This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
File: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft (raw, json)
Hash identifier: urWDKSBSyofBBH4MhGghTcB9onompMTFMWNat9Qn4m4=
Subject key identifier: 04:C5:4B:42:AD:4A:64:0E:18:CC:06:11:D2:B4:EF:EA:A8:0D:FD:22
Authority key identifier: 3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
Certificate issuer: /CN=3afb9f43a46f059827a9dec366d1496d66089134
Certificate serial: 019C1B397920A104775F754ACCA3590F0638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
Manifest number: 2F
Signing time: Sun 01 Feb 2026 22:01:17 +0000
Manifest this update: Sun 01 Feb 2026 22:01:17 +0000
Manifest next update: Mon 02 Feb 2026 22:01:17 +0000
Files and hashes: 1: 6tfL7A5QJDSI_Y55TqUNwh3A628.asa (hash: 0PnmZojaOL/sDpXqZikBUmwmF7Qen3eJCXfg4rlV4OA=)
2: MoR6SkpnvsZ5xUQbC_xT6iFdNJA.roa (hash: 3qsvfMfu5j45cYgKSYmM4TYZxxauxXv6UP44ZBS48lA=)
3: OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl (hash: V3J9SB+17AOt70su9bCguVDKMR6lPMjCqDzaLieJPxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:39:79:20:a1:04:77:5f:75:4a:cc:a3:59:0f:06:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3afb9f43a46f059827a9dec366d1496d66089134
Validity
Not Before: Feb 1 22:01:17 2026 GMT
Not After : Feb 2 22:01:17 2026 GMT
Subject: CN=04c54b42ad4a640e18cc0611d2b4efeaa80dfd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:a4:86:7a:10:29:00:3d:e5:86:b1:e6:1d:
2e:af:23:aa:d2:c7:de:02:ac:a2:dd:0f:9a:c8:c9:
c5:28:d5:e2:be:f5:ac:ba:ea:82:1f:6e:bb:9f:dc:
27:86:d9:c2:f2:44:3b:16:0d:93:c1:c8:7f:d4:ff:
dd:e1:e6:11:79:2b:a4:89:6f:87:fd:0f:9e:01:1e:
9f:66:72:f3:e1:55:12:ef:95:0f:ca:60:ae:f5:cb:
7c:51:20:21:40:7f:e9:77:e3:df:57:c2:cd:16:f9:
4f:de:33:f5:78:4e:94:ed:b4:5d:65:5c:29:2c:b9:
b7:21:01:68:b6:5e:14:56:3a:de:4d:fa:7d:60:20:
f6:5b:82:5b:c8:49:9d:0a:2c:77:fc:ff:b0:96:40:
20:3c:96:f1:0b:20:b2:32:01:f4:3e:0c:2b:68:45:
ba:2f:f6:b5:06:5d:61:66:d8:f9:09:9e:c9:bb:a1:
1b:80:07:50:12:e6:bc:03:ad:98:cb:2d:13:4c:40:
10:65:25:0b:a8:4d:fe:26:11:c8:88:5f:69:43:fe:
68:a3:d4:6c:7a:8a:42:ab:6c:ae:13:d7:6e:47:86:
86:21:17:bf:30:bc:6d:6c:e7:4f:2a:2a:ed:8b:18:
ee:f4:ed:c9:52:de:aa:ce:89:ff:2a:66:b8:26:9a:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C5:4B:42:AD:4A:64:0E:18:CC:06:11:D2:B4:EF:EA:A8:0D:FD:22
X509v3 Authority Key Identifier:
keyid:3A:FB:9F:43:A4:6F:05:98:27:A9:DE:C3:66:D1:49:6D:66:08:91:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/422e99-af5e-42d7-905e-7193e1b066c3/1/OvufQ6RvBZgnqd7DZtFJbWYIkTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:33:d5:04:9b:61:15:4f:2e:bd:b4:1c:ed:87:30:f9:4d:c4:
24:92:47:32:af:99:56:07:c7:bb:11:9f:17:7f:0b:f3:dd:8d:
e3:ad:04:a0:75:c7:e8:5c:fd:0a:15:f3:0c:3a:1d:0c:80:0e:
3f:a6:ff:96:cc:b8:f5:71:b5:b1:11:2c:c0:37:80:b9:89:85:
20:ac:55:b9:5a:77:da:4d:c8:08:38:c8:08:9e:08:4e:68:da:
df:1c:c3:34:2f:bd:cf:8b:80:75:02:60:6c:a5:34:47:eb:47:
fa:ed:0e:d2:ec:d7:4a:bd:75:1e:8f:ea:bb:d9:20:9c:c9:80:
03:86:f8:3f:dd:c7:f2:4f:d0:0e:dc:16:33:fb:27:87:a2:8e:
50:b7:c9:18:27:b5:b3:c3:4c:06:50:1e:a7:ae:d7:d4:3d:da:
d3:0a:9d:cc:2f:b6:46:fe:e7:3b:7c:8a:fc:e6:c8:9f:8c:19:
a2:c7:2b:5a:8b:d6:25:78:52:ce:8e:76:50:6b:3a:d8:bb:9e:
a2:4c:36:d9:a2:bd:17:28:f0:9d:44:85:4b:1e:d1:8e:be:db:
2d:28:5b:90:07:bf:98:e9:91:e6:96:fc:04:8e:77:63:40:e1:
d8:20:c5:49:93:c0:d5:aa:1a:a2:3e:ee:09:6e:65:a4:a4:bc:
c3:ec:2c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:08:24 2026 by rpki-client