This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier: y8y+ok6CtxMNtx4XkZV8wzVtrciV8/D5PjVoUtG7ipk=
Subject key identifier: 01:80:7A:F7:38:59:20:83:A4:9F:19:B1:AE:69:EA:CF:02:91:65:C7
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 019C4390CA963FC254F97F57A18E2E89EB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number: 02D6
Signing time: Mon 09 Feb 2026 18:01:28 +0000
Manifest this update: Mon 09 Feb 2026 18:01:28 +0000
Manifest next update: Tue 10 Feb 2026 18:01:28 +0000
Files and hashes: 1: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: cui6pYxor1E6tHDWY18XWLE0cfdH1xIhtG9DkC1cuFE=)
2: avpRzc4rlLKtPjM9Nx0tTIvXDJw.roa (hash: IhFfZxmSF0cAaOFLNU/UGx/v0dCXUziLntdrEkHsx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:ca:96:3f:c2:54:f9:7f:57:a1:8e:2e:89:eb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: Feb 9 18:01:28 2026 GMT
Not After : Feb 10 18:01:28 2026 GMT
Subject: CN=01807af738592083a49f19b1ae69eacf029165c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:4f:6a:2d:94:bb:4b:8f:ac:fb:3e:09:e1:
dd:6c:37:ec:61:bc:21:4d:14:c4:b5:eb:60:12:b5:
a7:4a:35:5a:fc:ba:33:fe:45:84:df:be:2f:67:51:
18:b0:c2:3d:6b:74:48:3b:0b:61:4a:2e:a9:93:c0:
8a:3b:12:5e:4d:31:7c:0b:c6:67:59:4c:c6:1d:69:
b4:a6:dc:45:58:8a:9f:79:dc:49:15:41:a2:7f:9d:
fd:95:d7:2e:16:f8:d0:ff:45:e1:61:38:0b:08:1e:
a1:54:87:ce:26:fd:56:8d:3a:ec:43:b8:37:8c:7c:
de:7e:a3:13:eb:f7:39:1d:d4:67:d9:89:74:c3:2b:
93:d3:e6:7c:66:79:98:05:b9:f9:58:7d:c4:74:28:
1f:94:da:ab:6d:93:3f:e0:ec:8b:9f:79:03:2e:fb:
f5:c0:69:ce:5c:54:65:a8:a3:0a:be:f9:26:bc:ee:
ea:55:5d:d0:a3:20:3c:15:36:fd:71:f0:05:b2:a3:
b5:80:6f:11:28:f4:e4:67:ce:fb:c0:c5:ac:16:24:
d2:0f:ff:c5:8a:9f:f0:7b:03:b8:55:f2:88:2d:c3:
6b:65:be:6e:e4:cf:11:31:b8:53:f2:2e:78:9d:61:
64:20:c6:48:66:fa:19:9d:ce:d5:5f:06:db:bb:bf:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:80:7A:F7:38:59:20:83:A4:9F:19:B1:AE:69:EA:CF:02:91:65:C7
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:81:0e:d2:33:02:8c:3f:7a:83:2d:d7:58:3a:b1:07:89:fb:
39:26:e6:9a:25:72:11:c8:b9:02:8e:af:dc:11:58:fb:15:c1:
7a:6c:c4:d1:22:40:03:d7:84:7a:28:05:f3:61:a3:4c:62:42:
6f:cb:f8:83:da:c2:a7:7a:38:f4:a6:e2:57:88:f1:84:9b:96:
a2:14:e5:a3:19:85:ce:4c:f4:16:8f:fa:29:d6:85:53:ac:b2:
f2:16:e6:20:5c:c4:76:30:48:ac:af:f5:81:b9:01:62:0a:c7:
f0:02:17:35:2d:4c:14:8d:c7:4d:38:b0:06:44:2d:01:8c:d7:
b8:28:44:42:45:3d:5a:d1:ee:fd:b1:37:4c:bd:21:31:fd:a0:
c7:e3:f9:81:bc:7e:9b:3d:28:24:88:e2:ef:55:f4:34:e8:c2:
93:08:84:b9:3c:aa:35:3c:ff:ef:cd:71:17:26:97:dc:4e:bf:
c2:74:af:2f:ae:93:a2:7b:00:96:eb:8a:18:c8:99:c0:75:36:
62:70:d1:5e:98:a8:1e:bb:69:3b:81:bc:ff:75:fc:ea:35:a7:
38:7a:07:fc:d7:d5:12:27:19:ef:b6:7f:8f:0e:97:32:7a:49:
8a:f1:f9:f0:df:d7:37:bb:74:55:79:6f:eb:df:79:a5:d1:56:
16:35:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:47 2026 by rpki-client