This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier: Fnao9dzTILY3wONoTiAA5zASMxQSfSaw/u6YvNRkTb0=
Subject key identifier: 36:8E:B1:CA:21:75:A2:B4:8E:B6:6E:F3:0F:6A:F5:F8:BB:0A:0F:D5
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 019BF8AD1F870BFD59971A3FDC2C50E9C4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number: 14AD
Signing time: Mon 26 Jan 2026 05:00:53 +0000
Manifest this update: Mon 26 Jan 2026 05:00:53 +0000
Manifest next update: Tue 27 Jan 2026 05:00:53 +0000
Files and hashes: 1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: zyl2MbQoFw9P+GSJfsO/zuMwwKgbMWedpawYx7Av8pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:1f:87:0b:fd:59:97:1a:3f:dc:2c:50:e9:c4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Jan 26 05:00:53 2026 GMT
Not After : Jan 27 05:00:53 2026 GMT
Subject: CN=368eb1ca2175a2b48eb66ef30f6af5f8bb0a0fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:eb:7d:03:dd:78:7e:e5:5d:cf:70:ab:55:
0e:cf:43:42:1d:5a:4f:34:72:ae:ca:8b:ed:77:f3:
a5:3e:79:64:b3:dd:22:01:20:22:25:58:a7:fe:cf:
ab:2f:bb:d5:2a:12:ce:62:c7:6f:5d:c2:2f:4c:25:
cb:02:03:64:cc:62:4c:7c:4e:25:fa:c0:71:14:1d:
0e:f0:aa:f0:67:82:84:60:6e:8a:b0:64:ad:41:9c:
5d:66:db:ab:08:59:27:6d:33:29:92:5d:21:a0:59:
34:9c:25:47:fb:e0:ef:04:52:10:58:57:9b:e4:c9:
c9:49:60:09:f7:ae:65:ee:02:fa:03:cb:2d:c0:28:
33:65:9e:a3:17:86:a6:ec:5b:98:fe:59:62:47:61:
2e:d7:5b:fe:c0:20:88:68:ea:d0:1c:0c:a2:e4:c7:
9c:ac:83:d6:c7:a7:2f:aa:c4:61:bb:47:cb:c3:11:
59:6d:a8:d3:c3:94:bb:c6:d7:e1:09:5f:2f:c0:d3:
ec:ee:90:49:97:4e:ab:fb:b6:e7:78:d0:de:48:81:
a1:67:4c:87:6c:78:7a:ad:2f:a0:91:52:fb:01:de:
19:98:58:c7:12:dc:5a:ba:cd:30:8c:15:5f:1c:d9:
5d:12:54:24:7c:2f:cd:01:c9:7d:3d:b3:c6:fd:8b:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8E:B1:CA:21:75:A2:B4:8E:B6:6E:F3:0F:6A:F5:F8:BB:0A:0F:D5
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d5:90:8e:f2:46:c1:8a:7c:53:0f:33:cf:fc:68:47:c3:01:
04:98:a1:7e:57:45:0c:51:66:af:46:99:11:06:05:23:d7:97:
03:24:00:61:92:db:5d:48:b7:67:d5:f4:1c:e3:79:f6:0b:dd:
98:25:10:1c:da:b8:a6:80:9b:dc:83:88:31:b4:4c:5c:f5:48:
e0:83:a1:a4:0b:33:d8:33:1e:c8:c5:7f:05:16:49:8e:c4:ba:
71:73:73:33:b4:ba:ee:a9:8b:f0:80:cc:4a:f1:e6:af:e8:f4:
2f:ae:1f:e1:f3:b5:5b:58:7f:4d:51:26:60:bd:80:f6:4f:7a:
3e:3f:53:e6:03:98:fb:af:c2:f6:e4:a4:3d:6f:73:1a:12:94:
67:8a:dd:09:ba:83:4f:ca:a1:70:1d:cc:3a:7e:a2:ec:42:66:
8b:7b:a9:2a:8e:bd:66:20:b5:28:9c:b9:ae:13:1c:a8:cd:b5:
4f:f8:f1:09:1b:89:b7:9f:e6:b8:89:b1:e0:5f:14:e3:4e:b4:
f1:66:98:99:1d:1c:78:a0:84:4e:9c:78:54:6c:59:84:49:c7:
44:db:dc:d0:a8:11:5a:8d:1f:37:35:f8:f7:15:68:2f:31:e1:
9b:64:ae:38:5f:23:87:7e:e0:cd:48:d8:01:eb:76:b3:d0:6d:
82:7d:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:17 2026 by rpki-client