This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: fXBAM4JbCcwT5f7Xv8IXOs6I+Kz9snPnkMxn4R7HShY=
Subject key identifier: 12:25:F4:EC:99:BF:78:57:83:AC:2E:30:9C:E2:C4:58:E1:26:2F:95
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019C420FB6452D9C535C01F7AAC73B22B5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 11:00:51 +0000
Manifest this update: Mon 09 Feb 2026 11:00:51 +0000
Manifest next update: Tue 10 Feb 2026 11:00:51 +0000
Files and hashes: 1: CbbyPFwOxRt_djihEbyH4dswgkU.roa (hash: zzZiYXhJH80jdIaDpqCJXODjR57XtJuUcOZwLqkue/Y=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: sWIMRUgFOhxoqmUnGedz4na3L0D0yYsiRaNGp9G7+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:b6:45:2d:9c:53:5c:01:f7:aa:c7:3b:22:b5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Feb 9 11:00:51 2026 GMT
Not After : Feb 10 11:00:51 2026 GMT
Subject: CN=1225f4ec99bf785783ac2e309ce2c458e1262f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:5d:96:d1:62:46:76:c0:82:41:31:33:24:
13:f2:c8:3a:29:c3:67:2d:b3:1a:11:16:9a:64:ae:
d7:a0:34:c5:0e:b0:49:e9:cc:43:21:19:d2:1e:05:
89:27:5f:0a:9c:21:b1:d5:1a:23:f8:af:36:23:35:
cc:56:d9:44:24:e6:0a:3a:ea:df:ea:72:6c:1e:b4:
a3:10:35:4f:26:cd:96:5e:cd:13:13:6b:be:bb:9b:
c3:f2:40:fc:9a:b5:76:b5:65:7d:da:a8:98:23:56:
94:da:5b:22:64:cb:d9:30:de:ce:83:43:dd:67:aa:
91:a7:f9:6b:99:41:8a:c0:85:f5:b1:3c:6e:e3:e8:
81:0d:72:9f:85:79:20:7a:af:f1:36:3a:c1:f9:e8:
e6:cb:97:41:ae:16:08:7b:89:d6:e0:c3:7b:07:9b:
6d:8c:92:a5:65:7a:3d:01:f6:ef:05:c8:39:17:8d:
93:9f:59:7b:08:cf:9b:a6:76:e7:9a:74:e4:ef:bd:
cf:07:c3:1d:c2:15:c3:e6:4f:47:e5:bb:6c:f9:8c:
58:ca:24:6a:aa:26:00:21:d6:43:04:0c:25:89:41:
09:98:77:79:dc:53:a5:a0:a9:57:8f:b4:34:40:50:
88:82:24:66:d1:b3:53:e5:57:98:b2:2f:bc:0e:f6:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:25:F4:EC:99:BF:78:57:83:AC:2E:30:9C:E2:C4:58:E1:26:2F:95
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:1c:e3:63:ad:76:e7:fc:08:d1:25:c1:11:bb:a6:69:8a:
20:49:ad:13:c1:75:67:40:cd:67:a0:3b:32:67:d9:e2:e3:b5:
55:9e:5a:fe:26:d7:f5:ad:f4:54:30:c9:90:5e:d6:93:27:b5:
5f:76:06:e1:42:72:08:d5:14:e3:bc:d6:2e:7b:4d:b8:7f:60:
38:00:5d:fd:6a:a5:b7:ed:92:35:3e:29:7e:38:77:36:31:50:
d5:79:19:d0:a7:f4:e1:2e:95:66:07:be:5e:04:c9:a7:1e:eb:
8c:48:72:af:b6:59:0d:e6:8c:fe:f8:7d:65:26:23:a8:25:cc:
f9:78:d4:d5:e1:47:86:a6:91:0f:8d:6d:71:a5:3d:6d:72:7e:
7d:d3:69:f9:1e:90:86:e5:7d:ce:35:b6:a2:2c:22:bc:c5:02:
5e:cf:de:fb:c8:4f:df:d9:52:22:63:6a:ff:33:24:f1:17:4e:
06:4e:26:4b:4e:5e:39:7e:27:20:cd:a3:79:20:f7:28:c4:1f:
f3:30:14:6a:54:d8:9d:b4:d6:d3:9a:bb:a3:84:88:27:7f:3f:
aa:b8:db:89:3e:0f:47:47:96:56:c4:5c:dd:1a:0b:f0:52:be:
c6:bc:36:05:58:8f:d6:9e:33:a8:e5:e5:ea:f4:c4:28:77:65:
e8:a7:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:24 2026 by rpki-client