This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: 70eFeuSna0yH9Zu5MCxuQzwV+mTTerQBf3HB32aBDOk=
Subject key identifier: 63:CC:A9:9E:2D:B4:2A:B3:FD:36:A3:53:2F:7D:ED:D6:20:B4:A8:AA
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 019C435921A99E634AC92477A13A25F37D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 09E4
Signing time: Mon 09 Feb 2026 17:00:40 +0000
Manifest this update: Mon 09 Feb 2026 17:00:40 +0000
Manifest next update: Tue 10 Feb 2026 17:00:40 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: tP6nU8t+l8KeUDjtlNF8w8OieABy61dCDH8QvD6xxXs=)
2: iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (hash: btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:21:a9:9e:63:4a:c9:24:77:a1:3a:25:f3:7d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Feb 9 17:00:40 2026 GMT
Not After : Feb 10 17:00:40 2026 GMT
Subject: CN=63cca99e2db42ab3fd36a3532f7dedd620b4a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:9d:60:8b:a3:2e:bc:25:0d:24:a9:2d:6e:
62:e9:48:bd:c0:48:c4:78:7a:c7:dc:7a:c3:ac:79:
e1:e2:ba:ef:81:05:e5:c2:c1:75:52:db:ea:4a:b0:
a5:56:e6:97:f4:75:47:9c:69:39:bb:62:2e:80:98:
b4:3f:c7:4f:ef:42:06:0c:ec:93:58:31:53:89:b9:
2a:10:0f:74:25:80:36:77:58:c2:43:de:f2:e5:d4:
7a:97:3d:7d:64:5f:43:c0:a3:3e:29:b9:2c:33:39:
80:25:48:6c:f2:72:78:dd:2b:a9:6a:5d:4b:83:fd:
c4:42:e6:b1:d1:52:ee:09:29:cc:66:c2:c3:43:6e:
4a:77:87:61:32:63:3d:70:04:a3:18:05:31:ea:c9:
f1:33:5a:2b:b9:8f:00:fd:db:58:c5:bd:88:43:43:
2f:87:d5:f4:52:f4:bd:43:d3:8f:62:44:96:7b:36:
57:bc:12:f8:79:cc:63:92:46:52:f1:2f:ad:b5:72:
3a:c1:f0:0b:5f:b0:11:63:0d:01:0c:e4:af:8b:08:
cc:8f:73:56:c6:f1:5a:b2:a0:2f:f4:0b:95:4c:c1:
cd:0a:27:f8:59:6c:e8:e0:74:4f:24:0d:6c:8e:c4:
8d:2c:e9:57:61:a9:ff:da:e8:82:73:c7:f4:c6:8b:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:A9:9E:2D:B4:2A:B3:FD:36:A3:53:2F:7D:ED:D6:20:B4:A8:AA
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:18:a7:9d:fd:68:52:48:b9:37:5c:05:70:bb:da:ad:6a:
3b:cd:95:cd:39:d1:fe:4a:af:6d:94:6b:f1:01:c5:ec:a7:63:
5a:da:a4:17:38:89:d2:e5:ed:03:37:5e:f2:e7:6a:ec:a4:33:
74:1c:a5:fc:d1:cd:f7:3a:a5:c8:41:c1:27:ef:7c:0d:69:df:
d2:70:f8:7d:88:19:11:c4:df:eb:2a:2d:56:a0:7b:f9:14:ac:
3f:eb:19:b9:f7:6c:26:40:d9:7f:03:1a:4b:18:15:bd:5e:7a:
ac:a1:6f:c4:2a:ae:47:24:b0:1c:31:f4:11:c4:c0:2c:8e:11:
b6:7e:63:75:55:74:7d:2c:ba:a4:10:6b:6e:c1:d2:86:59:46:
f3:6b:f0:cc:48:8b:fc:69:c6:69:bd:d0:e0:42:83:30:63:d4:
93:90:9a:75:cd:22:d5:5f:a8:cc:32:57:69:ba:f1:9e:67:83:
42:47:3f:26:a8:c2:f6:dd:df:9a:b5:fa:08:85:00:dd:44:ed:
ad:b1:ab:36:1a:50:d9:d0:c2:dc:3f:80:42:14:6f:64:0a:4a:
78:8f:8e:aa:90:d3:ce:82:fb:47:37:48:48:8c:d3:41:03:47:
6b:01:4f:29:6f:7d:9a:2c:c1:9f:6e:03:04:21:02:fc:87:ff:
63:ce:25:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWSGpnmNKySR3oTol831uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTg0ZDZkNmE5ZWVkZTY4MmVmMWI1Yzc4ZjFiM2YwYTMz
MTM5MTEwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD
Eyg2M2NjYTk5ZTJkYjQyYWIzZmQzNmEzNTMyZjdkZWRkNjIwYjRhOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbSdYIujLrwlDSSpLW5i6Ui9wEjE
eHrH3HrDrHnh4rrvgQXlwsF1UtvqSrClVuaX9HVHnGk5u2IugJi0P8dP70IGDOyT
WDFTibkqEA90JYA2d1jCQ97y5dR6lz19ZF9DwKM+KbksMzmAJUhs8nJ43Supal1L
g/3EQuax0VLuCSnMZsLDQ25Kd4dhMmM9cASjGAUx6snxM1oruY8A/dtYxb2IQ0Mv
h9X0UvS9Q9OPYkSWezZXvBL4ecxjkkZS8S+ttXI6wfALX7ARYw0BDOSviwjMj3NW
xvFasqAv9AuVTMHNCif4WWzo4HRPJA1sjsSNLOlXYan/2uiCc8f0xosvHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPMqZ4ttCqz/TajUy997dYgtKiqMB8GA1UdIwQY
MBaAFNDoTW1qnu3mgu8bXHjxs/CjMTkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MmI3NzUtNzg0MS00YTYxLWI3OGMt
YjdiYTI4MTY1YTc3LzEvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MmI3NzUtNzg0MS00YTYxLWI3OGMtYjdiYTI4MTY1YTc3
LzEvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+cYp539
aFJIuTdcBXC72q1qO82VzTnR/kqvbZRr8QHF7KdjWtqkFziJ0uXtAzde8udq7KQz
dByl/NHN9zqlyEHBJ+98DWnf0nD4fYgZEcTf6yotVqB7+RSsP+sZufdsJkDZfwMa
SxgVvV56rKFvxCquRySwHDH0EcTALI4Rtn5jdVV0fSy6pBBrbsHShllG82vwzEiL
/GnGab3Q4EKDMGPUk5Cadc0i1V+ozDJXabrxnmeDQkc/JqjC9t3fmrX6CIUA3UTt
rbGrNhpQ2dDC3D+AQhRvZApKeI+OqpDTzoL7RzdISIzTQQNHawFPKW99mizBn24D
BCEC/If/Y84lOg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:16 2026 by rpki-client