This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: 1iUq7UQrDfnLBfVeF8HaDwZEI5DrkibRl1YCp/ZxrqI=
Subject key identifier: 1E:DC:45:BB:13:91:D4:96:E7:87:06:FA:3A:C8:5D:BC:35:13:1F:8B
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 019BF38706D601E773349E641ADA8A0AEFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 151E
Signing time: Sun 25 Jan 2026 05:01:11 +0000
Manifest this update: Sun 25 Jan 2026 05:01:11 +0000
Manifest next update: Mon 26 Jan 2026 05:01:11 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: ZiZ8Kbt2kJ+mfcgj+uUSjY5f5yBn/4dp5ZpMtLA1nbw=)
2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:87:06:d6:01:e7:73:34:9e:64:1a:da:8a:0a:ef:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jan 25 05:01:11 2026 GMT
Not After : Jan 26 05:01:11 2026 GMT
Subject: CN=1edc45bb1391d496e78706fa3ac85dbc35131f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:44:3e:41:1e:49:02:f6:54:29:eb:25:5c:
63:26:ce:79:44:1f:18:de:f9:37:b9:47:85:e6:6c:
d6:e9:92:78:34:73:2e:7d:67:ea:97:f1:bb:32:4d:
a3:92:39:6a:0a:2e:fd:53:b5:6b:3a:db:14:39:61:
9d:d7:7b:e4:f4:2a:4c:ec:5c:1c:0e:26:f3:c5:dc:
9a:4f:93:d0:5a:42:85:8e:21:03:a1:38:e3:ef:68:
5c:30:2b:d6:78:74:5e:ca:66:15:63:f9:68:4a:c7:
10:e1:6e:da:77:96:66:f6:82:fa:ac:45:9f:ae:24:
21:8f:91:b7:91:b2:36:89:b7:92:1d:f1:f4:ba:3d:
79:e1:bd:b0:16:25:31:28:14:47:56:6b:17:91:8f:
91:c6:a3:94:87:1d:39:f5:96:b9:8f:87:3b:38:6b:
bf:b2:58:48:cf:93:0a:67:16:97:bc:6d:a1:1d:7f:
50:aa:03:62:7b:02:e0:8f:dd:75:a8:31:65:59:11:
ff:0d:36:f9:21:b8:58:f2:18:b3:13:8c:3a:e5:7a:
0c:01:a4:88:8b:77:17:90:6f:f7:49:18:78:cc:c6:
e4:73:d9:e1:1d:21:12:7c:f9:5b:80:02:d3:3a:b7:
90:99:12:dd:14:a6:55:0b:fc:f0:bc:50:14:55:2c:
54:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DC:45:BB:13:91:D4:96:E7:87:06:FA:3A:C8:5D:BC:35:13:1F:8B
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:bc:5c:30:e7:27:15:1b:db:72:73:95:b8:27:14:5c:5b:
48:4e:6d:e7:7c:b8:b5:cf:07:33:99:39:80:73:a4:a2:b7:4f:
46:19:68:01:77:94:7e:94:d4:da:c4:3e:f5:cd:d6:ba:2d:64:
e9:56:92:98:2b:3c:5a:60:b8:69:73:bc:0c:26:9f:ef:f1:56:
e2:86:7d:0e:14:e0:9b:68:d6:04:f3:c6:dc:c7:bd:f1:cb:a1:
1c:7f:23:45:23:4f:69:df:05:d3:3f:2a:01:fb:18:93:31:39:
79:08:81:8c:e9:62:f0:18:5e:93:90:75:37:27:2d:48:b0:6e:
99:51:ca:56:b2:db:1b:6f:a2:31:87:08:3a:7e:43:ae:fc:56:
aa:f0:0b:2e:30:dc:12:f4:33:57:36:0c:05:c2:d3:50:68:db:
a0:de:2e:04:25:91:13:77:e3:02:8d:c4:91:13:4d:6c:e8:e5:
af:55:27:0c:f6:d6:81:f9:09:af:26:73:09:e3:b2:38:56:85:
ea:21:9d:82:3e:07:42:40:8d:03:1b:6f:30:62:9c:88:97:0a:
d1:3f:7d:71:e9:f8:51:13:88:00:3a:4f:e6:f1:96:e4:ed:78:
22:60:ed:4d:70:02:c3:c3:da:3c:ce:5d:4e:b3:6a:35:69:a2:
22:58:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:22:36 2026 by rpki-client