This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: uITwnHtinAM4ZKQdi/pUgWiB94YrhLk4NrRg/9ZPPb0=
Subject key identifier: 5E:3D:44:91:D3:E4:7A:08:4D:FE:20:61:70:26:98:05:C1:0F:4D:FA
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 019C427DD8A994DC131A01F4BBB066E667B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 13:01:09 +0000
Manifest this update: Mon 09 Feb 2026 13:01:09 +0000
Manifest next update: Tue 10 Feb 2026 13:01:09 +0000
Files and hashes: 1: 7YFanazp_Hk_jwwFignJKO3DKAI.roa (hash: nBudYXC1l0ZOKMta9ie5NuhQi7PKlNbLGiH6NUxthx8=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: en2tqAw3MuBid2LrOjpWfVuuGRd7oJa1tk9vdZsPvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:d8:a9:94:dc:13:1a:01:f4:bb:b0:66:e6:67:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Feb 9 13:01:09 2026 GMT
Not After : Feb 10 13:01:09 2026 GMT
Subject: CN=5e3d4491d3e47a084dfe206170269805c10f4dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:da:a0:d2:de:bd:dc:34:e0:24:19:6f:d8:
d9:29:ff:4a:2e:82:14:8f:ee:b3:bd:df:81:c0:b9:
84:34:ee:3a:58:a5:06:89:66:c0:4c:27:61:4a:99:
66:9e:11:c8:82:ea:6d:f1:8d:12:fe:e7:ec:18:7a:
de:84:d5:61:cf:52:10:e3:d4:18:95:c7:a0:1e:18:
79:b5:e2:3f:85:99:24:48:a6:55:46:9e:47:55:f9:
2c:82:1a:94:72:12:95:26:17:21:a6:89:ce:73:eb:
f8:c5:84:8a:62:39:07:71:43:5a:b1:c8:40:b9:04:
f3:ae:06:a1:35:b6:3d:34:a3:dd:41:fd:f1:d2:aa:
65:d3:5f:5b:0c:21:42:8f:28:7b:88:e9:50:8b:e4:
cf:df:16:ba:db:07:5e:16:6f:87:78:26:85:16:26:
d1:ed:d0:a7:ea:3c:b6:8e:e4:2f:83:a7:0f:5d:5a:
d2:58:81:2f:37:80:07:d9:91:8f:e3:70:fe:58:0f:
00:bd:02:95:4a:c0:8e:63:67:14:bc:c1:d1:7c:82:
a7:5d:4c:9e:bd:21:a6:72:f6:6d:57:d4:21:18:aa:
91:82:da:9b:1f:b7:22:76:94:ca:59:7b:b5:be:9b:
08:e1:b5:79:f0:e5:37:a0:d3:b5:8c:95:5a:f7:e5:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:44:91:D3:E4:7A:08:4D:FE:20:61:70:26:98:05:C1:0F:4D:FA
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:43:33:15:0e:98:f2:99:04:d4:2d:e9:c3:75:2d:8e:de:
ef:3d:4d:92:5d:ea:fe:6e:a9:6d:ca:63:83:60:6c:85:95:59:
75:70:87:e7:94:27:b3:40:70:0c:7a:04:42:72:ce:0c:b7:17:
e4:e0:72:8f:dc:ca:56:a3:4f:97:ac:95:e1:66:e5:4b:7a:68:
b7:08:80:a5:a6:e3:87:0f:c5:2f:bd:0e:da:fc:f1:3c:c5:80:
75:49:12:ce:5c:0a:72:3a:34:6c:73:ec:89:23:3f:37:dc:7a:
48:58:1d:67:a5:6e:c8:ac:5f:d4:48:51:02:20:88:3c:d2:7a:
58:d9:ce:7b:31:29:c7:c8:12:e0:1c:f2:13:c8:54:14:cc:db:
4e:61:76:46:ac:08:1a:58:84:9b:a5:d3:58:11:9c:21:d1:4e:
df:5c:27:a6:96:53:b0:53:34:67:ff:2b:28:bd:a3:22:62:f1:
ff:d5:71:94:74:4b:20:8a:bd:eb:dc:cf:cb:4a:2e:05:26:73:
6c:97:48:a1:e1:22:98:cd:6e:e1:21:29:b9:f5:0c:8b:c1:6e:
b7:3d:57:16:b3:88:ef:da:16:98:17:0a:98:fe:a1:d3:33:d1:
cc:7a:9d:7a:e7:da:6d:62:4e:69:38:5b:73:14:19:e6:a7:93:
04:1a:ad:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfdiplNwTGgH0u7Bm5me4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZjI3ZDRmMDY3NjE0YmNiYzI3MDM0NmZhMGQ0NGIxNWY4
MDUxNjMwHhcNMjYwMjA5MTMwMTA5WhcNMjYwMjEwMTMwMTA5WjAzMTEwLwYDVQQD
Eyg1ZTNkNDQ5MWQzZTQ3YTA4NGRmZTIwNjE3MDI2OTgwNWMxMGY0ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXfaoNLevdw04CQZb9jZKf9KLoIU
j+6zvd+BwLmENO46WKUGiWbATCdhSplmnhHIgupt8Y0S/ufsGHrehNVhz1IQ49QY
lcegHhh5teI/hZkkSKZVRp5HVfksghqUchKVJhchponOc+v4xYSKYjkHcUNaschA
uQTzrgahNbY9NKPdQf3x0qpl019bDCFCjyh7iOlQi+TP3xa62wdeFm+HeCaFFibR
7dCn6jy2juQvg6cPXVrSWIEvN4AH2ZGP43D+WA8AvQKVSsCOY2cUvMHRfIKnXUye
vSGmcvZtV9QhGKqRgtqbH7cidpTKWXu1vpsI4bV58OU3oNO1jJVa9+XBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF49RJHT5HoITf4gYXAmmAXBD036MB8GA1UdIwQY
MBaAFKDyfU8GdhS8vCcDRvoNRLFfgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTIt
OTM2NTk4ZTAwY2ZlLzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTItOTM2NTk4ZTAwY2Zl
LzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9hDMxUO
mPKZBNQt6cN1LY7e7z1Nkl3q/m6pbcpjg2BshZVZdXCH55Qns0BwDHoEQnLODLcX
5OByj9zKVqNPl6yV4WblS3potwiApabjhw/FL70O2vzxPMWAdUkSzlwKcjo0bHPs
iSM/N9x6SFgdZ6VuyKxf1EhRAiCIPNJ6WNnOezEpx8gS4BzyE8hUFMzbTmF2RqwI
GliEm6XTWBGcIdFO31wnppZTsFM0Z/8rKL2jImLx/9VxlHRLIIq969zPy0ouBSZz
bJdIoeEimM1u4SEpufUMi8Futz1XFrOI79oWmBcKmP6h0zPRzHqdeufabWJOaThb
cxQZ5qeTBBqtmQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:30 2026 by rpki-client