This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: aOb8S725QKorG3A1ngkvG9UB/aJ8GL7pfaLXcT3oKR8=
Subject key identifier: 1E:FF:63:DA:40:51:97:87:9E:77:9D:B6:EE:77:BD:13:51:05:93:EB
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019C43C6D13AA131B932C009F79784A395CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 19:00:29 +0000
Manifest this update: Mon 09 Feb 2026 19:00:29 +0000
Manifest next update: Tue 10 Feb 2026 19:00:29 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: KzkhNCFWazDkoX2iYC1fEVzTzcMr6MUWMdewJkSJS1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:d1:3a:a1:31:b9:32:c0:09:f7:97:84:a3:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Feb 9 19:00:29 2026 GMT
Not After : Feb 10 19:00:29 2026 GMT
Subject: CN=1eff63da405197879e779db6ee77bd13510593eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:96:64:ed:92:2e:4e:94:1b:9a:d9:34:8d:
ff:8c:35:a3:74:ac:29:af:62:e7:44:05:31:c1:c1:
4d:b6:29:a7:a4:6b:0e:04:c2:bd:4c:e3:4f:b9:b0:
cf:93:5e:2f:97:08:99:10:64:5a:3c:da:82:43:a6:
14:d2:9d:3f:ec:82:74:7d:e5:49:34:7a:26:65:6d:
b4:1a:d9:a1:5e:d4:0c:48:df:9d:a7:43:fe:4f:31:
d0:94:b7:d1:c5:4d:97:95:fd:24:9c:e9:16:2b:19:
3f:6f:78:25:86:4c:de:36:6a:3b:32:6d:0b:ec:af:
07:3d:d3:2d:a5:15:9a:f2:16:a2:74:28:fa:91:c6:
89:47:3a:e2:9a:87:e0:04:5f:e6:28:e5:93:a6:b2:
db:d4:3b:39:90:f3:be:17:bc:6b:f8:05:df:50:cc:
de:fd:92:8b:54:a0:6f:5d:78:46:2d:b4:5e:f4:2e:
fa:e3:c2:bf:59:e1:9b:ed:d9:06:a6:2f:69:97:e3:
8f:4f:5f:48:31:c9:84:52:ed:6c:42:ff:9b:3d:6e:
bb:2b:a2:76:83:6d:82:28:2c:12:48:46:9b:53:31:
bb:05:7f:96:46:bb:8f:06:7e:82:e3:05:1d:b5:3a:
67:e7:88:55:fe:f3:32:23:40:d6:d9:6b:28:89:36:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:63:DA:40:51:97:87:9E:77:9D:B6:EE:77:BD:13:51:05:93:EB
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:27:60:14:31:13:77:17:9e:2b:1d:80:a2:4e:3c:2c:d9:28:
e7:36:3b:c9:c0:bc:7c:51:e2:c9:6f:25:0f:47:e5:98:ad:65:
40:83:b7:b4:7d:3f:69:9b:5c:43:3c:48:f9:09:a7:10:a3:a2:
98:10:21:cb:25:8a:de:8d:f5:43:59:63:c3:9c:28:41:fb:33:
c5:87:6d:d6:00:48:39:64:5c:4d:af:a7:46:86:51:96:cb:09:
7a:0d:5f:04:64:05:69:68:1d:72:f2:e7:95:cc:95:69:bb:d0:
19:ce:8c:d6:f4:5e:bf:2f:3b:7f:c3:6f:bb:d7:bf:8b:f7:7b:
d4:2e:e7:21:5a:f4:17:3e:f4:41:15:fb:f2:e7:a5:06:43:04:
db:0d:16:c6:31:35:69:fb:ae:ab:f1:25:c7:da:ce:9c:ba:9b:
e8:49:15:89:83:5c:20:ea:5a:c8:b9:35:de:05:01:ba:a8:d4:
33:c9:10:d4:97:a0:0b:73:1d:99:fd:51:23:64:21:aa:46:f1:
82:90:bb:49:56:23:4d:4c:7c:70:cd:75:00:84:a0:2c:d1:2f:
38:15:b0:e2:7c:a2:3c:bb:d3:91:86:26:c7:fe:c9:aa:0f:99:
7e:aa:19:3d:d6:cb:7d:91:03:2f:99:06:12:b7:41:0a:79:87:
e9:57:27:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:33 2026 by rpki-client