This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: Kuk5GfDao7LgcOqSGsiL2tw61cZ8tFVE3EVxO4kXkg0=
Subject key identifier: C0:F8:AD:1B:88:30:EC:F6:D7:D7:ED:D2:99:3A:BA:8D:B5:27:26:C6
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 019C427E272ABF98AFB97307D6B7F60E3CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 0333
Signing time: Mon 09 Feb 2026 13:01:29 +0000
Manifest this update: Mon 09 Feb 2026 13:01:29 +0000
Manifest next update: Tue 10 Feb 2026 13:01:29 +0000
Files and hashes: 1: 4U-vWAkU_D-Vm4P_5qD2o7wqRK4.roa (hash: 9yVwmPXyL3uep7UrDkMA6UynM9g3AIcwrtrJCtL/ckw=)
2: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: 7nwYUQ2xAtDy2VflF/BIDE6KmkIKcO4+f8qE0Fix5gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:27:2a:bf:98:af:b9:73:07:d6:b7:f6:0e:3c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Feb 9 13:01:29 2026 GMT
Not After : Feb 10 13:01:29 2026 GMT
Subject: CN=c0f8ad1b8830ecf6d7d7edd2993aba8db52726c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:76:b6:04:94:63:7b:be:cc:84:17:21:da:
72:46:ff:50:29:1e:bc:9c:2a:de:63:3a:57:ca:87:
36:e0:81:11:f0:96:3d:ea:9e:0c:97:da:4a:31:4e:
a3:91:77:9b:0f:95:88:36:55:be:f0:77:94:5e:6d:
a1:79:ac:19:c1:6d:58:88:59:d2:ef:97:45:fd:08:
14:93:09:29:bc:06:a9:53:11:08:4f:cb:93:20:35:
93:55:66:7b:d6:a3:82:e1:c2:7a:ae:8b:53:02:7a:
36:5b:f1:3b:02:1e:e6:12:4f:92:77:88:d0:16:93:
49:af:53:a2:0b:df:4a:3c:da:6a:3c:9c:1e:84:9c:
2b:86:9c:9f:4f:4e:27:88:2e:ed:84:18:b4:ad:0c:
a6:51:e3:a6:5d:ed:6e:b7:31:4a:98:16:81:cd:4a:
98:c2:91:7e:5b:89:fb:1c:0f:37:af:e2:6c:ec:33:
b9:29:10:76:44:d7:ae:59:bb:99:6b:ab:32:87:cb:
55:f2:cb:89:17:23:4a:fd:44:60:14:42:29:94:79:
b4:f5:41:75:a5:a4:1b:d7:fe:b6:a2:da:27:70:6d:
6f:52:a6:64:59:fa:6b:1d:28:71:5f:d1:ad:3e:31:
8b:24:c8:fc:24:fb:63:72:68:c7:18:20:b6:0f:36:
36:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:AD:1B:88:30:EC:F6:D7:D7:ED:D2:99:3A:BA:8D:B5:27:26:C6
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:da:d1:41:be:e8:c7:68:b1:de:f6:35:ec:dc:d7:88:2f:
42:6e:ef:03:0f:9c:e0:af:3b:20:85:a6:03:e0:2c:eb:8d:00:
28:3a:45:ea:b7:0a:dc:cb:e6:26:e7:83:7e:f2:9e:47:06:24:
16:fd:33:55:77:27:20:4f:d1:83:82:39:cc:ab:2b:5d:f9:0f:
ff:d5:83:e3:a8:f3:01:3b:17:f1:af:d1:e2:59:6d:15:c3:a7:
12:97:eb:95:9f:81:f5:12:7f:81:fc:5a:7c:7c:9c:43:7d:f9:
12:e9:a4:41:6c:8a:a7:c5:74:c2:12:30:e7:bc:4e:ae:f0:76:
5f:60:22:21:c5:cd:9e:32:9b:d6:ca:2e:d8:b9:95:be:79:89:
81:2d:f3:8f:65:6f:cf:3f:d2:97:20:04:9f:ce:b5:5e:15:ce:
09:b9:15:8e:10:7e:37:27:42:d6:d3:77:69:90:67:86:9c:f6:
1e:59:04:2d:6b:c3:cd:67:eb:1f:d7:30:c1:a3:e1:48:94:47:
c3:c0:a7:45:dd:5e:8a:94:ee:44:10:ee:07:49:5a:96:51:09:
0d:14:71:ae:c0:26:6b:5a:a0:3e:dd:3f:77:40:89:ff:44:1e:
b3:e1:5f:e5:1d:3b:85:8c:91:9e:6b:c5:82:42:d1:fc:12:a7:
e7:b8:c2:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCficqv5ivuXMH1rf2DjzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmFhODBiMzEwYTRhZWVkMmMyMzNjZmU3ODJjNGYzNzlh
NjYyMDAwHhcNMjYwMjA5MTMwMTI5WhcNMjYwMjEwMTMwMTI5WjAzMTEwLwYDVQQD
EyhjMGY4YWQxYjg4MzBlY2Y2ZDdkN2VkZDI5OTNhYmE4ZGI1MjcyNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJ2tgSUY3u+zIQXIdpyRv9QKR68
nCreYzpXyoc24IER8JY96p4Ml9pKMU6jkXebD5WINlW+8HeUXm2heawZwW1YiFnS
75dF/QgUkwkpvAapUxEIT8uTIDWTVWZ71qOC4cJ6rotTAno2W/E7Ah7mEk+Sd4jQ
FpNJr1OiC99KPNpqPJwehJwrhpyfT04niC7thBi0rQymUeOmXe1utzFKmBaBzUqY
wpF+W4n7HA83r+Js7DO5KRB2RNeuWbuZa6syh8tV8suJFyNK/URgFEIplHm09UF1
paQb1/62otoncG1vUqZkWfprHShxX9GtPjGLJMj8JPtjcmjHGCC2DzY2mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD4rRuIMOz219ft0pk6uo21JybGMB8GA1UdIwQY
MBaAFKC6qAsxCkru0sIzz+eCxPN5pmIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQt
MDJkNTQ4MTJjYzZlLzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQtMDJkNTQ4MTJjYzZl
LzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9Pa0UG+
6Mdosd72Nezc14gvQm7vAw+c4K87IIWmA+As640AKDpF6rcK3MvmJueDfvKeRwYk
Fv0zVXcnIE/Rg4I5zKsrXfkP/9WD46jzATsX8a/R4lltFcOnEpfrlZ+B9RJ/gfxa
fHycQ335EumkQWyKp8V0whIw57xOrvB2X2AiIcXNnjKb1sou2LmVvnmJgS3zj2Vv
zz/SlyAEn861XhXOCbkVjhB+NydC1tN3aZBnhpz2HlkELWvDzWfrH9cwwaPhSJRH
w8CnRd1eipTuRBDuB0lallEJDRRxrsAma1qgPt0/d0CJ/0Qes+Ff5R07hYyRnmvF
gkLR/BKn57jCdA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:27 2026 by rpki-client