This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
File: orWthdxjIax7o93JxiqqBsfVPc4.mft (raw, json)
Hash identifier: wWAYqGDvQpolgL0NAwRiYQsYXxAQIEUEHxTk4hUHioo=
Subject key identifier: 23:1C:B0:24:03:CE:C7:D1:84:F3:39:63:49:F5:CE:6A:2E:40:30:D6
Authority key identifier: A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
Certificate issuer: /CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Certificate serial: 019C438FC68946B39F3FFAB5DA2EDD97FD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
Manifest number: 73
Signing time: Mon 09 Feb 2026 18:00:21 +0000
Manifest this update: Mon 09 Feb 2026 18:00:21 +0000
Manifest next update: Tue 10 Feb 2026 18:00:21 +0000
Files and hashes: 1: orWthdxjIax7o93JxiqqBsfVPc4.crl (hash: Nbx8hULxxw65p5q/rkAcXZj7gOaAy5a2PKtuPnOGeZw=)
2: zH59FOjEeW0tX1tZPAKwttZubxc.roa (hash: E7WqBqxeqDORrFZVX5AFQ14CSfk2SIvYpV/ckuWWz5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:c6:89:46:b3:9f:3f:fa:b5:da:2e:dd:97:fd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce
Validity
Not Before: Feb 9 18:00:21 2026 GMT
Not After : Feb 10 18:00:21 2026 GMT
Subject: CN=231cb02403cec7d184f3396349f5ce6a2e4030d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:a5:e5:b9:ff:8c:35:55:b2:26:de:00:79:
e5:a2:8b:99:fa:50:35:1f:95:28:6d:ed:4d:33:d6:
ba:ce:fb:3b:28:90:49:05:58:ba:b1:0e:45:77:2b:
b5:70:e6:7f:54:ee:77:85:96:86:e0:d8:2c:01:26:
dc:ed:21:f1:ec:f4:71:f2:fd:22:e0:fb:45:ee:bd:
c4:18:32:02:ca:d6:af:93:06:13:d6:c9:3d:e6:cb:
1b:21:91:04:3e:ab:fd:c5:aa:c3:0a:07:89:e4:8b:
26:b0:50:fb:61:2b:0a:da:f0:c7:41:d6:d3:be:92:
0d:88:df:27:51:5d:37:54:90:85:22:47:bd:7b:97:
14:2b:aa:68:38:f9:11:b1:ba:7c:07:da:56:0f:de:
f4:21:fb:85:06:15:16:1f:9e:cf:73:77:75:3b:2c:
11:15:31:a2:9b:14:81:d1:be:75:d1:54:a4:bb:41:
24:2c:e5:da:a5:41:1e:63:e8:a6:3b:e1:2e:5e:bc:
d6:d9:44:6f:dd:e0:5d:53:2e:54:ea:a9:94:9d:9c:
96:29:15:d3:f6:f0:25:21:d1:6c:a4:57:ae:e3:ef:
13:26:5f:9c:58:70:3d:8f:35:69:1d:32:42:c5:82:
f8:4a:32:6e:4f:ae:c3:d4:fc:c3:40:48:c5:da:83:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:B0:24:03:CE:C7:D1:84:F3:39:63:49:F5:CE:6A:2E:40:30:D6
X509v3 Authority Key Identifier:
keyid:A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:c9:74:c6:26:5a:cc:89:ba:08:40:74:ab:96:2d:6c:c4:
e8:56:93:cf:e2:9b:28:1d:98:8d:5d:b7:bf:35:bc:2f:4e:72:
74:fb:eb:42:a1:cb:ff:e0:62:85:ba:37:bb:09:b3:e7:45:00:
77:85:6f:4a:6d:8a:11:53:6d:51:8c:a6:b0:78:d2:37:d5:88:
34:64:9d:2f:88:f4:eb:86:a3:1f:18:09:91:40:87:4d:6e:3c:
a8:9b:05:b1:e6:91:70:3b:1a:73:bd:7e:73:a1:d7:4f:a1:3c:
60:d5:fa:c4:77:3c:80:dc:ad:e4:2b:3e:be:48:35:05:7d:d8:
62:5a:2e:6f:1c:78:42:bc:0d:00:c8:bf:6b:c4:ad:9d:b4:aa:
d7:a3:5a:8c:31:dc:ca:35:81:58:6e:43:9a:17:b5:41:cb:6b:
90:6c:18:6b:79:c6:83:9e:f0:77:d9:c7:72:c5:53:ca:b3:a9:
25:2a:8c:a4:cd:04:83:e6:e7:33:ab:5b:0f:44:2a:f0:68:c4:
7f:1a:2a:47:4d:12:5f:44:a3:30:70:e0:d4:fc:99:8b:a5:6d:
49:bf:ea:1d:e0:38:9b:9a:7f:fd:6a:2c:93:40:08:05:a6:e0:
dc:26:1d:01:c5:a7:07:69:87:67:99:b3:7c:7f:3a:9d:71:3f:
28:7b:5b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj8aJRrOfP/q12i7dl/06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjVhZDg1ZGM2MzIxYWM3YmEzZGRjOWM2MmFhYTA2Yzdk
NTNkY2UwHhcNMjYwMjA5MTgwMDIxWhcNMjYwMjEwMTgwMDIxWjAzMTEwLwYDVQQD
EygyMzFjYjAyNDAzY2VjN2QxODRmMzM5NjM0OWY1Y2U2YTJlNDAzMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3Kl5bn/jDVVsibeAHnloouZ+lA1
H5Uobe1NM9a6zvs7KJBJBVi6sQ5Fdyu1cOZ/VO53hZaG4NgsASbc7SHx7PRx8v0i
4PtF7r3EGDICytavkwYT1sk95ssbIZEEPqv9xarDCgeJ5IsmsFD7YSsK2vDHQdbT
vpINiN8nUV03VJCFIke9e5cUK6poOPkRsbp8B9pWD970IfuFBhUWH57Pc3d1OywR
FTGimxSB0b510VSku0EkLOXapUEeY+imO+EuXrzW2URv3eBdUy5U6qmUnZyWKRXT
9vAlIdFspFeu4+8TJl+cWHA9jzVpHTJCxYL4SjJuT67D1PzDQEjF2oOIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMcsCQDzsfRhPM5Y0n1zmouQDDWMB8GA1UdIwQY
MBaAFKK1rYXcYyGse6PdycYqqgbH1T3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JXdGhkeGpJYXg3bzkzSnhpcXFCc2ZWUGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80Y2M3YWUtZjU2NS00MWUwLTljNzYt
Y2Q2ODY3NjNlOWNmLzEvb3JXdGhkeGpJYXg3bzkzSnhpcXFCc2ZWUGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80Y2M3YWUtZjU2NS00MWUwLTljNzYtY2Q2ODY3NjNlOWNm
LzEvb3JXdGhkeGpJYXg3bzkzSnhpcXFCc2ZWUGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+3JdMYm
WsyJughAdKuWLWzE6FaTz+KbKB2YjV23vzW8L05ydPvrQqHL/+Bihbo3uwmz50UA
d4VvSm2KEVNtUYymsHjSN9WINGSdL4j064ajHxgJkUCHTW48qJsFseaRcDsac71+
c6HXT6E8YNX6xHc8gNyt5Cs+vkg1BX3YYloubxx4QrwNAMi/a8StnbSq16NajDHc
yjWBWG5Dmhe1QctrkGwYa3nGg57wd9nHcsVTyrOpJSqMpM0Eg+bnM6tbD0Qq8GjE
fxoqR00SX0SjMHDg1PyZi6VtSb/qHeA4m5p//Wosk0AIBabg3CYdAcWnB2mHZ5mz
fH86nXE/KHtbKA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:31 2026 by rpki-client