This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json) Hash identifier: 31GBwXa9zuDFeYUw8tgDnA9HXtXoDlrsPGk7fsBQsKo= Subject key identifier: FC:27:FC:5E:9B:24:B8:75:3F:5D:D4:89:BA:77:40:28:CA:25:19:9F Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3 Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3 Certificate serial: 019C44DA20E826A13C7157AB38073CBB8091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft Manifest number: 1811 Signing time: Tue 10 Feb 2026 00:01:11 +0000 Manifest this update: Tue 10 Feb 2026 00:01:11 +0000 Manifest next update: Wed 11 Feb 2026 00:01:11 +0000 Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: Y7ArwHqYjpn/U5Ob4JPt9AkRB9kcDxrkc3MIgSH2RFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:20:e8:26:a1:3c:71:57:ab:38:07:3c:bb:80:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3 Validity Not Before: Feb 10 00:01:11 2026 GMT Not After : Feb 11 00:01:11 2026 GMT Subject: CN=fc27fc5e9b24b8753f5dd489ba774028ca25199f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:5b:ab:cf:16:be:74:3d:48:1e:90:2e:c4: de:f9:98:71:ee:b5:40:d1:bf:a2:c2:1d:70:39:3c: 48:45:41:e2:a6:22:67:55:e9:6d:a0:98:c8:b4:b4: 72:29:5a:66:2a:01:28:d6:e2:66:bc:71:2d:1e:b1: df:68:d3:03:06:be:94:a9:09:91:e3:10:fb:21:55: 45:ea:ab:85:c0:d6:60:5a:d8:2b:42:f3:54:16:e4: 0a:28:3d:44:9e:57:6e:84:2e:c4:d6:58:6d:56:e6: 2e:26:79:8c:3a:7d:0a:9c:bd:f2:22:09:97:1c:84: 82:25:e1:dc:ee:69:ef:3a:f2:8b:74:60:a3:23:76: 35:a6:cf:e6:fb:4d:fc:0f:c5:04:8b:a5:46:d2:4e: e0:6c:04:3e:5a:91:92:2e:43:fa:70:7a:5a:ae:1e: d9:0a:cf:da:72:77:95:5a:c9:7d:38:dd:17:82:7a: 7c:50:d7:cc:62:a4:58:12:54:b4:7e:0b:b7:78:53: 2c:ec:bf:c8:51:ef:9f:f9:65:df:45:9a:61:20:1f: 8c:fd:41:85:d8:44:f4:8b:13:b2:91:a6:54:30:f9: e9:c1:6f:c4:cd:c7:71:8f:30:2a:4f:3a:e3:46:db: c2:58:f9:14:f9:5a:89:94:2d:5e:8f:ee:ff:22:86: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:27:FC:5E:9B:24:B8:75:3F:5D:D4:89:BA:77:40:28:CA:25:19:9F X509v3 Authority Key Identifier: keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:89:49:0b:6e:4b:97:04:af:5d:f0:f1:16:c4:f1:26:73: b9:90:72:68:97:41:db:7a:ed:7a:98:b2:ae:5f:1d:4c:ab:b5: 03:b4:b0:7c:de:91:ce:f0:3a:69:ea:f5:ee:f2:e3:18:31:46: 3b:83:68:3a:25:a3:41:d8:4b:33:fc:47:c6:e7:df:91:d3:72: 37:3d:35:fa:16:5c:b4:73:ab:d5:a0:01:26:e1:04:2f:10:08: b2:1f:23:ed:53:12:5f:b4:8f:a4:a4:c1:3e:02:da:2a:ce:77: 16:e3:36:56:d2:de:6d:1e:55:06:53:cc:58:19:b3:15:d2:ca: f9:48:28:4d:cf:bc:a5:de:e7:34:4e:1a:15:f8:fd:13:60:8d: 75:b2:fc:43:85:41:80:28:8f:64:94:8f:85:dd:4b:9f:93:3b: 60:53:06:0b:a7:a4:ed:f7:6f:6d:52:90:e9:f6:69:09:45:bc: a1:e0:8f:23:1e:d4:10:67:b8:99:c3:a8:ad:54:2a:21:60:5a: 87:d5:53:90:39:00:6a:d4:6a:db:0e:cd:57:ea:17:c0:20:4d: 6d:15:ba:58:76:1f:9f:7d:16:e5:e7:b5:06:a9:04:91:7b:f5: 17:25:68:3f:9f:ad:0a:ce:18:1e:5b:87:a1:aa:44:80:75:5e: fa:c4:3c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2iDoJqE8cVerOAc8u4CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWU2MDY2YmI2NTJjNjQ4YzdhODcwOTlkMGQ5MzU0NTQ2 MDYwZDMwHhcNMjYwMjEwMDAwMTExWhcNMjYwMjExMDAwMTExWjAzMTEwLwYDVQQD EyhmYzI3ZmM1ZTliMjRiODc1M2Y1ZGQ0ODliYTc3NDAyOGNhMjUxOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA259bq88WvnQ9SB6QLsTe+Zhx7rVA 0b+iwh1wOTxIRUHipiJnVeltoJjItLRyKVpmKgEo1uJmvHEtHrHfaNMDBr6UqQmR 4xD7IVVF6quFwNZgWtgrQvNUFuQKKD1EnlduhC7E1lhtVuYuJnmMOn0KnL3yIgmX HISCJeHc7mnvOvKLdGCjI3Y1ps/m+038D8UEi6VG0k7gbAQ+WpGSLkP6cHparh7Z Cs/acneVWsl9ON0Xgnp8UNfMYqRYElS0fgu3eFMs7L/IUe+f+WXfRZphIB+M/UGF 2ET0ixOykaZUMPnpwW/EzcdxjzAqTzrjRtvCWPkU+VqJlC1ej+7/IoaHXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwn/F6bJLh1P13Uibp3QCjKJRmfMB8GA1UdIwQY MBaAFDvuYGa7ZSxkjHqHCZ0Nk1RUYGDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMt MTE2NDZiZTE2NzIzLzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMtMTE2NDZiZTE2NzIz LzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpWJSQtu S5cEr13w8RbE8SZzuZByaJdB23rtepiyrl8dTKu1A7SwfN6RzvA6aer17vLjGDFG O4NoOiWjQdhLM/xHxuffkdNyNz01+hZctHOr1aABJuEELxAIsh8j7VMSX7SPpKTB PgLaKs53FuM2VtLebR5VBlPMWBmzFdLK+UgoTc+8pd7nNE4aFfj9E2CNdbL8Q4VB gCiPZJSPhd1Ln5M7YFMGC6ek7fdvbVKQ6fZpCUW8oeCPIx7UEGe4mcOorVQqIWBa h9VTkDkAatRq2w7NV+oXwCBNbRW6WHYfn30W5ee1BqkEkXv1FyVoP5+tCs4YHluH oapEgHVe+sQ8JQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:26 2026 by rpki-client