This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: CR+cSpF9WjDr6d4gfGhgiDn2xiJWp2P1souQNgNAx7o=
Subject key identifier: 6C:5D:11:B5:E6:75:43:A6:0F:E6:78:E5:52:BA:25:99:F7:B7:B5:4F
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019C24734E6EEBDF74BEF164C7FAB49EFAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0DD9
Signing time: Tue 03 Feb 2026 17:01:02 +0000
Manifest this update: Tue 03 Feb 2026 17:01:02 +0000
Manifest next update: Wed 04 Feb 2026 17:01:02 +0000
Files and hashes: 1: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
2: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
3: BvusQ7m5Gd85FbE0UgtInYnVcn4.roa (hash: Yn9PHGdu9Tcdgh7Fe+cf2+vspMOJboE+b5bi5KZdy/k=)
4: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
5: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
6: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: UpBNgVNPAFrSgoVLmRyq3ydexZvZAng8+bhhkNck4Y4=)
7: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 15:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:73:4e:6e:eb:df:74:be:f1:64:c7:fa:b4:9e:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Feb 3 17:01:02 2026 GMT
Not After : Feb 4 17:01:02 2026 GMT
Subject: CN=6c5d11b5e67543a60fe678e552ba2599f7b7b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:22:fe:99:1a:e6:82:b7:0f:ba:b0:05:50:
12:81:4c:69:9e:a8:39:56:75:fd:20:c9:97:34:7e:
da:27:3b:32:af:d2:02:ef:c3:b9:7f:65:a8:f0:7f:
3a:de:d3:62:4f:54:e6:aa:34:06:4d:e2:9b:fd:3f:
d8:4b:e7:b7:ff:db:50:03:d1:79:92:a7:b4:27:b8:
58:41:62:eb:79:4a:d0:72:90:d6:aa:73:e8:60:46:
82:23:ea:91:d1:88:56:0f:86:23:79:4a:2d:26:0a:
c5:ed:56:5c:f0:80:18:cd:15:53:47:22:c1:3b:9e:
dc:73:0b:aa:d5:f3:b3:27:a1:94:36:63:2e:71:c5:
4d:1e:ea:69:9d:a7:f7:af:c9:a9:09:f4:e6:7e:c5:
01:a9:ed:22:cf:c4:5a:e9:f9:84:a6:a7:d9:a4:38:
94:75:8f:20:86:e6:e9:3f:48:9f:2b:df:27:20:c0:
72:1f:9b:e6:e2:58:00:87:c8:95:4c:ad:c2:db:d2:
d6:0c:65:60:8c:27:f0:b7:13:ea:39:35:e1:1f:85:
56:7e:9a:65:21:6f:cc:38:a9:37:ff:25:99:ba:fc:
aa:29:4f:03:f3:8b:29:7e:7b:70:59:24:c8:33:a4:
25:f8:df:09:2e:64:3c:14:ff:98:fb:97:81:37:a3:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:11:B5:E6:75:43:A6:0F:E6:78:E5:52:BA:25:99:F7:B7:B5:4F
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a7:00:ae:94:c1:7c:79:05:98:6b:2a:99:9f:7d:88:58:74:
3d:f9:6a:7e:7f:89:8e:0e:23:23:f9:ec:f9:4c:2a:fd:56:78:
fd:03:bb:e4:1d:fe:0b:da:ee:89:ab:6b:37:52:dd:b4:8c:e2:
0f:8c:95:2c:78:d9:cf:2b:f0:88:7c:b1:4e:a0:82:5b:dc:78:
f6:6e:d8:ad:19:02:0e:b2:bc:85:65:5f:34:d7:f4:3e:7a:d8:
45:16:c7:48:ac:18:5f:a5:7a:c5:85:4f:18:7b:60:b3:45:21:
82:83:e8:f3:53:9d:37:02:30:13:f5:e3:95:52:f1:ca:17:04:
5c:36:4e:37:1c:53:55:35:cc:54:c6:88:c2:b7:4c:d8:5e:cf:
4f:29:c1:1e:c2:04:fc:73:27:21:a0:1d:ac:c5:8d:05:a5:1c:
d5:78:23:60:13:be:05:f5:f7:d9:a5:8c:f0:25:19:c6:55:73:
3b:3c:7d:a7:15:4d:a2:e3:63:f6:1a:50:ee:fa:94:bf:ff:32:
33:18:3c:79:ec:9b:0f:c2:e9:57:41:e9:f9:b6:9c:bb:ab:ef:
cd:ca:6a:d5:99:d9:58:cc:e0:3e:42:3f:3e:af:11:cd:6a:c7:
f8:78:28:fa:bf:12:be:62:c1:bb:b6:07:f4:fa:f8:cb:c4:0b:
06:6d:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 20:58:41 2026 by rpki-client