This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
File: USOacCubRBGfwO-wBSTn3RLeqPY.mft (raw, json)
Hash identifier: QXLqmvIi2pMYfTNG/8UZygB0+rQrE38vVleXdl26RbI=
Subject key identifier: C3:A2:A0:77:35:E5:68:E3:50:85:58:50:1F:54:DF:3A:7B:02:AE:D6
Authority key identifier: 51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
Certificate issuer: /CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Certificate serial: 019C40FCDAB97D5EAF2FA54A8154F2DDE7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
Manifest number: 14A1
Signing time: Mon 09 Feb 2026 06:00:38 +0000
Manifest this update: Mon 09 Feb 2026 06:00:38 +0000
Manifest next update: Tue 10 Feb 2026 06:00:38 +0000
Files and hashes: 1: USOacCubRBGfwO-wBSTn3RLeqPY.crl (hash: vqLOtHg5AG9ClgBX0mc/vOMCVQuqLl8FF+vZDBX0LGE=)
2: eImEyRrzQaMBiFlZOhGNpdB8A3o.roa (hash: ohTX7uDCv7TQkH+WJ6CBAXHjVpePbGZrEFWaegxzw/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:da:b9:7d:5e:af:2f:a5:4a:81:54:f2:dd:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51239a702b9b44119fc0efb00524e7dd12dea8f6
Validity
Not Before: Feb 9 06:00:38 2026 GMT
Not After : Feb 10 06:00:38 2026 GMT
Subject: CN=c3a2a07735e568e3508558501f54df3a7b02aed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:f6:ad:8e:db:4b:08:05:d4:b1:d5:10:4b:
c6:5d:08:ba:a8:c2:58:e3:ef:f5:29:f8:b5:43:b3:
77:80:00:af:a9:86:1e:b0:41:f7:a3:61:9c:f3:de:
4c:54:4b:b8:ef:67:21:96:48:18:77:97:6f:5d:a4:
64:ab:c2:4b:ce:00:6f:a8:65:b8:76:14:ce:95:f9:
73:08:0d:29:5f:27:e1:d6:e6:4b:2c:9e:ba:a4:44:
dc:50:30:4c:f2:01:84:be:30:5d:cb:5b:ba:61:99:
f9:99:eb:11:50:d0:bd:04:48:61:ab:78:13:60:21:
ca:5a:f3:7e:cc:c0:81:19:ce:3b:f0:97:65:1a:ec:
67:94:80:a7:65:df:a3:53:67:b2:a0:44:60:b5:a4:
74:9b:4e:25:b1:60:79:4f:21:fe:00:cd:79:30:d9:
de:64:07:e0:2a:bc:05:c1:4c:f0:09:62:a1:b2:c0:
3d:5c:59:8a:f4:8d:42:c8:04:c0:e4:57:d4:58:13:
30:6c:c2:81:9a:16:cd:33:7d:47:15:c1:2b:bd:8f:
3b:55:e2:aa:0e:5f:ce:48:17:25:9b:52:e1:11:85:
78:94:20:2f:7d:63:08:0f:8d:fc:aa:f2:a6:2e:4a:
59:9d:05:f6:5d:ff:53:ce:35:65:3c:7d:55:95:83:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:A0:77:35:E5:68:E3:50:85:58:50:1F:54:DF:3A:7B:02:AE:D6
X509v3 Authority Key Identifier:
keyid:51:23:9A:70:2B:9B:44:11:9F:C0:EF:B0:05:24:E7:DD:12:DE:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USOacCubRBGfwO-wBSTn3RLeqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/170738-4fb5-4293-a925-d44fe60d1948/1/USOacCubRBGfwO-wBSTn3RLeqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:fa:0b:51:c6:7d:db:74:54:97:a7:3f:cb:75:56:ba:29:
cc:8a:52:04:cb:20:ca:74:a2:0f:49:00:f5:9a:8d:0c:b0:cf:
4c:3d:a3:76:02:4a:d0:db:1b:ef:6b:32:d4:a7:d3:a0:26:87:
f3:83:b5:62:42:34:de:dc:77:b1:6f:e4:58:9b:f0:a6:2a:98:
67:23:23:2b:68:c4:2c:dc:ad:da:ce:40:87:d8:da:22:17:68:
bc:51:11:a6:2b:29:a7:10:c1:8e:dd:4c:96:53:f1:ae:f1:54:
77:70:f0:25:a7:d4:4b:40:f5:3b:42:3d:90:8e:98:8b:4c:74:
fc:ad:69:bb:7b:67:c7:cb:ca:70:3c:e0:c9:37:20:66:f9:e0:
78:9a:b5:4d:db:99:13:eb:98:fa:78:18:5d:88:f9:48:3f:47:
b8:f3:32:65:bc:04:52:c2:5f:2c:75:14:11:5c:88:98:56:77:
55:60:b2:2e:28:52:ab:3d:6d:1b:bf:c8:80:45:c1:90:5c:2e:
a7:a7:d2:79:10:af:ed:69:49:85:bd:12:5d:27:c1:f9:74:92:
0e:70:a8:ab:ae:41:23:82:d3:42:3d:6d:18:94:50:11:6b:13:
1f:cd:94:c2:2f:2c:57:a9:e8:0e:5c:9b:c9:86:ed:b5:d3:93:
66:31:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:25 2026 by rpki-client