This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: MD1WmLEjFA7QJVRZ6HtdzXAkWA5XIpii6dNo7uDjpMQ=
Subject key identifier: 17:28:2C:68:D9:72:C4:4C:6D:23:BE:2C:AF:51:B4:91:10:86:28:B0
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 019C421006A29A5825CE2E7878B54BF1086F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0C0F
Signing time: Mon 09 Feb 2026 11:01:12 +0000
Manifest this update: Mon 09 Feb 2026 11:01:12 +0000
Manifest next update: Tue 10 Feb 2026 11:01:12 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: DnLSCl9h2hdYe+/CpuDEnBrd6q78TzbDupTAdEENyMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:06:a2:9a:58:25:ce:2e:78:78:b5:4b:f1:08:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Feb 9 11:01:12 2026 GMT
Not After : Feb 10 11:01:12 2026 GMT
Subject: CN=17282c68d972c44c6d23be2caf51b491108628b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:a7:dd:44:ff:e5:87:65:26:c3:c0:d1:e6:
43:e7:32:94:85:bd:de:9d:c9:8c:35:55:55:87:c4:
75:8c:94:b5:ee:64:48:00:e4:3f:be:be:17:47:6d:
52:d1:f4:7a:ae:bb:93:95:8b:be:a1:b5:02:69:0d:
3b:4e:e6:57:74:f6:5e:68:de:7e:83:15:19:b5:a4:
b2:13:e8:21:65:24:59:45:a3:47:c3:b4:ca:25:58:
6b:b6:16:c4:5b:73:d4:96:80:49:1a:40:26:22:7b:
8b:55:1c:89:9d:b8:8a:c8:2e:4b:0f:da:6b:d5:9f:
7b:97:14:16:32:72:eb:5e:ae:55:a8:3c:d6:dc:30:
80:ae:78:fa:4e:b9:c3:27:e6:54:f9:3b:e4:ca:62:
a2:cd:cf:80:43:f9:9c:d4:7a:06:3f:3c:d4:b4:98:
4b:71:94:3e:5e:c4:cc:11:40:cf:00:4f:be:2c:5f:
fc:0a:25:c7:b2:79:a7:b5:12:51:54:fe:46:6f:61:
03:cf:2a:b2:36:48:b2:a1:82:43:3a:e1:0c:8e:d5:
56:ab:8b:4d:aa:b9:c5:37:a5:15:f0:7a:a1:ce:e9:
4f:d3:b9:c9:5e:83:84:f6:0f:15:9c:5b:59:31:30:
39:5b:5b:b3:4e:cb:d2:11:d6:f0:9f:03:9c:23:ec:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:28:2C:68:D9:72:C4:4C:6D:23:BE:2C:AF:51:B4:91:10:86:28:B0
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:0f:34:cf:ba:dc:55:84:55:f7:3c:07:f8:25:a9:24:e4:
8b:25:12:d7:68:31:03:8f:95:bd:cb:cb:61:84:ef:bc:e4:04:
11:dc:2e:15:ec:bb:44:39:58:12:5a:a0:b6:5a:9e:f3:bc:a6:
3e:c0:5b:f0:b3:8a:18:e6:a9:31:54:74:13:69:39:23:df:97:
6c:fe:39:68:a7:43:e4:ef:54:89:3e:a8:f2:6f:b0:45:70:42:
97:61:f8:b6:17:2d:d2:80:80:e1:66:5b:5e:05:7b:e4:b8:99:
ef:ce:3d:5e:74:c2:2a:57:23:4d:a0:7a:ea:7b:77:5c:15:c3:
84:2f:ae:ee:25:e6:11:2c:58:c1:fe:21:77:0d:7e:94:0a:fd:
8b:54:06:26:2c:2b:25:b3:e6:f5:bd:a2:13:ee:60:e1:8f:c3:
6f:ad:a2:61:f5:d6:ca:87:7e:a0:f6:27:12:98:e9:8c:df:a2:
fd:25:9b:b0:cd:91:da:36:c5:9f:55:82:89:c3:b1:12:cc:91:
7a:ea:d7:f7:6c:e3:17:17:26:8a:01:40:87:bd:70:85:eb:bb:
08:d8:61:ca:14:df:1b:30:1f:22:34:f7:e3:c5:ab:da:75:f1:
1e:2e:ab:a3:f5:d2:91:7c:ed:3f:2e:7e:0c:19:ed:16:dd:cf:
60:ab:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:58 2026 by rpki-client