This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File: D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier: T0XybNJKFxe6dB+E5kEryHL+NJ3hHvHD6hXDohgMtJ4=
Subject key identifier: 75:13:DA:95:62:5F:05:47:30:F5:9E:83:8A:C3:0D:DF:D2:81:1C:53
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer: /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial: 019BF91B8FD0153A7649142AA31E5ACF621D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number: 16EB
Signing time: Mon 26 Jan 2026 07:01:31 +0000
Manifest this update: Mon 26 Jan 2026 07:01:31 +0000
Manifest next update: Tue 27 Jan 2026 07:01:31 +0000
Files and hashes: 1: 2og3dcAu_OJTWY5ClPmlGnRIzwU.roa (hash: 74PsLs5h39Lm9vcmo+PFlNAnhQ4jBPxcvEsxXUafgh4=)
2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: hL8k9ZgrJ2lGTheRM2jgSnRRT5whEig8HbIz57N5T5o=)
3: IoieNHiG8u34Xaf6cZuwExSjHiY.roa (hash: 6TOHj18/V3jeZNm1eBZWledHoUVLVjMzbsE5Bn+ZcQo=)
4: VEt141JORS4uXfTBqMEFS8dl95o.roa (hash: 1ZDnuppObmQPK0jPoDm6JuqwCFlMwWQBs72wZZg4jts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:8f:d0:15:3a:76:49:14:2a:a3:1e:5a:cf:62:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Validity
Not Before: Jan 26 07:01:31 2026 GMT
Not After : Jan 27 07:01:31 2026 GMT
Subject: CN=7513da95625f054730f59e838ac30ddfd2811c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:36:38:59:00:31:ad:74:22:33:65:b9:9f:
5f:f5:ff:b8:29:30:7d:d9:2d:32:f6:75:a7:51:9a:
10:04:3e:0a:7b:77:20:eb:a9:c9:d7:35:f8:f4:53:
b4:40:f6:77:eb:b5:a7:30:57:90:19:32:c1:1f:bd:
ff:13:f8:3d:ad:9c:d5:04:54:7c:57:9d:f6:5c:94:
b4:cd:68:ef:d3:4e:26:df:db:7b:b3:94:60:cf:6b:
1d:e4:f3:26:f6:a3:e7:06:30:b3:6d:b4:da:86:97:
43:9c:6b:d1:8f:e0:c3:4d:5c:5c:05:b4:04:0d:d4:
99:c5:49:ce:d8:1d:3a:ae:6d:81:08:73:fe:87:ab:
a7:f2:7c:24:ad:0f:9e:65:dc:58:06:6a:fe:48:25:
58:dc:76:5a:6e:09:0d:1b:8f:84:a3:70:17:49:20:
8a:d4:21:d9:ba:c3:12:0c:92:c1:61:83:42:15:a2:
c7:cd:0f:50:32:7e:89:0a:36:54:7f:49:bf:8d:52:
94:b7:ec:df:43:eb:75:c0:99:41:f2:e1:42:fe:c5:
9d:51:d7:0e:9e:54:68:25:1f:c8:60:80:60:a0:7e:
45:13:5b:c6:64:94:8a:75:52:29:b5:02:10:c9:8e:
ef:17:de:d5:e3:3d:5e:ee:c1:f8:81:1f:d1:75:8f:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:13:DA:95:62:5F:05:47:30:F5:9E:83:8A:C3:0D:DF:D2:81:1C:53
X509v3 Authority Key Identifier:
keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:a0:56:df:48:86:99:8b:dc:53:b8:88:91:40:8d:d9:00:
9a:e0:ca:14:f8:d8:a8:2e:30:ab:36:ab:5b:cb:f4:04:99:14:
85:81:9b:5a:9b:4b:0a:31:a1:e6:d9:ce:72:52:3e:9d:e2:c8:
8b:b7:e5:1a:16:c6:a9:cd:9c:24:d5:fc:70:95:a2:ea:c6:49:
68:97:0d:18:16:ef:cf:a1:e8:67:15:7a:c1:a0:6c:67:fd:49:
4c:90:f2:50:9b:86:05:76:8c:25:9a:f0:d3:8f:38:ca:9c:8e:
01:2b:c3:cc:ca:2d:98:f8:be:a3:bf:fa:28:86:e9:c1:5c:b9:
70:4a:09:db:df:8c:95:91:f7:a8:d0:e1:af:95:f5:dd:3d:62:
7d:38:c6:98:d7:53:b3:85:fb:74:79:ad:de:77:d9:1c:22:b8:
62:bd:83:a6:59:ec:58:ca:b9:31:0c:f4:21:a7:b7:b1:cd:96:
c4:88:20:5a:c3:36:ad:ab:6e:40:e5:eb:58:0f:0d:ca:17:91:
5e:e3:97:45:65:51:7f:9e:84:28:55:92:e6:e4:34:dd:dc:08:
e9:5f:26:06:e3:d0:e7:9b:0e:55:1a:95:e5:61:48:dc:4e:ae:
f4:68:d5:3d:45:86:fe:84:00:61:14:bf:d4:c6:ae:bd:11:92:
3f:73:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:33 2026 by rpki-client