This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: ydmKZ1coGM6MAg3xI2XprtXiLiGQY2GP9Ql8R/Esyks=
Subject key identifier: 21:A6:E8:84:B7:D4:91:2D:2C:2E:0D:55:AD:7E:4C:A1:59:62:B5:91
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 019C43FE187717E3B2C7FEE7055F097B67D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 1278
Signing time: Mon 09 Feb 2026 20:00:51 +0000
Manifest this update: Mon 09 Feb 2026 20:00:51 +0000
Manifest next update: Tue 10 Feb 2026 20:00:51 +0000
Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: syfY58gWFqyvZf9c9tmPX7O+VbcVhaziguiksVzYlHU=)
3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:18:77:17:e3:b2:c7:fe:e7:05:5f:09:7b:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Feb 9 20:00:51 2026 GMT
Not After : Feb 10 20:00:51 2026 GMT
Subject: CN=21a6e884b7d4912d2c2e0d55ad7e4ca15962b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:25:79:a8:11:68:44:08:6f:03:89:46:5e:
49:a3:b1:79:66:41:bb:0b:d1:b3:d2:bf:96:9e:a1:
d0:c0:1c:4e:20:2f:c4:54:e5:00:9b:85:51:28:10:
5a:57:0c:a4:aa:36:61:74:7d:34:b2:ab:40:7c:b2:
a6:28:6a:44:cc:b1:44:df:0a:3d:e6:5e:9d:ef:f3:
a6:f4:8d:04:a3:9d:42:9e:46:ba:c1:88:b8:e3:23:
c7:a8:de:74:d4:a2:f0:36:20:4f:b2:23:b0:26:52:
03:ac:57:5b:f8:5c:92:7a:9a:f3:5a:72:43:d9:45:
84:81:9e:31:9d:0f:26:bc:ae:2d:de:2c:66:9a:bd:
5f:5d:10:b5:8d:ed:55:53:e0:0e:6b:8f:88:e3:fe:
67:92:25:66:27:06:14:d7:9c:f2:ac:19:bb:17:21:
b9:2d:af:7a:9e:25:92:26:1c:88:25:bd:16:cb:00:
40:9e:42:bd:ce:6e:f8:9b:4e:1f:38:9d:d5:9f:e3:
69:6a:b0:15:02:a9:e2:3d:31:a2:14:08:b5:59:a7:
52:45:ed:8f:8c:8e:d5:44:85:45:e0:0c:d7:00:8f:
25:d4:83:6c:1d:d6:6c:eb:16:a3:44:ec:89:00:1f:
ec:67:59:8d:16:ea:31:15:61:57:36:29:e3:60:a7:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:E8:84:B7:D4:91:2D:2C:2E:0D:55:AD:7E:4C:A1:59:62:B5:91
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9d:5e:d9:58:66:ec:67:46:37:eb:47:60:6f:b9:51:f4:35:
a9:e2:e9:82:d4:7f:ca:07:77:79:ad:cc:07:63:e3:dd:20:a8:
33:fc:c5:c7:bb:74:bf:13:cd:fa:84:71:d5:62:94:c4:8f:ea:
26:47:8c:da:dc:67:65:54:ce:0f:4f:d4:b2:cb:d7:81:cc:37:
89:c0:e0:f0:f9:00:b9:84:eb:cd:ef:df:02:eb:78:cf:f6:d7:
4c:76:35:df:7c:01:5b:9f:34:e3:c2:19:a2:07:5f:af:3c:46:
ee:52:4f:4e:20:8d:0a:8a:8e:fc:d8:8d:03:a1:2d:8b:a3:d1:
42:ae:f0:1a:7b:b4:1e:39:fc:9d:f6:77:75:50:42:16:05:88:
2f:a7:5a:5b:d2:53:a9:bb:af:02:27:f7:75:57:0d:e5:3a:a8:
bb:22:cd:55:43:b1:4c:16:e0:fb:4b:83:17:98:48:a7:0c:b6:
cf:5b:cb:5e:e8:ad:a9:32:4d:e6:28:c1:6d:cc:72:c9:c6:7c:
1b:8e:3f:da:80:ef:59:c0:f8:5f:a8:4d:17:e5:5a:89:37:c4:
6d:ff:d8:7e:5b:d6:df:96:c1:c5:e5:94:b4:b8:ec:6c:82:fd:
3d:74:97:81:6c:8f:5d:9f:db:e0:0c:3a:76:3a:1a:42:d0:bf:
6c:ad:cd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:15 2026 by rpki-client