This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: YiDICtMc3elPCxfPQTgC9z6kDFw4+6QISx6vzKTDqjo=
Subject key identifier: D3:0A:B8:1C:24:47:9E:54:CB:81:54:F5:9B:E9:96:C8:19:A6:B1:6E
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 019C420FFA066790B3D9DC5A9FDFF5CC4675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 11:01:09 +0000
Manifest this update: Mon 09 Feb 2026 11:01:09 +0000
Manifest next update: Tue 10 Feb 2026 11:01:09 +0000
Files and hashes: 1: lkMBU0ulWCYX9Qd2oDU0Fa5nUCQ.roa (hash: 5I+gArCAUlirrf6+Qe9WxJcuIzvziEquXwY3XUiYld0=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: oHvtV89ZSyfsx5dDCkVVmreBQy7rcJwFVUFHnqVr9+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:fa:06:67:90:b3:d9:dc:5a:9f:df:f5:cc:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Feb 9 11:01:09 2026 GMT
Not After : Feb 10 11:01:09 2026 GMT
Subject: CN=d30ab81c24479e54cb8154f59be996c819a6b16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:0a:10:31:3c:c6:42:ed:92:ae:69:66:7b:
97:70:71:8a:22:c8:b5:d5:08:e2:77:9b:06:eb:aa:
16:cd:c4:7e:74:6a:46:24:64:cb:2e:b7:5d:e3:8e:
02:35:01:42:e7:50:4f:37:9e:bc:16:33:c8:6e:c7:
cb:c0:e8:6c:8d:4e:65:7a:2a:3a:d5:e1:8e:06:bc:
27:4b:d8:7d:2b:0e:9e:62:52:da:c2:e2:e5:1d:45:
ba:71:14:a8:53:26:66:fd:3c:9c:60:db:34:c6:b3:
94:a3:83:44:05:a9:df:4d:ae:a0:d0:0d:ba:41:03:
c3:0b:86:53:9a:08:85:a3:8e:0e:d9:80:a2:6d:65:
42:0f:9e:ad:30:9e:28:9f:d6:ea:cd:a7:16:7b:1f:
bc:87:15:1d:34:87:5b:3a:53:e6:73:fd:8f:b9:e6:
ae:83:cc:18:24:03:b4:02:cf:18:84:93:cd:fc:b2:
3f:6a:d4:00:f5:2a:a2:f4:15:8e:11:45:99:e3:97:
1e:26:c4:a7:f2:86:d0:4f:79:5c:2d:f4:87:b9:8a:
41:b9:a2:c3:df:ca:a6:f6:0c:09:8c:37:38:c9:e5:
49:37:3c:cf:12:b9:29:30:28:77:f1:9c:5b:78:a7:
05:69:2d:f2:9f:4c:94:21:31:40:7b:a4:a3:ff:90:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:B8:1C:24:47:9E:54:CB:81:54:F5:9B:E9:96:C8:19:A6:B1:6E
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:91:22:2e:7a:fa:6f:74:c2:c8:0b:01:f6:cb:92:51:90:
c2:f5:99:16:80:ce:60:b4:b1:57:c4:1b:03:2c:f0:e3:c3:38:
18:07:7f:50:8b:ce:6d:64:1e:1f:36:56:11:2e:fe:14:64:46:
55:4f:91:16:48:a6:bd:eb:b8:0f:c7:2a:60:e3:a0:1c:12:42:
f3:ba:92:53:9e:4d:02:39:42:55:12:e2:ee:36:a7:8b:4b:76:
4d:98:9b:b6:5b:a2:90:d1:87:19:46:3c:45:e4:09:e7:78:85:
20:af:63:f8:bd:51:98:08:2e:56:35:f6:ab:55:3c:d6:8a:70:
3b:72:b8:73:40:8b:6e:ac:99:2c:7b:83:2c:4b:cc:26:bd:aa:
c6:81:39:7e:1f:47:33:49:17:87:53:04:61:b2:0e:2c:3b:9f:
7c:4d:9c:9e:7b:ac:b2:9a:44:90:f5:6c:47:0c:54:96:7a:56:
f6:23:3c:59:76:0f:23:67:4d:a9:89:85:df:f5:16:3c:c0:68:
03:a2:6a:d4:ae:5b:6f:32:6c:ef:f6:b7:46:e2:3f:ce:4c:50:
e4:95:3c:e9:9d:0f:c5:18:47:d7:4a:da:6c:26:61:44:e8:6c:
6f:53:8d:a1:c2:47:16:7a:49:eb:34:a5:9e:7e:09:5d:0c:d0:
f9:6d:6f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:09 2026 by rpki-client