This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: 9Y2NtWAzbHfITUXeZn0R5TqsVAJm9oJdiUsxeiqPmZg=
Subject key identifier: 43:AF:56:31:E7:C3:DD:AB:8E:FE:60:97:A0:09:68:24:A9:B2:AD:23
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019BF650AC445EA5C76629E10BB98EC7F80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 17AB
Signing time: Sun 25 Jan 2026 18:00:40 +0000
Manifest this update: Sun 25 Jan 2026 18:00:40 +0000
Manifest next update: Mon 26 Jan 2026 18:00:40 +0000
Files and hashes: 1: inGTc8Cd75E599vtC7r1u5PhkKU.roa (hash: pFYpNzRaoUNSfRaOJIRh3gLr+c01f2DyAkci4/rxAww=)
2: o5SCMNYhdkv7jm1bgqmzrSmljcA.roa (hash: ZHMCPsYy82t1LzUAMo46/neqha3S0r9zGdqBqSiF7jM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: bYurjrQ7NF5ZUytERLQvrirrDW/QKCVJYVVPZfLwmgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:ac:44:5e:a5:c7:66:29:e1:0b:b9:8e:c7:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 25 18:00:40 2026 GMT
Not After : Jan 26 18:00:40 2026 GMT
Subject: CN=43af5631e7c3ddab8efe6097a0096824a9b2ad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:05:cd:41:76:bc:eb:d7:a9:10:0c:60:c9:
6c:7b:ae:71:67:c7:30:1a:13:56:23:f0:bd:38:6d:
0b:9a:f9:19:d0:4f:30:16:d6:4d:af:c1:e5:eb:7c:
2a:b1:eb:86:5f:90:82:bf:d1:50:9d:43:c9:5c:1e:
f6:85:df:27:31:44:f8:82:15:15:0e:78:c9:22:ad:
74:15:00:a3:a5:2e:c9:c6:a9:bb:d9:a3:d1:60:54:
ac:59:9f:07:1f:96:e5:22:33:53:e3:c3:4a:4b:0b:
df:a3:d0:36:c4:fc:e5:56:56:7a:50:5c:20:8a:b0:
c0:2e:4b:d4:52:27:67:90:f6:a8:47:31:60:42:60:
d4:a5:e0:df:97:04:5d:e9:10:d6:4b:75:80:63:f8:
e8:38:98:dd:94:b3:2b:62:aa:0c:7e:b9:ec:d7:8e:
63:12:f7:4a:46:39:72:e1:36:df:c3:0b:17:ca:f5:
23:ab:4b:e7:a1:07:ba:d0:5d:e2:8b:8e:95:8e:ed:
c4:15:36:58:bd:1d:f2:72:4f:87:bd:26:60:af:a6:
50:95:03:41:eb:23:b2:82:6d:b0:4f:a0:5b:77:58:
a7:9e:3c:19:09:c8:9b:91:e3:87:c2:30:ae:27:6d:
86:0f:b8:c2:14:20:32:06:54:a3:f6:ae:8b:95:df:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:56:31:E7:C3:DD:AB:8E:FE:60:97:A0:09:68:24:A9:B2:AD:23
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:2d:35:65:bb:c7:dd:0b:c6:72:6b:b0:4a:52:55:47:81:
62:77:4a:d1:14:ae:0d:30:ad:04:81:aa:6d:19:f7:64:06:82:
c3:f4:d5:ad:6c:29:a9:d9:c9:17:e7:81:5d:9e:f1:a7:67:06:
20:3a:16:7a:65:dc:02:a0:2f:72:8e:2a:59:dc:45:25:69:49:
a6:cf:15:a9:c8:00:fe:d3:32:7c:33:ef:8d:a8:9f:ca:9c:0e:
35:4f:96:67:1e:ed:c7:92:f9:02:f5:2f:6d:a6:e5:c5:be:66:
1b:48:e3:0a:b7:47:80:bb:83:cf:3b:69:45:ac:64:07:56:3b:
7b:7f:93:61:fe:b9:d6:fc:c6:b1:44:5a:76:6f:2a:a7:7c:43:
00:2f:1e:f4:17:97:d6:75:6b:46:bc:d0:1f:dd:be:67:94:25:
c3:8f:74:31:63:a4:6d:b2:97:f4:8c:37:87:8b:5c:81:84:54:
bc:a2:59:c5:ac:80:7c:5b:c4:61:7a:6a:ba:34:99:12:e9:0a:
ce:d7:81:99:0d:eb:e2:c5:ae:f4:19:7a:70:25:fb:86:b2:27:
c6:cf:71:07:55:be:40:6a:80:12:ad:a7:f2:84:50:56:73:5a:
5b:db:a4:be:a3:20:a7:bf:f8:39:43:ac:67:f7:94:aa:34:f0:
48:85:46:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:09 2026 by rpki-client