This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: 6kcOieOaf9turstwgBtcECIqC2NOl7c7Q1Wx/ygpy3U=
Subject key identifier: B0:A9:2C:6C:AE:A6:D2:2A:85:2F:3D:0D:1F:C9:74:9C:C0:F3:CC:C7
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019BFE0AF1E7BF75EB7851B84BACEA7B4AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 132F
Signing time: Tue 27 Jan 2026 06:01:28 +0000
Manifest this update: Tue 27 Jan 2026 06:01:28 +0000
Manifest next update: Wed 28 Jan 2026 06:01:28 +0000
Files and hashes: 1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
2: ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa (hash: oL+8JKtbsi8ZoMkkG6i545NLOcvXQnKT9FOD68h1HXk=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: /hDlEQDuxs4Qtb/KFCC695oqHmBj+pIURXIs9ItM3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:0a:f1:e7:bf:75:eb:78:51:b8:4b:ac:ea:7b:4a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 27 06:01:28 2026 GMT
Not After : Jan 28 06:01:28 2026 GMT
Subject: CN=b0a92c6caea6d22a852f3d0d1fc9749cc0f3ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:d9:79:00:06:0a:8f:c5:01:ce:24:de:90:
70:49:f9:bb:45:6f:7c:2a:8e:72:9c:6f:1e:fb:fc:
20:2f:ff:f3:b6:36:35:53:d1:9c:a4:e0:ea:25:16:
9a:cd:7c:67:55:fd:bb:e8:02:9f:59:d1:43:a4:6b:
a9:04:2b:12:1e:95:4d:81:1c:29:a1:8f:19:3f:a1:
3a:4c:45:26:31:54:de:46:bc:e6:8a:cc:ea:d4:86:
b1:d0:7d:47:34:1a:5a:5b:ac:e5:0e:bd:a9:8a:a9:
21:37:eb:69:bb:3c:48:ed:45:4e:55:ee:c1:73:02:
a2:b0:b3:ae:f6:da:e1:78:43:53:f9:94:4d:83:c1:
fe:cc:0a:a3:4a:2f:a4:8d:7a:c1:83:fa:64:8a:8b:
8b:76:00:0b:5b:d5:a9:ee:62:9c:4b:09:3d:45:15:
df:8b:23:31:6c:cf:86:0c:99:61:82:a5:b0:c5:56:
4a:6f:e1:35:20:e0:b7:8f:e7:3b:c7:8b:ae:2d:b4:
89:70:40:fc:b1:d4:41:3a:c1:ab:a7:5a:c6:54:ec:
83:45:a9:c8:b7:93:b1:9c:ce:87:63:a8:33:8b:3f:
11:c2:6e:18:d7:46:88:e0:c6:3d:c3:65:9f:65:be:
ba:0a:6e:87:fa:49:44:1d:35:cd:8a:37:4e:58:56:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:2C:6C:AE:A6:D2:2A:85:2F:3D:0D:1F:C9:74:9C:C0:F3:CC:C7
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:e4:4e:4d:b0:07:17:a7:19:7c:4c:c4:f9:19:1e:32:aa:
1e:7b:c9:3a:ea:67:c7:4b:2d:2f:3c:8a:8b:1a:f3:09:46:4d:
34:04:e1:9c:09:c2:46:85:aa:4e:da:0c:9e:55:1a:21:ce:c4:
cf:a3:30:88:d6:ff:03:6a:fe:09:97:5a:59:67:16:b6:8f:14:
9e:3d:7f:65:c3:61:82:04:07:35:44:83:19:41:bd:c8:78:cd:
a8:51:c1:0f:9b:5a:ab:2f:5c:56:50:4d:12:b3:26:02:d5:5e:
da:b5:9f:99:91:c8:8d:0d:4e:d6:ca:c4:ac:c6:c9:d3:90:45:
66:d8:33:e7:9d:0f:0f:3a:fa:54:86:81:52:97:50:5d:2e:83:
c1:ca:8f:8c:5f:19:7d:67:b2:95:e7:96:66:cb:65:03:b5:17:
51:69:6c:ab:14:c0:0a:a2:3b:09:fa:aa:ba:a6:6f:f7:27:be:
d2:a7:19:3e:de:cc:f8:0a:1a:9d:90:25:cd:42:cc:ce:67:ff:
a5:a7:37:5d:47:96:13:0f:af:6a:dc:e7:b6:b4:70:48:d8:d5:
df:cb:18:2d:fc:17:02:b9:d2:63:b1:0c:86:52:6d:fd:46:a5:
11:e6:a8:ec:fa:7c:cd:34:b0:8c:3c:cf:dc:6e:cf:f3:02:48:
df:b4:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:45:24 2026 by rpki-client