This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json)
Hash identifier: k883jMsU2+RrgpzC1EIZrv7f7AXLRNlO/6OOI1R5RSY=
Subject key identifier: EC:56:84:7B:0F:B8:C6:ED:00:1E:E2:21:50:55:08:5D:16:D6:89:D2
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial: 019BF1CF03E3512B0B6B5994BC6E8B7D2F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
Manifest number: 150B
Signing time: Sat 24 Jan 2026 21:00:34 +0000
Manifest this update: Sat 24 Jan 2026 21:00:34 +0000
Manifest next update: Sun 25 Jan 2026 21:00:34 +0000
Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=)
2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=)
3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=)
4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=)
5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=)
6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=)
7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=)
8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=)
9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: BEkuVNENL4KV3CszsOl36Ue4BQiIz6zeM01Y+LdiBoE=)
10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=)
11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=)
12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=)
13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=)
14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=)
15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f1:cf:03:e3:51:2b:0b:6b:59:94:bc:6e:8b:7d:2f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
Validity
Not Before: Jan 24 21:00:34 2026 GMT
Not After : Jan 25 21:00:34 2026 GMT
Subject: CN=ec56847b0fb8c6ed001ee2215055085d16d689d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2d:b4:21:73:40:a4:fd:09:35:c5:e5:44:0f:
cc:3e:57:ac:13:fa:47:ea:68:3c:35:0b:ca:20:af:
fc:9f:25:19:89:bc:06:25:38:2f:9d:10:94:19:c2:
91:ed:3e:cc:d2:84:f8:17:ca:88:17:1c:c9:57:07:
a3:2a:4f:0c:ba:17:41:41:de:72:88:e0:e1:00:02:
a7:7f:31:e7:c2:8a:7b:e5:3f:8e:e4:d7:29:35:b6:
db:f5:76:28:96:61:8a:00:b9:d2:e1:f1:e2:cd:ac:
58:bc:70:a9:d7:19:f5:0b:7f:de:04:b0:de:24:e1:
fc:01:8c:96:1d:5b:a9:54:af:a1:c8:e0:1a:30:7f:
c1:fc:97:24:46:89:83:0f:bf:dd:6a:04:c4:d6:39:
63:35:be:9b:5e:de:f7:b9:33:f6:41:0b:06:26:b3:
23:59:8a:e5:93:7a:e8:8f:16:b4:07:7b:8b:cb:d3:
03:67:c7:61:db:68:f1:5e:9d:8d:c8:d2:e2:26:26:
95:fe:df:cb:8c:b5:d5:f2:a0:e8:4f:ee:83:d1:a6:
3a:71:bc:b9:f0:fb:99:33:00:e7:58:1f:24:a9:72:
f0:94:a5:a7:80:5c:fe:9b:b6:b0:57:46:6f:6e:75:
ef:90:2f:9f:88:54:4b:19:75:82:22:f6:ef:1d:3a:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:56:84:7B:0F:B8:C6:ED:00:1E:E2:21:50:55:08:5D:16:D6:89:D2
X509v3 Authority Key Identifier:
keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4d:be:a6:c2:d5:58:bc:9b:e7:23:75:24:00:44:21:17:f2:
a5:c6:71:9a:34:61:16:37:0f:9f:2b:ec:d2:14:6a:37:9b:cc:
f7:c6:e3:ef:9c:14:9d:b0:91:40:4b:9e:ec:0a:fc:00:3c:8a:
36:30:dd:f3:88:76:55:6f:41:69:23:19:29:bd:b5:24:c7:48:
a3:5f:4c:87:5f:08:8e:5f:20:cf:60:ec:69:0f:42:d9:d1:fc:
cf:bc:d0:66:c8:23:9b:23:80:cd:88:f9:22:9f:5c:eb:14:c2:
72:c5:68:cd:26:74:e3:9a:29:5a:16:3c:cf:75:aa:84:5d:88:
e7:57:03:31:b7:16:08:34:b5:15:d5:86:6e:8a:47:14:04:3f:
95:8d:e0:17:19:70:07:0c:bd:9f:06:8d:cc:7a:9e:cb:2d:4b:
ad:b5:cf:d1:1b:36:0c:e8:c2:6d:48:77:55:42:73:6c:e8:21:
a6:c1:36:b8:c2:ec:38:1f:ab:78:ef:cf:7e:7b:cc:be:2a:17:
23:cf:06:f7:af:a1:e8:72:d7:36:43:34:0a:3d:f0:a2:10:56:
b0:24:b7:05:60:5b:22:a0:8d:91:cb:a5:d0:ab:28:d3:43:55:
cf:e1:da:94:05:83:63:76:70:d8:4f:8e:9e:7c:76:60:28:3a:
b9:11:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:43 2026 by rpki-client