This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: qvvJAoBzaWMVV4YpU8YNYJ5RU/V1McwfsZw/xBdPzWs=
Subject key identifier: 2D:DF:23:C6:0C:EF:04:23:77:AF:84:91:78:B0:6F:4E:01:EA:B7:63
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 019BF650BE2D1C5746AAB5A21F210231ADAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0A2A
Signing time: Sun 25 Jan 2026 18:00:45 +0000
Manifest this update: Sun 25 Jan 2026 18:00:45 +0000
Manifest next update: Mon 26 Jan 2026 18:00:45 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: /ADKqAKIFvw1uwMj1g8y6AsprX27D9nxSdeC+pD/134=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:be:2d:1c:57:46:aa:b5:a2:1f:21:02:31:ad:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Jan 25 18:00:45 2026 GMT
Not After : Jan 26 18:00:45 2026 GMT
Subject: CN=2ddf23c60cef042377af849178b06f4e01eab763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:10:07:88:de:cf:62:71:56:fe:0f:bc:94:
70:3a:b7:d1:da:99:7b:9f:54:36:b2:43:e9:4b:a0:
a7:90:eb:5b:5b:ae:a5:fd:3a:59:86:4f:44:95:76:
ab:d5:50:c7:3c:59:d5:44:d6:a9:25:fe:ea:05:84:
db:53:c1:17:c9:a3:70:98:35:aa:e4:2e:5d:f0:81:
8d:46:fe:c2:ea:84:56:6c:5c:fd:61:d5:a0:e6:2f:
14:2a:d2:2e:ab:3a:bc:6c:54:b3:14:21:2a:3e:32:
fd:25:27:67:e1:74:3e:d3:e0:2e:c3:d7:32:2c:fe:
95:aa:77:53:ab:f4:2b:5e:0d:c7:e3:24:ef:8b:a7:
cb:9b:1e:1d:a8:ba:5d:d5:8d:99:e3:86:f3:46:94:
89:4d:05:65:5b:21:24:c2:9c:65:c9:78:1f:19:d6:
28:1b:15:13:f3:12:cb:02:bf:a1:e0:cb:01:5e:70:
48:75:5d:62:1a:71:41:0f:89:c4:89:0e:89:42:1c:
20:09:2b:52:53:a9:9e:5a:9f:79:5b:28:ae:b3:ff:
3c:ed:0b:cd:3f:8d:ca:e0:03:3a:15:ce:03:07:c9:
f4:2c:2d:46:1e:c7:59:1a:73:b7:8e:1e:df:27:d0:
f3:41:bd:59:07:b3:9c:d3:a0:73:22:f8:e0:5a:d0:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DF:23:C6:0C:EF:04:23:77:AF:84:91:78:B0:6F:4E:01:EA:B7:63
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f9:49:b7:7f:10:f3:7b:aa:91:da:76:ac:d3:fe:2a:22:a8:
ae:f6:0d:e5:7b:17:ed:7b:f2:52:87:8a:4e:f2:53:fc:b4:61:
95:61:96:d9:e7:f2:7c:40:0b:af:56:6a:5d:4f:db:71:59:42:
c6:13:ff:fa:c0:f5:a0:18:7c:b5:9c:26:d8:ff:7e:32:e8:17:
e0:5a:10:a8:b9:62:61:46:fe:bd:84:c2:5f:e3:98:da:72:b2:
eb:8a:62:ef:8f:cd:0f:61:38:05:c1:03:91:90:1d:91:30:a9:
fa:ef:81:3c:c6:48:9b:c8:b4:e3:82:f0:9d:bd:67:4b:55:9f:
75:79:b4:cc:f2:77:43:ef:9f:2e:95:ae:64:79:4b:b4:f2:a2:
78:32:d2:28:17:70:6b:4f:2f:59:4a:88:09:a5:78:ff:d5:0a:
a2:d2:44:d7:26:3c:52:cd:ed:d2:e5:75:0a:e2:fd:d4:25:68:
a6:76:45:a7:40:62:ab:2b:2b:f6:4f:f8:70:3a:93:f9:f0:73:
50:f8:ee:18:4a:b4:7e:6f:ef:08:85:4b:cb:e3:a6:ec:d3:93:
e5:c9:c4:ca:bc:12:ea:d4:4e:3f:aa:7d:94:f9:c0:3e:2f:6e:
10:d1:18:15:fa:05:64:99:5b:d5:be:0d:37:b6:76:b3:d5:66:
c6:ec:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:22:36 2026 by rpki-client