This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
File: OdsD7yfNrOd4Og6jg02XCvOKy-I.mft (raw, json)
Hash identifier: Kd5rk5qJQVOuIeBVYBMWkcjV3GGC5c371l4kSuZYtsE=
Subject key identifier: F3:30:9A:8B:8E:75:06:9E:7F:00:9E:A7:F4:4C:2B:2F:98:BE:C1:80
Authority key identifier: 39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
Certificate issuer: /CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Certificate serial: 019C420F7EBDE87FF765449EE431309C16D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
Manifest number: 08ED
Signing time: Mon 09 Feb 2026 11:00:37 +0000
Manifest this update: Mon 09 Feb 2026 11:00:37 +0000
Manifest next update: Tue 10 Feb 2026 11:00:37 +0000
Files and hashes: 1: BtxvHCilSqt_99RwN54PMNqlIS8.roa (hash: FhEZYVel7CDKvGsL+NRAOlWLOkmBn5nDe2CgOk2RwyA=)
2: OdsD7yfNrOd4Og6jg02XCvOKy-I.crl (hash: q+ZfvOtaBbLoJW82VHrpPiqxsVDputSO+cKnt+Dc+fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:7e:bd:e8:7f:f7:65:44:9e:e4:31:30:9c:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39db03ef27cdace7783a0ea3834d970af38acbe2
Validity
Not Before: Feb 9 11:00:37 2026 GMT
Not After : Feb 10 11:00:37 2026 GMT
Subject: CN=f3309a8b8e75069e7f009ea7f44c2b2f98bec180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:c7:53:0f:17:0b:c7:5d:3a:11:9b:34:8d:
8d:f5:fc:85:2d:0f:97:65:a3:94:74:ba:8b:20:53:
56:ba:d6:11:f8:22:c0:f3:26:e9:1b:f7:23:a9:73:
be:30:86:4c:58:11:2e:58:bc:4e:19:a6:92:53:bc:
b0:ae:c1:8c:18:d9:f1:ce:5c:ef:c7:aa:10:14:e9:
95:c3:5c:56:a2:03:22:55:b6:4c:e9:72:6e:ac:a1:
66:96:26:19:e6:0e:4c:85:ec:33:f7:31:47:a7:59:
38:75:b0:7a:82:75:9e:f9:b1:3e:65:4d:7c:9a:e7:
44:79:5f:d4:3c:15:19:d5:78:2f:89:23:b8:27:e7:
66:4f:91:04:5b:58:d8:ea:62:3b:95:c2:59:fa:08:
f1:79:a6:cd:91:44:21:33:2f:29:97:10:43:a5:55:
1a:a6:a0:8b:7f:3f:22:e0:e9:af:00:65:76:d9:43:
a5:a1:3e:dd:d0:aa:5a:b4:1e:c3:4f:14:5c:35:66:
31:ec:b3:4d:7f:d8:bf:ba:ad:53:fe:dc:a3:f3:e8:
1a:68:42:75:f4:64:c0:ba:bd:88:cf:40:25:4d:a0:
61:67:cc:1d:bc:7f:2c:39:bf:a7:0c:16:17:38:99:
8b:7a:0c:49:ea:df:f2:d1:36:1b:76:36:3e:9a:ca:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:30:9A:8B:8E:75:06:9E:7F:00:9E:A7:F4:4C:2B:2F:98:BE:C1:80
X509v3 Authority Key Identifier:
keyid:39:DB:03:EF:27:CD:AC:E7:78:3A:0E:A3:83:4D:97:0A:F3:8A:CB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdsD7yfNrOd4Og6jg02XCvOKy-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a54f90-c8d8-42fa-b0df-950f090e522f/1/OdsD7yfNrOd4Og6jg02XCvOKy-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:07:42:56:27:de:4b:c6:e9:ef:c7:5c:bc:e5:f9:72:65:
87:d5:d5:95:f1:e9:d2:05:25:4f:32:b6:44:50:c8:72:ce:78:
10:5d:2d:6f:dd:8d:2d:10:cf:f2:eb:c2:b2:1b:2b:58:28:f5:
41:e4:fb:e7:58:f0:71:b6:ed:a2:35:1f:aa:53:8a:4e:8d:23:
4d:8c:c7:ac:c9:bd:dd:59:41:7f:c9:24:0d:fe:a2:15:8f:1e:
5d:f8:ad:da:d8:37:96:7a:bd:ba:f4:ac:4f:f9:55:09:14:2d:
86:47:25:41:61:77:d2:7c:50:75:b4:8b:f6:02:40:22:37:65:
c9:da:5a:a0:55:a3:2b:1b:7d:c3:cf:12:38:c5:41:a1:58:5a:
86:3c:18:ce:2d:27:d8:42:23:d3:01:e7:4a:86:a9:91:82:9d:
ab:4a:2c:1a:9c:08:bc:e9:a0:b3:d0:ae:4b:56:82:15:22:9b:
d8:78:5c:93:e4:0a:6e:63:a0:bb:c9:a6:27:44:c1:8b:16:46:
eb:e9:67:47:07:d1:82:f9:08:f5:f5:ae:8c:ee:4d:7f:52:df:
ab:8d:da:50:6a:1e:49:a7:96:a9:bb:d4:fa:d5:94:21:6e:09:
f1:da:df:02:24:a8:07:2f:4f:82:c5:31:77:86:ba:83:96:c5:
3c:4e:19:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD3696H/3ZUSe5DEwnBbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZGIwM2VmMjdjZGFjZTc3ODNhMGVhMzgzNGQ5NzBhZjM4
YWNiZTIwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD
EyhmMzMwOWE4YjhlNzUwNjllN2YwMDllYTdmNDRjMmIyZjk4YmVjMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d/HUw8XC8ddOhGbNI2N9fyFLQ+X
ZaOUdLqLIFNWutYR+CLA8ybpG/cjqXO+MIZMWBEuWLxOGaaSU7ywrsGMGNnxzlzv
x6oQFOmVw1xWogMiVbZM6XJurKFmliYZ5g5Mhewz9zFHp1k4dbB6gnWe+bE+ZU18
mudEeV/UPBUZ1XgviSO4J+dmT5EEW1jY6mI7lcJZ+gjxeabNkUQhMy8plxBDpVUa
pqCLfz8i4OmvAGV22UOloT7d0KpatB7DTxRcNWYx7LNNf9i/uq1T/tyj8+gaaEJ1
9GTAur2Iz0AlTaBhZ8wdvH8sOb+nDBYXOJmLegxJ6t/y0TYbdjY+msoFjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMwmouOdQaefwCep/RMKy+YvsGAMB8GA1UdIwQY
MBaAFDnbA+8nzazneDoOo4NNlwrzisviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYt
OTUwZjA5MGU1MjJmLzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTRmOTAtYzhkOC00MmZhLWIwZGYtOTUwZjA5MGU1MjJm
LzEvT2RzRDd5Zk5yT2Q0T2c2amcwMlhDdk9LeS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdasHQlYn
3kvG6e/HXLzl+XJlh9XVlfHp0gUlTzK2RFDIcs54EF0tb92NLRDP8uvCshsrWCj1
QeT751jwcbbtojUfqlOKTo0jTYzHrMm93VlBf8kkDf6iFY8eXfit2tg3lnq9uvSs
T/lVCRQthkclQWF30nxQdbSL9gJAIjdlydpaoFWjKxt9w88SOMVBoVhahjwYzi0n
2EIj0wHnSoapkYKdq0osGpwIvOmgs9CuS1aCFSKb2Hhck+QKbmOgu8mmJ0TBixZG
6+lnRwfRgvkI9fWujO5Nf1Lfq43aUGoeSaeWqbvU+tWUIW4J8drfAiSoBy9PgsUx
d4a6g5bFPE4ZBA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:31 2026 by rpki-client