This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: zqXuN52kY61eDhzZ/R07+tUdUPlE64T/WHRwVNE15So=
Subject key identifier: 91:61:FC:B2:50:75:82:B3:4D:17:F4:8A:6C:F6:F7:DE:2D:99:47:46
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 019BE18098DF4C4DFC3825C8D1340EC24EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 17E3
Signing time: Wed 21 Jan 2026 17:00:59 +0000
Manifest this update: Wed 21 Jan 2026 17:00:59 +0000
Manifest next update: Thu 22 Jan 2026 17:00:59 +0000
Files and hashes: 1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=)
2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: xoDwA+GY3EzW7CUzRYwPwlAAPFy9GerOkQTZ3zcKB/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 15:22:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e1:80:98:df:4c:4d:fc:38:25:c8:d1:34:0e:c2:4e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jan 21 17:00:59 2026 GMT
Not After : Jan 22 17:00:59 2026 GMT
Subject: CN=9161fcb2507582b34d17f48a6cf6f7de2d994746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:94:12:7a:14:0d:fb:11:97:42:f5:46:2c:46:
e6:d0:d4:51:88:41:2d:b8:88:44:48:46:e6:fb:89:
ed:10:a5:55:33:ce:79:e8:93:f0:99:8e:7b:a6:92:
67:26:b9:cb:8f:3a:b3:6e:c8:29:73:21:27:fc:a2:
11:7d:3e:12:38:36:1e:aa:d1:6b:d4:e3:63:79:3a:
1d:81:6f:a1:24:52:c8:2e:0b:f8:06:16:a1:38:3f:
6e:e3:f2:d2:bb:25:5a:2a:28:36:2f:09:b3:44:17:
aa:91:ed:d2:6b:be:e5:20:d1:c2:8c:5e:09:65:64:
cb:bd:f2:8e:d6:6c:c3:87:a2:76:ef:75:eb:61:ca:
d6:63:98:ec:77:5a:f8:c6:b1:b5:f6:d8:6f:88:ac:
0d:6c:98:40:00:5f:2f:e9:94:3e:3b:e3:1f:69:6b:
2d:54:33:4c:d1:eb:79:7a:ed:64:35:46:2f:04:7c:
62:03:39:b0:68:4c:9b:a5:3a:dc:58:29:98:c1:f9:
d5:49:68:51:a4:2f:e7:3f:8e:23:21:6e:b2:24:90:
eb:73:d3:48:e3:05:ed:54:27:15:fb:30:db:60:49:
4a:50:57:5a:e6:e4:d7:b6:00:15:c1:60:bb:f9:ba:
f8:68:5d:7c:b9:ed:56:77:44:c7:84:d9:d2:e7:73:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:FC:B2:50:75:82:B3:4D:17:F4:8A:6C:F6:F7:DE:2D:99:47:46
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d7:a3:aa:6a:e7:f1:cb:68:b4:6f:d5:7f:b6:89:76:89:b9:
db:2a:13:8c:9d:ab:31:92:68:ae:05:4e:fc:39:93:76:21:eb:
2d:a3:2e:c1:62:81:b8:5a:a4:c2:40:87:7f:5f:74:f7:a5:82:
c6:ac:39:56:fd:44:55:64:bd:bc:d5:69:4a:c4:0a:2f:4c:06:
34:87:a0:93:e3:a4:ce:8f:11:6b:bb:f2:0c:05:01:1a:95:4f:
39:5a:1f:32:34:57:02:2d:08:97:c5:70:6f:06:e8:45:27:eb:
fa:3a:e1:83:00:ec:6c:ac:76:fa:fd:27:d5:cf:63:cb:73:b0:
23:b0:ac:3b:89:a3:df:2b:da:89:a4:63:6b:a6:3b:bf:a7:6c:
a0:f3:21:7a:0a:8b:01:ec:04:1d:f0:cb:98:f3:90:33:b6:53:
91:8b:04:ae:5d:c6:49:ab:03:a0:45:74:80:b0:4b:0f:f7:d6:
9a:51:49:e2:fa:fb:83:a5:1a:1d:57:f8:7e:80:9e:8e:a4:17:
92:48:cc:aa:02:d6:84:ef:47:07:7f:44:3c:1e:75:23:2c:aa:
a0:42:92:95:df:e3:50:92:ec:c6:0b:ce:de:be:9e:ec:91:94:
8a:c2:69:a4:64:32:b1:62:bd:fb:a8:cb:0b:91:a9:a0:e9:56:
63:b2:9a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvhgJjfTE38OCXI0TQOwk6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5
MDk2ZDQwHhcNMjYwMTIxMTcwMDU5WhcNMjYwMTIyMTcwMDU5WjAzMTEwLwYDVQQD
Eyg5MTYxZmNiMjUwNzU4MmIzNGQxN2Y0OGE2Y2Y2ZjdkZTJkOTk0NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JQSehQN+xGXQvVGLEbm0NRRiEEt
uIhESEbm+4ntEKVVM8556JPwmY57ppJnJrnLjzqzbsgpcyEn/KIRfT4SODYeqtFr
1ONjeTodgW+hJFLILgv4BhahOD9u4/LSuyVaKig2LwmzRBeqke3Sa77lINHCjF4J
ZWTLvfKO1mzDh6J273XrYcrWY5jsd1r4xrG19thviKwNbJhAAF8v6ZQ+O+MfaWst
VDNM0et5eu1kNUYvBHxiAzmwaEybpTrcWCmYwfnVSWhRpC/nP44jIW6yJJDrc9NI
4wXtVCcV+zDbYElKUFda5uTXtgAVwWC7+br4aF18ue1Wd0THhNnS53MlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFh/LJQdYKzTRf0imz2994tmUdGMB8GA1UdIwQY
MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt
ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl
LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdejqmrn
8ctotG/Vf7aJdom52yoTjJ2rMZJorgVO/DmTdiHrLaMuwWKBuFqkwkCHf19096WC
xqw5Vv1EVWS9vNVpSsQKL0wGNIegk+Okzo8Ra7vyDAUBGpVPOVofMjRXAi0Il8Vw
bwboRSfr+jrhgwDsbKx2+v0n1c9jy3OwI7CsO4mj3yvaiaRja6Y7v6dsoPMhegqL
AewEHfDLmPOQM7ZTkYsErl3GSasDoEV0gLBLD/fWmlFJ4vr7g6UaHVf4foCejqQX
kkjMqgLWhO9HB39EPB51IyyqoEKSld/jUJLsxgvO3r6e7JGUisJppGQysWK9+6jL
C5GpoOlWY7Kaew==
-----END CERTIFICATE-----
Generated at Wed Jan 21 23:41:30 2026 by rpki-client