 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: BCHTADo0OEWnd1vvzLqKSbx7Cuj4LGlAkUqngQmOyRk=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ab:ca:1a:f6:88:d9:c3:aa:be:39:ca:e9:8f:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jan 25 15:00:34 2026 GMT
Not After : Jan 26 15:00:34 2026 GMT
Subject: CN=4ecf48789d9c616312f5b45343d1ff9cc350edc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:9a:e9:73:82:4d:ac:6a:4e:6e:67:73:f0:
cd:2f:8e:e7:52:f5:4f:a3:fd:25:d0:64:1b:d1:4a:
a0:e8:24:26:84:66:fc:34:31:ae:61:9b:75:b4:16:
e3:3a:1c:51:83:09:82:40:81:e1:d0:70:43:b3:fb:
ed:be:ab:85:dc:5d:e1:0a:04:5f:aa:b8:6d:28:f2:
d8:04:2c:cc:7b:6e:15:33:42:1b:c3:46:8a:a0:2e:
0e:5a:af:cc:ee:f2:9b:ad:ac:98:f0:7d:cb:67:cc:
70:df:8a:61:ac:dc:c8:69:e6:ff:c4:b8:9c:cd:56:
1d:d1:54:59:40:cd:59:99:a5:f2:d6:de:fe:8c:87:
8d:9d:21:8f:93:c9:fc:3b:2e:af:f1:15:7f:78:39:
11:f5:75:fc:5c:0a:8c:1a:34:e3:ff:1d:67:50:7f:
cc:ed:75:33:64:db:45:f3:7f:5c:7e:d4:83:0e:61:
e7:7a:1a:b3:f8:c3:fd:21:9e:3c:e1:32:b6:91:1b:
9f:38:02:ed:cb:30:47:0a:2c:9a:b6:a7:00:67:54:
02:6c:94:08:b4:a4:25:f3:7a:15:2d:69:b2:97:30:
b8:9a:02:c1:38:7b:13:b8:e3:02:b7:38:fe:b2:9d:
7a:40:c7:e7:30:06:31:e7:0e:9a:da:33:a5:86:10:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:48:78:9D:9C:61:63:12:F5:B4:53:43:D1:FF:9C:C3:50:ED:C4
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:cf:a9:4d:b4:73:94:9c:0a:e7:a9:76:ac:ef:e3:6d:11:
91:d7:24:6e:32:9b:90:ad:64:34:81:84:40:af:f7:c5:35:e6:
fb:62:21:1f:48:1b:8c:0e:49:0c:de:26:41:8b:49:4d:a6:2a:
2a:1c:87:cb:83:91:9f:b7:b0:da:0c:43:0f:56:04:74:62:92:
20:26:35:ae:92:08:31:cc:b6:c7:df:46:af:d7:13:ae:71:8c:
5a:50:23:2f:78:62:d2:d1:ab:67:07:4b:b6:e7:fb:c0:de:93:
da:7d:82:e2:4d:34:ff:62:c3:59:b6:aa:34:09:e6:e0:76:95:
b8:37:ab:d4:34:34:8e:2f:7e:87:37:6e:f4:bc:f6:e0:1b:28:
1d:42:34:5f:6e:22:5c:f0:c1:7d:6e:67:7d:2f:8f:c9:a3:67:
b7:30:d4:af:cd:37:46:cc:bd:33:d8:d2:d7:47:71:72:b9:0f:
7f:1f:80:9b:83:29:8b:da:42:0b:f6:db:11:e9:67:2a:ae:46:
e9:90:1e:32:1a:05:f4:4d:e1:00:2c:27:63:9e:a9:3a:95:bc:
11:46:1c:46:b9:b9:1b:9a:ff:76:6a:e8:40:4e:63:dc:69:fe:
4f:21:9c:4c:15:55:12:d6:f8:7e:cb:3f:ca:21:c6:7d:ad:97:
0a:a9:ff:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1q8oa9ojZw6q+Ocrpj6FUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1
MTI5MzkwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD
Eyg0ZWNmNDg3ODlkOWM2MTYzMTJmNWI0NTM0M2QxZmY5Y2MzNTBlZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdaa6XOCTaxqTm5nc/DNL47nUvVP
o/0l0GQb0Uqg6CQmhGb8NDGuYZt1tBbjOhxRgwmCQIHh0HBDs/vtvquF3F3hCgRf
qrhtKPLYBCzMe24VM0Ibw0aKoC4OWq/M7vKbrayY8H3LZ8xw34phrNzIaeb/xLic
zVYd0VRZQM1ZmaXy1t7+jIeNnSGPk8n8Oy6v8RV/eDkR9XX8XAqMGjTj/x1nUH/M
7XUzZNtF839cftSDDmHnehqz+MP9IZ484TK2kRufOALtyzBHCiyatqcAZ1QCbJQI
tKQl83oVLWmylzC4mgLBOHsTuOMCtzj+sp16QMfnMAYx5w6a2jOlhhCrjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7PSHidnGFjEvW0U0PR/5zDUO3EMB8GA1UdIwQY
MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt
ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx
LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4rPqU20
c5ScCuepdqzv420RkdckbjKbkK1kNIGEQK/3xTXm+2IhH0gbjA5JDN4mQYtJTaYq
KhyHy4ORn7ew2gxDD1YEdGKSICY1rpIIMcy2x99Gr9cTrnGMWlAjL3hi0tGrZwdL
tuf7wN6T2n2C4k00/2LDWbaqNAnm4HaVuDer1DQ0ji9+hzdu9Lz24BsoHUI0X24i
XPDBfW5nfS+PyaNntzDUr803Rsy9M9jS10dxcrkPfx+Am4Mpi9pCC/bbEelnKq5G
6ZAeMhoF9E3hACwnY56pOpW8EUYcRrm5G5r/dmroQE5j3Gn+TyGcTBVVEtb4fss/
yiHGfa2XCqn/JA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:07 2026 by rpki-client