This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json) Hash identifier: 8vsXNh0lZnorQ5PrZGY5o9fNQs6CHIMzkiK2POD44pA= Subject key identifier: DC:13:D3:2E:25:A6:39:DF:25:47:63:06:28:C5:F3:BE:7A:21:87:E8 Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Certificate serial: 019C427D596F902228D82B65AE5DFC672CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft Manifest number: 0E4D Signing time: Mon 09 Feb 2026 13:00:37 +0000 Manifest this update: Mon 09 Feb 2026 13:00:37 +0000 Manifest next update: Tue 10 Feb 2026 13:00:37 +0000 Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=) 2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: KjV8Df61LVmwdwwu3+t8E5Pn1SO8Y6tD6vxv77Og/b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:59:6f:90:22:28:d8:2b:65:ae:5d:fc:67:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4 Validity Not Before: Feb 9 13:00:37 2026 GMT Not After : Feb 10 13:00:37 2026 GMT Subject: CN=dc13d32e25a639df2547630628c5f3be7a2187e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:31:ab:93:49:12:2a:2f:f1:da:c7:9e:30:d1: 39:f1:e8:43:12:79:0c:c7:b1:a4:f4:57:b0:97:de: 86:22:6c:a0:35:3c:57:ed:a4:27:e5:e1:c3:8a:10: 38:ed:d7:87:4b:9c:85:ef:53:c5:a2:f7:ea:5f:9a: 77:5e:13:0a:06:41:e7:df:01:35:64:2b:cd:59:90: 6d:be:79:5d:76:ba:af:7a:93:e6:5c:28:a4:17:d7: 53:d1:f2:6f:08:92:98:68:65:55:83:74:b2:74:86: 13:d1:cf:d0:67:bc:8b:c8:e5:d7:e0:af:2a:0e:aa: ed:48:8f:98:43:52:1e:1d:0f:0b:7b:96:d2:b7:88: fb:88:cf:c2:c9:d7:e9:e6:83:14:a4:e9:9d:1d:9c: 46:62:29:83:07:02:90:30:60:23:6f:8b:6d:52:1b: d8:90:78:94:8c:66:3f:b7:1e:11:1d:54:1c:5a:80: 47:1d:82:da:a3:e6:a5:26:c9:9e:28:71:f5:fa:8e: 08:84:39:e5:b3:79:f6:6e:f0:8d:0e:27:73:b3:3b: 13:15:e7:7d:5d:cf:ed:1c:af:2e:62:04:69:f6:0d: 52:14:7a:dd:b5:52:0c:4d:35:c3:18:75:d2:47:48: 2e:b2:ed:bf:97:4f:fc:20:4d:9d:78:50:34:b7:50: 50:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:D3:2E:25:A6:39:DF:25:47:63:06:28:C5:F3:BE:7A:21:87:E8 X509v3 Authority Key Identifier: keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c0:13:78:2b:43:cd:9d:0f:e1:ae:b2:dc:e8:24:df:a2:7b: 36:3f:15:5d:ee:34:e4:97:d9:6d:8b:91:27:4b:3b:24:b4:ba: 67:50:00:d0:70:2b:a2:13:20:70:5a:0d:75:2d:f6:1c:3a:f3: d7:20:84:ae:f2:26:b0:ce:d6:43:7e:e6:45:b9:84:ea:c8:ba: dc:f3:e7:2c:ed:0c:99:06:92:65:98:af:4a:fa:b3:b1:62:01: e0:10:a5:6d:24:f5:ca:09:76:8e:80:9b:7c:d2:2a:d6:f8:3f: 21:16:f3:a0:b5:7d:59:a7:91:f2:75:dc:d9:6e:43:ed:de:7a: 55:b3:58:41:63:06:94:06:6e:94:5a:ec:6b:e4:21:ff:da:44: ea:dc:14:3a:ed:e4:de:94:89:19:1d:48:ca:f2:eb:7b:38:95: d4:55:aa:45:fb:06:4c:fa:22:39:ef:3f:82:0c:0b:98:62:2c: 74:10:60:85:1c:a5:c2:64:dd:06:e3:2a:7a:28:62:eb:4e:7a: 6e:34:8b:98:f9:32:3f:c0:06:77:ba:84:e3:d9:c9:c6:57:49: 07:04:0e:f4:9f:1f:4d:85:25:c4:58:22:65:eb:98:c9:ab:dc: 00:e8:8a:39:f5:87:ac:b6:ff:ac:33:2d:6f:53:b6:69:51:a2: 0a:5a:00:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVlvkCIo2Ctlrl38ZyzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3 ZmM4YjQwHhcNMjYwMjA5MTMwMDM3WhcNMjYwMjEwMTMwMDM3WjAzMTEwLwYDVQQD EyhkYzEzZDMyZTI1YTYzOWRmMjU0NzYzMDYyOGM1ZjNiZTdhMjE4N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzGrk0kSKi/x2seeMNE58ehDEnkM x7Gk9Fewl96GImygNTxX7aQn5eHDihA47deHS5yF71PFovfqX5p3XhMKBkHn3wE1 ZCvNWZBtvnlddrqvepPmXCikF9dT0fJvCJKYaGVVg3SydIYT0c/QZ7yLyOXX4K8q DqrtSI+YQ1IeHQ8Le5bSt4j7iM/Cydfp5oMUpOmdHZxGYimDBwKQMGAjb4ttUhvY kHiUjGY/tx4RHVQcWoBHHYLao+alJsmeKHH1+o4IhDnls3n2bvCNDidzszsTFed9 Xc/tHK8uYgRp9g1SFHrdtVIMTTXDGHXSR0gusu2/l0/8IE2deFA0t1BQJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwT0y4lpjnfJUdjBijF8756IYfoMB8GA1UdIwQY MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt ZDQ0NmYxZjgzYWU5LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5 LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMATeCtD zZ0P4a6y3Ogk36J7Nj8VXe405JfZbYuRJ0s7JLS6Z1AA0HArohMgcFoNdS32HDrz 1yCErvImsM7WQ37mRbmE6si63PPnLO0MmQaSZZivSvqzsWIB4BClbST1ygl2joCb fNIq1vg/IRbzoLV9WaeR8nXc2W5D7d56VbNYQWMGlAZulFrsa+Qh/9pE6twUOu3k 3pSJGR1IyvLreziV1FWqRfsGTPoiOe8/ggwLmGIsdBBghRylwmTdBuMqeihi6056 bjSLmPkyP8AGd7qE49nJxldJBwQO9J8fTYUlxFgiZeuYyavcAOiKOfWHrLb/rDMt b1O2aVGiCloAlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:41 2026 by rpki-client