This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json) Hash identifier: Q92muWYz/7Wd0Qsvxvc0/nm7mVvruOrq37AdXnsZZME= Subject key identifier: C5:E3:01:02:47:B6:C5:F1:25:0C:01:7B:72:D1:AE:1C:8B:F7:E6:74 Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Certificate serial: 019C43C73EA8B56290887E06ED7AAE2F932D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 19:00:56 +0000 Manifest this update: Mon 09 Feb 2026 19:00:56 +0000 Manifest next update: Tue 10 Feb 2026 19:00:56 +0000 Files and hashes: 1: UDOQeKm21_HbogaX80qPDYGLszg.roa (hash: oQCYUWGJBiukXuu22aVYGVLYnrdXQVCn7RQqhgm8PBQ=) 2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: 4RtGlC31GXvWszt0ZG0JHi0OQvjL7L4/t/wbE87GoKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:3e:a8:b5:62:90:88:7e:06:ed:7a:ae:2f:93:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58 Validity Not Before: Feb 9 19:00:56 2026 GMT Not After : Feb 10 19:00:56 2026 GMT Subject: CN=c5e3010247b6c5f1250c017b72d1ae1c8bf7e674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:62:f0:37:60:ec:c5:1e:b3:e7:fc:69:74: a6:31:81:ef:07:a2:be:6e:17:2c:a7:9e:f2:f6:49: 86:86:bf:0f:5f:b9:5c:c9:dc:e1:85:d5:b2:16:66: 48:23:38:18:c7:5d:23:95:dd:c0:38:13:dd:5f:c4: b9:5c:68:d4:c2:88:ec:2c:d2:e9:38:37:f4:ce:d4: 26:37:1c:77:78:a4:7c:69:5b:a2:cf:c6:9f:ad:92: 30:39:21:99:33:d4:31:c1:44:dd:1c:88:97:a9:a1: 90:f7:fd:2d:33:3b:6f:76:c0:f4:59:21:70:e0:6a: 9b:3d:ad:ab:18:17:8b:4d:e6:ab:f4:ee:0a:9c:50: 16:d3:a6:fb:a8:a6:54:23:be:b0:e5:d6:ee:32:20: aa:38:c1:3f:05:3a:1c:62:90:38:bd:37:79:cd:ee: ba:dc:7a:de:8e:61:aa:c6:32:ba:42:60:2d:0f:aa: c3:10:5d:b3:23:95:82:aa:87:ef:65:8c:9d:77:98: 0f:cf:c5:97:c7:5d:ae:af:51:37:5f:b9:ec:d5:42: db:a8:df:88:46:ab:ed:c7:1d:78:81:4f:91:8f:b2: 39:b8:0d:37:1a:16:70:36:a4:57:43:9e:8f:1d:d8: 73:eb:6e:0c:07:47:7c:20:ff:d8:23:5e:e0:66:d6: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:01:02:47:B6:C5:F1:25:0C:01:7B:72:D1:AE:1C:8B:F7:E6:74 X509v3 Authority Key Identifier: keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:85:94:74:da:f2:a7:69:56:de:29:0e:85:55:47:41:ec: f4:54:ec:69:1d:4a:c2:8c:50:f8:47:c3:0f:6b:bc:cc:2b:7d: 92:ee:ca:18:12:46:fb:19:d9:0e:81:3f:ce:68:12:63:6c:4f: c4:ef:3b:83:fa:3c:b9:2b:c8:91:15:49:6b:41:62:e4:28:d4: 8e:6a:ca:be:61:fb:4e:0c:7c:08:13:98:37:9a:4c:35:a3:73: ff:d6:cc:2b:f4:e6:1c:d0:fa:62:3f:b5:49:cc:ea:ac:97:c8: 16:a0:1b:d6:1e:2e:89:32:d4:58:4e:a7:f4:86:9d:91:4d:cb: 1a:c7:43:65:1a:39:f2:cf:33:80:95:b9:86:38:54:5f:ff:fa: 69:e9:dd:b9:05:c8:9c:0b:3b:e5:58:90:5b:af:62:a2:fc:08: a3:74:f3:37:c5:3e:2b:e9:9a:15:a9:fb:42:61:6a:2d:36:65: 67:03:00:81:24:43:71:89:4a:d3:4c:7e:e8:11:c3:2c:95:1d: 7e:97:0b:ee:1d:d0:7e:30:c7:6d:ad:1a:0a:cf:c1:b0:ef:f2: 15:f0:3e:56:fa:fa:65:a5:98:3f:97:12:a9:46:6d:45:bb:7f: 2b:e2:d2:f1:1b:b1:95:be:14:c3:84:c4:41:a4:59:3b:b0:64: d7:da:92:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxz6otWKQiH4G7XquL5MtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYzhjZGE4MTRlNzc3ZDlmZTE1NGI5MmU5OTU5Y2UxMjBi MGFkNTgwHhcNMjYwMjA5MTkwMDU2WhcNMjYwMjEwMTkwMDU2WjAzMTEwLwYDVQQD EyhjNWUzMDEwMjQ3YjZjNWYxMjUwYzAxN2I3MmQxYWUxYzhiZjdlNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT5i8Ddg7MUes+f8aXSmMYHvB6K+ bhcsp57y9kmGhr8PX7lcydzhhdWyFmZIIzgYx10jld3AOBPdX8S5XGjUwojsLNLp ODf0ztQmNxx3eKR8aVuiz8afrZIwOSGZM9QxwUTdHIiXqaGQ9/0tMztvdsD0WSFw 4GqbPa2rGBeLTear9O4KnFAW06b7qKZUI76w5dbuMiCqOME/BTocYpA4vTd5ze66 3HrejmGqxjK6QmAtD6rDEF2zI5WCqofvZYydd5gPz8WXx12ur1E3X7ns1ULbqN+I Rqvtxx14gU+Rj7I5uA03GhZwNqRXQ56PHdhz624MB0d8IP/YI17gZtaTzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXjAQJHtsXxJQwBe3LRrhyL9+Z0MB8GA1UdIwQY MBaAFKDIzagU53fZ/hVLkumVnOEgsK1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt YjczNjJlZGJkOGFjLzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj LzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaKFlHTa 8qdpVt4pDoVVR0Hs9FTsaR1KwoxQ+EfDD2u8zCt9ku7KGBJG+xnZDoE/zmgSY2xP xO87g/o8uSvIkRVJa0Fi5CjUjmrKvmH7Tgx8CBOYN5pMNaNz/9bMK/TmHND6Yj+1 SczqrJfIFqAb1h4uiTLUWE6n9IadkU3LGsdDZRo58s8zgJW5hjhUX//6aenduQXI nAs75ViQW69iovwIo3TzN8U+K+maFan7QmFqLTZlZwMAgSRDcYlK00x+6BHDLJUd fpcL7h3QfjDHba0aCs/BsO/yFfA+Vvr6ZaWYP5cSqUZtRbt/K+LS8Ruxlb4Uw4TE QaRZO7Bk19qSGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:21 2026 by rpki-client