This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File: o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier: sfuUnvzqSZPnCrr2CEmviqWRgDgcb5xXmWObiyoSsrY=
Subject key identifier: 2A:1C:F8:8B:0B:5E:EA:2C:04:16:44:4E:22:E2:FB:18:1C:7B:ED:59
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer: /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial: 019C446C81B25BE7CCAEC0AEA246D48FA80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number: 01F4
Signing time: Mon 09 Feb 2026 22:01:27 +0000
Manifest this update: Mon 09 Feb 2026 22:01:27 +0000
Manifest next update: Tue 10 Feb 2026 22:01:27 +0000
Files and hashes: 1: 1U7EBT8Fi6D3Q__JEXiDpKxMjzQ.roa (hash: +lVH2wb0fkjDTS8EyuydWpsQpASkrXPOrZFtBXu1rO4=)
2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: 4qWJddbkoqHIJfOSBjbht5D0QhAX4jjM7K58WLVAIE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:81:b2:5b:e7:cc:ae:c0:ae:a2:46:d4:8f:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Validity
Not Before: Feb 9 22:01:27 2026 GMT
Not After : Feb 10 22:01:27 2026 GMT
Subject: CN=2a1cf88b0b5eea2c0416444e22e2fb181c7bed59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:e3:0d:94:72:a7:de:90:d1:e6:b0:ea:62:
fc:1f:5b:1e:57:34:d3:5b:3c:7d:a5:d1:1c:1f:89:
bf:4c:f6:21:e6:1c:9f:d6:e8:02:24:d9:fe:1d:a6:
e9:95:de:d2:cc:c7:3a:d0:cc:ae:3e:65:d3:93:b8:
19:ac:96:e7:b7:7b:92:e7:a4:9a:97:53:56:51:c7:
10:dc:b8:c3:8a:89:22:5a:b1:5c:f4:93:d7:19:a7:
3b:0d:9b:7a:fc:25:e5:a6:be:c7:30:92:e7:20:61:
89:44:81:a0:f4:af:b5:35:75:a8:74:40:19:42:a8:
9a:70:cc:f7:ca:de:97:fc:b2:ea:26:b7:81:49:96:
8a:6d:1e:f8:36:f9:81:24:8a:57:b8:96:d5:ed:73:
c2:a2:24:b7:3c:32:9b:c5:ab:09:c2:44:97:ae:0d:
c1:bc:08:bf:15:40:e9:09:52:f4:d5:2e:3f:6e:96:
28:95:32:23:62:67:d9:b4:64:3b:78:ce:c1:98:67:
6d:3d:c1:8b:06:c2:4f:72:9b:9d:ba:25:76:26:d4:
e6:5a:bf:12:d6:3f:0c:27:cb:82:9a:f9:c3:f2:29:
bd:2e:82:28:50:3d:89:cd:8b:fb:6c:96:bd:5b:57:
20:31:05:ea:8b:0c:4b:f2:70:98:32:d4:65:de:ad:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:F8:8B:0B:5E:EA:2C:04:16:44:4E:22:E2:FB:18:1C:7B:ED:59
X509v3 Authority Key Identifier:
keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:79:d5:65:89:29:e7:b2:26:28:a4:f8:f8:e2:e0:67:72:
a4:13:be:ec:6e:52:05:74:22:73:d2:02:03:60:f6:ce:26:00:
1e:6e:83:86:9c:69:e4:fc:a7:e6:93:45:74:2a:fb:8c:6b:78:
d6:ae:cb:a3:bc:b9:03:f0:c9:7b:0f:ff:44:da:81:2e:db:f2:
f8:c5:24:94:c1:b9:84:3f:19:ec:89:04:fc:f0:1d:37:94:e6:
ad:9a:a2:7a:43:5b:04:3a:d4:7d:b5:bd:c4:21:c7:e2:ae:a5:
e0:6b:39:4c:53:0f:9a:97:ea:be:9f:94:e7:c9:bd:21:b4:19:
d8:0d:05:d7:b6:e1:67:a5:e3:3f:34:07:be:77:d8:2c:78:17:
56:c6:2f:c1:3e:f1:95:cb:e7:ac:74:96:b3:28:c4:68:1f:1b:
92:6a:a2:09:2f:0e:4c:a7:65:30:45:50:1f:8c:54:94:0b:eb:
f3:6e:18:84:d0:1a:cc:5d:29:b7:c6:18:17:26:59:11:b2:46:
05:d4:9e:16:f7:58:07:74:15:f5:06:91:06:8d:85:0a:b3:55:
d7:e4:34:c6:2d:c7:74:47:f7:27:42:64:b0:fc:02:7e:a7:ad:
ab:72:0f:02:d5:c2:74:20:a2:54:77:41:70:f0:1c:95:09:f3:
26:b5:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:26 2026 by rpki-client