This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
File: O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft (raw, json)
Hash identifier: cfrRkzf2x3jQ6loGt5ZJk07mYRNAQgVapSOMAcvqPnM=
Subject key identifier: 12:31:E1:28:35:5C:93:B1:0E:7F:6F:9F:B6:E4:37:68:5B:0B:10:0F
Authority key identifier: 3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
Certificate issuer: /CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Certificate serial: 019C42B42F2D25945091F306959F1E93BCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
Manifest number: 1494
Signing time: Mon 09 Feb 2026 14:00:30 +0000
Manifest this update: Mon 09 Feb 2026 14:00:30 +0000
Manifest next update: Tue 10 Feb 2026 14:00:30 +0000
Files and hashes: 1: O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl (hash: komlNQ7aZnoxRQVGMqWYknq/yYk9NSC8XSyDUViFKhs=)
2: p9afRUC51SfaJyMaCVZSnQiB2hY.roa (hash: 6VxOCyWy4+A0UX6VtaLP95X/pFp2fxpWhbFoynGWOGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:2f:2d:25:94:50:91:f3:06:95:9f:1e:93:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9fb57f4b0f253f9af858303e6b46a529c194e
Validity
Not Before: Feb 9 14:00:30 2026 GMT
Not After : Feb 10 14:00:30 2026 GMT
Subject: CN=1231e128355c93b10e7f6f9fb6e437685b0b100f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:4b:2e:7c:3a:b2:4b:9f:49:03:1c:05:f3:
1b:11:bf:e0:f7:3b:86:5a:af:51:6f:66:37:d8:b2:
68:cd:9b:f0:b6:d2:27:03:6d:ca:d2:09:63:81:17:
35:1f:0d:39:30:30:bc:0b:5e:45:ce:84:55:44:72:
33:68:42:53:20:f3:75:ca:dd:9c:8e:d0:d2:50:ed:
f2:0d:5c:7a:6d:db:85:dc:94:c6:a6:09:f9:60:3b:
f2:09:96:8d:ca:2b:0d:fa:01:80:d7:7d:29:51:9e:
1f:bb:5a:bc:11:86:c2:9b:f7:57:0c:11:53:d0:43:
24:5b:34:89:aa:df:5d:d6:d7:f3:8e:80:26:93:e9:
ad:6c:4c:7c:50:92:89:af:7e:5a:a4:e8:9f:17:cc:
7d:4b:71:db:2d:65:13:13:10:1f:57:c8:a9:42:0a:
c3:e2:e5:1d:04:ad:35:e1:a8:d2:a1:d3:9e:36:e0:
55:95:20:2a:09:d4:63:c8:c7:9f:b9:9c:4b:0e:cf:
56:19:0a:35:66:d0:e0:fa:ba:58:d0:ba:52:15:ec:
f7:b7:d1:55:c3:e6:7f:2e:27:aa:ed:b3:4f:94:a7:
35:15:27:e4:b6:58:f3:cf:90:95:28:bb:87:28:91:
58:8b:1f:19:c1:cb:ff:47:d3:bb:ae:69:ba:1f:f9:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:E1:28:35:5C:93:B1:0E:7F:6F:9F:B6:E4:37:68:5B:0B:10:0F
X509v3 Authority Key Identifier:
keyid:3B:D9:FB:57:F4:B0:F2:53:F9:AF:85:83:03:E6:B4:6A:52:9C:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9n7V_Sw8lP5r4WDA-a0alKcGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/204cdf-f6e7-4874-9802-650dd138e6a2/1/O9n7V_Sw8lP5r4WDA-a0alKcGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:3d:d3:2c:a5:36:21:66:5f:95:2d:a0:a0:a5:64:43:a4:
8e:ce:77:a8:a6:5b:e2:5d:c0:63:59:2b:58:a8:2f:ac:92:ef:
a6:04:0c:72:c6:8d:a9:07:d7:62:e5:2d:74:e1:ca:7d:ff:43:
82:77:28:8f:6d:48:0e:2b:70:3b:8b:28:ba:98:a2:66:97:b4:
b8:e8:5d:2c:44:d6:a8:cd:77:62:64:1a:73:a4:e0:c0:50:04:
9b:1a:5f:10:4a:3d:dd:38:13:69:20:5f:8c:7f:33:0f:6d:9b:
42:66:e4:ba:07:97:fc:c2:fb:2a:90:e7:93:60:51:11:09:de:
fd:84:51:64:71:ce:f2:bb:18:31:db:b2:b1:cc:90:97:5e:c0:
c8:01:c8:12:dd:62:48:f3:9b:4e:e5:d8:a1:d5:b3:52:03:e9:
4f:18:e8:e9:91:64:a3:b3:6f:b6:6e:60:13:a6:ab:c1:2d:17:
65:5a:f0:0b:c2:a3:0e:ed:6b:c3:fa:60:97:84:e2:9e:50:f9:
b5:a1:b8:a5:c8:cb:5e:c1:4b:cd:7d:42:48:6b:98:e0:f2:4a:
6d:44:52:85:95:0d:66:96:75:31:04:fa:86:cc:39:32:c3:99:
a6:f8:93:1f:4e:24:ad:15:4c:50:2e:48:8d:1e:18:53:0c:48:
68:67:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:59 2026 by rpki-client