This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: hQXaguivb62CKUXWdUpVsubNozro98K7hPaJDbLMvjI=
Subject key identifier: AC:97:21:EB:BC:13:9B:BB:D8:07:7F:C0:F8:A2:76:09:AA:C6:80:5D
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019C427DDC507E52C09A2D9F9D1EB8D83F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0773
Signing time: Mon 09 Feb 2026 13:01:10 +0000
Manifest this update: Mon 09 Feb 2026 13:01:10 +0000
Manifest next update: Tue 10 Feb 2026 13:01:10 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: u41EquZkR7TyQ8bMl2rDW9ZUMJR5XG45JWjHJ9ZTpNs=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:dc:50:7e:52:c0:9a:2d:9f:9d:1e:b8:d8:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Feb 9 13:01:10 2026 GMT
Not After : Feb 10 13:01:10 2026 GMT
Subject: CN=ac9721ebbc139bbbd8077fc0f8a27609aac6805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:b2:1f:6b:12:42:93:97:af:cb:fd:37:1f:
8f:09:41:f4:f5:de:f3:3a:73:57:5f:21:f8:53:78:
8f:e8:20:7e:b2:d0:ec:a3:6e:5e:4e:7e:3a:98:f5:
58:85:17:3f:ab:0e:10:d4:10:18:08:05:0e:35:57:
54:e9:59:34:72:7e:9d:d1:6b:96:ba:7e:b5:2d:ff:
ae:8d:74:12:f6:1d:ac:27:47:77:6b:59:69:c7:f1:
79:bf:d3:63:04:ac:0b:34:f6:f8:51:8f:da:3b:ec:
75:2a:23:6b:12:42:a0:bc:b6:2a:06:3c:16:96:b5:
82:25:7b:75:7f:36:21:60:dd:d4:25:4a:04:d4:b4:
b3:21:46:29:4f:21:db:c2:83:64:fb:39:b0:c1:09:
04:86:4c:1f:d2:e4:2f:ba:ce:7e:a4:84:82:33:06:
46:d5:80:4b:53:0e:64:58:71:8a:b1:98:69:32:47:
11:60:fd:1b:c0:b8:22:5b:05:54:5b:6d:0f:ec:69:
e5:cb:cb:fe:45:fe:77:ae:6c:6f:96:a6:ef:32:ce:
fc:24:cb:24:6b:e8:ac:fa:ca:ac:ce:ff:1e:aa:39:
5c:a2:79:3a:c3:90:e2:e1:1c:cb:5e:17:a5:a5:49:
2f:3a:72:36:29:20:ea:4e:81:43:06:38:00:94:cc:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:97:21:EB:BC:13:9B:BB:D8:07:7F:C0:F8:A2:76:09:AA:C6:80:5D
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:6e:90:19:f0:61:46:e9:01:1c:9c:b2:c9:22:49:01:ca:
5e:2b:1a:81:28:7b:c3:c4:b9:4d:4f:98:ec:26:ed:42:b7:8c:
27:c3:ea:2d:45:25:2e:fa:a0:2e:66:f4:a9:27:10:91:b4:82:
4d:a6:8d:b0:e9:98:ec:76:86:4c:d1:00:3f:3e:75:33:5b:b3:
2b:af:f3:d0:1d:3f:85:25:15:97:9f:dc:dc:da:ca:91:b6:f6:
a2:ff:f2:cb:79:ac:9b:9e:5e:74:b7:36:eb:65:73:2f:ed:87:
57:43:53:8e:3d:6a:cc:5e:92:a9:ff:29:1c:2e:8c:98:ce:45:
f4:59:aa:38:d1:ba:b6:49:4a:19:57:52:99:8c:16:16:0f:5b:
6a:d9:8b:50:a0:d2:a8:e5:05:bd:20:aa:7d:b2:2b:76:5e:04:
92:69:49:a7:9a:85:2d:70:10:65:65:57:b5:6c:6d:17:ae:75:
6d:8d:38:7c:b6:45:86:c7:be:23:be:5a:da:69:b8:ac:6a:a5:
d7:e7:e2:a1:56:3a:74:14:81:a3:ea:56:6e:96:e6:ac:59:48:
98:a9:87:4b:f9:3d:0b:fc:d2:e2:9f:29:55:66:25:8e:3a:a0:
cc:d7:bd:ee:93:b7:62:41:3b:3d:88:83:72:b7:37:ea:7f:0c:
40:0a:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:49 2026 by rpki-client