This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json) Hash identifier: q2UlZZg6OjTR/lOmIVtrJjG6AQBQ8hkAW/W23er0GhQ= Subject key identifier: C7:8E:73:04:3F:35:34:98:BB:10:8F:B9:4C:E9:53:E6:11:36:32:7C Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0 Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0 Certificate serial: 019C42103D6DE23017EDA6B6CADED3B80DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft Manifest number: 0D92 Signing time: Mon 09 Feb 2026 11:01:26 +0000 Manifest this update: Mon 09 Feb 2026 11:01:26 +0000 Manifest next update: Tue 10 Feb 2026 11:01:26 +0000 Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: lNLvcih9hLnEBnlBZBKamgbPqkA3FQao6tHD8cQApGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3d:6d:e2:30:17:ed:a6:b6:ca:de:d3:b8:0d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0 Validity Not Before: Feb 9 11:01:26 2026 GMT Not After : Feb 10 11:01:26 2026 GMT Subject: CN=c78e73043f353498bb108fb94ce953e61136327c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:4e:1c:91:18:f8:33:75:7b:24:65:36:6f: f5:e1:57:04:05:f7:24:51:ae:ac:4e:ab:6b:0e:de: 23:32:1e:36:8e:dd:bc:e3:10:c2:bf:43:7e:60:6c: b8:d9:70:e7:12:02:bd:7b:89:0d:6f:6a:7d:65:e4: 40:7f:a0:3a:b3:b2:1b:8e:4d:50:0a:ce:1e:c1:bc: cd:9f:43:fc:ca:b3:b8:db:bd:e9:b2:48:1e:a0:b6: dc:81:ae:b0:f4:8f:f9:37:da:3e:9d:fb:c9:54:7a: 7c:e6:73:00:f3:8a:45:03:06:ec:f9:ea:84:52:c5: af:20:b7:16:00:97:61:f4:26:95:77:cd:a8:2d:f7: 22:75:51:e6:2e:3e:1b:01:0d:a4:c2:69:2e:88:1a: 92:08:75:47:91:6b:19:79:a8:6c:e3:ef:97:4e:3d: 65:54:25:9e:c3:07:7a:49:b7:6b:62:34:af:a4:cf: 9b:b4:9c:cc:3a:75:72:6c:07:46:4a:7a:f5:c0:b9: c3:a9:b5:2c:4b:6d:eb:c2:cd:af:d9:7f:6f:36:b7: 57:fd:cd:28:15:fb:46:a8:f5:13:b9:37:93:d8:a7: c9:75:73:fe:7f:67:22:59:d4:dd:14:48:3e:7e:84: 49:1f:fa:a0:1f:76:da:01:f7:37:1e:11:84:6e:9f: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8E:73:04:3F:35:34:98:BB:10:8F:B9:4C:E9:53:E6:11:36:32:7C X509v3 Authority Key Identifier: keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:cc:19:84:88:90:02:93:bd:fb:7d:1a:6d:dd:c3:fe:77: 21:86:24:82:b6:aa:76:7d:8a:ea:11:37:e9:9c:89:0c:a3:5f: fe:51:c6:c1:d1:e4:62:d1:75:8e:9d:ce:c9:00:50:00:2d:6d: ac:2a:a7:a1:3f:ba:0b:c4:05:83:c5:5e:84:39:1f:5b:59:b5: 4c:a0:9a:27:85:1c:6c:5e:9d:03:e2:ed:e5:c6:d2:ac:13:09: 8f:25:68:28:77:ba:bd:96:b5:f6:4d:b8:a1:2e:a4:2e:1b:65: b5:af:d5:81:62:aa:cf:e0:54:b3:12:77:c9:60:68:4f:f1:92: e4:f9:bf:9d:1e:f1:81:3b:fb:c1:74:9f:38:f8:2f:36:1c:6d: 4e:a3:36:35:dc:d5:a1:54:03:d9:ca:00:62:67:67:e9:99:68: d6:72:9c:4d:7c:06:a9:94:ad:6e:f3:b2:e5:b7:6f:35:3e:09: 70:38:de:11:73:9a:ca:92:22:7a:70:1d:87:f1:64:04:03:af: 31:7f:6d:3a:b9:ad:79:bd:76:55:68:e0:9c:d1:26:1e:b4:31: 48:e4:a7:84:7c:fd:50:4b:27:a2:dc:24:ce:33:df:59:12:98: 93:7e:c0:e4:86:b4:70:1b:90:79:9a:f0:79:92:4c:02:0b:bd: a2:c7:a3:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCED1t4jAX7aa2yt7TuA33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDk4ZTVlMjBkNzhmOTRlNjk2YzEzNzJiNTYyM2ZmYTcx ZDk0ZDAwHhcNMjYwMjA5MTEwMTI2WhcNMjYwMjEwMTEwMTI2WjAzMTEwLwYDVQQD EyhjNzhlNzMwNDNmMzUzNDk4YmIxMDhmYjk0Y2U5NTNlNjExMzYzMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWdOHJEY+DN1eyRlNm/14VcEBfck Ua6sTqtrDt4jMh42jt284xDCv0N+YGy42XDnEgK9e4kNb2p9ZeRAf6A6s7Ibjk1Q Cs4ewbzNn0P8yrO4273pskgeoLbcga6w9I/5N9o+nfvJVHp85nMA84pFAwbs+eqE UsWvILcWAJdh9CaVd82oLfcidVHmLj4bAQ2kwmkuiBqSCHVHkWsZeahs4++XTj1l VCWewwd6SbdrYjSvpM+btJzMOnVybAdGSnr1wLnDqbUsS23rws2v2X9vNrdX/c0o FftGqPUTuTeT2KfJdXP+f2ciWdTdFEg+foRJH/qgH3baAfc3HhGEbp/zawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeOcwQ/NTSYuxCPuUzpU+YRNjJ8MB8GA1UdIwQY MBaAFNMJjl4g14+U5pbBNytWI/+nHZTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQt NjE3YTI2MzI3ZTk4LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81MzYxY2MtYjA0ZC00NDY1LTkzOGQtNjE3YTI2MzI3ZTk4 LzEvMHdtT1hpRFhqNVRtbHNFM0sxWWpfNmNkbE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0XMGYSI kAKTvft9Gm3dw/53IYYkgraqdn2K6hE36ZyJDKNf/lHGwdHkYtF1jp3OyQBQAC1t rCqnoT+6C8QFg8VehDkfW1m1TKCaJ4UcbF6dA+Lt5cbSrBMJjyVoKHe6vZa19k24 oS6kLhtlta/VgWKqz+BUsxJ3yWBoT/GS5Pm/nR7xgTv7wXSfOPgvNhxtTqM2NdzV oVQD2coAYmdn6Zlo1nKcTXwGqZStbvOy5bdvNT4JcDjeEXOaypIienAdh/FkBAOv MX9tOrmteb12VWjgnNEmHrQxSOSnhHz9UEsnotwkzjPfWRKYk37A5Ia0cBuQeZrw eZJMAgu9osej0w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:50 2026 by rpki-client