This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
File: f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft (raw, json)
Hash identifier: FF7aOrBsyZdV17b2DNGRrGzjVP1v2JNyh56vIvXYb0c=
Subject key identifier: 7E:F5:6D:04:7E:46:55:45:A6:40:58:90:8C:C5:CF:41:FC:C8:F4:0E
Authority key identifier: 7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
Certificate issuer: /CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Certificate serial: 019C42B4988384EADD00FF9CB08F5824B06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
Manifest number: 03E1
Signing time: Mon 09 Feb 2026 14:00:57 +0000
Manifest this update: Mon 09 Feb 2026 14:00:57 +0000
Manifest next update: Tue 10 Feb 2026 14:00:57 +0000
Files and hashes: 1: OmjdAjVWAeN7nazvaN8tyky8gB4.roa (hash: oILOHbkx48Up7aMbK7MsGxijo68OXba8v88+kgI/k8w=)
2: f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl (hash: mUQmLQ8ljdhngL2owneK72R/iH2quQE1u86t48va9nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:98:83:84:ea:dd:00:ff:9c:b0:8f:58:24:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fee3f382073f2c3e4fccffca384c5b0cd826c26
Validity
Not Before: Feb 9 14:00:57 2026 GMT
Not After : Feb 10 14:00:57 2026 GMT
Subject: CN=7ef56d047e465545a64058908cc5cf41fcc8f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:96:ec:e5:28:3f:b5:c6:37:3a:cb:5e:b0:
33:50:b9:b2:d4:f3:0d:de:02:64:56:49:e7:b3:73:
d0:70:57:9b:76:8f:20:34:0d:78:e6:f6:0e:e9:e4:
1b:ad:31:12:f4:29:cd:52:4a:c0:7a:60:15:4d:29:
7f:6f:d6:7d:ff:2d:42:6a:5c:7e:c0:4a:db:ba:be:
65:91:31:a0:3d:e0:a5:f1:a9:4f:20:58:5b:de:33:
c2:12:5f:29:52:50:fb:27:e2:9b:12:d6:e2:f6:8f:
68:d0:58:4a:e2:c1:5a:6c:92:dd:de:c9:bd:56:d5:
0e:d6:1b:cb:91:1b:15:ca:ed:db:be:99:ea:d6:4e:
cc:06:69:a3:43:e1:83:2f:2e:ca:78:2e:79:69:11:
eb:d4:8e:c1:12:cb:4b:54:1c:33:64:20:1b:74:72:
99:3d:b9:41:85:d1:75:50:18:30:ff:74:d0:c9:70:
04:97:ad:b5:a2:6f:ba:b9:08:81:51:ba:2f:1c:a9:
7a:d9:ee:61:3a:4a:01:87:ca:e1:c9:8c:e0:1f:5a:
8e:68:fa:7e:ab:81:6d:d3:c2:11:7b:cb:05:db:11:
04:58:15:22:e3:e2:0a:58:31:85:c0:13:ac:b9:00:
88:15:67:9c:99:60:f8:fd:cb:67:87:d3:84:c4:4d:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F5:6D:04:7E:46:55:45:A6:40:58:90:8C:C5:CF:41:FC:C8:F4:0E
X509v3 Authority Key Identifier:
keyid:7F:EE:3F:38:20:73:F2:C3:E4:FC:CF:FC:A3:84:C5:B0:CD:82:6C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-4_OCBz8sPk_M_8o4TFsM2CbCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8ccebf-f9fa-4c46-aee8-ccbfa73424a7/1/f-4_OCBz8sPk_M_8o4TFsM2CbCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:72:b7:29:5a:b3:1f:d9:c2:48:95:c8:b5:dd:a8:f3:c4:4c:
27:d1:36:1e:d3:fd:7d:1f:e8:6e:e9:8e:62:d3:74:aa:44:65:
1c:1e:ee:a0:6a:5f:6e:7b:a4:cf:7c:bc:e6:25:04:71:b0:d3:
9c:fe:b9:86:94:ef:20:4d:89:e4:15:1f:f1:02:be:17:c1:96:
5e:e1:4a:7b:2c:fa:e4:35:e4:fe:b6:dd:d4:c1:1b:25:73:03:
f5:31:81:d0:fa:c6:23:f8:81:5e:83:c1:25:13:c6:09:ba:1d:
e9:93:51:67:cf:cc:3e:ec:a4:f6:5c:b6:7d:9c:18:50:b9:5c:
10:d6:a8:b4:fa:c2:19:5f:4d:8c:51:5c:2e:79:cc:83:da:9a:
57:36:23:e5:11:9f:af:82:51:07:d9:3f:6c:1b:04:59:72:23:
5b:45:e8:58:bd:65:52:24:69:a0:ee:1a:97:bc:67:ef:da:8e:
5a:a3:71:96:27:e8:56:5d:ac:04:a8:33:d5:88:6b:e7:f0:0b:
70:e2:1a:8e:ec:5d:c5:14:17:14:ce:6d:ff:c6:8e:e6:b9:c3:
05:07:1f:a2:da:bb:0d:e7:67:58:18:36:17:30:4d:a6:7a:30:
d4:0e:5b:82:a6:7d:03:96:c8:12:6a:17:e9:a9:6e:57:0e:e2:
81:a0:be:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtJiDhOrdAP+csI9YJLBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZWUzZjM4MjA3M2YyYzNlNGZjY2ZmY2EzODRjNWIwY2Q4
MjZjMjYwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD
Eyg3ZWY1NmQwNDdlNDY1NTQ1YTY0MDU4OTA4Y2M1Y2Y0MWZjYzhmNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj2W7OUoP7XGNzrLXrAzULmy1PMN
3gJkVknns3PQcFebdo8gNA145vYO6eQbrTES9CnNUkrAemAVTSl/b9Z9/y1Calx+
wErbur5lkTGgPeCl8alPIFhb3jPCEl8pUlD7J+KbEtbi9o9o0FhK4sFabJLd3sm9
VtUO1hvLkRsVyu3bvpnq1k7MBmmjQ+GDLy7KeC55aRHr1I7BEstLVBwzZCAbdHKZ
PblBhdF1UBgw/3TQyXAEl621om+6uQiBUbovHKl62e5hOkoBh8rhyYzgH1qOaPp+
q4Ft08IRe8sF2xEEWBUi4+IKWDGFwBOsuQCIFWecmWD4/ctnh9OExE01owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH71bQR+RlVFpkBYkIzFz0H8yPQOMB8GA1UdIwQY
MBaAFH/uPzggc/LD5PzP/KOExbDNgmwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgt
Y2NiZmE3MzQyNGE3LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84Y2NlYmYtZjlmYS00YzQ2LWFlZTgtY2NiZmE3MzQyNGE3
LzEvZi00X09DQno4c1BrX01fOG80VEZzTTJDYkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXK3KVqz
H9nCSJXItd2o88RMJ9E2HtP9fR/obumOYtN0qkRlHB7uoGpfbnukz3y85iUEcbDT
nP65hpTvIE2J5BUf8QK+F8GWXuFKeyz65DXk/rbd1MEbJXMD9TGB0PrGI/iBXoPB
JRPGCbod6ZNRZ8/MPuyk9ly2fZwYULlcENaotPrCGV9NjFFcLnnMg9qaVzYj5RGf
r4JRB9k/bBsEWXIjW0XoWL1lUiRpoO4al7xn79qOWqNxlifoVl2sBKgz1Yhr5/AL
cOIajuxdxRQXFM5t/8aO5rnDBQcfotq7DednWBg2FzBNpnow1A5bgqZ9A5bIEmoX
6aluVw7igaC+CA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:43 2026 by rpki-client