This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: 4muzBxhUM63rIXe7nCwtpx6svO7pAUqI8gMHPoA2ZR8=
Subject key identifier: 64:63:77:6E:A2:6F:62:15:BE:61:70:95:2C:B8:73:CF:F1:14:87:6A
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019BFDD3ACFDF66A301951BC0477E2F289B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 17EF
Signing time: Tue 27 Jan 2026 05:01:06 +0000
Manifest this update: Tue 27 Jan 2026 05:01:06 +0000
Manifest next update: Wed 28 Jan 2026 05:01:06 +0000
Files and hashes: 1: 1-Dqswh2nOTAd-BLgdUyGvB-Z1kc.roa (hash: fQXXSs2gglVxP/y70N/IcdYPFQ/yUJztMiHuepjm5xo=)
2: n2KBANa3wBwM2_JjLezjaU7yil4.roa (hash: nQL7RujWiI6DbmiRr/tEusZiL9ZmH5N96DaqJuKa6wA=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: PAMX/O15wkFSPo0crG3cLET2Qnb5s5qeLUEt6YQVivc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:d3:ac:fd:f6:6a:30:19:51:bc:04:77:e2:f2:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Jan 27 05:01:06 2026 GMT
Not After : Jan 28 05:01:06 2026 GMT
Subject: CN=6463776ea26f6215be6170952cb873cff114876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:dd:3f:d3:95:e9:a8:dd:91:d5:7e:f9:17:
40:30:be:b8:a1:4c:7c:d2:33:be:87:c8:cd:eb:ea:
91:c5:1a:e5:a0:2b:e5:28:2e:ac:5c:c9:dd:ce:ba:
42:26:f6:c4:a8:f1:76:25:2c:64:34:21:ed:65:d5:
66:43:d0:f7:da:48:05:fb:01:e9:60:3f:e6:77:cd:
ff:42:c0:88:cd:42:44:86:d3:1e:db:03:e8:74:45:
c4:3a:29:c1:e9:ee:47:f7:4b:60:ed:fa:35:ad:02:
8b:5d:4d:df:f3:09:33:e3:f1:a9:e0:1a:8f:ff:ec:
5d:bb:bc:b4:e3:39:93:d9:e3:6e:e1:2a:c1:d7:8f:
c1:cc:51:b9:42:70:7f:36:89:42:69:24:4f:30:a5:
32:ad:15:06:9f:08:af:87:dd:ae:1a:fd:15:b6:64:
f2:15:9e:cf:bb:58:25:27:03:a8:65:3c:97:64:da:
5e:b4:e2:ed:dd:2a:72:34:51:8e:d9:40:f8:b2:64:
2d:25:55:06:8a:01:65:78:9e:04:c7:b1:29:a3:4c:
e8:ff:ab:1d:dd:63:82:0d:56:cd:81:4d:6e:de:d6:
65:ce:84:d9:54:d4:fb:24:73:94:99:9d:0a:53:b3:
e4:fb:aa:90:bb:ce:35:56:2c:77:32:02:96:62:a1:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:63:77:6E:A2:6F:62:15:BE:61:70:95:2C:B8:73:CF:F1:14:87:6A
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:2b:eb:d8:1e:19:f4:99:dc:34:c6:30:f6:50:a7:59:19:
48:53:8c:9d:2b:58:3b:25:ca:b1:24:27:22:3e:19:d6:5b:7c:
96:42:37:37:cb:42:ad:4f:f4:fc:07:1e:1f:57:b4:2b:af:43:
26:4b:20:7b:3e:d2:cf:6b:6d:93:6f:66:6b:fc:53:f3:c6:b3:
c2:1c:4e:d1:df:4a:d5:60:83:bf:af:78:11:50:27:1a:58:48:
d2:86:48:4b:df:e7:f8:c1:11:b7:e7:3d:70:43:6d:69:16:c8:
43:90:b5:c2:b7:10:22:41:75:61:bc:99:12:b2:80:f1:cb:eb:
5b:ff:2d:ce:0f:68:a8:4c:ff:10:a0:5a:6d:76:f4:12:15:65:
a3:4a:d0:d2:51:e6:c6:14:99:10:d1:36:f6:f5:d7:96:0f:6e:
b1:cb:1f:d9:7c:68:33:db:80:af:cf:6c:1b:11:c0:57:69:9f:
ee:75:28:97:34:de:2f:84:fe:77:19:13:f2:2e:33:d7:70:3d:
a4:35:2e:a4:52:b9:aa:bb:f0:88:8c:bd:5d:40:1e:fa:73:47:
cc:56:93:f7:4f:39:1e:d0:02:04:d7:ab:d0:e0:68:f8:73:cb:
e9:33:30:b2:3b:4c:2b:cd:5b:dd:94:5d:98:08:4f:25:74:47:
96:20:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 09:55:10 2026 by rpki-client