This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
File: OYEHPCI_dR4z19QOeS9SnRQw-n8.mft (raw, json)
Hash identifier: ORFJ+Wb1lD11Q7gh3dQf4wGC8SIrQLVBE/Fxydn/vfA=
Subject key identifier: 53:B1:9E:14:60:9B:8F:1B:AD:19:F9:9D:78:94:FB:61:BF:D8:F0:CA
Authority key identifier: 39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
Certificate issuer: /CN=3981073c223f751e33d7d40e792f529d1430fa7f
Certificate serial: 019C427D0C70B9287A06CA569D10BB8ACB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
Manifest number: 0230
Signing time: Mon 09 Feb 2026 13:00:17 +0000
Manifest this update: Mon 09 Feb 2026 13:00:17 +0000
Manifest next update: Tue 10 Feb 2026 13:00:17 +0000
Files and hashes: 1: OYEHPCI_dR4z19QOeS9SnRQw-n8.crl (hash: hAEnmnmv7kJ6syx985d3AW+lzERBQ71FvxF8R/dDAms=)
2: xjtZklR-zKEZ526c5JfoxAgcZ98.roa (hash: P/TjyPt4uvrFDGoV5aG27wuJfG3S4it2FVzEdH8POos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:0c:70:b9:28:7a:06:ca:56:9d:10:bb:8a:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3981073c223f751e33d7d40e792f529d1430fa7f
Validity
Not Before: Feb 9 13:00:17 2026 GMT
Not After : Feb 10 13:00:17 2026 GMT
Subject: CN=53b19e14609b8f1bad19f99d7894fb61bfd8f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:bc:bb:45:db:fe:a8:32:fc:ef:d7:31:58:
96:ef:53:c7:7d:65:63:14:fd:c8:ff:4c:bc:71:42:
f3:f1:41:2e:46:ab:9f:25:8e:66:c1:1a:ca:84:78:
fa:86:0a:e8:4a:ef:3f:19:13:07:5f:5e:bf:70:65:
91:94:5f:af:f3:3d:62:f2:3d:91:04:a2:24:e1:6a:
01:73:0b:7a:bc:ea:bd:7c:2c:0a:86:eb:a7:cc:5b:
e3:6b:35:b5:c2:42:04:f7:f6:61:52:d1:24:15:38:
ca:7c:7d:69:b3:2b:f9:7f:fc:d7:a1:ba:48:b8:1a:
84:20:ad:45:5c:2d:8f:1a:e6:08:c2:65:c4:f8:07:
e0:4e:12:be:a4:74:b2:3d:c2:12:a9:25:75:4d:a6:
e1:54:5e:e2:f4:93:a5:f3:a4:7a:8a:48:ec:1d:3e:
48:fc:a5:91:16:cd:12:31:63:4e:92:88:33:3b:93:
ba:0d:2d:76:b4:c3:3b:9c:28:32:30:7b:79:cd:0a:
1c:77:40:a2:90:2d:05:54:e6:cd:43:3c:32:fc:47:
2a:84:67:9e:52:53:e8:0a:f9:a3:8e:c0:ac:9f:5e:
24:4d:cc:ee:f6:4e:e4:eb:00:1b:f7:ed:aa:7c:81:
69:fb:39:6b:30:2c:76:43:6d:61:24:8b:10:c0:ab:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:9E:14:60:9B:8F:1B:AD:19:F9:9D:78:94:FB:61:BF:D8:F0:CA
X509v3 Authority Key Identifier:
keyid:39:81:07:3C:22:3F:75:1E:33:D7:D4:0E:79:2F:52:9D:14:30:FA:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYEHPCI_dR4z19QOeS9SnRQw-n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/70abb0-7aec-44f5-8583-bebee24feca9/1/OYEHPCI_dR4z19QOeS9SnRQw-n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cc:d8:51:44:5a:11:19:ba:e6:58:bb:3c:0a:af:1a:89:08:
a5:40:d5:9b:73:c0:8a:7f:6c:40:82:4e:7d:ec:96:94:27:84:
8c:0a:a9:f1:0b:89:15:b0:d4:a4:fd:53:d9:21:01:41:6b:91:
72:51:02:ca:85:b4:8e:17:34:c7:bd:c7:84:e5:d4:55:96:e1:
ea:7e:1f:6a:2b:47:17:38:2c:2f:59:da:5c:7d:9a:de:8c:76:
1f:b6:7b:6a:27:8a:d2:f9:80:89:cb:a6:94:7a:f8:a9:04:a8:
e7:9b:9e:b6:e2:e1:38:94:2c:87:03:ad:b1:c1:47:38:9c:7a:
b1:5d:49:ed:13:d9:60:54:0e:20:47:45:be:dc:bf:5c:3f:28:
3f:2e:e6:a8:43:9f:fa:7d:8d:7d:ae:d2:5a:66:76:8b:d5:15:
84:83:f9:d7:59:f6:1d:e4:54:99:a9:41:c9:3f:cb:01:57:eb:
58:cd:e7:f0:d0:9f:c5:10:93:5f:cd:81:15:3e:fb:62:4b:5c:
69:2e:ed:ce:e8:82:1b:df:70:f2:ea:2c:96:61:b0:8b:49:7a:
42:37:d2:a6:b7:49:59:52:9e:4a:87:cf:d3:83:6c:03:a3:69:
65:42:f0:c2:45:71:4d:41:f5:bf:2e:dd:c2:5f:db:24:89:88:
6f:26:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:02 2026 by rpki-client