This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
File: Onb8XJAQtBEZymjca5lQul_3Mn4.mft (raw, json)
Hash identifier: txMWRiOqx2T7+xhavspFSM4XF51kt47rYonu/ToCxFA=
Subject key identifier: F1:36:57:42:0B:BF:28:25:EA:B0:E9:36:42:38:9C:B4:5B:F8:59:FE
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 019C43FD83C50E890D1ADC0340DBE1CFCD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
Manifest number: 11ED
Signing time: Mon 09 Feb 2026 20:00:13 +0000
Manifest this update: Mon 09 Feb 2026 20:00:13 +0000
Manifest next update: Tue 10 Feb 2026 20:00:13 +0000
Files and hashes: 1: Onb8XJAQtBEZymjca5lQul_3Mn4.crl (hash: HYHEcztHmwHwJ8nDN7Hb8aFaaYtNY2kPmlYpFk4qY9o=)
2: saj_qBpPco6gxYRqM34-ExE_Mdc.roa (hash: VcjPn5zIsUbUvLdgii6LzfC0gf7xOcEytz9+BqUntpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:83:c5:0e:89:0d:1a:dc:03:40:db:e1:cf:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Feb 9 20:00:13 2026 GMT
Not After : Feb 10 20:00:13 2026 GMT
Subject: CN=f13657420bbf2825eab0e93642389cb45bf859fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:1a:c5:b1:1e:3d:f5:6a:99:31:3e:99:22:
5e:91:c6:9c:4b:31:91:63:53:c0:6e:40:77:5c:98:
38:f5:b2:b6:af:0e:df:dd:50:f3:18:b1:1d:02:45:
40:d9:fe:76:7f:48:e2:c2:01:b8:6f:76:05:20:67:
69:7e:c8:35:ec:4b:97:2c:ad:92:be:8a:df:b6:4d:
34:59:c7:1a:ec:21:d7:2f:a0:1c:41:b7:f9:d9:aa:
9e:13:04:fb:94:13:a3:0b:3b:f6:7e:87:ed:31:48:
5c:bb:dc:7e:4c:61:5d:0a:84:34:fa:18:a9:97:84:
27:7e:33:2a:c0:37:15:69:22:75:45:85:0d:ce:c2:
5c:6f:69:6b:90:70:df:72:14:c2:16:a8:7b:da:b0:
42:b5:02:b6:de:93:ab:8c:35:17:95:2e:db:bf:7e:
2d:43:bb:be:e7:bb:44:62:69:9a:b0:8f:d8:d1:6b:
53:68:64:ad:88:15:eb:5b:67:62:4c:ea:3c:52:58:
08:49:e1:33:c7:23:48:30:d6:37:b6:23:d0:b1:8c:
fe:1f:cd:b3:8a:04:25:8c:9b:4c:26:e7:3b:b3:ca:
85:e8:d4:73:19:ef:72:7a:04:46:03:f6:46:39:86:
97:86:3e:f8:e4:f6:7d:39:5d:4b:cb:1c:8f:bb:b2:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:57:42:0B:BF:28:25:EA:B0:E9:36:42:38:9C:B4:5B:F8:59:FE
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6f:34:60:29:b1:af:03:99:98:59:a7:d2:a2:8a:ac:12:95:
6c:9a:91:a7:b0:d4:b0:ec:e2:5a:06:20:83:31:1d:fe:0e:54:
f6:85:ef:4c:ba:98:76:3d:04:68:a9:c0:b2:d9:ed:f8:1f:fd:
a3:65:24:72:1c:8a:8e:40:fc:0b:a4:4a:70:ba:44:9f:c2:f9:
5b:c7:36:28:e2:e5:80:0c:d9:20:d8:7d:23:93:8f:d6:25:00:
68:64:60:39:af:ef:14:7b:09:5b:5f:ea:0d:91:09:6f:7a:9f:
45:65:3b:af:7c:78:f9:2f:4c:a9:be:9d:a9:7d:76:85:4f:4a:
24:2c:8d:fa:a1:3a:6b:56:50:fd:4e:c8:5c:8c:ab:3b:0b:84:
0f:06:74:ac:1b:06:45:69:f0:c1:98:3d:3f:a5:11:be:03:36:
41:b4:47:cf:bf:b6:92:04:8c:59:c9:1f:a8:f9:fd:d5:9c:0d:
c4:ec:c5:09:34:d3:a7:0a:4c:29:6c:9c:39:d6:2e:b6:2c:d8:
99:9b:d7:b3:48:0a:37:7c:f6:65:74:70:06:b7:83:3a:0e:5c:
18:dc:f9:fe:34:89:bc:50:40:86:ef:56:95:49:0a:67:2b:3e:
5f:84:15:e1:5d:5a:98:e4:e2:e6:82:9d:47:19:f8:f7:6b:9d:
45:04:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:33:52 2026 by rpki-client