This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
File: oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft (raw, json)
Hash identifier: aW4FCIm1ZZkIvJ1ng0YsCZxRksY8IfOEuka9fx59uSo=
Subject key identifier: B3:86:E4:70:79:4E:71:12:85:73:A3:42:71:24:A1:B6:A2:8D:06:25
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 019BF6883370546113DD9E6C3FBE0B536581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
Manifest number: 133E
Signing time: Sun 25 Jan 2026 19:01:19 +0000
Manifest this update: Sun 25 Jan 2026 19:01:19 +0000
Manifest next update: Mon 26 Jan 2026 19:01:19 +0000
Files and hashes: 1: Cwf4_xFAHSG9Lzugw-zTYcUPncA.roa (hash: BZ9PLCNu6vSBcrc2YgRI7e1X5rqMsUzeR+VSEAXaNho=)
2: oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl (hash: DD8IZrFdzQ6WtGINqwaWm+Gu4951tqB7fdle7UVTlek=)
3: ssy16cutzXdJELzGDxSW16z1Xho.roa (hash: Rm4blCgHC3TkuBXmfU3+lx6/wdVR0IK9c9fKBZqVzmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:33:70:54:61:13:dd:9e:6c:3f:be:0b:53:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jan 25 19:01:19 2026 GMT
Not After : Jan 26 19:01:19 2026 GMT
Subject: CN=b386e470794e71128573a3427124a1b6a28d0625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:84:40:6d:5e:41:7e:98:7b:42:0e:0f:1c:
29:db:c3:35:c0:0b:84:3a:a8:bd:65:b3:be:1f:0d:
dd:48:fc:a1:63:62:22:0a:17:84:14:f3:bd:f7:6e:
54:35:38:9e:4f:30:ac:90:76:2a:47:6e:60:6b:c9:
90:e1:28:a2:1b:d5:d7:ea:0e:b8:42:7b:0f:7d:55:
04:2c:7b:41:32:47:04:5d:8c:10:8b:ee:e5:75:a3:
7f:65:ed:b3:6c:9a:1f:15:61:67:b8:f9:0b:b7:ba:
1d:d7:c7:8d:13:a5:d7:ab:44:e7:5f:52:e3:69:b6:
56:71:d7:a0:64:49:75:96:a2:2d:e8:78:f3:dd:bc:
0f:04:fa:ad:d4:bd:6f:cb:11:9c:f9:10:f0:2f:ac:
af:47:b7:63:3e:6f:ba:fc:c5:d1:80:f1:cc:ba:9d:
46:90:60:1d:b3:b0:aa:a4:48:14:72:a0:7c:0a:78:
23:84:ab:e9:02:d2:e7:cf:07:2a:36:7f:33:7d:5d:
b5:00:e9:57:b1:62:cb:64:7e:d3:f0:2e:87:32:db:
7b:39:e3:9a:fc:00:24:10:7b:bd:23:67:40:c1:e0:
12:ab:26:78:7c:4e:3f:b9:b4:2b:6c:8c:59:76:5e:
5a:8e:d1:2a:2b:6a:9d:95:b9:77:96:56:fa:36:da:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:E4:70:79:4E:71:12:85:73:A3:42:71:24:A1:B6:A2:8D:06:25
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bf:4a:12:04:ce:a6:d0:67:46:d7:a5:e2:1f:4f:43:4d:77:
7b:30:ef:cf:51:a4:c1:38:e8:27:8f:d2:d1:83:00:c1:a4:4a:
9b:53:10:ac:2d:88:af:af:40:d8:0b:38:c3:d7:eb:25:05:fb:
35:ba:c7:22:8f:42:08:11:5c:4c:54:16:8a:4e:71:2f:2b:c8:
c4:7a:b0:76:4f:c4:11:16:74:c2:9f:38:9c:f2:a0:98:50:0f:
0a:11:9a:b6:30:20:78:e4:13:71:1c:18:93:4b:c8:16:39:96:
9a:03:7c:f4:c5:ee:c5:54:f2:e5:7f:ec:87:28:16:18:44:00:
27:29:82:27:04:6e:4b:9a:74:57:57:b7:8d:6c:b0:7f:61:65:
56:17:87:0a:c0:a7:64:62:b8:6f:fe:29:52:8a:6f:6d:b7:74:
39:e1:7d:62:0c:63:f3:79:6d:07:62:0b:ce:df:39:8f:cc:92:
d6:3a:94:9f:69:91:b1:98:28:a1:59:20:ce:65:82:7d:30:f8:
32:69:d4:53:a1:d2:06:04:dd:8b:da:19:c6:38:1a:85:a6:33:
7c:d2:81:e7:8c:22:57:b5:83:c4:27:b7:e0:74:44:ca:9f:25:
ac:f3:49:86:63:9e:09:34:8b:fa:6c:ef:24:30:2e:f7:75:36:
d2:46:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:34 2026 by rpki-client