This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: 2ryn8aKc1DWr+56iVli/PVt2XrPTyShVp2AVqnvNRHY=
Subject key identifier: 54:38:1A:42:B5:2F:AB:56:C6:F3:A2:67:22:5B:C1:CC:64:08:E0:03
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019BF1980A8BC80B111857FC3880FCEA5B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 012B
Signing time: Sat 24 Jan 2026 20:00:31 +0000
Manifest this update: Sat 24 Jan 2026 20:00:31 +0000
Manifest next update: Sun 25 Jan 2026 20:00:31 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: RrTe8QV_gMsJ1Tl-RiSkuV05pTQ.roa (hash: 4Oj4O0lJnbS0vIhCNkku9oof6OJDYClFor4irkWJmcw=)
3: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: bMs1WvH+yV3suYQ5odGf4Xz3IEedx90achkFKQxufi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f1:98:0a:8b:c8:0b:11:18:57:fc:38:80:fc:ea:5b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Jan 24 20:00:31 2026 GMT
Not After : Jan 25 20:00:31 2026 GMT
Subject: CN=54381a42b52fab56c6f3a267225bc1cc6408e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:0b:59:df:bc:16:7d:94:b5:48:59:d5:4a:
cc:0b:68:a6:2d:a4:7f:2b:7f:94:bb:52:e7:00:9e:
9a:cd:54:63:60:86:90:7b:69:e2:4b:02:4c:1d:cb:
4c:5b:b9:69:f1:52:28:af:8a:1b:11:12:8c:d7:3a:
2a:72:4c:f2:e2:fa:8c:9c:ef:60:06:aa:d5:05:8d:
82:99:96:67:2e:ef:d8:d1:08:89:2f:c9:9d:12:73:
37:b2:b3:a2:95:1d:35:b8:26:ce:aa:49:e7:4a:86:
28:00:32:7b:9b:16:3e:63:41:e7:6c:fa:ca:01:e3:
49:55:4f:68:2a:89:78:63:49:71:82:ee:58:13:37:
9b:54:88:b2:88:78:7e:2e:27:77:70:d9:a0:48:51:
da:c2:6c:00:1e:8e:76:8c:60:9c:a4:7e:e2:40:81:
cb:37:fe:81:20:ae:3a:14:ca:c4:97:9c:47:6d:e9:
d9:83:ea:ca:e6:60:a9:a2:d1:75:5b:e3:e9:c1:54:
34:4e:79:c3:1b:85:63:70:9d:87:6d:22:8f:8c:76:
d2:1b:b7:29:73:e4:d2:fb:57:df:6c:65:9c:2c:c0:
49:00:e4:b4:68:26:20:9f:a9:08:0a:43:9a:6c:03:
b7:4b:e3:77:19:27:ca:36:59:c5:34:6e:cf:6d:de:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:38:1A:42:B5:2F:AB:56:C6:F3:A2:67:22:5B:C1:CC:64:08:E0:03
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:8c:30:5a:ee:26:ca:77:63:f2:e5:1f:bc:50:7e:26:cc:
5d:13:74:2e:90:e2:df:0e:10:b4:fd:86:f3:2a:0a:73:b5:7e:
b1:38:38:a9:e0:73:74:e3:8e:eb:9e:96:ee:67:6e:1c:ab:af:
25:14:c0:8a:8e:18:d3:51:c2:2b:5d:ee:3c:02:15:d0:71:3f:
df:53:da:bc:1b:22:18:f8:fa:8d:0b:10:92:e7:6b:85:8c:8c:
c3:dd:c7:4a:56:73:e4:ca:7f:96:13:c5:56:55:7f:2e:37:49:
bd:e6:e7:f4:c7:21:c3:b0:ec:c2:5d:3a:fe:3d:00:c0:da:00:
8a:65:10:9a:42:2c:57:fe:59:22:30:5b:66:a8:45:43:9e:07:
ba:49:29:a9:5c:78:c4:03:40:77:c9:d2:b6:ff:79:33:8e:24:
2a:7b:63:2e:3c:68:0f:77:d4:5a:67:cc:cd:8f:7c:bf:80:e1:
41:da:85:ba:5c:ae:82:b5:e4:dd:c9:eb:93:e4:15:45:06:68:
48:45:5e:74:03:94:07:2e:e3:32:33:ba:84:3c:14:25:f7:69:
1a:98:3b:c6:99:a1:d1:50:59:99:76:98:b2:5a:c3:16:4b:2e:
32:90:e2:b3:0e:71:ac:ae:83:d0:97:64:3e:33:a5:a5:71:c4:
b9:44:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:51 2026 by rpki-client