This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: +5fjZXHIzdTR3PqUXfjKBLA7xmPGDPtY5AYOYbO2bDY=
Subject key identifier: 21:4F:1F:52:97:62:65:0F:01:54:C7:02:32:0F:C2:C4:5D:2B:DA:52
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 019C359D280458D20223AB530BC995DD676D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 180D
Signing time: Sat 07 Feb 2026 01:00:17 +0000
Manifest this update: Sat 07 Feb 2026 01:00:17 +0000
Manifest next update: Sun 08 Feb 2026 01:00:17 +0000
Files and hashes: 1: IkpqFJlNa2437VP_tcxeJyVAPMM.roa (hash: mlTIEBNdJZbIbhX3NLDEQ4pnepBeofaptKU6NdPs/uI=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: FBlossdPvp2zF/BFgg7c5ERedExAbHvRh2n6LozXsCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:35:9d:28:04:58:d2:02:23:ab:53:0b:c9:95:dd:67:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Feb 7 01:00:17 2026 GMT
Not After : Feb 8 01:00:17 2026 GMT
Subject: CN=214f1f529762650f0154c702320fc2c45d2bda52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:3d:a6:46:0b:0c:ed:e1:68:ca:7a:d4:80:
31:7d:85:fc:8b:37:b8:19:6e:4f:85:ba:bd:ba:ed:
27:3b:c6:de:83:5f:77:6a:e7:b6:59:9e:f3:61:28:
1d:85:ca:1f:f9:cd:98:cd:f2:57:8d:5a:4e:16:cb:
2f:18:5d:b9:78:8c:fd:6b:2e:7d:2d:64:e8:df:2c:
a9:42:da:20:5b:33:ae:88:90:f0:9c:78:05:ae:47:
16:c8:ba:74:ae:1a:9e:c2:3c:4f:a6:89:0c:7d:36:
a7:80:fc:bb:57:87:ab:d9:d2:e4:1f:6b:6b:6b:6e:
f7:94:2d:27:dd:68:3c:66:4c:c2:1e:de:ac:dc:3f:
ad:c2:f5:07:9e:a4:7d:6f:1e:92:a6:23:aa:64:31:
b3:fe:3e:3b:48:86:19:72:3e:b7:49:ad:d3:6c:ed:
2a:2f:25:d0:31:54:1b:91:11:29:a4:7f:e6:cb:9a:
28:03:95:99:ec:b7:e2:bc:ee:5c:f7:54:b4:c2:35:
12:c5:79:52:a1:7b:72:12:0d:c9:8a:4b:36:1f:c5:
6d:4a:3f:71:47:b5:69:b2:3c:d7:da:2c:b0:a8:70:
0a:6a:92:39:91:0a:64:86:ea:0d:c7:e9:bc:50:d2:
a3:d4:55:ec:d9:c7:bc:86:84:bb:16:de:fe:b3:80:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:1F:52:97:62:65:0F:01:54:C7:02:32:0F:C2:C4:5D:2B:DA:52
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fa:fc:b2:c7:35:0d:73:9d:96:be:3f:89:cf:47:09:2f:d6:
20:24:54:f8:75:d7:79:b4:80:34:7c:2b:bc:cc:41:eb:b1:e1:
d8:3b:64:3c:ed:48:0f:4b:03:05:04:c5:09:7b:24:0a:4e:62:
0f:d4:a5:1b:61:23:d2:eb:1a:24:58:75:9a:eb:33:35:54:47:
c9:f9:91:a6:7d:b4:6b:62:6d:6a:3d:88:91:90:47:6c:d6:f1:
cc:fb:f9:6f:49:3f:5f:3e:4f:51:31:16:89:9f:28:36:44:01:
f1:68:1b:f1:3b:e9:6b:dd:0d:e5:f7:09:03:ab:58:c1:a8:70:
d3:fe:0f:06:f6:64:70:ed:92:4e:d8:a2:76:56:a8:58:c3:ff:
b8:2d:99:29:b4:4b:2b:f0:10:f0:93:a1:97:4f:fe:41:89:d3:
7a:8e:4b:b0:31:41:89:84:6f:c9:fc:c5:2e:35:79:25:ab:5a:
4c:3a:37:1b:e4:c3:86:c9:56:fa:25:94:1a:51:4b:01:5a:cb:
ad:61:10:f9:50:ef:e3:ba:f4:42:b1:c2:df:27:77:87:aa:d7:
f1:b1:a3:49:fe:b2:fa:31:f9:d0:9e:e0:dd:a5:29:ec:06:60:
d6:9a:47:e0:0c:6b:79:0a:2f:2e:e7:64:aa:bb:3c:df:a9:95:
ab:82:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 7 11:38:46 2026 by rpki-client