This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
File: OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft (raw, json)
Hash identifier: RaOULZjkgoPfHsjWOlu7bVr9gvAzyLakAdwYs4OOAhM=
Subject key identifier: 94:9D:70:E9:12:82:7C:30:41:75:36:4A:8B:4B:39:56:0D:9C:FD:79
Authority key identifier: 39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
Certificate issuer: /CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Certificate serial: 019C41D84D9EA10155587064DFE68A067848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
Manifest number: 0786
Signing time: Mon 09 Feb 2026 10:00:20 +0000
Manifest this update: Mon 09 Feb 2026 10:00:20 +0000
Manifest next update: Tue 10 Feb 2026 10:00:20 +0000
Files and hashes: 1: KYeOuPy-sh1SLcoPNXSyZQIU0MI.roa (hash: Sr5K6ccTAcON+APYQXJhtPURh7qUu9XiFdatnlSg6xs=)
2: OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl (hash: hWe8heQkiorzpqZbo6alneVfuON4zK1ck5AoWDOmODo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:4d:9e:a1:01:55:58:70:64:df:e6:8a:06:78:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964cdeee346116cb9641ba4800f55b9906dc3a5
Validity
Not Before: Feb 9 10:00:20 2026 GMT
Not After : Feb 10 10:00:20 2026 GMT
Subject: CN=949d70e912827c304175364a8b4b39560d9cfd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:d5:8b:9a:8a:b7:ec:34:db:9b:54:39:6d:
b7:66:b9:de:4b:8f:6e:ce:12:3e:01:85:bc:b9:f7:
ee:79:9a:81:e5:e4:90:8d:c1:76:c7:80:99:10:13:
cc:2d:74:97:03:f1:43:28:e5:4f:98:9e:73:ad:4a:
30:b9:8f:fe:be:14:df:a3:2f:cf:a6:77:06:1b:30:
55:6f:a4:4b:65:2b:52:78:c1:ba:cb:37:40:e9:42:
3e:bb:de:13:44:3a:61:1b:75:fb:59:e3:79:68:b4:
94:01:cf:5e:5e:1d:c1:4e:e1:fb:35:60:e8:65:8d:
c8:8c:21:12:31:fd:b7:ce:b8:82:77:9d:c9:5f:34:
b3:ef:a3:d0:74:82:2a:85:93:c6:8d:af:f9:1c:56:
19:7f:0e:0c:32:6e:2c:70:e0:9e:0d:28:90:e5:38:
48:c9:91:8e:f3:c0:02:70:4c:b6:63:74:f4:11:f2:
df:69:c9:bf:89:1f:43:1c:f1:5a:1c:99:93:88:87:
54:21:10:18:e2:57:65:9f:3f:cf:b7:6d:9c:8f:8a:
6a:6a:0f:01:96:96:17:a4:28:05:64:5c:1c:6a:be:
f8:d1:28:99:a7:74:3f:60:49:59:24:ec:04:54:f3:
27:2e:f2:d7:9b:a6:48:46:e8:1b:b7:a1:ce:c4:9c:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:70:E9:12:82:7C:30:41:75:36:4A:8B:4B:39:56:0D:9C:FD:79
X509v3 Authority Key Identifier:
keyid:39:64:CD:EE:E3:46:11:6C:B9:64:1B:A4:80:0F:55:B9:90:6D:C3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWTN7uNGEWy5ZBukgA9VuZBtw6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a018a7-6b5c-4239-89b7-2a0247fbb6d5/1/OWTN7uNGEWy5ZBukgA9VuZBtw6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:c1:33:ca:f1:74:91:4e:be:89:6c:ca:c7:24:c7:40:1f:
99:f1:8c:a0:19:87:45:48:9b:9e:19:a5:62:d6:84:5f:4c:3c:
c9:07:28:f3:8c:52:d2:6a:f5:8b:95:d7:e5:d0:cc:33:9b:75:
f0:81:9d:12:7a:68:dd:a4:90:54:ad:be:7d:de:5a:9b:fc:37:
31:19:f0:e8:d2:28:08:0f:55:7f:7a:f7:64:c8:1d:c6:9b:de:
f5:9c:d2:f6:ec:12:18:28:9b:3b:a1:85:24:d6:f8:49:68:cd:
fc:fc:6b:75:e2:0c:5f:fe:4a:6f:e9:30:28:ec:11:49:b5:27:
96:c4:b2:a2:67:dc:1f:bf:0f:36:6c:ee:1d:6b:1c:c0:8d:38:
0a:a5:00:53:32:37:4b:0f:34:f9:e9:33:a4:28:f0:f6:59:f9:
6d:f3:dc:75:a3:59:f7:06:7b:10:7e:ca:9a:f7:e3:05:6b:d5:
d9:2d:09:94:e7:f3:63:2e:29:c1:26:23:e9:40:d0:e4:46:e8:
2a:f7:e1:4e:8e:95:53:bf:44:c1:d8:82:d2:fc:3f:37:4f:52:
a7:1b:5d:b0:c1:9a:9b:a4:10:f7:b1:2c:69:05:2c:36:e5:cc:
07:73:8f:0c:41:b9:35:91:d1:6e:02:c4:cf:2d:48:56:e5:c4:
88:1b:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:36 2026 by rpki-client