This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
File: OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft (raw, json)
Hash identifier: Gn1OmyVIwWLOkwOyUkClK322U4Y+1NNfS1/hR7sxXbo=
Subject key identifier: 63:50:11:3B:97:28:85:12:DB:47:3F:C8:41:D9:80:23:5D:7B:8E:51
Authority key identifier: 39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
Certificate issuer: /CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Certificate serial: 019C420F7338550980FCED43161B671DCD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:34 +0000
Manifest this update: Mon 09 Feb 2026 11:00:34 +0000
Manifest next update: Tue 10 Feb 2026 11:00:34 +0000
Files and hashes: 1: 6VFxjGZ8bOih2br-G1vsbpV4A1k.roa (hash: Bf69rzBJpwQt9lR7pHLJHrwn+ppr7MyMbshU+Z/vpy4=)
2: OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl (hash: 2NResG4AzSjPyXWjuN/CCgMyZvqoh5XVJFL/UdAU6so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:73:38:55:09:80:fc:ed:43:16:1b:67:1d:cd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c6f73b3c83881ffc8e6603a6b64f45365acf1
Validity
Not Before: Feb 9 11:00:34 2026 GMT
Not After : Feb 10 11:00:34 2026 GMT
Subject: CN=6350113b97288512db473fc841d980235d7b8e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:7f:a2:de:09:cb:bb:48:82:6a:bd:09:8e:
25:08:40:7e:b7:da:3d:62:f5:60:e4:7c:9c:f0:a5:
68:03:d4:b3:4b:e9:f5:08:2c:e2:66:13:81:6c:1b:
7a:97:6b:4c:42:b4:e7:0a:84:c3:e8:ef:7d:86:4a:
1e:e1:2a:0a:e5:6d:7a:2c:b6:ec:d2:07:ef:ad:ba:
25:73:23:d7:c8:e2:03:e0:68:8c:6e:95:37:c0:22:
94:a5:0c:16:d4:57:4f:02:da:ca:24:29:65:2d:fd:
a8:11:42:93:2c:0b:97:6d:71:ec:ec:d7:d0:3e:d5:
59:ac:6c:56:3d:16:42:4b:9b:ba:03:7e:26:07:f2:
36:47:e3:bf:4a:58:80:1e:f0:27:1e:3e:e4:b9:7b:
8b:80:1b:0a:d4:e3:47:4e:96:76:ae:a3:d1:6d:bd:
cd:6b:48:04:bb:2c:1d:b6:6c:f2:60:a1:63:e7:a5:
f5:4b:9e:6e:b6:39:94:82:bd:0e:ba:7b:83:3c:e7:
e0:e5:2c:e8:cb:d0:7b:06:d9:ab:b7:84:a1:32:4e:
0d:e8:af:7e:6a:84:25:ad:1f:7c:14:3a:2d:c2:55:
59:e8:5a:df:53:8f:2d:f6:e0:91:0a:22:4a:55:cc:
b9:e3:3e:c0:ef:78:28:69:b5:df:a0:39:5e:1d:50:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:50:11:3B:97:28:85:12:DB:47:3F:C8:41:D9:80:23:5D:7B:8E:51
X509v3 Authority Key Identifier:
keyid:39:4C:6F:73:B3:C8:38:81:FF:C8:E6:60:3A:6B:64:F4:53:65:AC:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxvc7PIOIH_yOZgOmtk9FNlrPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0c3d2a-adb7-49e9-adfa-6968e2d81826/1/OUxvc7PIOIH_yOZgOmtk9FNlrPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:01:d0:37:f2:c8:6b:b4:ab:86:23:ad:16:6c:d2:a9:39:
3b:81:28:c1:b1:8c:bd:b9:e1:6a:ef:22:7c:7b:ee:49:6e:36:
e2:85:8d:b7:1e:b5:9c:f1:11:06:dc:26:26:68:e5:3f:dd:bd:
4c:ad:79:81:73:5e:e4:22:03:1e:43:a5:a2:0e:ef:dd:0a:27:
de:95:df:00:72:4a:44:d6:f2:48:c9:b8:f6:d5:db:de:ed:86:
8b:a0:44:fe:0f:9c:4f:39:b6:a9:a2:41:de:22:0a:84:e3:e1:
fb:9c:06:f9:b2:04:e0:c8:32:35:9a:d5:0d:c6:67:58:64:07:
ef:6b:00:62:b4:bf:06:ec:f0:ea:b8:69:b6:b8:26:22:bf:05:
98:70:65:80:4b:d1:fa:94:f1:b9:da:1c:2d:c0:38:a0:bc:04:
1e:f9:ed:ae:1e:2d:36:47:89:81:1b:f3:44:7c:01:72:f3:e2:
5f:cb:05:96:f1:7a:b7:86:ca:a8:1c:17:fa:df:3c:89:23:84:
d8:18:fb:f4:3c:68:84:14:15:b9:9d:be:bf:f3:07:49:8e:ea:
b0:ed:fb:bb:0f:16:ba:1b:e5:65:a3:c1:83:08:f6:25:52:30:
cc:29:2e:c6:6f:06:d1:56:c5:a0:2d:b3:96:75:d3:dd:53:ac:
6d:95:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:25:53 2026 by rpki-client