This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: Zr4kL9CFKPa/WAWEXlNq2ETd8g5BWox8abz4JLgJadI=
Subject key identifier: 99:E9:B0:A7:A9:E7:9C:F4:75:FE:38:84:F6:0E:26:B0:CA:6D:FE:FA
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019C40FCFF00E93F4C13E4DEB8C907440A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 0435
Signing time: Mon 09 Feb 2026 06:00:47 +0000
Manifest this update: Mon 09 Feb 2026 06:00:47 +0000
Manifest next update: Tue 10 Feb 2026 06:00:47 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: //AAJdBImc34SGA0OUb5Ly2S1DqaLjNo5h2aobQhw8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:ff:00:e9:3f:4c:13:e4:de:b8:c9:07:44:0a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Feb 9 06:00:47 2026 GMT
Not After : Feb 10 06:00:47 2026 GMT
Subject: CN=99e9b0a7a9e79cf475fe3884f60e26b0ca6dfefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:5d:03:50:03:4a:59:5f:c0:ae:86:4d:19:
44:b3:b3:c7:d5:f1:ae:28:47:ef:02:db:2c:30:8e:
2e:85:ec:4a:c3:fc:ee:b3:21:07:81:c3:dc:50:a8:
dc:d8:9c:7a:65:37:37:45:22:c3:a8:1c:f8:d2:76:
0e:72:f7:86:8c:78:d0:fb:22:83:84:ec:f6:f0:6e:
40:f3:8c:76:08:97:3a:6a:63:1c:97:74:02:fd:43:
60:06:2c:c8:95:60:c6:bb:be:77:c9:d3:13:c9:60:
8f:38:7d:a6:4f:ef:25:7c:27:ac:2d:d1:80:06:db:
bb:e9:2b:de:a7:12:a4:0f:34:20:d5:81:bf:5a:2a:
d0:96:40:60:7d:f9:55:99:43:f4:31:ea:66:69:11:
c7:1d:e2:00:e6:ae:52:35:9a:3c:1f:4b:75:42:bc:
60:a5:85:ff:04:71:82:2a:16:c9:4a:50:f7:6c:f8:
4c:cf:ab:82:ad:e1:48:3c:94:cb:f7:c1:a9:ea:50:
4a:8b:97:d1:e5:58:16:62:f4:67:23:31:ca:82:15:
59:e7:73:01:49:34:ef:65:95:99:b3:11:01:e4:d7:
74:11:c5:0f:99:03:ca:79:d0:ee:8f:39:04:a7:0f:
b6:c6:80:1b:64:0c:8f:09:65:0e:bd:3e:58:9c:81:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:B0:A7:A9:E7:9C:F4:75:FE:38:84:F6:0E:26:B0:CA:6D:FE:FA
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:fe:4a:e8:61:f8:59:0b:e9:a7:5b:ea:bc:3b:1a:38:ce:
3a:fc:15:08:1d:97:c1:81:72:61:3e:a0:43:cd:2f:c0:d0:19:
dd:d7:a4:f6:cd:e4:32:ac:58:cc:f0:38:4c:e3:df:67:eb:77:
88:15:4b:ce:c4:3e:77:d6:a7:4e:d7:c0:61:10:e5:b8:d5:43:
04:89:b4:69:4d:7d:41:4e:e8:09:8b:65:39:94:b9:35:5f:72:
df:db:45:c1:1c:5e:44:51:71:89:b6:af:1a:47:a8:af:4f:52:
e4:c1:7c:2f:66:02:5c:64:eb:e1:08:ea:2d:d6:1f:8e:78:b9:
c5:bb:ba:9c:47:32:cd:70:2f:ef:37:35:94:f0:54:54:c8:d7:
7c:dc:94:6d:02:39:a5:2e:e2:33:16:86:80:03:7f:24:1e:73:
de:0d:2f:e8:4f:c7:77:18:70:98:d8:a4:42:77:aa:5a:3c:e8:
12:62:5e:c7:77:d9:26:14:6f:23:2c:74:46:84:08:62:e7:d7:
ad:c5:a6:09:f5:02:74:f8:ce:38:b4:52:49:61:cc:d8:d3:be:
67:1c:c8:78:d6:d7:31:d2:fb:f3:06:ec:00:35:53:4f:f6:f6:
65:11:04:36:aa:de:48:ff:6d:3b:9f:1d:90:82:7b:e6:f6:fe:
aa:bf:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:10 2026 by rpki-client