This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: QA+Z4Vq9IB3mrJvExZSDhKXUulCKBOjfZb6KO1OF8to=
Subject key identifier: 0C:63:3B:8A:C4:F1:C0:89:E3:09:76:2A:4C:BD:80:F4:5E:0B:DC:1A
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019C1BA69EB54F495D8126EDBEAE6E9D3A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 17FD
Signing time: Mon 02 Feb 2026 00:00:30 +0000
Manifest this update: Mon 02 Feb 2026 00:00:30 +0000
Manifest next update: Tue 03 Feb 2026 00:00:30 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: 7WVRtI4H2kHo7QbeN2t+MJnNOJh2QHeUoRfBlpDaoeI=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a6:9e:b5:4f:49:5d:81:26:ed:be:ae:6e:9d:3a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Feb 2 00:00:30 2026 GMT
Not After : Feb 3 00:00:30 2026 GMT
Subject: CN=0c633b8ac4f1c089e309762a4cbd80f45e0bdc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:0a:57:eb:fd:6f:5a:35:0c:78:f4:d0:20:
56:d0:50:8a:2f:4b:61:d2:22:f3:2f:28:64:0d:c8:
46:25:84:1d:a1:7e:37:6d:90:41:6f:3a:2d:bf:3c:
fb:91:b7:7a:06:e7:2f:58:5b:ae:f8:b2:1d:dd:cc:
1c:f5:a5:7e:28:6c:9f:f3:02:88:37:72:23:61:74:
d3:44:62:50:61:aa:e7:30:fd:b3:9a:87:3a:39:d0:
f9:34:69:29:62:53:a9:63:62:5f:25:b8:9b:80:cd:
c3:fe:da:02:a3:c5:a1:98:69:47:8e:09:cd:b2:c5:
2f:e7:ba:3f:7a:6c:45:52:ff:d4:8a:6d:b6:98:6f:
ae:c3:b4:c2:3a:c6:da:e5:ad:98:5f:93:4a:ec:e3:
3a:9d:40:8b:a6:4e:ec:3d:a8:d0:bc:82:79:95:e4:
a7:5c:bd:b2:6a:4c:71:e4:35:34:a3:6d:ce:62:7e:
f2:6b:30:43:93:da:62:db:dc:92:9c:aa:11:f7:cc:
85:7e:61:ad:e3:1b:12:3b:26:9e:a7:57:fa:c2:4a:
7d:cf:5f:f5:96:27:fc:ad:7d:ab:e7:82:aa:01:68:
5f:ba:b3:f7:11:59:8b:87:55:30:cf:ee:d7:12:a9:
1e:18:6b:22:eb:f3:e3:08:fb:89:d4:a0:8f:2d:3d:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:63:3B:8A:C4:F1:C0:89:E3:09:76:2A:4C:BD:80:F4:5E:0B:DC:1A
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e8:cd:45:63:79:1f:91:a4:12:0d:4e:eb:d4:60:bb:39:17:
f1:b8:a1:42:53:ef:d6:08:9c:3d:a0:38:8a:4b:f3:1d:28:33:
10:3d:38:0b:9f:4e:0f:46:9c:83:27:3b:d2:e7:fb:32:61:d4:
42:68:4a:61:2d:64:a9:48:23:b9:e9:2e:e2:54:4a:36:84:d4:
cd:49:f4:93:de:76:d0:5a:af:80:f7:fd:83:a1:58:23:34:ba:
c6:9d:20:a8:2f:f5:c3:0e:b3:e4:65:85:e7:db:cf:c3:09:e5:
6c:b8:bb:2c:49:d3:3c:16:ec:9b:e8:30:24:3a:c8:9a:fa:ba:
8a:da:e6:78:20:e4:dd:ec:6a:a7:53:3a:c3:6d:23:af:6e:02:
d7:f5:34:7d:b8:56:32:1c:7c:3b:6b:0c:33:54:69:54:ef:ec:
8f:bd:97:ff:b5:eb:98:6b:c8:37:f8:f5:ac:2b:11:c7:6a:ca:
34:aa:80:3d:c1:ba:83:03:bd:ca:f2:c8:8c:35:90:fd:c0:89:
51:cd:35:cf:3b:78:f8:76:74:c6:72:5c:86:b5:8d:dc:15:64:
63:64:02:bc:ec:c5:04:cb:67:83:c9:ce:67:57:3d:a9:73:56:
8c:1f:c8:3d:a6:ed:f7:cf:e5:1a:21:cd:96:42:b1:f7:d5:e9:
5b:db:65:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:39 2026 by rpki-client