This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: diMwFUdZBYgQdah/R13y41AFSJKDIoCdQrl9Ul1abe4=
Subject key identifier: 9E:BB:68:15:21:EE:68:47:E1:10:9A:F4:72:00:15:41:9D:7A:90:E0
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019BF7D177195D28EB46F335A43343585B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 17ED
Signing time: Mon 26 Jan 2026 01:00:58 +0000
Manifest this update: Mon 26 Jan 2026 01:00:58 +0000
Manifest next update: Tue 27 Jan 2026 01:00:58 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: ondRTPSU663I63S23DOdzh0B/TjWlXhuWfwc9pl+N3E=)
3: xtfoGeIECTpdCbZHNkFP50BN1MA.roa (hash: Z1lBrIMUzn5W9YhrUqvcchRAFUBJEphcXoXllZ4p86k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:77:19:5d:28:eb:46:f3:35:a4:33:43:58:5b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jan 26 01:00:58 2026 GMT
Not After : Jan 27 01:00:58 2026 GMT
Subject: CN=9ebb681521ee6847e1109af4720015419d7a90e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:10:ee:dd:2b:8a:8f:96:5c:b6:59:e6:14:
d5:d2:00:f9:94:d2:c5:a5:39:29:63:a0:4e:b7:bc:
54:f7:02:2a:4f:95:bc:39:be:50:82:59:c0:29:eb:
09:a7:4a:80:c1:3b:b6:07:d1:14:7e:9a:f7:ed:8f:
b6:75:b2:ad:a1:8c:6d:3b:c5:c5:b2:54:0c:fa:b0:
db:57:ce:9b:79:61:77:08:2e:e4:6e:0f:63:7b:4c:
72:7c:af:ff:cb:6e:98:86:de:64:a6:aa:8a:a4:c9:
81:d3:a5:95:b4:b0:d0:c4:04:00:c5:a8:09:df:cf:
e1:17:c2:59:2a:b6:08:c6:bf:5b:10:5d:3a:f3:b6:
39:27:ae:8a:1b:04:ca:f2:19:b0:cd:9e:94:5b:6f:
9d:36:42:4b:fa:40:6a:3f:d6:81:af:52:91:a3:f9:
8d:51:e0:14:bc:ea:92:d0:ba:ee:82:5d:bb:78:46:
ea:80:83:4c:1a:1e:c3:9f:14:50:28:c9:71:8f:d7:
ad:d0:f2:12:2c:a0:c2:aa:11:08:80:4e:ee:da:b2:
be:93:93:e9:03:93:cb:a2:b7:cd:78:a8:fd:c9:50:
20:e0:0f:4b:89:ca:47:53:61:c5:ff:04:12:82:47:
7e:36:2c:8c:64:ec:73:7c:92:66:98:23:e1:10:07:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:68:15:21:EE:68:47:E1:10:9A:F4:72:00:15:41:9D:7A:90:E0
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2b:d5:91:63:76:3c:d7:4e:2a:f2:d9:22:4c:1f:68:64:98:
63:16:9c:ae:de:d8:e6:40:e8:1e:4d:1c:b6:bf:b6:ea:48:6c:
20:81:29:eb:24:6c:d5:66:b6:d1:a3:a4:91:50:a1:f4:b3:97:
c2:18:e2:a9:90:8f:61:d9:3c:ce:7e:69:a3:74:4a:bf:7b:9e:
3d:6c:36:b9:4a:34:71:43:b5:e7:39:da:7b:ae:d2:06:1b:09:
d8:d6:2c:03:b5:b4:26:7c:8d:70:8b:2d:65:c9:84:47:f6:b9:
80:18:18:bb:ba:2a:d6:93:37:25:5c:e0:21:b9:a9:98:02:e1:
9f:81:0f:0f:d2:31:ed:f2:7d:41:d7:ed:37:16:76:b0:8d:86:
4c:1e:22:54:e4:49:4d:5b:c9:3c:f5:c9:a8:f6:62:23:12:5a:
8a:4b:78:ca:a6:11:d0:39:c6:91:ce:e0:7e:49:6d:29:e0:03:
af:bb:ed:37:1c:34:65:b5:78:bb:5b:90:08:bc:3b:3f:27:2c:
5d:93:f0:bd:4c:59:0d:d3:ec:1d:e9:e3:99:e1:a7:39:e5:1d:
8b:fb:a0:21:cd:76:20:08:2f:cb:4f:7c:f0:44:77:4a:aa:5a:
ce:97:3a:f6:15:c8:b0:0c:c4:1a:7b:63:ac:21:fc:a4:bb:e3:
09:82:69:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv30XcZXSjrRvM1pDNDWFtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjYwMTI2MDEwMDU4WhcNMjYwMTI3MDEwMDU4WjAzMTEwLwYDVQQD
Eyg5ZWJiNjgxNTIxZWU2ODQ3ZTExMDlhZjQ3MjAwMTU0MTlkN2E5MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ0Q7t0rio+WXLZZ5hTV0gD5lNLF
pTkpY6BOt7xU9wIqT5W8Ob5QglnAKesJp0qAwTu2B9EUfpr37Y+2dbKtoYxtO8XF
slQM+rDbV86beWF3CC7kbg9je0xyfK//y26Yht5kpqqKpMmB06WVtLDQxAQAxagJ
38/hF8JZKrYIxr9bEF0687Y5J66KGwTK8hmwzZ6UW2+dNkJL+kBqP9aBr1KRo/mN
UeAUvOqS0Lrugl27eEbqgINMGh7DnxRQKMlxj9et0PISLKDCqhEIgE7u2rK+k5Pp
A5PLorfNeKj9yVAg4A9LicpHU2HF/wQSgkd+NiyMZOxzfJJmmCPhEAfcuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ67aBUh7mhH4RCa9HIAFUGdepDgMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCvVkWN2
PNdOKvLZIkwfaGSYYxacrt7Y5kDoHk0ctr+26khsIIEp6yRs1Wa20aOkkVCh9LOX
whjiqZCPYdk8zn5po3RKv3uePWw2uUo0cUO15znae67SBhsJ2NYsA7W0JnyNcIst
ZcmER/a5gBgYu7oq1pM3JVzgIbmpmALhn4EPD9Ix7fJ9QdftNxZ2sI2GTB4iVORJ
TVvJPPXJqPZiIxJaikt4yqYR0DnGkc7gfkltKeADr7vtNxw0ZbV4u1uQCLw7Pycs
XZPwvUxZDdPsHenjmeGnOeUdi/ugIc12IAgvy0988ER3Sqpazpc69hXIsAzEGntj
rCH8pLvjCYJpfA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:53:45 2026 by rpki-client