This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
File: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft (raw, json)
Hash identifier: bTB3oeCQDoeYrnKkJqwrlODSv8k3r/CDchq36ryYuLQ=
Subject key identifier: 4D:74:BC:4F:62:19:74:97:3D:9F:95:26:6C:88:FA:1E:29:1A:2B:A5
Authority key identifier: D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
Certificate issuer: /CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Certificate serial: 019BFA647B83E7AC826FC5E372E256406202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
Manifest number: 0BEF
Signing time: Mon 26 Jan 2026 13:00:47 +0000
Manifest this update: Mon 26 Jan 2026 13:00:47 +0000
Manifest next update: Tue 27 Jan 2026 13:00:47 +0000
Files and hashes: 1: 0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl (hash: qJUCbgeL7CWMjMhIGxFYBARI2v3mtovCD3LbB0Fv+1M=)
2: 1KnU7H_UVe-XpNapFYFQEn0LJJQ.roa (hash: cUtUMg5M4fjhGoVm34BuVn+17rIs5yEOOCki02p10ww=)
3: j5hpz0Ky4wyZsfB5ISUjvlPvrQ8.roa (hash: eXsNvI5c0yl1gppo8mH8F57qlB2x5VSSClL68a+AJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:7b:83:e7:ac:82:6f:c5:e3:72:e2:56:40:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29dc792adfcfe88c79e7958fbfec525630b62f9
Validity
Not Before: Jan 26 13:00:47 2026 GMT
Not After : Jan 27 13:00:47 2026 GMT
Subject: CN=4d74bc4f621974973d9f95266c88fa1e291a2ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:10:b0:7d:e4:93:30:75:b5:4d:e2:c1:3c:
5f:5e:ad:56:07:52:80:01:d0:05:f1:66:b9:43:ab:
56:29:b9:c1:f4:d5:65:80:44:8b:4d:33:33:00:b6:
8c:15:74:f2:a6:42:09:fa:d8:31:b7:ff:6e:ea:8a:
4f:ca:65:14:df:40:b0:05:89:30:bd:08:84:7e:19:
70:f2:c6:44:f8:0b:48:50:44:d5:57:bf:f3:dd:fb:
1c:a4:80:f4:14:26:40:8f:74:0b:47:8c:db:76:ee:
f0:ba:4f:7b:ff:ef:82:1b:51:8c:af:89:9b:47:fc:
af:ad:06:b9:a4:f9:93:8b:e3:e8:55:18:cc:7e:da:
d8:c8:34:ce:33:12:b9:3c:13:c5:26:85:09:a7:7a:
96:fa:03:de:0f:7e:d1:9a:77:d4:cb:9c:50:40:0c:
69:90:83:e8:d3:5a:86:04:a4:4f:22:13:ec:24:d1:
48:dd:02:92:d1:52:df:f5:ee:2a:f4:ad:69:72:e2:
fc:11:2e:01:c9:30:58:27:4b:a4:04:90:44:1e:80:
49:fd:29:90:61:32:1e:28:35:ee:82:72:4c:65:30:
2a:32:95:d2:05:5c:72:0d:dd:cc:0a:30:20:e1:a4:
30:a5:c9:eb:21:1e:02:61:a5:7d:9b:20:e0:c1:00:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:BC:4F:62:19:74:97:3D:9F:95:26:6C:88:FA:1E:29:1A:2B:A5
X509v3 Authority Key Identifier:
keyid:D2:9D:C7:92:AD:FC:FE:88:C7:9E:79:58:FB:FE:C5:25:63:0B:62:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0p3Hkq38_ojHnnlY-_7FJWMLYvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d8f8cf-188a-4bd0-8dba-41e7fba6d6e1/1/0p3Hkq38_ojHnnlY-_7FJWMLYvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3d:16:a0:96:ae:45:ee:d6:38:cb:8b:b0:a5:b3:81:f8:61:
66:b9:79:f3:bc:e4:09:f7:1c:1a:24:59:54:20:10:82:74:8f:
6c:d7:8e:d5:b0:c9:65:32:5c:75:cc:63:21:b4:c0:de:87:31:
e5:3a:e9:de:b7:7e:cf:20:8d:28:f9:51:c9:5a:b8:48:ec:16:
84:2c:e6:d4:de:b9:75:cb:66:f4:b2:3c:00:60:4c:a1:cc:f2:
19:d7:23:0a:1f:b6:40:79:28:48:ba:b3:54:dc:49:ec:fb:94:
39:5f:f4:f2:d6:18:e1:e7:40:fb:38:69:f2:4d:78:cd:4b:7f:
62:36:9f:80:a7:37:98:1d:67:ed:58:8c:b3:71:34:66:c9:59:
47:6d:22:a7:45:be:10:b7:ee:2a:ac:c9:5d:63:c1:6e:2a:00:
a9:8e:f6:0e:89:8f:9e:fb:ae:9f:60:ff:78:2c:19:66:04:b2:
76:05:60:9a:b9:76:e5:c6:01:3c:d4:69:89:0a:c2:1d:6b:99:
1c:cc:1a:b1:e6:69:ae:01:a4:5c:89:46:58:e1:4c:de:8e:c0:
48:55:ae:99:4a:8f:b3:ab:75:15:a5:60:0e:cc:b2:9f:1d:46:
41:03:1e:ed:7d:4e:d9:3d:c7:9c:2f:a8:32:29:86:8f:ca:94:
05:48:4e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6ZHuD56yCb8XjcuJWQGICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOWRjNzkyYWRmY2ZlODhjNzllNzk1OGZiZmVjNTI1NjMw
YjYyZjkwHhcNMjYwMTI2MTMwMDQ3WhcNMjYwMTI3MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZDc0YmM0ZjYyMTk3NDk3M2Q5Zjk1MjY2Yzg4ZmExZTI5MWEyYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPQQsH3kkzB1tU3iwTxfXq1WB1KA
AdAF8Wa5Q6tWKbnB9NVlgESLTTMzALaMFXTypkIJ+tgxt/9u6opPymUU30CwBYkw
vQiEfhlw8sZE+AtIUETVV7/z3fscpID0FCZAj3QLR4zbdu7wuk97/++CG1GMr4mb
R/yvrQa5pPmTi+PoVRjMftrYyDTOMxK5PBPFJoUJp3qW+gPeD37RmnfUy5xQQAxp
kIPo01qGBKRPIhPsJNFI3QKS0VLf9e4q9K1pcuL8ES4ByTBYJ0ukBJBEHoBJ/SmQ
YTIeKDXugnJMZTAqMpXSBVxyDd3MCjAg4aQwpcnrIR4CYaV9myDgwQDMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE10vE9iGXSXPZ+VJmyI+h4pGiulMB8GA1UdIwQY
MBaAFNKdx5Kt/P6Ix555WPv+xSVjC2L5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEt
NDFlN2ZiYTZkNmUxLzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kOGY4Y2YtMTg4YS00YmQwLThkYmEtNDFlN2ZiYTZkNmUx
LzEvMHAzSGtxMzhfb2pIbm5sWS1fN0ZKV01MWXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj0WoJau
Re7WOMuLsKWzgfhhZrl587zkCfccGiRZVCAQgnSPbNeO1bDJZTJcdcxjIbTA3ocx
5Trp3rd+zyCNKPlRyVq4SOwWhCzm1N65dctm9LI8AGBMoczyGdcjCh+2QHkoSLqz
VNxJ7PuUOV/08tYY4edA+zhp8k14zUt/YjafgKc3mB1n7ViMs3E0ZslZR20ip0W+
ELfuKqzJXWPBbioAqY72DomPnvuun2D/eCwZZgSydgVgmrl25cYBPNRpiQrCHWuZ
HMwaseZprgGkXIlGWOFM3o7ASFWumUqPs6t1FaVgDsyynx1GQQMe7X1O2T3HnC+o
MimGj8qUBUhOVg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:00 2026 by rpki-client