This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft File: OLB6ACu3vw06zI3UqV8jesYf1ng.mft (raw, json) Hash identifier: Gm2AbOWFwZiJmfAtmnqLlQ2LLyPVPNWb1+X1nHZMU9c= Subject key identifier: 1D:C2:C3:C0:B7:D7:B1:08:92:47:EE:3D:17:18:53:1C:69:4B:BC:79 Authority key identifier: 38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78 Certificate issuer: /CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678 Certificate serial: 019C41A173CF30F2CA0BDA39173668D6DEBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft Manifest number: 13 Signing time: Mon 09 Feb 2026 09:00:25 +0000 Manifest this update: Mon 09 Feb 2026 09:00:25 +0000 Manifest next update: Tue 10 Feb 2026 09:00:25 +0000 Files and hashes: 1: OLB6ACu3vw06zI3UqV8jesYf1ng.crl (hash: WWt023g/IYW6gisBDXBWt5aRaZ0nhLS/JPiVAr+/YKQ=) 2: X9K0l2rCyvUlNf67QetfDPsKTvk.roa (hash: SYfx2ip5BHRTUDDyhzpCkqxXM0rSgBrsGDJc73Lx6mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:73:cf:30:f2:ca:0b:da:39:17:36:68:d6:de:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b07a002bb7bf0d3acc8dd4a95f237ac61fd678 Validity Not Before: Feb 9 09:00:25 2026 GMT Not After : Feb 10 09:00:25 2026 GMT Subject: CN=1dc2c3c0b7d7b1089247ee3d1718531c694bbc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:00:03:b4:f9:6f:f2:e0:33:d3:14:8b:4b: bb:bf:07:45:b3:45:48:c4:c7:d4:b6:9a:0b:0a:18: 77:73:82:86:6d:43:70:6d:9d:4a:50:63:12:91:69: d1:89:19:77:e3:28:f9:68:b1:ca:55:2a:74:f8:3f: 59:84:f1:e4:b6:16:f6:73:b2:08:61:59:9b:7b:25: 9d:6f:db:0e:38:3e:b1:bc:bc:69:2c:b7:3e:31:37: bf:1a:76:b9:8b:e8:51:3b:56:c1:fb:cf:01:53:ec: 65:85:f7:e7:61:1c:22:ab:62:9c:c7:57:70:24:d7: 83:f8:21:5a:d4:8e:45:86:c3:96:58:86:26:02:8d: 2e:f5:72:80:5d:e6:a5:bf:5d:00:59:de:3c:1c:83: df:87:92:77:cd:03:5a:0e:99:70:22:18:29:93:55: a8:66:d9:05:a8:3a:1a:1c:de:8a:90:75:49:83:ec: 05:ce:ed:53:44:a5:17:79:fe:7d:8f:c9:f3:2e:9a: 5e:54:39:35:48:52:cf:73:b9:ab:95:b6:bd:55:f0: 19:66:48:f4:cf:c7:df:83:72:23:d6:a4:21:4f:a5: 43:40:59:b2:7a:59:36:e7:53:ca:0f:b8:82:33:69: 9e:e3:d8:e9:4d:70:58:30:26:f3:e2:4a:cc:77:6b: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:C3:C0:B7:D7:B1:08:92:47:EE:3D:17:18:53:1C:69:4B:BC:79 X509v3 Authority Key Identifier: keyid:38:B0:7A:00:2B:B7:BF:0D:3A:CC:8D:D4:A9:5F:23:7A:C6:1F:D6:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLB6ACu3vw06zI3UqV8jesYf1ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/131e2b-e18a-43dd-8a9b-0bb8a730b539/1/OLB6ACu3vw06zI3UqV8jesYf1ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1f:c2:a7:ee:77:d5:ec:38:93:57:f0:ee:a2:66:8c:3d:19: ea:66:80:35:54:92:3c:0f:4d:97:61:91:70:05:61:52:33:ef: f3:17:b3:57:16:35:c2:b0:20:64:d0:38:80:81:d8:ac:50:7d: 83:e1:25:8f:e4:c2:60:3a:7f:96:07:02:14:bf:e0:e3:1c:a4: f7:6f:c9:46:b1:3b:bc:da:4b:73:af:09:81:1e:52:1d:7b:dd: 2f:d1:b4:79:db:60:71:99:a9:7c:a0:2a:14:3a:cc:61:12:a8: 22:b3:6f:63:9f:9f:bc:7a:64:53:4c:81:98:8b:f4:51:35:f8: 05:7a:d4:29:c7:09:54:a0:89:da:1a:5c:f1:58:57:ba:54:82: 73:7e:85:bd:15:09:0a:54:a4:fe:61:40:b7:8a:42:c7:15:1c: 36:7b:eb:e0:b6:db:6a:ac:d1:c5:bf:2d:f1:97:47:39:e6:64: fc:5d:61:83:40:8c:02:37:e6:93:fd:48:43:05:02:96:97:d4: 56:bd:c1:98:ae:cf:6a:47:1c:a4:af:e4:43:f8:68:20:37:56: 4f:ae:b9:b2:c1:82:e8:a2:69:b8:7f:d6:80:0c:0c:62:cc:6a: 23:5a:6d:4e:17:8e:ac:a9:8d:fb:23:17:a3:2d:01:01:dc:29: c6:a9:8d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXPPMPLKC9o5FzZo1t69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjA3YTAwMmJiN2JmMGQzYWNjOGRkNGE5NWYyMzdhYzYx ZmQ2NzgwHhcNMjYwMjA5MDkwMDI1WhcNMjYwMjEwMDkwMDI1WjAzMTEwLwYDVQQD EygxZGMyYzNjMGI3ZDdiMTA4OTI0N2VlM2QxNzE4NTMxYzY5NGJiYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1oAA7T5b/LgM9MUi0u7vwdFs0VI xMfUtpoLChh3c4KGbUNwbZ1KUGMSkWnRiRl34yj5aLHKVSp0+D9ZhPHkthb2c7II YVmbeyWdb9sOOD6xvLxpLLc+MTe/Gna5i+hRO1bB+88BU+xlhffnYRwiq2Kcx1dw JNeD+CFa1I5FhsOWWIYmAo0u9XKAXealv10AWd48HIPfh5J3zQNaDplwIhgpk1Wo ZtkFqDoaHN6KkHVJg+wFzu1TRKUXef59j8nzLppeVDk1SFLPc7mrlba9VfAZZkj0 z8ffg3Ij1qQhT6VDQFmyelk251PKD7iCM2me49jpTXBYMCbz4krMd2t++QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3Cw8C317EIkkfuPRcYUxxpS7x5MB8GA1UdIwQY MBaAFDiwegArt78NOsyN1KlfI3rGH9Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xCNkFDdTN2dzA2ekkzVXFWOGplc1lmMW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xMzFlMmItZTE4YS00M2RkLThhOWIt MGJiOGE3MzBiNTM5LzEvT0xCNkFDdTN2dzA2ekkzVXFWOGplc1lmMW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xMzFlMmItZTE4YS00M2RkLThhOWItMGJiOGE3MzBiNTM5 LzEvT0xCNkFDdTN2dzA2ekkzVXFWOGplc1lmMW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR/Cp+53 1ew4k1fw7qJmjD0Z6maANVSSPA9Nl2GRcAVhUjPv8xezVxY1wrAgZNA4gIHYrFB9 g+Elj+TCYDp/lgcCFL/g4xyk92/JRrE7vNpLc68JgR5SHXvdL9G0edtgcZmpfKAq FDrMYRKoIrNvY5+fvHpkU0yBmIv0UTX4BXrUKccJVKCJ2hpc8VhXulSCc36FvRUJ ClSk/mFAt4pCxxUcNnvr4LbbaqzRxb8t8ZdHOeZk/F1hg0CMAjfmk/1IQwUClpfU Vr3BmK7PakccpK/kQ/hoIDdWT665ssGC6KJpuH/WgAwMYsxqI1ptTheOrKmN+yMX oy0BAdwpxqmNaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:20 2026 by rpki-client