This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: ZDAn2TVdLZebG7zGkDQS48lb6CWUE0w6Nb27tqD4p5M=
Subject key identifier: A3:2D:AC:13:11:BE:3D:63:55:52:96:07:73:A3:30:6E:F9:5A:30:92
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 019C41A1D3B9734EC25307D877E1B3A4E8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 06D8
Signing time: Mon 09 Feb 2026 09:00:50 +0000
Manifest this update: Mon 09 Feb 2026 09:00:50 +0000
Manifest next update: Tue 10 Feb 2026 09:00:50 +0000
Files and hashes: 1: TRTbys13hMPw7qPZ6_zT9S6DlZU.roa (hash: UwtEWUeqSkdN9j3umwCxrdjYmKQ9n0cv0zhOxAG4uV4=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: vI9raJ+CBk5cG7x6m572Qu/qW8ceGCz72tRfk4JelDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:d3:b9:73:4e:c2:53:07:d8:77:e1:b3:a4:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Feb 9 09:00:50 2026 GMT
Not After : Feb 10 09:00:50 2026 GMT
Subject: CN=a32dac1311be3d635552960773a3306ef95a3092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:0a:69:bc:64:8b:ee:07:f8:2e:7e:99:df:
63:84:ac:04:69:1e:91:20:cd:4f:ee:7d:a3:b2:b1:
a4:55:49:61:76:38:72:11:fa:5d:76:b9:3b:64:09:
31:84:19:78:4e:5e:aa:bb:34:00:45:32:77:78:de:
b2:2f:f0:bc:0d:75:0e:7b:36:f4:c7:66:2f:05:f0:
cd:86:63:fe:50:b3:bf:e1:a6:9d:d4:ff:b1:f3:ea:
7e:96:cf:80:7a:79:0f:cc:d0:56:86:46:e4:81:dc:
e1:bf:f6:bb:93:0e:51:07:9f:66:aa:33:58:3c:31:
bb:6f:91:77:82:08:1e:20:57:a9:bf:38:f1:d4:84:
17:56:fa:ef:1d:e7:95:b7:14:97:72:55:d4:a5:6e:
5c:7a:02:fc:6e:a4:f5:42:d5:fc:33:29:cc:b9:01:
b6:80:a3:e7:41:48:98:4f:d3:19:a5:54:f5:1d:3f:
d1:76:34:c9:23:10:99:50:8b:e5:3f:14:02:8f:be:
6b:d9:41:72:dc:ac:2c:67:98:5e:a7:42:11:ee:8a:
73:9e:d6:67:8a:74:2a:c9:89:96:6c:29:a1:14:6d:
09:db:b8:7e:4d:a6:1f:88:90:80:53:01:a4:75:4b:
50:dd:19:3b:05:6d:29:14:84:12:37:33:ec:ae:46:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2D:AC:13:11:BE:3D:63:55:52:96:07:73:A3:30:6E:F9:5A:30:92
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:f0:34:7a:e3:16:9e:69:18:e7:72:12:c5:96:4f:f3:9f:
ab:99:f7:fa:ad:fd:7c:79:8f:31:b7:23:e5:8e:59:87:ee:d7:
0b:d4:29:ce:e9:4c:bd:d4:fc:d9:fe:76:b7:ca:49:50:4a:2f:
6a:0e:b1:69:d3:2e:ec:1e:ff:e8:4f:61:41:63:8b:46:de:ab:
5c:48:0c:76:ab:a8:93:ca:ef:be:0e:ca:f8:87:71:35:75:76:
75:64:66:7a:40:5e:f1:5c:d2:2a:de:26:f9:1e:fb:03:55:d6:
95:fc:1b:79:cb:16:e5:67:e5:db:ea:0e:d8:f2:89:4a:22:4c:
01:62:a3:d8:83:56:71:0d:9e:38:99:b7:90:0d:50:a2:bc:67:
1a:fe:b7:d3:bb:1d:73:3b:b9:6d:7c:52:d8:b7:f9:84:eb:bf:
c3:46:a5:fe:e6:66:46:ee:c7:3c:60:b6:34:b7:2d:64:ce:71:
ed:b5:fa:41:bc:73:85:23:75:3d:2e:62:71:13:bb:34:4f:1b:
56:ab:d3:70:04:63:2c:fb:0e:1b:cf:91:6b:57:48:34:92:fb:
86:e6:e3:9d:a4:90:a0:5f:fb:50:cf:7e:fe:e0:75:b5:8b:af:
72:79:fc:5f:d6:e7:39:d5:0f:eb:6f:38:7e:e3:be:09:92:20:
d0:1e:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:48 2026 by rpki-client