This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: JPE6WHKqzVnmngnkS2GdhxOd+W8gEpBIzsQm0Zr67EU=
Subject key identifier: B9:B1:05:BF:D4:86:29:11:27:EE:C4:91:C6:29:57:D0:D5:46:C9:C9
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019C43C6CF0DDDDFA8007D47AAD846B3B535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0FD6
Signing time: Mon 09 Feb 2026 19:00:28 +0000
Manifest this update: Mon 09 Feb 2026 19:00:28 +0000
Manifest next update: Tue 10 Feb 2026 19:00:28 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: dwJj5WX3/vEqafFP1Lrq/UahGg7oLD+qbg54O7JPvtk=)
2: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (hash: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:cf:0d:dd:df:a8:00:7d:47:aa:d8:46:b3:b5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Feb 9 19:00:28 2026 GMT
Not After : Feb 10 19:00:28 2026 GMT
Subject: CN=b9b105bfd486291127eec491c62957d0d546c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:a8:8c:9d:6b:d4:6b:b5:1a:8e:38:7b:ea:
f7:29:56:48:34:08:ef:98:0c:99:d5:3d:84:be:5b:
60:bc:34:68:ff:c0:84:40:b5:80:86:f6:09:b3:cf:
62:2f:97:62:d1:bb:6b:df:79:2d:77:d6:a5:02:c2:
e1:c1:d9:89:c7:1c:b9:f1:96:fb:85:ea:59:f5:68:
92:11:fe:fe:5b:c3:c4:0f:14:00:15:ec:ad:49:4c:
98:b0:e0:8a:84:32:1e:4a:49:b4:5a:96:8e:09:ac:
57:bf:37:49:78:0a:99:85:c1:89:59:63:4a:83:52:
77:b5:3b:bd:51:2f:b2:50:5c:44:37:97:e2:b5:17:
93:5c:f0:e4:0c:74:67:d5:dd:30:d9:e0:4c:b8:b3:
86:3e:6f:85:78:08:d7:c2:f0:46:ff:0d:cd:1a:51:
0b:b8:a3:df:e0:76:51:ee:bb:8d:39:cb:d1:ec:dd:
0b:ca:a4:6f:27:1c:15:b2:78:8b:2c:67:6c:e0:24:
3a:c8:85:ac:08:de:c9:e9:d0:e3:62:3b:75:87:ce:
15:05:4d:3a:71:64:95:d2:c1:64:71:91:3e:6d:78:
9d:ea:63:17:30:4a:49:50:81:45:2b:3b:e7:d7:fd:
2f:d9:c3:65:c0:05:4f:e5:5b:1d:d1:87:18:67:1b:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:05:BF:D4:86:29:11:27:EE:C4:91:C6:29:57:D0:D5:46:C9:C9
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:34:64:de:17:60:06:0e:7c:d9:c0:e6:6a:06:db:90:c7:
f5:5e:bf:b6:50:b6:30:15:d3:f2:ae:2e:b0:4e:b3:bd:f3:d8:
21:51:b4:b5:d8:6f:37:df:35:59:82:b5:69:59:9c:fc:74:6d:
38:85:5b:93:83:1c:84:4b:c3:1e:3a:ac:52:f5:0b:6d:60:19:
22:67:01:f5:aa:f7:40:21:64:d3:df:6a:c3:9e:60:7f:a3:f6:
10:78:0a:ca:4e:5c:d8:65:29:f3:c4:b7:b1:a2:1c:68:f4:1f:
bf:22:c8:37:48:ba:99:ba:80:a5:f7:a1:74:24:b8:7c:fc:1f:
d1:78:83:16:43:ef:4b:4f:cb:c6:7a:c8:59:54:10:4a:4c:21:
f5:ec:de:13:db:38:c6:d1:f2:8c:00:c7:3d:04:8f:17:44:78:
84:cb:48:b6:26:ca:28:41:22:80:7f:6d:fc:9d:93:36:b4:95:
b8:96:34:e5:09:2b:b9:83:5f:13:a1:57:e7:43:45:28:50:b4:
3e:32:0b:32:ae:06:78:71:23:e5:72:6f:90:1f:5d:aa:7b:42:
0e:bd:2a:7f:77:b9:73:46:d5:fa:8f:13:25:f1:4f:a0:6f:c2:
3c:69:d4:9d:06:79:c1:63:1a:10:cf:e0:b2:2c:8e:1e:6a:63:
86:96:17:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:18:49 2026 by rpki-client