This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: s9Jbfai99dVcAuxRm7jCo2Yoga0NIpiJ8J8gSIp8SZc=
Subject key identifier: EA:19:5E:68:4D:F2:1A:14:0E:D1:21:E7:DC:3A:EB:88:A2:15:C7:EF
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019C42EAE7D5D184DB546D026FA105426943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 09E3
Signing time: Mon 09 Feb 2026 15:00:16 +0000
Manifest this update: Mon 09 Feb 2026 15:00:16 +0000
Manifest next update: Tue 10 Feb 2026 15:00:16 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: qWL0s5mW7mGe3YrEPI5NJzr0hzoRNFUEAJIgt3LljdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:e7:d5:d1:84:db:54:6d:02:6f:a1:05:42:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Feb 9 15:00:16 2026 GMT
Not After : Feb 10 15:00:16 2026 GMT
Subject: CN=ea195e684df21a140ed121e7dc3aeb88a215c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:0e:57:e8:e0:88:bf:2f:22:b6:30:61:94:
bb:20:fe:9f:8a:29:d1:ea:20:52:88:9e:b7:56:86:
7e:c1:85:00:99:ab:52:62:ff:5b:26:b2:cd:94:07:
65:d1:0c:17:f4:35:c1:34:bb:1a:c2:67:f5:9d:6e:
62:7c:ca:85:47:ff:9a:48:60:84:dc:44:47:0e:b8:
f5:13:50:f4:d0:52:3b:42:d9:61:63:8d:39:6c:fa:
66:f2:4b:06:02:2f:02:00:48:2c:cc:b5:e7:a9:68:
8b:5f:be:bf:b7:89:ab:1a:b3:8e:69:52:2e:a8:09:
94:c2:88:8d:49:9e:c4:df:77:af:dd:d4:86:b4:d7:
2a:be:31:cf:a1:4b:4a:d3:11:5a:02:3e:4c:2c:b4:
cd:3c:33:85:92:83:fe:5c:a3:79:73:e3:e8:03:06:
88:92:c7:a5:61:64:43:a6:bb:38:8f:28:47:32:d7:
76:17:ab:5d:af:85:05:b3:30:38:54:65:26:d1:dd:
4e:62:df:52:ae:ce:86:bc:63:f6:00:2e:5e:e7:d7:
b7:12:85:4f:23:f9:68:f2:b6:de:d0:96:f3:84:f3:
ac:5f:c1:9d:f4:42:10:fa:c4:ce:2d:f8:3b:aa:ca:
5e:c1:b4:58:ab:f5:c6:cd:2e:b1:45:f3:fb:2b:62:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:5E:68:4D:F2:1A:14:0E:D1:21:E7:DC:3A:EB:88:A2:15:C7:EF
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8b:41:33:fc:35:7e:f5:b6:8f:57:2f:7c:89:15:f6:d7:e4:
ef:0d:f4:9c:f3:1c:54:59:2a:d9:df:12:aa:ba:7c:1f:f7:25:
e6:5e:01:cb:b3:17:58:fd:88:33:37:f7:3b:33:ae:4c:82:d4:
5e:9f:ed:4d:9c:56:03:b1:4b:d8:85:f4:0f:3f:b1:0a:c8:37:
4c:a6:b9:cf:c8:09:03:aa:fc:f0:c2:7a:8d:e8:23:80:a3:9b:
f9:f8:12:fc:94:34:f4:8f:c0:97:13:f8:7b:99:b5:ef:17:8c:
80:0e:68:58:dc:58:2c:91:5a:a7:ae:c4:10:79:5c:c0:ee:08:
06:77:43:7d:ee:a6:86:24:c6:89:97:9f:79:e1:7e:23:ad:a6:
c5:e1:22:e6:c4:95:65:76:c3:9b:6a:e9:76:af:4c:84:e8:80:
1f:81:7a:c3:7c:a6:55:1e:7b:dd:b2:81:a3:2c:d8:fa:b6:be:
98:5a:6b:29:5c:51:4a:de:65:c1:3d:33:98:57:5b:ce:d4:e4:
cf:55:8e:3a:4b:4c:bf:03:3a:52:5f:19:a2:65:75:ca:36:28:
e1:fc:4e:92:27:ff:be:13:75:e4:7b:87:58:20:16:56:a3:22:
13:49:f1:8a:2a:c9:4b:ad:2c:87:48:80:8a:5a:79:09:dc:5f:
4a:58:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:55 2026 by rpki-client