This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft File: OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft (raw, json) Hash identifier: rrD2Vedb0hazj0hLin2OIfhHkF02UzgH6cLUeEoK/sk= Subject key identifier: 75:03:EB:38:02:6F:7C:13:0A:36:A1:06:53:E1:D7:66:66:1D:5D:F5 Authority key identifier: 3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 Certificate issuer: /CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Certificate serial: 019C42B4787A79A2B0C6CE6504C64D33477D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft Manifest number: 0FFF Signing time: Mon 09 Feb 2026 14:00:49 +0000 Manifest this update: Mon 09 Feb 2026 14:00:49 +0000 Manifest next update: Tue 10 Feb 2026 14:00:49 +0000 Files and hashes: 1: OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl (hash: YpdoPsrWXpm9Xt0B0yAJAidsZADAnWHP+Ex7gynapAk=) 2: ZO-qcdvK7BzzeLOkMttoxYvxl4E.roa (hash: m6/e1cwgXC/4hA09rZcRl2fyViBKxPhi7mCSBLfbjRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:78:7a:79:a2:b0:c6:ce:65:04:c6:4d:33:47:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aea4dae3e994fd9fe7be7433e42f96f67159378 Validity Not Before: Feb 9 14:00:49 2026 GMT Not After : Feb 10 14:00:49 2026 GMT Subject: CN=7503eb38026f7c130a36a10653e1d766661d5df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:88:bf:75:65:75:83:40:ec:b2:0c:79:74: f5:33:ca:8e:07:d4:1d:bf:98:b5:2a:7f:70:6e:1e: d4:0b:0f:05:fc:81:6f:bd:e8:3d:8c:b7:d1:aa:3a: 10:66:94:c2:78:a1:e2:a3:c7:2f:9c:bf:21:d2:6a: c5:a1:ed:77:3a:b2:11:d6:aa:2d:a5:1e:21:da:ea: 6f:01:c9:02:26:b0:c9:3a:85:d2:b6:51:31:88:a2: 46:2d:dd:0b:4d:d5:e2:df:4e:d9:dc:e7:ba:24:c4: 9a:09:e4:c6:58:d9:a2:e4:de:74:d1:21:44:8c:d8: cb:f9:71:2e:41:cd:6f:f9:0f:56:46:90:d6:16:58: ea:d4:63:20:a2:62:39:55:77:af:91:45:d7:df:56: 10:e0:6b:b3:40:17:4b:c5:9c:44:83:a0:eb:d4:41: 13:95:f1:f2:6f:4f:c0:e9:2a:a5:41:80:89:62:68: 71:cc:65:73:bf:da:71:b2:6b:62:06:55:f3:75:0e: c2:ac:f8:f4:62:b3:18:55:ee:50:9a:c5:33:9c:0c: 17:67:94:46:47:08:11:00:4c:2c:0d:6b:13:b9:d2: 96:de:45:8c:7d:ff:8f:3f:dc:db:9c:73:d6:36:af: 52:e6:40:00:74:25:be:f0:fb:69:ef:ae:77:9e:6c: 6e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:03:EB:38:02:6F:7C:13:0A:36:A1:06:53:E1:D7:66:66:1D:5D:F5 X509v3 Authority Key Identifier: keyid:3A:EA:4D:AE:3E:99:4F:D9:FE:7B:E7:43:3E:42:F9:6F:67:15:93:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OupNrj6ZT9n-e-dDPkL5b2cVk3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3257d9-3fb8-4cdf-98aa-93e9403eb019/1/OupNrj6ZT9n-e-dDPkL5b2cVk3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:38:f0:5b:2a:15:77:68:d0:99:4b:78:4e:93:df:84:3b:0e: af:72:a2:03:43:88:82:e2:b7:2d:73:07:37:46:b4:4b:99:06: a7:98:15:b8:bc:19:43:0e:36:93:31:3a:13:ca:7a:06:a0:f8: e2:8d:96:e2:92:ac:9a:33:1e:a0:12:df:d9:19:69:c7:fd:86: 57:ec:82:53:48:c3:90:e4:9d:a3:89:9e:a7:85:5e:49:4e:14: f6:67:46:87:71:81:99:42:20:62:bf:e3:e0:a9:54:c3:bb:e8: 3b:65:e0:02:32:ae:51:41:b1:d0:e5:ba:d8:80:3f:75:55:4d: 7d:82:fb:68:27:29:a9:7f:11:21:79:17:af:9b:5e:1d:e4:d0: 7c:c2:09:bf:6c:84:73:89:c7:82:de:0d:2b:a0:f8:a3:5e:93: ae:25:9f:b1:8a:be:d7:77:8f:54:8e:1b:57:77:01:42:f1:ae: c5:d4:13:0b:87:8b:ad:3f:00:29:df:2f:c8:69:2d:e5:89:63: cd:e8:1a:2e:85:ce:db:23:7c:e4:1b:d7:aa:1c:94:a7:01:05: 1a:e7:bf:f7:b8:4f:91:de:87:6e:16:39:40:94:4d:e2:84:48: c0:0d:50:1c:4a:80:4f:58:3f:08:bc:d8:ff:7b:47:05:1f:68: ad:93:cc:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtHh6eaKwxs5lBMZNM0d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZWE0ZGFlM2U5OTRmZDlmZTdiZTc0MzNlNDJmOTZmNjcx NTkzNzgwHhcNMjYwMjA5MTQwMDQ5WhcNMjYwMjEwMTQwMDQ5WjAzMTEwLwYDVQQD Eyg3NTAzZWIzODAyNmY3YzEzMGEzNmExMDY1M2UxZDc2NjY2MWQ1ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeGIv3VldYNA7LIMeXT1M8qOB9Qd v5i1Kn9wbh7UCw8F/IFvveg9jLfRqjoQZpTCeKHio8cvnL8h0mrFoe13OrIR1qot pR4h2upvAckCJrDJOoXStlExiKJGLd0LTdXi307Z3Oe6JMSaCeTGWNmi5N500SFE jNjL+XEuQc1v+Q9WRpDWFljq1GMgomI5VXevkUXX31YQ4GuzQBdLxZxEg6Dr1EET lfHyb0/A6SqlQYCJYmhxzGVzv9pxsmtiBlXzdQ7CrPj0YrMYVe5QmsUznAwXZ5RG RwgRAEwsDWsTudKW3kWMff+PP9zbnHPWNq9S5kAAdCW+8Ptp7653nmxuNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUD6zgCb3wTCjahBlPh12ZmHV31MB8GA1UdIwQY MBaAFDrqTa4+mU/Z/nvnQz5C+W9nFZN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEt OTNlOTQwM2ViMDE5LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zMjU3ZDktM2ZiOC00Y2RmLTk4YWEtOTNlOTQwM2ViMDE5 LzEvT3VwTnJqNlpUOW4tZS1kRFBrTDViMmNWazNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2jjwWyoV d2jQmUt4TpPfhDsOr3KiA0OIguK3LXMHN0a0S5kGp5gVuLwZQw42kzE6E8p6BqD4 4o2W4pKsmjMeoBLf2Rlpx/2GV+yCU0jDkOSdo4mep4VeSU4U9mdGh3GBmUIgYr/j 4KlUw7voO2XgAjKuUUGx0OW62IA/dVVNfYL7aCcpqX8RIXkXr5teHeTQfMIJv2yE c4nHgt4NK6D4o16TriWfsYq+13ePVI4bV3cBQvGuxdQTC4eLrT8AKd8vyGkt5Ylj zegaLoXO2yN85BvXqhyUpwEFGue/97hPkd6HbhY5QJRN4oRIwA1QHEqAT1g/CLzY /3tHBR9orZPMzA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:25 2026 by rpki-client