This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: PVPoRu374EbHwon9YggAruben4AN2AYHwWKQdZVVF/0=
Subject key identifier: AC:E6:BA:16:3C:D1:9A:E4:D1:CD:97:6B:D2:9C:52:71:E8:D0:D5:26
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019C43593D65F05EBCADDC63FE8DE502BDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0D5B
Signing time: Mon 09 Feb 2026 17:00:47 +0000
Manifest this update: Mon 09 Feb 2026 17:00:47 +0000
Manifest next update: Tue 10 Feb 2026 17:00:47 +0000
Files and hashes: 1: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (hash: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: skuyQn7Toek4Sr83faTRprjHrSFbe6HI4bwnJWjZZ8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:3d:65:f0:5e:bc:ad:dc:63:fe:8d:e5:02:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Feb 9 17:00:47 2026 GMT
Not After : Feb 10 17:00:47 2026 GMT
Subject: CN=ace6ba163cd19ae4d1cd976bd29c5271e8d0d526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:0e:e1:a1:eb:cf:ed:72:25:53:89:20:09:
8b:a2:e8:30:21:e0:55:76:71:24:24:54:10:32:7b:
12:cc:d8:cc:0f:c3:46:f9:da:93:87:2f:90:c5:c1:
8d:5a:01:e7:97:df:df:51:12:b5:23:1d:6a:ff:5e:
50:fb:42:3a:47:22:5d:2d:4a:2f:31:84:0a:c1:eb:
c1:55:f4:0d:36:73:76:2a:e4:be:b5:1a:41:39:be:
9c:3f:17:51:58:f9:48:52:c7:f1:72:ba:06:10:4e:
c7:95:e4:f4:cf:5b:e8:3f:3f:c9:62:64:4c:9a:81:
8d:6d:94:e5:f6:05:af:c4:18:de:51:b1:37:4c:d0:
11:f7:20:ad:ac:e6:28:4a:35:e7:2d:30:56:52:80:
01:b2:81:e0:0f:41:c6:76:4c:5f:79:7c:fd:6e:df:
98:2b:50:5f:2a:2d:8e:f8:15:85:4b:b4:c0:4a:1e:
b1:e5:44:fa:f1:81:01:6f:73:5a:8e:8b:dd:95:80:
40:e8:6e:50:a6:fc:4c:49:ca:06:b3:40:37:f4:40:
60:c0:2b:95:fc:9b:fd:df:71:27:57:3e:5c:a2:99:
3c:68:0a:0f:c6:c5:08:30:37:1d:d6:e1:14:ba:cf:
5c:21:25:eb:7f:ae:b3:16:16:bb:aa:1f:20:0e:d0:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:BA:16:3C:D1:9A:E4:D1:CD:97:6B:D2:9C:52:71:E8:D0:D5:26
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:87:cb:f3:f6:4e:6d:7f:f9:62:d2:f5:3c:f7:c2:14:73:
63:43:4f:22:f7:89:b1:01:b4:56:b1:fc:d3:2c:f3:b4:95:3a:
7c:78:9d:16:1c:34:52:29:c4:6e:22:cf:62:26:ec:17:48:80:
43:50:86:73:d6:64:5f:fd:5e:ce:d9:4a:ad:a6:9d:4b:14:26:
a1:10:9d:ac:82:66:5c:92:23:f7:53:5a:f7:eb:e0:5b:50:25:
be:1e:22:2c:94:e4:8b:f9:12:b5:42:86:94:bf:c6:2b:5a:cb:
db:4c:03:ba:5d:be:9e:22:fe:58:b2:b5:9e:4b:a1:86:f0:45:
db:89:2b:2f:d8:9b:94:ff:d8:fd:9b:4b:37:30:10:31:da:34:
d2:ea:ee:68:c0:b7:e3:24:fe:f2:5c:d3:71:8b:d4:4c:10:03:
43:d4:5d:b4:e1:ca:f1:c7:19:ce:59:a8:f2:b4:f5:b0:d2:6b:
2e:c5:e9:09:c3:62:fe:c9:1c:28:dd:38:d6:9b:95:04:6b:32:
cf:e3:12:1f:f5:b3:24:cc:70:b0:28:ec:41:19:b8:a6:5d:1a:
a2:f5:cf:98:89:08:e8:8c:89:a8:08:e7:6e:77:76:9d:8c:72:
34:46:56:d6:ac:4a:e4:3e:27:b4:6d:41:dc:db:5a:2c:69:02:
02:dd:36:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWT1l8F68rdxj/o3lAr30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGU0YzNiNmRhYTVhNjk4YmYzMDdjYzM5MTI4MmFiMjk4
N2Q2MTcwHhcNMjYwMjA5MTcwMDQ3WhcNMjYwMjEwMTcwMDQ3WjAzMTEwLwYDVQQD
EyhhY2U2YmExNjNjZDE5YWU0ZDFjZDk3NmJkMjljNTI3MWU4ZDBkNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNoO4aHrz+1yJVOJIAmLougwIeBV
dnEkJFQQMnsSzNjMD8NG+dqThy+QxcGNWgHnl9/fURK1Ix1q/15Q+0I6RyJdLUov
MYQKwevBVfQNNnN2KuS+tRpBOb6cPxdRWPlIUsfxcroGEE7HleT0z1voPz/JYmRM
moGNbZTl9gWvxBjeUbE3TNAR9yCtrOYoSjXnLTBWUoABsoHgD0HGdkxfeXz9bt+Y
K1BfKi2O+BWFS7TASh6x5UT68YEBb3NajovdlYBA6G5QpvxMScoGs0A39EBgwCuV
/Jv933EnVz5copk8aAoPxsUIMDcd1uEUus9cISXrf66zFha7qh8gDtCLVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzmuhY80Zrk0c2Xa9KcUnHo0NUmMB8GA1UdIwQY
MBaAFKPeTDttqlppi/MHzDkSgqsph9YXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMt
MGFmMmM1YzRjYzBmLzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80YzlmYmUtMTcyNS00MTE2LTllZjMtMGFmMmM1YzRjYzBm
LzEvbzk1TU8yMnFXbW1MOHdmTU9SS0NxeW1IMWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaxSHy/P2
Tm1/+WLS9Tz3whRzY0NPIveJsQG0VrH80yzztJU6fHidFhw0UinEbiLPYibsF0iA
Q1CGc9ZkX/1eztlKraadSxQmoRCdrIJmXJIj91Na9+vgW1Alvh4iLJTki/kStUKG
lL/GK1rL20wDul2+niL+WLK1nkuhhvBF24krL9iblP/Y/ZtLNzAQMdo00uruaMC3
4yT+8lzTcYvUTBADQ9RdtOHK8ccZzlmo8rT1sNJrLsXpCcNi/skcKN041puVBGsy
z+MSH/WzJMxwsCjsQRm4pl0aovXPmIkI6IyJqAjnbnd2nYxyNEZW1qxK5D4ntG1B
3NtaLGkCAt02Vg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:41 2026 by rpki-client