This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File: QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier: 7InoThsY++cTo5AoKlviIdPr8I4wmrJuGTA3Qus0ieY=
Subject key identifier: 1D:D8:23:5C:B7:0E:D5:09:8E:D6:E4:D9:F2:9D:9C:1A:9C:87:E2:D4
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 019BF462844BC81B551981D7C868D8A2B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number: 17EB
Signing time: Sun 25 Jan 2026 09:00:55 +0000
Manifest this update: Sun 25 Jan 2026 09:00:55 +0000
Manifest next update: Mon 26 Jan 2026 09:00:55 +0000
Files and hashes: 1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
2: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: DmapErIPm4clhOSsyXPSH9i8iUZqeJWcyui+biZe+TA=)
3: cyljAWZPlifrM5byUgXStgguUUo.roa (hash: g+31Md1m8aEfNmg7bSRZKEh9QswceyQTpMg+XQVZ8Kc=)
4: qIswqouMvF4QvtgJt7puZ1DpXGM.roa (hash: yf1LTtYPfTtITafQ3QHjAd2ny6/lzW+4z8DKP7fNkrw=)
5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:84:4b:c8:1b:55:19:81:d7:c8:68:d8:a2:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Jan 25 09:00:55 2026 GMT
Not After : Jan 26 09:00:55 2026 GMT
Subject: CN=1dd8235cb70ed5098ed6e4d9f29d9c1a9c87e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:3c:43:fe:c8:c8:e2:54:22:8a:5a:5d:cc:
fe:d1:6e:52:1f:68:0d:56:80:fb:7e:7f:63:db:cb:
10:fb:e5:5a:a9:38:66:91:0e:3e:7d:93:3b:46:d9:
67:6e:f9:fc:7c:de:55:30:d5:d1:99:dd:f2:73:ef:
d9:29:5e:2b:1d:63:f3:85:aa:e1:ef:b8:b4:53:4c:
ba:38:e3:b8:86:68:00:6f:8e:b8:4a:79:86:a0:61:
79:70:6e:8a:15:96:dc:52:26:d7:9e:00:af:bd:39:
60:c1:f8:3b:70:09:d4:d7:6a:1f:f7:72:da:be:4b:
93:8c:e5:63:77:1f:4d:06:ff:70:f9:c4:47:f0:ab:
3e:d4:2d:aa:8e:d2:24:5c:0f:be:3b:37:23:22:cb:
1b:37:35:da:85:be:78:5f:d2:ca:a2:05:ab:f4:10:
03:28:b4:af:32:86:90:dd:e7:ef:e5:5c:ca:80:68:
28:c4:07:fc:8d:86:cb:9f:01:ac:47:77:3f:d8:b4:
d6:ea:a3:ed:0f:72:7b:39:7b:8f:4a:7c:75:f3:37:
6c:b1:92:f1:b8:63:67:5d:85:e6:b8:df:73:6b:41:
d4:ac:49:bf:19:ed:e9:a7:f8:4d:d6:1b:50:f1:d9:
5c:ad:29:79:ce:05:89:e4:72:4d:b9:a4:01:45:60:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:23:5C:B7:0E:D5:09:8E:D6:E4:D9:F2:9D:9C:1A:9C:87:E2:D4
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:33:c0:04:17:31:18:68:a8:24:38:08:f4:e4:e4:25:d2:72:
bf:21:fb:ce:85:14:d9:25:a0:97:b0:3a:78:69:e2:71:33:e2:
95:65:08:97:21:fd:7b:59:a2:e6:d0:92:f4:51:ec:d5:be:8c:
c1:85:d7:c1:0b:2d:88:21:f5:c0:a6:37:4f:31:e9:9e:df:39:
cf:c7:4c:3f:c2:89:df:57:4d:75:81:d2:4a:c3:8a:51:61:11:
5f:c4:b4:7d:d0:08:43:66:f9:a6:f7:fe:9f:d0:26:fd:50:20:
ed:f8:27:61:a2:9b:78:8f:dd:7f:95:98:aa:19:f8:7d:8d:a3:
ef:93:54:b4:91:8b:e9:a8:3b:4b:da:97:f2:ba:53:82:0f:16:
ba:36:1f:95:45:6e:c5:b1:ed:10:0d:b1:91:5c:77:79:90:c2:
9b:9b:09:b0:69:6d:e5:24:6f:c2:10:5b:5d:55:b6:db:90:3f:
66:fc:90:ba:eb:a2:65:4d:cc:3a:8c:f9:8b:08:ee:27:f4:ba:
0e:0a:5e:2f:09:a7:0a:25:75:f9:ee:5a:37:40:49:2d:7c:62:
74:1e:a6:f5:96:83:b5:ea:6d:57:c9:95:98:b3:f4:b1:0f:fe:
4d:d4:e3:d6:af:65:00:23:bd:11:99:56:4e:91:97:35:2e:9b:
fb:68:66:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:44 2026 by rpki-client