This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json) Hash identifier: K3rMfjxaMJjXdxwmTxlfxpZw6aIO1aM+oVHySefz8Gw= Subject key identifier: 90:FE:D5:E1:99:CC:39:87:D1:21:46:C2:9C:60:98:3F:D0:04:0D:EC Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Certificate serial: 019C41D8E558FC055615CEDA8DC715425BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft Manifest number: 07D3 Signing time: Mon 09 Feb 2026 10:00:59 +0000 Manifest this update: Mon 09 Feb 2026 10:00:59 +0000 Manifest next update: Tue 10 Feb 2026 10:00:59 +0000 Files and hashes: 1: UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa (hash: 9ZEiLEpeNHQPSSjaHm5KtU2EfQDw++56segRjLKG218=) 2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: +jTk6AXVlMk7ojmaHPJE1F/A2D0A1skeDG44OsMmcS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e5:58:fc:05:56:15:ce:da:8d:c7:15:42:5b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Validity Not Before: Feb 9 10:00:59 2026 GMT Not After : Feb 10 10:00:59 2026 GMT Subject: CN=90fed5e199cc3987d12146c29c60983fd0040dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:a7:de:c5:02:78:1e:af:ff:7e:db:c8:91: 69:f9:a2:69:2d:30:a4:6b:9a:4f:8e:9b:69:a4:75: 69:84:22:87:48:c4:7e:0b:b6:6c:ba:1c:d6:60:14: 4a:f7:01:79:8f:c8:d0:b9:0e:db:44:cd:13:4c:48: 0b:26:b6:fe:7c:be:97:fc:e2:eb:46:f3:20:fe:d5: ea:a0:69:05:2a:34:11:5b:8b:44:f0:26:a8:2a:7d: 39:72:ae:38:77:a9:e3:0a:7a:96:fb:e6:36:cc:ab: 62:d8:d5:10:1e:a5:2d:a5:8b:38:2b:60:97:b7:f9: 82:09:ce:10:db:50:19:3c:23:10:8b:09:c4:67:5b: c1:b2:06:ff:7e:55:1b:4b:40:10:28:a6:67:ce:dd: 94:d1:ed:07:2a:43:b0:e6:6d:97:33:2e:95:40:05: f5:cc:4d:f0:4e:01:88:ef:bc:6c:7a:8f:83:a0:57: 2d:08:16:f3:21:76:57:82:e5:c4:d2:15:24:90:c2: 43:31:dc:6e:37:2a:d9:5d:f9:f6:48:bb:03:82:6f: 0b:65:1b:bc:3f:71:7d:14:3e:76:8b:a0:ce:8a:49: 4b:c7:bd:f5:65:12:f8:60:9d:f4:4f:8d:a0:92:a2: 36:d9:d5:ca:a5:81:30:20:fe:8a:03:8f:69:30:e2: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FE:D5:E1:99:CC:39:87:D1:21:46:C2:9C:60:98:3F:D0:04:0D:EC X509v3 Authority Key Identifier: keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d4:57:80:b9:56:bb:4a:1a:b9:85:44:0f:fc:d1:19:6a:42: b7:c3:b6:b8:98:61:ab:ba:1f:3a:aa:4d:e7:8a:50:39:04:71: dd:f5:a9:22:08:b2:89:c5:3a:cb:b6:ec:3d:59:14:dd:4c:6e: 17:b5:97:c7:f4:58:df:00:ba:02:b2:32:c4:75:31:8c:7e:29: f4:a2:ab:f6:e8:20:49:b0:b5:64:13:fa:d3:81:03:57:6f:63: 96:bf:77:8d:c9:c3:df:06:cf:a2:ac:24:03:b7:e5:1b:d3:0a: 53:3f:09:c1:3d:9d:b2:7c:28:bb:4d:fd:d2:74:c1:39:10:aa: 45:57:e2:b0:81:d9:84:0f:d8:ab:03:e8:c5:ef:9f:27:4a:6f: 3d:42:f0:28:16:ec:d6:df:e2:21:3d:1d:53:6a:28:90:53:33: 08:8b:6f:af:82:e6:53:ab:94:aa:bd:3a:af:fd:87:14:1f:6a: 52:51:29:c5:0a:6f:38:63:06:56:b1:87:81:82:51:af:92:a4: d6:69:77:9c:a9:b4:2b:90:38:9a:fd:20:b3:b9:bb:f2:1b:40: df:a1:ae:c8:44:5e:71:f8:ac:81:6f:d2:ed:93:9a:24:14:ca: be:3e:c0:fa:16:40:65:ea:c0:87:3a:dd:23:39:17:f7:2b:07: 1a:31:c0:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OVY/AVWFc7ajccVQlvqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3 MGRmZTcwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD Eyg5MGZlZDVlMTk5Y2MzOTg3ZDEyMTQ2YzI5YzYwOTgzZmQwMDQwZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFin3sUCeB6v/37byJFp+aJpLTCk a5pPjptppHVphCKHSMR+C7ZsuhzWYBRK9wF5j8jQuQ7bRM0TTEgLJrb+fL6X/OLr RvMg/tXqoGkFKjQRW4tE8CaoKn05cq44d6njCnqW++Y2zKti2NUQHqUtpYs4K2CX t/mCCc4Q21AZPCMQiwnEZ1vBsgb/flUbS0AQKKZnzt2U0e0HKkOw5m2XMy6VQAX1 zE3wTgGI77xseo+DoFctCBbzIXZXguXE0hUkkMJDMdxuNyrZXfn2SLsDgm8LZRu8 P3F9FD52i6DOiklLx731ZRL4YJ30T42gkqI22dXKpYEwIP6KA49pMOJU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJD+1eGZzDmH0SFGwpxgmD/QBA3sMB8GA1UdIwQY MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0 LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltRXgLlW u0oauYVED/zRGWpCt8O2uJhhq7ofOqpN54pQOQRx3fWpIgiyicU6y7bsPVkU3Uxu F7WXx/RY3wC6ArIyxHUxjH4p9KKr9uggSbC1ZBP604EDV29jlr93jcnD3wbPoqwk A7flG9MKUz8JwT2dsnwou0390nTBORCqRVfisIHZhA/YqwPoxe+fJ0pvPULwKBbs 1t/iIT0dU2ookFMzCItvr4LmU6uUqr06r/2HFB9qUlEpxQpvOGMGVrGHgYJRr5Kk 1ml3nKm0K5A4mv0gs7m78htA36GuyERecfisgW/S7ZOaJBTKvj7A+hZAZerAhzrd IzkX9ysHGjHAVA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:34 2026 by rpki-client