This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: FX7MBgO63F0CE5DOlzYQKvvrQGC6Ya7KxMr8Xfa8K/M=
Subject key identifier: 06:4F:03:8C:39:55:08:1D:56:D8:8C:D0:E4:E1:9E:B0:22:BA:1C:74
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 019C420FA1E0E2D73F70057B292AD91E1BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1816
Signing time: Mon 09 Feb 2026 11:00:46 +0000
Manifest this update: Mon 09 Feb 2026 11:00:46 +0000
Manifest next update: Tue 10 Feb 2026 11:00:46 +0000
Files and hashes: 1: LAK8MpI2c0abasjZoSw7_w7kgs4.roa (hash: clU497fVHM51q9eiZ1bT8jJiNXCByxpgSNSxbj5Sv9U=)
2: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: OtzEAY8I293aiAV3MxeYY7OrX74jHpgyelxYMW3ZDU4=)
3: jksHLXQsL8kIaSdyy1KKgItGkLM.roa (hash: SvVYKXT2yItHZ/QXEnN9YsWJ7pv9MmMOoAi6wKxSVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a1:e0:e2:d7:3f:70:05:7b:29:2a:d9:1e:1b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Feb 9 11:00:46 2026 GMT
Not After : Feb 10 11:00:46 2026 GMT
Subject: CN=064f038c3955081d56d88cd0e4e19eb022ba1c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:73:64:0d:0e:ef:45:e6:90:a5:70:0e:99:
a8:37:60:9a:f9:9f:44:9c:4f:3e:c3:1b:f2:6a:c0:
bf:dd:36:cd:f1:c8:df:8c:94:4f:51:67:81:05:70:
c8:58:15:fa:6b:43:0d:c1:cc:d1:90:b4:b4:9a:e4:
b4:ec:38:6a:82:50:3e:63:81:83:d0:31:ea:1a:db:
c4:05:63:66:fd:78:ff:6f:3e:c8:ec:f0:c5:45:eb:
a7:4c:db:81:ae:f8:4d:ba:29:90:37:e3:22:83:ff:
f4:2f:aa:ed:29:24:1d:76:76:0c:43:59:d8:ab:4d:
9f:af:ee:06:59:ba:a5:38:e5:49:62:62:5a:92:4d:
83:68:76:cf:dc:5d:d4:78:b8:65:52:fd:58:a2:fa:
25:b5:26:5e:d0:00:5c:35:2e:a4:85:1b:c1:35:02:
61:ac:b2:ca:c9:79:2b:59:f9:99:60:4b:4b:20:c1:
60:4e:34:9f:13:98:8d:76:aa:13:3e:21:d9:9a:72:
04:a2:17:4d:1e:27:f8:6a:fe:bc:db:af:10:21:3b:
f7:64:53:f1:f8:36:08:8d:da:60:c5:76:7b:72:64:
42:19:59:f4:fc:57:06:f4:4a:d5:b1:ac:64:a5:b3:
3c:3c:f7:1a:b0:33:e5:34:15:6d:a1:ab:b3:53:95:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:03:8C:39:55:08:1D:56:D8:8C:D0:E4:E1:9E:B0:22:BA:1C:74
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:46:bc:aa:42:7a:fd:c1:6a:4a:70:e1:cb:fd:51:9c:e7:6d:
1c:2e:d4:a5:7d:b2:b8:d1:58:b0:01:a8:84:55:fc:45:38:55:
49:43:6d:83:f7:73:40:5d:2e:21:44:77:12:92:8b:69:fc:05:
53:f9:19:d9:46:eb:c3:dc:a1:b1:07:5c:6e:61:b4:65:1c:35:
e7:a7:98:aa:36:56:e1:a5:82:0b:7b:91:dc:26:63:30:54:1d:
a7:9a:73:7a:7f:7d:78:17:d9:65:94:fc:71:a9:8b:8a:5e:92:
12:53:91:c6:f9:a7:55:8b:6f:6e:9f:05:82:d5:a6:9f:b8:d6:
82:e8:7d:48:14:bf:78:8f:86:cf:bc:b6:5c:6f:88:1b:96:de:
03:be:7b:c7:2c:d7:a8:60:68:45:eb:98:c4:cb:a7:d7:d8:be:
1f:d4:5f:1d:a0:c3:02:36:e9:b2:0e:8b:9b:bb:b0:78:1f:3a:
69:d4:fe:40:46:f0:45:d6:bf:78:56:dc:cd:1c:68:72:4f:c7:
3e:37:71:f7:fa:03:36:eb:94:fd:76:80:06:3c:a4:c4:5a:33:
31:95:b0:ee:28:2b:11:73:e3:6f:32:ff:e9:93:60:8c:05:df:
ed:6c:84:97:5a:ea:58:c7:26:48:5e:72:b0:02:ad:84:3f:c1:
9a:88:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:57 2026 by rpki-client