This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json) Hash identifier: WawD+pMO8V7PlcK8I+syVJyY+U6ZUJfCCxfmAYrUEGo= Subject key identifier: 21:12:8D:05:2B:CB:E3:1F:BA:07:3D:4D:11:7C:C1:D0:45:E9:6B:F5 Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016 Certificate serial: 019C42EB0F7F7E84C9D411BCD2B4EE3195C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft Manifest number: 0C02 Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=) 2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: ymp02uyNzOVngNccejmZ48fRX9rUxfOzUXbWD0yfVO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0f:7f:7e:84:c9:d4:11:bc:d2:b4:ee:31:95:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016 Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=21128d052bcbe31fba073d4d117cc1d045e96bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:f5:bf:95:17:4a:dc:86:e2:de:74:c6:d3: 82:96:22:4b:fc:b4:13:38:76:f1:6b:8f:18:47:ea: a0:c6:7a:36:f0:50:3c:4d:2b:dd:7c:8c:42:27:70: a9:67:f7:55:75:41:c5:00:40:bb:a7:f5:b0:df:4c: 8a:80:eb:4c:17:ef:45:a5:04:f5:2e:7b:d0:6d:ba: c7:94:68:43:af:bd:d2:dd:fa:3a:1e:d4:45:7e:de: 98:a2:f1:a8:d9:7e:6e:13:ba:3f:19:0f:e0:22:ab: a5:12:ef:0e:7d:19:fa:ee:39:62:cd:30:cc:49:25: 15:21:d1:24:ef:51:44:94:dd:b8:30:cd:32:e9:e0: af:f7:61:39:ca:8c:37:5d:34:e8:84:0b:16:d1:fb: d8:d4:5c:2e:66:97:16:70:1d:f8:01:36:bc:ee:ab: 2c:b6:ea:8a:19:bc:f2:a2:dd:09:10:b9:ce:2d:bf: 7a:2f:01:e8:02:b8:25:60:d0:80:2b:78:f9:f2:89: fc:4c:a1:87:4e:5d:0e:ed:99:8e:8c:56:4c:40:04: d6:5a:fd:ba:4f:45:2b:f0:8a:d4:fe:85:b7:26:7e: 21:c4:96:43:f7:57:56:da:c6:31:11:45:bb:3b:4b: 76:e9:c7:45:a8:78:6a:46:a8:29:6d:e8:b1:1c:eb: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:8D:05:2B:CB:E3:1F:BA:07:3D:4D:11:7C:C1:D0:45:E9:6B:F5 X509v3 Authority Key Identifier: keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:ad:59:55:42:e5:8b:99:39:95:3d:85:b1:fb:ea:41:65: 31:37:83:72:da:4e:ca:ee:9c:48:09:1b:bc:58:11:57:bd:9d: b7:77:42:ce:fb:9d:30:4b:03:b0:66:2a:b3:c0:99:41:73:04: 8e:81:21:d0:18:78:4e:9f:d5:14:9b:89:5d:87:79:48:75:c6: c9:6f:1a:ad:70:3c:20:a3:2c:7a:76:b0:e3:d6:e4:31:4e:2d: 95:84:89:80:97:84:0a:7b:a4:11:65:0b:39:db:fb:10:1e:43: 65:83:a6:a4:fb:fb:c8:fd:51:6e:55:14:5f:e7:b4:31:68:4a: 0b:cb:ac:a0:6f:bc:8d:5a:e7:50:d0:08:19:bc:34:83:46:a4: c5:1e:31:21:5d:79:56:81:a3:5d:36:7c:a5:ff:f7:0b:70:2b: 23:39:ae:5e:54:f7:53:f0:9c:24:be:76:61:96:4a:96:35:70: df:ff:03:c3:8e:f8:af:56:19:fb:ef:84:f7:9b:50:2d:0b:9c: 71:c7:16:b9:a3:ba:04:9d:25:0a:7e:97:13:84:7f:53:0a:66: 3c:e9:eb:ee:0c:47:0c:af:0e:86:2d:f8:0a:d8:7c:86:d2:7e: a9:57:f4:cc:32:b4:d6:f4:7f:4f:56:d5:50:02:db:dd:ce:e9: 32:aa:bc:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w9/foTJ1BG80rTuMZXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi NDkwMTYwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD EygyMTEyOGQwNTJiY2JlMzFmYmEwNzNkNGQxMTdjYzFkMDQ1ZTk2YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnv1v5UXStyG4t50xtOCliJL/LQT OHbxa48YR+qgxno28FA8TSvdfIxCJ3CpZ/dVdUHFAEC7p/Ww30yKgOtMF+9FpQT1 LnvQbbrHlGhDr73S3fo6HtRFft6YovGo2X5uE7o/GQ/gIqulEu8OfRn67jlizTDM SSUVIdEk71FElN24MM0y6eCv92E5yow3XTTohAsW0fvY1FwuZpcWcB34ATa87qss tuqKGbzyot0JELnOLb96LwHoArglYNCAK3j58on8TKGHTl0O7ZmOjFZMQATWWv26 T0Ur8IrU/oW3Jn4hxJZD91dW2sYxEUW7O0t26cdFqHhqRqgpbeixHOsuoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCESjQUry+Mfugc9TRF8wdBF6Wv1MB8GA1UdIwQY MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtitWVVC 5YuZOZU9hbH76kFlMTeDctpOyu6cSAkbvFgRV72dt3dCzvudMEsDsGYqs8CZQXME joEh0Bh4Tp/VFJuJXYd5SHXGyW8arXA8IKMsenaw49bkMU4tlYSJgJeECnukEWUL Odv7EB5DZYOmpPv7yP1RblUUX+e0MWhKC8usoG+8jVrnUNAIGbw0g0akxR4xIV15 VoGjXTZ8pf/3C3ArIzmuXlT3U/CcJL52YZZKljVw3/8Dw474r1YZ+++E95tQLQuc cccWuaO6BJ0lCn6XE4R/UwpmPOnr7gxHDK8Ohi34Cth8htJ+qVf0zDK01vR/T1bV UALb3c7pMqq8zA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:39 2026 by rpki-client