This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
File: OBgMB0--WYgkxwAxlbMKpKNmFSw.mft (raw, json)
Hash identifier: jdwKFXbi3EQHe5Wun9te33IdvH0EKuDG2T3+WU0QFlw=
Subject key identifier: 1E:F7:10:A7:4E:A3:A6:84:64:CB:88:5C:3D:7E:06:76:60:A0:27:0A
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019C42EB45DDE89F7ED245B6DF410F6F93E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
Manifest number: 14B0
Signing time: Mon 09 Feb 2026 15:00:40 +0000
Manifest this update: Mon 09 Feb 2026 15:00:40 +0000
Manifest next update: Tue 10 Feb 2026 15:00:40 +0000
Files and hashes: 1: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (hash: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk=)
2: OBgMB0--WYgkxwAxlbMKpKNmFSw.crl (hash: Avm87X17xhEXRk3a2UHO8uMALhPyVrQcHtdFBIrRqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:45:dd:e8:9f:7e:d2:45:b6:df:41:0f:6f:93:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Feb 9 15:00:40 2026 GMT
Not After : Feb 10 15:00:40 2026 GMT
Subject: CN=1ef710a74ea3a68464cb885c3d7e067660a0270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0c:a7:24:83:bc:c6:c1:41:09:b4:aa:02:18:
d6:52:20:46:31:5a:91:e7:cf:c8:ac:27:5e:2b:15:
a3:8d:9d:22:f8:3f:1b:4c:52:1d:e0:05:51:4d:39:
1d:a3:2c:75:db:c8:32:5c:b5:da:11:09:73:42:94:
3c:6b:ae:d0:d8:18:5d:f9:83:f1:3d:4c:d3:7d:56:
32:88:24:d5:b6:95:74:0d:36:52:4c:c6:6d:84:a5:
ba:74:9e:7c:bc:23:82:6b:05:93:fb:03:11:ae:01:
82:48:ec:c6:07:4c:f8:b7:da:9d:38:5b:f3:6c:28:
4c:ad:01:f2:7b:fb:88:3a:9e:02:ca:34:33:2d:a0:
25:46:a0:d2:f3:03:ff:71:d5:34:87:46:90:07:06:
67:12:77:4b:1c:4e:89:c3:54:94:9b:8a:0f:68:6c:
3d:0a:ab:61:b1:19:98:59:01:e8:52:a9:2c:b6:01:
4d:3f:a5:9d:1a:b1:5a:46:e5:dc:da:c6:0f:e4:1b:
3c:ca:70:6a:02:63:da:b8:63:08:3e:c3:cc:cd:73:
4c:36:6d:d7:0f:2e:13:8a:0e:97:fd:61:d2:5a:6f:
28:ec:2b:69:76:1c:c6:22:3c:84:f5:51:5a:cb:6e:
86:b8:4f:ee:97:de:84:60:6e:35:2c:6c:b7:06:02:
81:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:10:A7:4E:A3:A6:84:64:CB:88:5C:3D:7E:06:76:60:A0:27:0A
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:19:b7:af:f4:91:a0:60:e4:aa:a3:26:c7:d3:dc:d8:c7:b8:
8b:14:47:14:30:32:27:e0:63:86:63:dc:49:c2:5c:cb:b4:42:
b6:1e:2c:d1:42:d5:2b:bf:93:3a:e8:bd:36:c9:63:fa:0c:bc:
9d:d6:d4:c2:8c:93:23:91:96:06:43:26:b1:ea:e8:c4:31:69:
b9:2d:79:de:d4:11:cd:6e:14:d7:2c:92:3b:97:57:82:05:cc:
74:b3:3e:6f:11:f3:15:2d:e6:97:9e:67:c3:5b:37:45:11:cc:
b3:aa:97:51:6d:cc:64:13:ff:b1:37:20:98:3f:e8:e4:28:8f:
ec:65:1b:9b:53:c9:ce:0b:2f:34:31:c7:58:41:da:07:05:a2:
c3:cd:43:de:46:e0:34:34:3d:23:b0:b3:02:e8:8d:54:43:77:
6c:be:45:ef:ad:a6:ad:2c:93:e1:60:5a:d0:8b:cb:49:7d:38:
5e:78:b3:6e:af:0e:83:b9:9e:56:92:dd:d6:32:67:c0:19:ff:
36:33:93:63:d1:9e:52:11:80:9e:cb:6f:85:eb:0e:97:ca:93:
b5:12:05:2b:87:87:f3:8c:55:f1:67:ba:42:d5:01:0d:d5:2c:
63:b9:1a:f7:38:c9:18:fc:3f:30:76:11:70:d4:0b:ae:0f:b1:
38:4f:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:44 2026 by rpki-client