This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: tIrH6hAn95s6oVJpXaMi8vjRER7rP+pXuDNnQG72Za4=
Subject key identifier: 8A:F3:46:DF:E8:87:C3:0C:CE:70:56:63:F1:97:88:3C:80:66:5E:00
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019C4133A9C5D1481E1057838D713F8DD3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0E2F
Signing time: Mon 09 Feb 2026 07:00:30 +0000
Manifest this update: Mon 09 Feb 2026 07:00:30 +0000
Manifest next update: Tue 10 Feb 2026 07:00:30 +0000
Files and hashes: 1: 5u5zeseIIAH3rUGwZvq3TcUwkp4.roa (hash: TkiEDmRqN7mva7bSv299QA1BJ0MJDg4yMGlz2EkHVWc=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: +6A/aZKw6xd4EM+B2Qws3jmhJy9RnzWhQDiqw7ARQzk=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:a9:c5:d1:48:1e:10:57:83:8d:71:3f:8d:d3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Feb 9 07:00:30 2026 GMT
Not After : Feb 10 07:00:30 2026 GMT
Subject: CN=8af346dfe887c30cce705663f197883c80665e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:d8:dc:a6:27:02:6f:db:d2:16:50:98:1c:
89:be:1c:f8:39:97:05:09:1f:17:ab:90:d0:5f:ed:
e3:52:e8:8a:b6:64:d1:c9:1d:5e:c9:ad:67:73:42:
62:7c:53:c3:a6:0a:32:c0:0d:ac:95:e2:5f:1b:9d:
d8:2b:f4:2b:27:2d:0a:fa:a3:a3:17:b4:5d:39:bf:
e2:88:95:ec:00:bd:3d:5c:83:4a:12:da:19:e0:bb:
7e:e1:e0:38:b3:98:97:64:ba:e8:72:e0:fd:24:fc:
73:cd:b6:03:b5:77:cd:55:01:74:c0:8d:ce:cb:3e:
74:29:86:df:84:04:b2:d2:2f:c0:23:19:89:a8:5d:
26:d3:91:19:a9:cb:36:11:39:46:18:f2:b6:d5:09:
ff:a1:94:a9:35:10:83:93:e7:cc:17:18:7d:dc:9f:
ad:49:e8:8b:15:4e:39:bf:de:d2:17:1e:51:6d:61:
c4:bc:c9:10:0d:2b:29:a3:3c:0d:19:33:d9:aa:1c:
98:0b:69:7e:76:bc:db:12:f5:d3:73:b7:06:69:6a:
44:14:be:e2:74:02:64:70:c6:e0:ad:26:ae:88:74:
84:c4:54:af:0a:74:82:69:51:b4:52:01:62:85:c4:
21:bd:34:f4:7f:54:4d:13:25:f4:2b:4d:82:ab:1b:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F3:46:DF:E8:87:C3:0C:CE:70:56:63:F1:97:88:3C:80:66:5E:00
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:b7:1a:fc:82:cb:bf:ce:8f:ae:47:52:38:a7:0a:37:5f:
91:c1:b1:86:c3:0b:c5:be:c2:85:ab:ee:bc:7d:fc:23:de:e0:
4b:c0:b6:ae:53:f7:55:2a:9d:fb:3a:e8:8c:65:2d:be:8a:eb:
9e:22:62:4e:48:ba:1e:b5:56:3b:8c:75:aa:bb:d2:2c:68:e8:
57:70:43:9e:40:f8:af:c4:b6:51:13:3a:40:d5:ee:e8:05:a5:
1b:3d:27:0a:ba:f3:7c:c3:a3:ad:d7:33:0d:5b:66:31:60:ee:
1e:75:85:18:62:ca:f1:48:1b:fd:8a:b8:28:60:d1:7f:1f:96:
1d:37:81:dd:87:52:aa:79:61:fb:e7:75:8a:3a:bc:d4:2f:a9:
ce:e8:9c:74:b3:ea:d7:f4:9f:a5:62:af:7d:1d:d6:49:c3:af:
e5:23:b5:21:46:22:fc:16:dc:4e:4d:fd:87:aa:ac:12:07:63:
da:04:4b:d1:64:18:36:a5:47:db:0e:51:a4:c6:c5:29:65:dd:
72:e2:38:1e:9f:11:89:a2:96:a7:d8:b7:6c:11:9a:38:04:dc:
6c:a7:54:22:55:a2:0a:85:59:84:0e:37:70:d6:27:91:11:38:
7e:e4:0f:dd:da:71:19:fb:fd:ff:93:be:d7:98:b2:dc:eb:58:
49:c6:d5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM6nF0UgeEFeDjXE/jdPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOGIxNzZhN2Q5MmU1MDFlZWRhZWY2YzYwZThjZTNhNjhk
NzUyMjQwHhcNMjYwMjA5MDcwMDMwWhcNMjYwMjEwMDcwMDMwWjAzMTEwLwYDVQQD
Eyg4YWYzNDZkZmU4ODdjMzBjY2U3MDU2NjNmMTk3ODgzYzgwNjY1ZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRTY3KYnAm/b0hZQmByJvhz4OZcF
CR8Xq5DQX+3jUuiKtmTRyR1eya1nc0JifFPDpgoywA2sleJfG53YK/QrJy0K+qOj
F7RdOb/iiJXsAL09XINKEtoZ4Lt+4eA4s5iXZLrocuD9JPxzzbYDtXfNVQF0wI3O
yz50KYbfhASy0i/AIxmJqF0m05EZqcs2ETlGGPK21Qn/oZSpNRCDk+fMFxh93J+t
SeiLFU45v97SFx5RbWHEvMkQDSspozwNGTPZqhyYC2l+drzbEvXTc7cGaWpEFL7i
dAJkcMbgrSauiHSExFSvCnSCaVG0UgFihcQhvTT0f1RNEyX0K02Cqxv9UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrzRt/oh8MMznBWY/GXiDyAZl4AMB8GA1UdIwQY
MBaAFKOLF2p9kuUB7trvbGDozjpo11IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTIt
ZWZlNzljMjU0ZTI1LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84MTAwZGItNDQzYS00YzdlLWJiZTItZWZlNzljMjU0ZTI1
LzEvbzRzWGFuMlM1UUh1MnU5c1lPak9PbWpYVWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcp23GvyC
y7/Oj65HUjinCjdfkcGxhsMLxb7ChavuvH38I97gS8C2rlP3VSqd+zrojGUtvorr
niJiTki6HrVWO4x1qrvSLGjoV3BDnkD4r8S2URM6QNXu6AWlGz0nCrrzfMOjrdcz
DVtmMWDuHnWFGGLK8Ugb/Yq4KGDRfx+WHTeB3YdSqnlh++d1ijq81C+pzuicdLPq
1/SfpWKvfR3WScOv5SO1IUYi/BbcTk39h6qsEgdj2gRL0WQYNqVH2w5RpMbFKWXd
cuI4Hp8RiaKWp9i3bBGaOATcbKdUIlWiCoVZhA43cNYnkRE4fuQP3dpxGfv9/5O+
15iy3OtYScbVrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:31 2026 by rpki-client