This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier: YY+IAF18kLuvKRZyGKzX0jJjLy9pm0nrOLrP6OYif+0=
Subject key identifier: CD:F3:76:27:CA:45:2E:53:29:F9:5D:9D:CC:DF:5D:23:FF:71:19:2E
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 019BF6BEF00329E387C58036A5EE2CF69193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number: 0E94
Signing time: Sun 25 Jan 2026 20:01:06 +0000
Manifest this update: Sun 25 Jan 2026 20:01:06 +0000
Manifest next update: Mon 26 Jan 2026 20:01:06 +0000
Files and hashes: 1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: IRf/Ba9DJrUU7dOZLIbo6f3ZSOujh+M0zl/1qO9MX14=)
6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:f0:03:29:e3:87:c5:80:36:a5:ee:2c:f6:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 25 20:01:06 2026 GMT
Not After : Jan 26 20:01:06 2026 GMT
Subject: CN=cdf37627ca452e5329f95d9dccdf5d23ff71192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0f:2f:d3:74:c8:e9:b8:3b:4d:db:04:21:ec:
64:b7:38:bd:de:24:54:2c:7a:80:46:d1:f6:9c:a2:
b5:bf:dc:94:4c:c9:29:94:12:3c:0b:81:0f:0b:98:
e2:ef:29:4d:e6:77:8e:8f:41:06:73:b2:36:14:8c:
b9:f3:fc:5f:8e:aa:98:c6:8a:7f:cf:52:de:1b:dd:
8c:68:dc:62:f1:83:56:29:a2:ee:dd:56:ac:24:6f:
fb:07:62:14:48:25:b6:65:d6:4e:cc:ff:e9:d7:c7:
c3:27:b6:0e:9f:35:3e:72:1d:c5:79:22:a1:91:f8:
09:08:45:56:fa:04:1a:6b:85:aa:70:04:f1:15:d0:
bb:92:c1:35:99:93:dd:3f:20:27:b6:10:b6:63:32:
d6:2a:b2:88:41:b8:db:97:3e:f2:f5:15:f3:32:42:
36:92:4d:99:f7:98:f2:cc:c4:91:c2:97:2d:a1:d1:
e4:c1:a6:b8:4d:53:3d:89:1e:93:7f:a3:96:96:e2:
06:a9:74:b4:4a:54:f1:ce:97:56:ea:3c:f2:f8:69:
69:bb:45:96:b7:f1:b7:40:f5:31:5e:25:4d:56:7d:
8b:58:d5:2d:02:c3:03:05:c9:c8:f6:e5:96:a2:72:
71:45:5c:62:87:22:6c:59:d9:fc:db:23:cf:bd:24:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F3:76:27:CA:45:2E:53:29:F9:5D:9D:CC:DF:5D:23:FF:71:19:2E
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:63:ee:fd:94:21:c1:34:7d:66:88:40:a6:a9:96:df:7d:
c4:67:0a:18:a5:3d:ea:78:d5:0e:5c:b0:15:09:77:8e:b0:98:
81:91:14:4b:55:05:e0:0c:9f:42:5f:fa:a6:f1:02:bb:4b:b2:
59:14:40:b5:ba:ac:36:f2:8c:16:3a:9e:3d:95:66:31:a5:35:
16:56:b0:be:c6:de:76:c3:14:a9:19:40:df:ec:6e:bc:17:9b:
0b:c1:a8:35:ec:24:9f:89:48:f2:d4:9f:32:72:4b:b4:41:15:
d3:59:49:5b:0b:c2:2b:16:03:63:1a:18:48:5a:46:e9:07:50:
af:97:a8:2d:3f:ca:ab:8a:7c:54:7b:67:27:48:36:f6:2b:eb:
8e:a8:0e:9d:d9:ce:68:4d:71:ad:62:b7:d0:2f:dd:82:c0:e3:
98:bb:56:36:9d:0d:0c:bb:d4:3d:f4:3d:7b:f2:a2:41:0d:08:
05:0d:7d:12:b9:0d:3e:68:11:65:90:6e:53:f0:02:ec:fc:5f:
2b:85:b3:9b:c6:b2:4f:94:7a:3a:86:8b:e1:e7:2c:ee:dc:45:
76:83:1d:68:ec:7a:64:b4:f1:d2:3b:d1:f7:a4:70:de:b8:2e:
57:89:63:b0:c9:b6:7f:ff:d8:46:50:eb:c8:04:2d:14:fe:af:
44:a8:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:24 2026 by rpki-client