This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json)
Hash identifier: QfXdqXiSEeW0lbPQ7oXDuBoaD88ZMxGnqDxZpMOd8nM=
Subject key identifier: A0:6D:E9:D8:7E:D6:E9:D7:B7:F9:2D:11:68:CB:4E:2E:B3:CA:24:67
Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Certificate serial: 019BF20718EF0D240B0B2935A15E3BE0E480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
Manifest number: 17E4
Signing time: Sat 24 Jan 2026 22:01:49 +0000
Manifest this update: Sat 24 Jan 2026 22:01:49 +0000
Manifest next update: Sun 25 Jan 2026 22:01:49 +0000
Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: UQ3bLHgQy/ptaMCYcCZR0shtYlUaM78v9EAqktKdAhs=)
2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=)
3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:07:18:ef:0d:24:0b:0b:29:35:a1:5e:3b:e0:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37
Validity
Not Before: Jan 24 22:01:49 2026 GMT
Not After : Jan 25 22:01:49 2026 GMT
Subject: CN=a06de9d87ed6e9d7b7f92d1168cb4e2eb3ca2467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:4d:e8:ed:fa:41:cc:9c:92:00:0e:00:42:
0b:47:b3:de:7b:68:2c:46:12:6e:69:4b:8c:2c:d2:
17:0c:37:18:5d:f8:b5:e4:63:4e:10:62:a7:16:dc:
3c:f8:6e:b8:dc:62:b7:7d:03:39:0b:c9:a9:c5:91:
4f:2e:b6:d6:80:ff:e8:71:28:c4:1d:2d:43:55:ac:
9b:76:90:f6:71:69:19:1f:9d:9e:db:1b:87:00:2c:
15:99:57:bf:7b:1a:39:71:d2:ed:c1:93:e3:3a:dd:
68:6d:0f:e0:23:38:26:15:3f:62:52:bf:cf:47:01:
95:be:a0:1a:d2:98:f2:fa:16:2c:48:24:69:20:60:
6c:1a:fe:f9:38:97:9c:42:af:0d:33:3e:9f:12:7b:
17:59:df:fe:f1:2c:95:c3:82:38:d0:e1:5e:d9:e4:
22:ac:f9:87:7f:83:86:aa:a5:39:fe:a3:f4:fe:57:
ae:25:8a:28:a1:94:2f:72:9e:43:77:79:0d:22:b7:
f4:a5:d8:1c:e8:b3:65:e3:55:11:57:0f:83:a8:dd:
ed:be:47:b9:e5:90:d5:d2:a8:15:37:3e:30:bc:44:
41:a0:bc:54:6f:98:9e:ec:38:95:d7:d9:21:08:54:
7e:63:37:18:b4:1b:8b:20:5f:27:ca:8c:98:51:71:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6D:E9:D8:7E:D6:E9:D7:B7:F9:2D:11:68:CB:4E:2E:B3:CA:24:67
X509v3 Authority Key Identifier:
keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:24:04:77:36:88:95:6b:81:aa:79:9e:99:b9:77:05:2a:7f:
ed:cf:d3:42:0e:6f:88:9d:3a:83:08:c2:be:f3:98:64:6e:eb:
1a:05:56:86:a4:90:82:1c:0e:b2:a6:38:6a:36:cc:19:35:02:
f4:d9:0d:7d:fc:43:43:cc:77:8f:c1:82:a6:33:5d:cd:3e:b2:
ab:af:f8:fc:ed:da:69:bf:52:5a:4f:9f:48:5d:01:a3:b9:c3:
d0:5f:af:33:42:80:76:c2:b7:a9:91:f0:60:56:50:3e:ad:5f:
3e:6a:d1:4b:e0:f0:9a:30:c3:9d:b0:42:f4:fc:47:e6:96:fc:
47:db:b1:ad:1c:b6:01:e7:f8:62:c2:9b:0f:de:c9:cf:98:78:
e3:ab:82:31:7f:d3:4c:9a:7a:cf:62:a3:e7:d1:4c:c6:24:f2:
83:4e:f6:27:18:4e:9a:de:73:0c:00:cb:f7:47:d4:76:f3:2b:
86:b2:18:7a:ee:4d:26:5f:9f:35:95:59:85:e4:fa:19:2e:aa:
08:a8:03:aa:35:6d:eb:ed:07:4f:e6:bd:8e:cc:86:02:1d:4c:
8c:89:f3:dc:13:80:ac:98:7a:85:7b:a0:48:60:4a:ef:82:44:
e3:d3:d4:06:1f:38:b0:f6:da:7c:00:b0:f0:fd:01:77:d9:0b:
bc:77:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:16:03 2026 by rpki-client