This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json) Hash identifier: yN/AtCgglMljQMKd1IP8delpxtNr0R3YQmObWF1SCPQ= Subject key identifier: 7E:74:6B:65:E7:12:21:BA:21:95:33:AA:A0:60:68:9B:5E:D4:88:2C Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Certificate serial: 019C416A757A9F9188087F1F2B7887498C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft Manifest number: 10E0 Signing time: Mon 09 Feb 2026 08:00:21 +0000 Manifest this update: Mon 09 Feb 2026 08:00:21 +0000 Manifest next update: Tue 10 Feb 2026 08:00:21 +0000 Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: Bvx3Pt+POUuBtZbQSvUa4Cq+aUUBciN3Wf5VYGq+Q5c=) 2: VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa (hash: GLPIQNk9SF4ckQrOTlAnl4nPM7oMaUINPgb3JIgnuFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:75:7a:9f:91:88:08:7f:1f:2b:78:87:49:8c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04 Validity Not Before: Feb 9 08:00:21 2026 GMT Not After : Feb 10 08:00:21 2026 GMT Subject: CN=7e746b65e71221ba219533aaa060689b5ed4882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:0c:fb:1e:0e:8a:c7:a5:f1:48:c1:c8:c2: f9:55:19:1d:18:6f:ca:62:21:63:f8:94:fb:27:3f: 48:ca:cc:38:f1:6f:cf:4e:47:37:38:3e:41:66:f0: 87:11:9b:ca:23:1a:1d:15:d1:0e:53:c1:0b:f8:cc: 2a:39:63:53:12:c0:f1:53:44:b8:19:f6:79:39:90: 72:be:6e:a1:1b:d2:a3:6e:fa:4d:aa:35:e3:39:33: 48:5e:ff:37:a4:27:a3:cc:fe:f9:ef:b1:b8:ba:70: ae:ae:5b:d7:9d:7d:84:06:07:f6:f0:e5:9d:12:68: 6b:2b:a7:1b:6b:18:e7:39:18:00:e1:23:11:b6:b1: 2f:99:a0:48:bb:f4:a4:f1:ee:45:fc:6f:63:94:8c: c7:9d:1e:11:3a:2d:90:04:26:ea:6d:72:40:bd:c6: 3c:8a:28:ac:80:0a:d5:10:ce:f3:cc:51:cd:10:59: f6:46:a8:2d:de:d6:5d:ec:ac:01:af:02:4c:80:25: 74:5f:28:cb:a9:91:6e:90:89:13:97:d3:d4:aa:60: d7:81:e3:07:5a:f1:86:61:6a:38:8e:23:96:45:0f: b8:fe:41:9e:55:62:cf:80:72:a8:f4:75:28:ea:7a: 01:c3:31:20:9d:80:23:71:65:98:2d:53:79:82:f4: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:74:6B:65:E7:12:21:BA:21:95:33:AA:A0:60:68:9B:5E:D4:88:2C X509v3 Authority Key Identifier: keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:b5:41:6e:e9:02:b3:a9:94:db:30:23:c7:4e:3e:ce:bf:e5: 00:39:fa:c2:f0:8b:21:c4:a4:e3:96:9b:5f:07:08:e0:ff:cc: 82:99:a3:89:0c:7c:a3:b4:2a:81:1b:3c:96:e5:9b:1d:35:f1: 54:18:eb:90:79:38:96:01:e0:cb:54:74:60:47:87:65:fa:86: 30:00:06:61:88:87:44:30:31:05:b3:91:29:e9:02:8b:39:0d: e0:2b:b4:d3:e9:fb:be:9f:62:e2:49:bc:3f:6d:80:6f:73:e0: f1:e2:7a:64:99:da:4f:28:79:c2:a9:b2:81:ee:4a:c4:56:e4: 82:36:c5:85:b7:e5:3c:02:ea:88:7d:a7:6d:63:42:94:0b:4b: 1c:e8:49:7f:0a:1b:3a:10:66:94:a2:2e:b0:c2:6c:b9:29:bd: ac:1c:88:7e:25:6d:3e:99:64:85:54:4c:91:1f:8a:c6:14:17: ef:6d:d7:b4:cb:90:9f:3a:8b:6c:c4:7c:48:2d:07:29:fc:03: 2f:ad:cc:d0:93:8f:92:f8:06:dd:55:45:ee:b7:6c:3d:bd:61: db:c1:ac:a7:36:03:f3:3b:98:05:cf:3c:7f:74:6d:62:fd:1a: 0a:7d:d3:22:64:d9:d0:5c:4b:24:db:af:1a:29:1b:b2:e9:45: 28:eb:08:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBanV6n5GICH8fK3iHSYyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy NDliMDQwHhcNMjYwMjA5MDgwMDIxWhcNMjYwMjEwMDgwMDIxWjAzMTEwLwYDVQQD Eyg3ZTc0NmI2NWU3MTIyMWJhMjE5NTMzYWFhMDYwNjg5YjVlZDQ4ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/gM+x4Oisel8UjByML5VRkdGG/K YiFj+JT7Jz9Iysw48W/PTkc3OD5BZvCHEZvKIxodFdEOU8EL+MwqOWNTEsDxU0S4 GfZ5OZByvm6hG9KjbvpNqjXjOTNIXv83pCejzP7577G4unCurlvXnX2EBgf28OWd EmhrK6cbaxjnORgA4SMRtrEvmaBIu/Sk8e5F/G9jlIzHnR4ROi2QBCbqbXJAvcY8 iiisgArVEM7zzFHNEFn2Rqgt3tZd7KwBrwJMgCV0XyjLqZFukIkTl9PUqmDXgeMH WvGGYWo4jiOWRQ+4/kGeVWLPgHKo9HUo6noBwzEgnYAjcWWYLVN5gvTXJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH50a2XnEiG6IZUzqqBgaJte1IgsMB8GA1UdIwQY MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt YzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLVBbukC s6mU2zAjx04+zr/lADn6wvCLIcSk45abXwcI4P/MgpmjiQx8o7QqgRs8luWbHTXx VBjrkHk4lgHgy1R0YEeHZfqGMAAGYYiHRDAxBbORKekCizkN4Cu00+n7vp9i4km8 P22Ab3Pg8eJ6ZJnaTyh5wqmyge5KxFbkgjbFhbflPALqiH2nbWNClAtLHOhJfwob OhBmlKIusMJsuSm9rByIfiVtPplkhVRMkR+KxhQX723XtMuQnzqLbMR8SC0HKfwD L63M0JOPkvgG3VVF7rdsPb1h28GspzYD8zuYBc88f3RtYv0aCn3TImTZ0FxLJNuv GikbsulFKOsIug== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client