This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: yjt4N9ZdauMqX397l00Q/QecDALpWQhlm1CutL1Q+GY=
Subject key identifier: 36:E3:21:70:0E:68:84:1E:CB:EC:F0:B8:E4:8C:61:5C:9D:76:D5:8E
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 019C41D831C50A1318D9E7F6914BF4D3B4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 1704
Signing time: Mon 09 Feb 2026 10:00:13 +0000
Manifest this update: Mon 09 Feb 2026 10:00:13 +0000
Manifest next update: Tue 10 Feb 2026 10:00:13 +0000
Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: iYigsfnXNGUlE8HscNvhGIaaUhOtVa3YjkJpN2cl45A=)
3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:31:c5:0a:13:18:d9:e7:f6:91:4b:f4:d3:b4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Feb 9 10:00:13 2026 GMT
Not After : Feb 10 10:00:13 2026 GMT
Subject: CN=36e321700e68841ecbecf0b8e48c615c9d76d58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:82:9c:58:54:61:e8:d3:dd:7a:2a:40:3a:
6a:72:32:85:8d:30:b4:20:20:e6:ea:36:ae:b1:07:
94:6c:e2:f7:9b:8b:ea:93:1c:7c:7a:6d:31:5c:5b:
5c:24:4b:86:5a:22:6a:86:ad:30:49:d2:f9:2e:7a:
03:e4:a6:a0:ac:3c:55:30:e3:d5:6d:b5:52:04:5d:
79:b4:06:a6:5b:8c:e2:42:6c:ae:b6:01:9f:13:6b:
be:09:9e:bb:cf:b6:d1:23:0d:98:37:19:dd:7f:2e:
25:08:69:de:58:05:db:79:6a:23:c6:cd:a0:02:ab:
d8:57:f2:38:cd:c5:24:56:3a:aa:11:9d:8e:2d:70:
6e:a0:ee:d7:7b:53:ab:d2:65:c0:e3:b7:1b:31:d8:
d0:69:ee:b4:30:d8:19:cb:ee:15:e5:d3:34:a0:bd:
38:f3:a4:cd:08:2c:7d:1e:54:42:d4:44:72:22:c5:
f8:c2:ee:5c:7e:9a:20:98:a0:8b:35:e7:a4:89:62:
f7:90:7f:73:a6:df:2d:27:eb:83:20:49:bf:0e:d6:
3b:df:6a:02:2b:c2:b9:a5:0c:49:f2:77:1c:ec:55:
4a:7c:b0:70:ec:12:32:81:50:86:c2:bf:64:fb:cf:
08:a2:d8:4d:c5:dd:83:22:b5:34:b1:8f:34:52:51:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E3:21:70:0E:68:84:1E:CB:EC:F0:B8:E4:8C:61:5C:9D:76:D5:8E
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:d4:3c:d1:0e:cf:d6:2c:f7:b5:5f:39:d1:13:88:29:29:
1d:0f:52:ed:b2:d6:ba:e0:c0:17:32:0a:52:61:33:af:bd:08:
11:1b:e4:f7:e3:8d:c5:32:40:82:52:2d:0b:1c:29:b2:60:db:
43:cd:81:49:c8:b2:65:ca:0b:61:47:e7:fd:0d:18:ef:a5:7d:
a7:e8:41:5b:b9:cc:49:9f:3d:55:0e:32:bd:2e:f9:a2:4c:e6:
b1:09:b7:66:1f:84:01:c0:77:e8:fc:59:30:e1:2c:f4:ab:0c:
30:d6:fd:8b:97:1e:bc:f4:c3:45:3c:31:95:b7:6b:ab:8c:26:
eb:c7:5b:09:b9:fc:72:e6:39:db:7c:b3:ec:54:32:a9:51:a5:
82:15:90:86:97:7c:38:d8:ad:d5:5a:81:5a:f6:5a:8e:87:a8:
a4:e6:b7:8e:1f:8f:e1:fe:71:73:b2:73:eb:7d:f9:b5:62:58:
1e:4a:bf:cb:dd:4a:b6:3b:57:07:4a:55:62:03:c6:6c:2a:65:
e5:aa:ca:25:7b:d2:12:50:ce:83:29:b2:33:62:69:93:7c:1d:
de:72:62:03:e8:4d:a5:3b:4d:5a:c9:50:00:d0:1f:e8:58:e3:
c1:eb:92:32:31:47:6d:ed:f4:51:f2:e2:f0:fc:46:af:48:5d:
89:fa:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:20 2026 by rpki-client