This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: c5j/HQY/Q4tpvMMVHJF5hmmQfD0bkZ4xuYqVutj6L7A=
Subject key identifier: 64:2E:74:FD:6C:20:B5:F6:F0:FB:C5:0E:B6:9F:C3:59:8E:AF:C3:F9
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019C43FD8A4D920AD4EA08FC20B73D2A7FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 20:00:15 +0000
Manifest this update: Mon 09 Feb 2026 20:00:15 +0000
Manifest next update: Tue 10 Feb 2026 20:00:15 +0000
Files and hashes: 1: Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa (hash: QUllUIUWzb1bn3tS38z/e3aKNKTT0J3rQMusPQtlNMo=)
2: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: 7OqcxEjhHUYFFDo9KiYCS8oErKC0YIewZF2HKZLZyWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:8a:4d:92:0a:d4:ea:08:fc:20:b7:3d:2a:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Feb 9 20:00:15 2026 GMT
Not After : Feb 10 20:00:15 2026 GMT
Subject: CN=642e74fd6c20b5f6f0fbc50eb69fc3598eafc3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:47:f3:03:a6:43:b0:2f:23:bf:8d:76:72:
7c:00:1e:02:6f:d8:d6:49:72:0e:e4:8d:d2:8e:c5:
b6:d7:35:c4:94:c9:7d:6c:38:2b:e7:78:dd:6c:5e:
44:4d:b2:c8:54:36:ce:c8:70:d4:15:50:be:27:dd:
be:d9:58:20:e2:de:39:33:2b:74:b6:32:8e:c4:b4:
77:ec:4f:02:a4:23:85:05:2f:18:93:68:91:65:b8:
ef:36:d8:a6:27:b1:bd:59:a2:ed:72:77:4b:2b:f1:
6c:75:06:5f:4e:2b:7d:c0:6d:5a:2e:af:99:15:37:
bc:c1:d6:2b:55:41:7d:7a:7f:6f:e5:37:cd:f4:95:
7e:fe:29:e1:79:07:60:11:f7:6a:37:58:c2:67:10:
14:9d:e9:16:f9:af:29:d9:a9:d0:d2:dd:de:90:79:
c9:01:b1:e3:37:79:1d:d8:d2:3b:dd:59:d2:80:b2:
f4:f3:93:d9:62:01:72:e2:6a:6b:10:eb:e2:a9:a0:
dc:fd:d2:56:18:d0:f4:0d:4a:a3:65:16:4c:f5:b8:
f0:07:18:96:d0:14:5e:b2:3e:f7:64:4a:19:37:77:
c9:9a:4e:3a:df:41:4e:50:f4:64:c0:0f:f6:04:13:
c1:e2:70:9c:f4:40:bd:9b:fb:87:48:e3:8d:32:e0:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2E:74:FD:6C:20:B5:F6:F0:FB:C5:0E:B6:9F:C3:59:8E:AF:C3:F9
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d7:1f:2b:15:12:cb:7f:94:00:a2:3f:ee:d7:ac:19:5b:3e:
91:d1:39:f2:d6:a9:bc:fc:bf:61:37:3a:3b:e7:b4:45:41:a1:
b5:7c:bc:df:11:2d:73:2c:0b:02:17:0b:a0:b0:fe:57:f3:7d:
71:10:f7:b4:7b:ee:0e:c9:f6:b4:a4:73:7b:8f:7d:f4:a7:81:
4f:80:a5:b7:c2:3e:b6:4f:b4:13:12:e2:46:c3:f0:88:47:75:
44:d3:aa:3b:81:ac:0c:37:03:95:d2:37:3c:2b:5b:93:40:f8:
15:7f:ab:2b:1f:29:59:23:eb:74:e3:f9:bf:e6:ff:4c:b8:42:
ce:93:8c:eb:bd:2a:5f:cf:c0:52:43:cc:c5:0e:1e:e2:e9:17:
9d:dd:bb:6b:bd:7f:c3:9f:7a:fa:c6:2d:9b:a4:bc:b1:05:70:
57:cb:55:79:0a:89:8d:48:5a:ba:22:1b:05:ab:90:ba:c6:e3:
ec:8e:db:43:e3:a9:c3:66:ca:4a:e1:82:8c:f4:19:08:41:fe:
d3:6f:2f:4f:89:fb:42:4e:b8:0a:b7:1d:2e:ca:ec:2b:00:49:
78:92:70:a8:74:22:ce:c1:5f:4e:f2:0c:11:20:c9:35:88:61:
0a:37:d2:73:81:5e:f7:51:b3:80:62:1b:fe:37:bb:d4:f7:06:
f8:49:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:10 2026 by rpki-client