This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: ief87Oel1Qp15mtpKUXtkIMeIZBcrFJVhIFfP+K9vcY=
Subject key identifier: 00:0F:E8:28:0A:5F:B7:82:F9:64:6E:34:F2:B5:81:A0:73:D1:0B:2B
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019C438FBCF9C920A6766ACFE2F473ECA3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:00:19 +0000
Manifest this update: Mon 09 Feb 2026 18:00:19 +0000
Manifest next update: Tue 10 Feb 2026 18:00:19 +0000
Files and hashes: 1: XYUJ8YEpWRVKnEs1lud3ZGRwErY.roa (hash: ODygtNmaduKQgGbNRUfrQ+Q4mGtK3q6vsVkBCLpr8rg=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: oC2QADkk8AaGgN4Bg/lZgN9nALBhn8Ek7Ej1/TpzPNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:bc:f9:c9:20:a6:76:6a:cf:e2:f4:73:ec:a3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Feb 9 18:00:19 2026 GMT
Not After : Feb 10 18:00:19 2026 GMT
Subject: CN=000fe8280a5fb782f9646e34f2b581a073d10b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:9d:cf:d6:9e:27:f9:99:ca:35:88:ef:80:
8a:36:2d:e1:25:02:f6:c3:34:a2:2d:05:c8:e3:63:
ef:dc:5d:78:2d:66:1a:71:14:41:22:71:22:01:c5:
2b:7b:a5:b7:68:f2:37:86:7c:91:42:e1:f2:88:b6:
2c:52:81:85:37:fa:a4:21:f0:7e:33:84:34:48:19:
18:53:ef:87:f4:ff:7c:b1:f2:f5:42:30:70:fd:d2:
1d:71:79:9d:c7:86:12:57:06:30:0b:ea:ce:0c:e4:
6e:3b:2d:8b:ed:0d:c5:1f:dd:92:c1:55:f6:a0:92:
b8:80:9d:ab:9d:3a:fc:3a:fd:03:e2:fb:7d:b8:cd:
e6:f0:c8:90:76:a3:fa:e4:46:44:f5:b9:33:71:19:
a1:3d:39:9f:84:4b:db:40:a5:ad:46:7d:31:a2:57:
75:a7:04:09:25:50:46:62:96:f2:35:8f:7f:aa:b9:
64:55:3f:e1:7c:ac:bb:5a:21:70:f3:7b:b8:31:b5:
86:b1:4c:fd:69:9d:13:dc:21:ab:74:d1:72:a6:b5:
30:2a:38:68:72:03:c0:83:ed:83:3f:e0:77:1b:1f:
19:37:5d:83:f7:6b:51:6e:76:6d:ce:f8:e3:cb:b7:
11:62:c9:d1:b6:a1:11:78:04:a7:4b:8a:51:de:8d:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:E8:28:0A:5F:B7:82:F9:64:6E:34:F2:B5:81:A0:73:D1:0B:2B
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:94:07:fc:9e:af:a9:83:d6:59:52:1a:d0:6d:5f:12:b7:1d:
77:26:0b:48:f1:60:72:e9:ea:0b:9c:10:ce:ac:27:72:e6:0f:
58:43:8c:53:85:bb:c7:96:c8:ad:8f:4f:07:a9:58:21:be:4e:
8f:26:20:68:41:5f:ab:21:4d:13:eb:14:14:a4:15:8f:16:34:
01:e0:23:9e:b5:39:d8:ed:b1:2c:f6:a5:d9:b2:25:36:c3:02:
f1:35:51:70:4f:44:4e:a8:39:1c:aa:13:56:a3:93:53:90:8d:
28:c3:00:90:a6:6f:2e:34:90:f9:52:4a:e6:5b:7d:22:1e:a7:
24:94:ce:b8:90:30:64:3d:35:53:32:9d:61:99:2b:ac:b5:e4:
e4:2d:2a:02:17:28:ed:89:d4:b7:0c:eb:81:e1:5f:61:22:57:
06:10:a3:f1:ee:11:e4:1e:1a:4a:b1:13:ac:56:c5:98:88:6c:
35:f4:63:f7:99:d8:0c:dc:45:b3:78:ef:92:4c:cc:a3:13:63:
43:ea:9a:30:21:ae:9c:85:00:89:56:aa:ce:d2:0d:cf:33:f0:
a6:da:40:08:11:b6:ad:be:a4:d7:47:c2:b3:bc:2d:cd:af:f8:
19:ab:f5:f1:1f:48:2f:25:0f:23:45:77:e3:71:39:d4:25:7e:
6a:25:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:11 2026 by rpki-client