This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: It8wOE2K6mBe4I7yDjj0MSr/XR5YgDDoAEmwcFfS+EE=
Subject key identifier: 82:B6:A9:DF:DB:10:2E:B7:65:82:27:E3:14:24:9E:55:F0:97:18:8D
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 019C43595078F216A1F1D16194148CCEB2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: 6EaN192CjrCwlHATB-QjEseTMPI.roa (hash: gRsvMkimlDX2AdHsbVLZmaIf2SyXZuU/L2zLOOUZzvk=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: kDIZ96WaVCCQm1b912DXsvbHfGF/X8j3qr3/4ZhuGok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:50:78:f2:16:a1:f1:d1:61:94:14:8c:ce:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=82b6a9dfdb102eb7658227e314249e55f097188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:7f:2e:e7:67:3d:f9:5e:59:17:69:cd:51:
55:17:ea:28:d9:74:75:27:37:57:24:47:b6:04:1a:
55:2a:70:3a:40:23:e5:e1:09:53:89:20:54:cd:ea:
ba:4f:dc:bd:6e:e7:52:41:ba:57:96:cb:11:83:34:
05:fe:61:11:25:37:57:af:9f:f8:90:6d:50:f4:92:
de:4b:55:7f:d6:b0:59:3e:ac:42:77:d4:e1:79:f5:
23:a4:da:ca:3b:e5:2e:98:ac:dd:4b:b4:eb:c1:38:
e1:ae:ca:f4:70:e1:f8:37:56:3e:99:13:90:db:57:
02:e5:8b:63:74:61:e2:c6:6d:dd:94:30:a7:b4:37:
43:a1:ab:b4:a7:79:7f:19:ef:4b:b4:0b:d3:49:32:
5a:2e:ef:51:b4:40:cb:c4:77:90:2d:f1:1b:3f:13:
c9:c7:0f:08:79:a6:7a:99:dd:66:b8:47:52:80:6f:
8f:72:30:2e:a1:f3:90:69:6b:0d:eb:a1:8a:c6:86:
e4:2a:a6:95:18:bc:55:46:fc:51:9b:84:f9:88:5d:
9d:fc:7b:c3:32:56:f9:53:70:96:44:f7:af:5e:a4:
42:57:d0:bf:4b:6c:35:f0:db:3d:3b:b7:72:b6:27:
00:1f:be:87:0c:2a:25:d3:ad:60:1d:7e:e1:35:c7:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:A9:DF:DB:10:2E:B7:65:82:27:E3:14:24:9E:55:F0:97:18:8D
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:09:76:69:12:99:64:da:1c:aa:e6:34:88:3f:2b:b8:ee:e2:
8c:b3:d5:9c:7e:36:3b:80:0e:b8:ac:5a:36:95:66:e2:e5:3f:
b2:19:2e:d1:f8:f9:ee:7d:f3:eb:9a:79:43:b5:9f:11:a0:86:
b6:3f:bd:e4:08:37:5d:fa:1f:9e:4a:35:4e:e0:a3:e3:07:c1:
e0:8c:81:b9:19:f8:ad:40:a3:49:db:d7:56:b0:13:86:ec:4f:
ed:ad:86:04:93:64:f5:54:b8:5e:68:8e:ca:f6:6d:8a:07:76:
b5:df:ca:81:f0:9b:5c:57:a1:f2:ae:0e:9f:c9:d2:14:ab:4d:
de:ce:02:9c:b5:fe:f6:a9:9e:cc:1b:c3:b4:7d:44:d3:68:e0:
78:a5:70:74:b2:dd:aa:d2:d9:ec:7e:ea:2a:a6:5f:d7:88:4c:
be:a3:24:2e:02:dd:00:26:35:a0:02:e3:a4:3b:8e:5c:f7:17:
2f:d4:3b:81:67:1b:cb:54:85:a3:02:2c:5c:3b:56:28:72:46:
6e:93:1d:28:6f:bc:d2:9d:e9:f9:5d:01:09:03:13:67:93:a9:
0d:06:d5:40:50:44:73:fb:e5:1a:36:f3:2f:c7:31:62:0e:26:
c4:3d:6d:8e:0e:bb:b3:72:99:2b:a6:5e:1c:10:a7:8b:3f:f4:
2b:f0:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:20 2026 by rpki-client