This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
File: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft (raw, json)
Hash identifier: TfOe5gKRqIWsdreWO6JXtLMzXqNJH21SB8NATxlmJeE=
Subject key identifier: 2C:CC:1F:8B:4F:51:8F:7A:8C:E8:72:F4:E2:BB:5C:A7:9E:7B:C5:F3
Authority key identifier: F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
Certificate issuer: /CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Certificate serial: 019C424679A715A202F5E415BA7D6EAB22CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
Manifest number: 03EA
Signing time: Mon 09 Feb 2026 12:00:40 +0000
Manifest this update: Mon 09 Feb 2026 12:00:40 +0000
Manifest next update: Tue 10 Feb 2026 12:00:40 +0000
Files and hashes: 1: 8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl (hash: yuPStjHaJL1eBqSvoivuzdhAFRVP4ZoXBIH9c5Yc6hg=)
2: tOXIM_UKk48wJZ7VMtkwvlrqHuM.roa (hash: YwRhYkrIDO2b6TPx5Ws8xbL48qbasailmg+aD1VygMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:79:a7:15:a2:02:f5:e4:15:ba:7d:6e:ab:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e9ac9cf905a16c5afa0e5035ffa7a2352e13f4
Validity
Not Before: Feb 9 12:00:40 2026 GMT
Not After : Feb 10 12:00:40 2026 GMT
Subject: CN=2ccc1f8b4f518f7a8ce872f4e2bb5ca79e7bc5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:0e:f7:4b:90:bc:a3:eb:a1:5e:c5:2a:c0:
38:4d:15:28:76:cf:7f:3d:f1:73:c4:dd:c1:29:9a:
e8:18:a7:14:f9:2a:39:8b:7c:41:13:0c:75:c0:05:
a3:30:47:c8:28:cb:3b:c8:29:5f:18:2f:77:9c:65:
f3:88:9c:76:41:1f:0f:a6:9f:ca:08:99:58:17:1f:
f1:76:4f:67:46:89:6b:a5:4c:d5:c8:43:ed:e0:10:
46:c7:52:0e:74:97:5f:5b:74:61:c7:a9:2d:ef:24:
47:06:ba:0b:98:ec:a8:6e:a8:94:f5:35:55:f0:4f:
46:ff:89:af:e5:31:2f:6d:31:ab:05:64:d9:55:47:
d1:d2:1c:5a:a9:de:13:f8:28:f5:8c:64:fa:09:f9:
6c:e1:e8:81:d4:99:4b:d3:3f:df:2f:ce:12:4e:4e:
f7:03:5c:4c:d7:26:59:f5:39:53:c2:76:0c:fe:b7:
b6:d8:8f:9f:8a:be:5d:1d:a0:17:00:1a:55:8e:46:
ad:75:c7:87:e7:cf:90:6b:56:e7:2a:be:60:9b:90:
8d:09:b5:91:62:10:6d:2b:5f:88:a6:d9:1d:6c:b3:
eb:29:30:1b:41:cb:76:b0:a4:1f:84:d2:46:0e:25:
bf:3d:b1:fd:ac:fd:8c:e3:23:01:72:d4:72:e4:37:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:1F:8B:4F:51:8F:7A:8C:E8:72:F4:E2:BB:5C:A7:9E:7B:C5:F3
X509v3 Authority Key Identifier:
keyid:F0:E9:AC:9C:F9:05:A1:6C:5A:FA:0E:50:35:FF:A7:A2:35:2E:13:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OmsnPkFoWxa-g5QNf-nojUuE_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3527b0-d67e-415d-8140-6ac10b4d2bbc/1/8OmsnPkFoWxa-g5QNf-nojUuE_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:98:34:84:45:49:45:8b:aa:66:55:51:7a:26:56:05:0e:0e:
36:c5:16:b3:ec:e3:a7:71:1a:dc:81:5a:2a:ef:29:50:b2:47:
05:5e:5e:a6:e1:73:43:5b:62:e7:42:6b:ab:79:68:51:72:6a:
c8:67:ef:8b:58:e6:2e:8f:32:c4:6f:28:e2:9c:57:41:f6:58:
24:04:f5:0d:1d:6f:2e:13:6f:f5:a1:03:6a:16:20:64:91:c1:
c0:9a:96:ab:e3:d2:02:75:20:dd:3c:61:93:b1:06:3d:ff:8d:
22:2f:c8:63:47:19:33:84:fe:7e:9d:8f:2c:78:33:f3:5c:68:
6b:0c:d2:3b:2a:6b:b9:5a:16:16:88:d6:6a:9e:14:96:e5:bd:
24:51:da:ea:fa:0c:ff:08:37:38:5a:17:87:3e:12:15:f8:d5:
73:da:7c:e0:f7:72:e6:53:e9:bc:ea:05:76:52:49:b5:d5:e3:
60:a6:bb:0e:f3:17:a6:ad:cb:72:b5:3d:6a:b2:0b:40:82:6f:
8d:79:e7:fa:d4:7b:05:57:81:49:6c:86:73:89:85:0e:0f:ad:
b1:ed:eb:50:63:3b:43:cf:c2:30:58:b0:69:e3:f0:2f:22:09:
63:79:a1:34:f2:3e:6b:f8:8f:47:b9:16:8e:d3:33:ae:65:79:
0c:46:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:52 2026 by rpki-client