This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
File: OlOeUB3_N83JLL7gzduS7S6BwTw.mft (raw, json)
Hash identifier: nKNCRZEi7yGj2bk4xaL1aIBx+uSNOfinxw3ee9Cv++Y=
Subject key identifier: D1:89:7C:CA:62:2B:BF:91:9F:5E:BF:33:69:15:02:C6:66:16:73:12
Authority key identifier: 3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
Certificate issuer: /CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Certificate serial: 019C41A22D7D9045884C072D9086A6476DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 09:01:13 +0000
Manifest this update: Mon 09 Feb 2026 09:01:13 +0000
Manifest next update: Tue 10 Feb 2026 09:01:13 +0000
Files and hashes: 1: CnM-0w0gilOkRdDZyrSW-bGkUN8.roa (hash: CtJFwzlRxzFJ7o0tp3Fs5nZt739BQjSPnxG0LvzcP4g=)
2: OlOeUB3_N83JLL7gzduS7S6BwTw.crl (hash: w/NPs0tUSWrESraVYIfZHhnlLCLEMtLRve2Bk3QRF1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:2d:7d:90:45:88:4c:07:2d:90:86:a6:47:6d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a539e501dff37cdc92cbee0cddb92ed2e81c13c
Validity
Not Before: Feb 9 09:01:13 2026 GMT
Not After : Feb 10 09:01:13 2026 GMT
Subject: CN=d1897cca622bbf919f5ebf33691502c666167312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:20:78:9e:8d:72:3f:bb:69:b4:85:23:3c:
e1:55:6b:97:c4:f9:aa:12:b2:bc:1c:62:c6:47:86:
71:38:e6:1d:ec:f7:e3:2d:81:e4:7e:1f:c5:00:99:
98:f3:85:89:11:82:22:bc:18:c7:2a:fb:eb:18:61:
bb:cc:1b:ba:43:1c:84:bc:d8:92:c4:84:3b:b6:8a:
e5:5b:02:f4:48:cf:fb:34:ec:12:8b:4d:16:34:2e:
c4:5c:6d:3f:9c:06:5f:a8:c6:ab:77:19:e5:21:53:
de:a1:df:d6:b8:07:3a:fc:ef:78:f4:79:11:ae:4a:
cc:2a:00:51:e0:02:f6:46:45:26:27:ae:3a:b4:49:
14:6e:31:59:a7:0b:49:b9:dc:03:03:36:33:a2:f1:
63:14:3f:71:a8:bf:6c:8a:33:42:03:23:a8:80:62:
6f:04:cb:10:7e:c9:a5:49:59:11:23:c5:ab:9d:8f:
0d:15:1b:f3:fd:32:2b:d2:02:58:2e:67:59:df:e2:
75:0e:05:c9:61:05:19:a6:f3:94:1e:29:b7:39:ab:
dd:00:b8:fb:f5:83:4d:86:f2:64:39:3a:1d:23:bd:
a8:ad:d1:38:3a:02:e7:b5:f7:27:7b:22:eb:d6:45:
f6:7c:89:65:eb:41:f0:3f:45:c0:3c:b5:1e:17:f3:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:7C:CA:62:2B:BF:91:9F:5E:BF:33:69:15:02:C6:66:16:73:12
X509v3 Authority Key Identifier:
keyid:3A:53:9E:50:1D:FF:37:CD:C9:2C:BE:E0:CD:DB:92:ED:2E:81:C1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlOeUB3_N83JLL7gzduS7S6BwTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d81a43-482a-4433-a7a2-027c0d6424e3/1/OlOeUB3_N83JLL7gzduS7S6BwTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:a8:cd:2b:c4:43:a8:73:b0:b5:94:8e:30:ff:b4:cb:11:
83:9d:89:b6:7d:b8:ff:e3:34:de:b6:4b:1e:1b:52:32:9c:0e:
47:48:18:82:f3:03:eb:ec:e4:ab:fd:68:b8:ce:e7:8d:0c:a4:
f5:7b:fb:5a:07:31:0a:59:c4:7a:17:27:89:b9:ce:78:4b:5a:
8e:30:0a:3a:ce:80:29:b5:b8:a9:e2:c8:fc:15:a4:b3:2e:62:
af:7d:3d:1d:55:98:ed:ef:20:cc:4b:bf:3e:3c:7c:20:06:27:
8c:91:f6:10:e0:57:92:b6:04:9c:42:42:99:70:96:1c:26:ff:
b5:66:2e:06:51:96:31:be:a4:3a:fb:f2:72:bd:6e:0f:cc:e4:
40:09:f8:68:71:e5:de:fc:fb:4d:78:ec:2e:79:95:c2:2d:55:
34:71:bd:d3:5a:40:2d:68:39:8e:28:0f:e7:ff:7e:80:28:66:
57:24:df:d0:d1:f3:5b:a3:33:7b:52:f6:f9:ac:0f:15:e7:73:
e4:6a:f9:1e:85:67:2f:d2:92:c0:3a:52:68:e0:60:cf:f4:8c:
e0:ea:04:9c:2f:c6:e3:47:d7:29:7c:22:b9:e1:18:7c:c0:0e:
3f:46:c4:75:d0:53:05:cb:44:04:03:52:03:7b:04:e6:46:88:
e0:9e:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:33 2026 by rpki-client