This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File: ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier: DvVB6QlmWC94xU+AxGOY3mX/9K8zi07W6FZHt5bA3wU=
Subject key identifier: 54:34:13:72:47:18:6F:3C:6E:B1:8B:48:FA:C8:89:D0:F6:F4:66:3B
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer: /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial: 019C2D3EDC66F77FF9CBFC739E7C19890025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number: 0120
Signing time: Thu 05 Feb 2026 10:00:20 +0000
Manifest this update: Thu 05 Feb 2026 10:00:20 +0000
Manifest next update: Fri 06 Feb 2026 10:00:20 +0000
Files and hashes: 1: iJct27IBYh-gAfl6eu5h4aNgM3U.roa (hash: 6ohSO1sfqYBcO+vPtXlYywNN/BR02DeUS7d8lZX/S7c=)
2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: vCz/lGqHyoindWBSmWffwWS43tDnRl1bgt/sK86NYn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:3e:dc:66:f7:7f:f9:cb:fc:73:9e:7c:19:89:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Validity
Not Before: Feb 5 10:00:20 2026 GMT
Not After : Feb 6 10:00:20 2026 GMT
Subject: CN=5434137247186f3c6eb18b48fac889d0f6f4663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:be:9d:67:21:a7:b4:63:ea:ac:8c:b4:39:
ba:d6:ad:11:64:76:e7:4e:f8:18:1b:79:28:40:c7:
21:41:3e:a4:a4:37:30:71:49:ee:a3:00:c3:5b:a8:
1b:07:eb:c7:c4:45:70:09:e0:42:52:03:73:5d:96:
32:18:3c:39:fc:c5:8b:c5:36:09:c1:17:cc:cb:7a:
b9:e0:3e:3e:d7:37:f1:ad:db:e2:aa:dc:05:63:bd:
af:6f:3e:14:cc:0d:91:48:3d:27:02:27:9c:29:da:
e6:52:f4:66:95:36:f4:02:a2:5b:17:c6:44:52:ec:
5d:99:a7:e9:49:26:1b:4b:81:46:60:03:11:4d:fd:
a5:b0:ea:1c:37:0c:9a:11:31:65:9c:0f:b6:79:3f:
32:36:1c:ca:6b:83:06:90:22:59:06:58:42:34:5f:
50:03:2f:8b:e9:64:42:43:5d:0e:34:ab:63:8a:fa:
ec:3e:54:db:50:fe:79:a5:01:29:64:93:d5:54:eb:
ee:e1:f0:70:1f:5c:2f:ba:96:10:2b:02:18:81:c9:
59:24:2d:2a:14:1d:a0:a3:d0:3d:64:3b:38:93:92:
b2:b2:df:71:42:32:b7:76:47:e4:fd:e0:60:a6:53:
6f:e9:41:5b:2f:78:75:57:5c:52:4a:ca:f2:4f:3f:
17:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:13:72:47:18:6F:3C:6E:B1:8B:48:FA:C8:89:D0:F6:F4:66:3B
X509v3 Authority Key Identifier:
keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:06:41:57:02:83:1f:3c:45:0a:cc:1e:23:1f:35:35:f3:
3e:40:82:da:84:2e:5f:cc:ac:6f:57:c8:4a:94:62:d1:aa:bf:
1e:7a:6f:b9:ed:13:c8:72:b4:de:72:8b:1d:ee:eb:1b:1c:6b:
68:c3:83:53:a5:08:61:6c:59:fb:fe:14:e9:80:59:8e:06:8c:
fa:c7:b7:0c:e6:86:b2:92:06:af:33:8d:6d:81:f6:04:0c:e9:
fa:59:83:5b:e4:81:82:dc:ad:42:2f:df:cc:43:25:74:4b:8f:
e8:d1:d8:e2:5e:13:45:36:39:75:d7:dc:32:e3:79:39:c4:a8:
d5:64:b8:2f:fb:46:40:95:e5:83:30:8a:f1:3e:3e:09:04:a1:
39:ec:39:6d:e9:d7:b8:07:2b:cc:d6:fd:fe:a7:be:27:e6:02:
a7:a7:cc:04:2b:af:27:44:19:7f:dd:67:7a:48:b6:be:0c:70:
e2:bf:74:b9:fb:fb:fb:4e:81:de:87:79:14:12:5a:f3:a8:8a:
41:9f:f6:3f:6a:1e:f6:d4:2d:e7:2e:d7:d1:33:fd:28:2d:9d:
3c:2d:1d:df:2f:07:5c:2d:19:99:bb:6a:36:90:f4:a2:5b:df:
1a:0c:51:7a:12:3b:16:f5:44:3f:3d:3e:8a:6f:89:e6:74:0c:
9c:73:a6:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwtPtxm93/5y/xznnwZiQAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZmVlN2ViNDBjNWE0NTQzOTUwMmViOWYzMzFiZWZlYWM0
ZjhkMGMwHhcNMjYwMjA1MTAwMDIwWhcNMjYwMjA2MTAwMDIwWjAzMTEwLwYDVQQD
Eyg1NDM0MTM3MjQ3MTg2ZjNjNmViMThiNDhmYWM4ODlkMGY2ZjQ2NjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyO+nWchp7Rj6qyMtDm61q0RZHbn
TvgYG3koQMchQT6kpDcwcUnuowDDW6gbB+vHxEVwCeBCUgNzXZYyGDw5/MWLxTYJ
wRfMy3q54D4+1zfxrdviqtwFY72vbz4UzA2RSD0nAiecKdrmUvRmlTb0AqJbF8ZE
UuxdmafpSSYbS4FGYAMRTf2lsOocNwyaETFlnA+2eT8yNhzKa4MGkCJZBlhCNF9Q
Ay+L6WRCQ10ONKtjivrsPlTbUP55pQEpZJPVVOvu4fBwH1wvupYQKwIYgclZJC0q
FB2go9A9ZDs4k5Kyst9xQjK3dkfk/eBgplNv6UFbL3h1V1xSSsryTz8XHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQ0E3JHGG88brGLSPrIidD29GY7MB8GA1UdIwQY
MBaAFKL+5+tAxaRUOVAuufMxvv6sT40MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEt
NzA2ZGFlNTFjNDAxLzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEtNzA2ZGFlNTFjNDAx
LzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdQGQVcC
gx88RQrMHiMfNTXzPkCC2oQuX8ysb1fISpRi0aq/Hnpvue0TyHK03nKLHe7rGxxr
aMODU6UIYWxZ+/4U6YBZjgaM+se3DOaGspIGrzONbYH2BAzp+lmDW+SBgtytQi/f
zEMldEuP6NHY4l4TRTY5ddfcMuN5OcSo1WS4L/tGQJXlgzCK8T4+CQShOew5benX
uAcrzNb9/qe+J+YCp6fMBCuvJ0QZf91neki2vgxw4r90ufv7+06B3od5FBJa86iK
QZ/2P2oe9tQt5y7X0TP9KC2dPC0d3y8HXC0ZmbtqNpD0olvfGgxRehI7FvVEPz0+
im+J5nQMnHOmhw==
-----END CERTIFICATE-----
Generated at Thu Feb 5 15:08:47 2026 by rpki-client