This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json)
Hash identifier: j0vdyVnUmYsqlGDk8KNspSDRX95asRFpO661J6mvBUY=
Subject key identifier: FE:66:E8:7D:0D:B3:55:42:0D:EA:EC:17:FF:27:41:89:A4:87:33:80
Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Certificate serial: 019BAB36DE182294F23AAE9041D1D3AC0AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
Manifest number: 102E
Signing time: Sun 11 Jan 2026 04:00:58 +0000
Manifest this update: Sun 11 Jan 2026 04:00:58 +0000
Manifest next update: Mon 12 Jan 2026 04:00:58 +0000
Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: NHaeGYyGLN+5MbhP4gMsXIQPfLp351mvawqOfwAqMJg=)
2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ab:36:de:18:22:94:f2:3a:ae:90:41:d1:d3:ac:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51
Validity
Not Before: Jan 11 04:00:58 2026 GMT
Not After : Jan 12 04:00:58 2026 GMT
Subject: CN=fe66e87d0db355420deaec17ff274189a4873380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ba:0a:f7:f6:4f:3e:21:ce:7b:d0:43:78:01:
f2:8e:2f:b8:56:69:b6:68:88:2b:69:16:21:d7:d3:
17:a3:a9:1a:e6:66:82:33:91:25:80:d6:75:0b:9d:
ef:54:f2:da:ce:a0:cd:55:ee:6e:6e:13:78:12:79:
00:15:07:e3:e7:e1:03:b4:75:3e:78:c8:f9:8c:87:
5e:e3:89:33:fa:ee:8f:70:82:fb:c9:0a:46:7d:b1:
01:2f:5d:5c:05:9e:30:00:14:c7:a5:91:14:41:d9:
83:63:9c:03:fd:cf:d1:0e:bd:ad:08:af:5f:d0:4a:
5f:24:8f:e5:55:2a:2e:84:f9:01:8e:e0:d4:82:be:
35:c1:bf:20:16:f7:0f:fb:f8:af:a7:b1:5e:2f:4a:
14:5f:8d:b7:41:c4:c1:77:67:0c:41:b0:f1:0d:74:
73:8f:b6:5d:f1:83:15:55:8c:b0:d4:01:71:f6:3d:
7d:61:79:b2:8f:db:a3:0f:cf:fe:90:3b:ef:0c:75:
3f:27:89:e1:05:13:a3:29:84:8c:32:d8:80:1c:6f:
86:2d:f4:45:7b:aa:44:b6:28:cf:9a:62:12:44:e4:
42:66:a5:56:40:d2:d8:7c:21:6f:70:08:c6:29:ba:
ee:c7:45:82:52:e2:40:46:7e:76:dd:78:74:06:7e:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:66:E8:7D:0D:B3:55:42:0D:EA:EC:17:FF:27:41:89:A4:87:33:80
X509v3 Authority Key Identifier:
keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:6b:b4:0b:7a:d8:ea:7f:73:69:e3:c2:67:0e:a7:a5:b9:
2b:bb:60:a1:22:25:bf:9a:1e:22:9d:49:b1:70:bf:66:0e:b0:
44:f1:3b:9e:f9:a9:17:82:c7:e2:ef:81:b6:2a:46:d4:e0:6f:
39:56:99:f2:39:21:09:87:f1:b2:17:16:79:92:2f:39:04:9a:
12:be:16:60:67:52:a8:90:1d:30:ac:e2:fd:46:05:32:8e:69:
70:a7:9b:b3:a8:f2:98:48:a6:89:b3:4b:31:5b:89:20:e7:7d:
d1:9e:50:b6:30:ad:63:7c:83:b9:2d:13:6c:20:4c:75:b1:45:
15:fa:b4:af:d9:ce:6c:f7:24:31:e9:76:c7:c0:a9:b7:e5:6b:
a9:bd:e2:98:91:de:c1:c7:f8:89:2a:3e:cf:3d:e8:73:17:8d:
2d:47:0c:fd:7e:f2:b3:52:c2:cc:70:80:d3:f4:65:1e:62:b1:
9b:5c:f9:a4:e3:10:cb:0f:64:1d:78:6f:a5:ca:43:33:ab:89:
ab:a2:f9:1e:40:d5:22:0c:05:4e:4a:18:8e:cb:82:27:f9:82:
36:92:34:43:30:8d:73:ca:70:fd:9e:ab:3b:9b:ce:73:75:4d:
e4:e0:0c:29:64:c9:98:fe:47:3f:f4:10:2f:d3:92:ea:d0:c5:
58:72:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 12:31:01 2026 by rpki-client