This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: +0qJw/uX4dLfjHQpAGMWyIgWV57e+9i6Bp1F8kD+Ma8=
Subject key identifier: B0:A0:EF:EB:27:CD:8A:1E:B7:6B:9F:BB:82:56:36:7C:64:AD:8E:FE
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 019C2EC026090AA3867BE99D7C2C927A9179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0D5F
Signing time: Thu 05 Feb 2026 17:01:10 +0000
Manifest this update: Thu 05 Feb 2026 17:01:10 +0000
Manifest next update: Fri 06 Feb 2026 17:01:10 +0000
Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=)
2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: oxm4findhG8z7jKd9OZuLChwY24NAXx7emKzrb0xnjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2e:c0:26:09:0a:a3:86:7b:e9:9d:7c:2c:92:7a:91:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Feb 5 17:01:10 2026 GMT
Not After : Feb 6 17:01:10 2026 GMT
Subject: CN=b0a0efeb27cd8a1eb76b9fbb8256367c64ad8efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:56:20:17:1e:ac:15:3a:0d:38:86:25:9f:
cb:43:b5:7c:03:27:5a:a6:56:cf:bd:a8:cf:fc:0c:
fc:bb:25:31:3c:34:d7:3a:9a:3c:77:76:b6:b5:b2:
99:87:c5:c2:22:a9:f4:78:6d:bf:7f:a1:cd:e6:25:
a7:30:ef:8b:1b:a8:68:8c:9f:ac:39:32:98:84:7e:
ea:1f:53:41:cb:1a:dc:ab:05:ef:0c:21:16:5e:5b:
1d:9b:df:2b:5b:e5:a2:15:75:f0:d7:8d:e3:97:4b:
37:f1:52:6c:4d:7f:61:4b:ed:ad:fc:10:d2:79:3b:
d0:6f:3d:af:72:26:2c:13:7e:d6:de:ed:6a:c2:05:
50:fd:7e:ee:1b:bb:ac:e5:d6:b8:a9:b0:c2:7c:51:
7e:89:ee:6f:6b:e7:91:88:5f:f5:c7:44:86:e9:9f:
82:53:6f:05:04:8a:e0:71:2f:10:24:ed:d4:c2:df:
c2:f1:f8:2f:7a:c9:57:cc:27:cf:06:6e:35:5d:fe:
46:0e:d3:e1:7a:a1:17:99:20:cd:04:fc:37:56:1a:
fc:0b:79:52:9a:48:d2:15:59:83:08:05:95:b5:ca:
83:26:cb:af:43:a3:bc:31:32:ac:9a:97:1d:9c:dc:
2f:7d:6e:58:2a:e0:dd:21:8e:c9:44:92:e6:ff:eb:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A0:EF:EB:27:CD:8A:1E:B7:6B:9F:BB:82:56:36:7C:64:AD:8E:FE
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:db:1d:d1:66:a3:63:f8:b5:ed:17:d2:40:a6:8a:2e:23:8d:
f6:60:3c:d4:42:3e:84:96:83:4a:62:b5:eb:da:7b:84:aa:e3:
4e:20:cd:f6:39:e6:d1:76:71:12:68:b9:a9:e2:e6:df:de:33:
3b:69:d4:6e:ed:d2:8e:fc:a4:2a:d9:21:b8:c7:73:43:3b:21:
db:ef:73:1b:7a:26:d8:17:04:a9:75:74:94:bf:9e:6c:80:4d:
31:99:f2:46:8f:44:59:09:47:01:9d:c6:08:28:f7:65:7a:87:
28:26:61:36:b8:bf:dc:55:95:61:2e:32:55:15:a6:d4:c4:56:
80:42:70:af:ab:f4:eb:e8:96:9a:3a:16:c8:62:35:c6:e8:a0:
39:25:7b:bd:d5:d1:7b:5d:b5:09:8d:8a:f2:00:b2:52:29:01:
f1:97:a5:92:22:88:f0:7c:66:ff:f2:95:e5:22:d2:d7:21:3e:
96:b3:d9:fb:4e:e8:5d:c7:48:67:7d:92:9b:38:11:49:ad:b9:
04:94:17:ef:65:98:63:6b:03:01:60:e9:63:2d:28:53:5e:a2:
96:92:9b:09:72:6d:5c:5e:e1:d5:e4:70:12:e4:66:40:38:66:
c8:69:3c:76:a4:19:69:84:f3:e2:d7:65:ea:81:b7:fd:a7:01:
a9:80:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 19:47:08 2026 by rpki-client