This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json) Hash identifier: 2v0O65q/VuUR0rnex7swaAUYEFZlUmEokxBvR1SMub0= Subject key identifier: B5:13:62:37:B1:E2:72:40:2E:75:8F:2A:47:49:27:17:6F:89:3F:CF Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Certificate serial: 019C427D0AF061D84F9CF41A318FA5971530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft Manifest number: 13F9 Signing time: Mon 09 Feb 2026 13:00:16 +0000 Manifest this update: Mon 09 Feb 2026 13:00:16 +0000 Manifest next update: Tue 10 Feb 2026 13:00:16 +0000 Files and hashes: 1: 1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa (hash: MhgKH4XXLplgDoi9ekQYp8OVpGYhKa65h2GVlb4h3zY=) 2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: jqBsuARUvxiuewfVHGHOJThSWtvgNuxsIM2AxF6kfY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0a:f0:61:d8:4f:9c:f4:1a:31:8f:a5:97:15:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb Validity Not Before: Feb 9 13:00:16 2026 GMT Not After : Feb 10 13:00:16 2026 GMT Subject: CN=b5136237b1e272402e758f2a474927176f893fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:4b:6b:3d:60:b2:01:6f:97:28:30:2d:6e: 78:b1:2f:64:97:95:9f:55:a0:8f:05:8a:07:53:a8: f6:ff:7f:3d:f2:3c:7b:0a:14:08:5e:21:66:25:cc: 1f:30:2c:f5:86:af:85:1a:9a:e0:d0:5d:14:c7:3c: 70:0c:f6:c3:e8:fa:ca:81:5a:0c:bd:a3:cc:c5:ba: 97:3b:46:d2:59:d7:15:f9:48:1d:3f:c9:54:25:3a: ee:d1:09:23:7d:88:46:e4:08:4c:06:f7:d1:61:3e: cd:f4:62:84:39:d6:34:39:72:15:0a:35:23:6a:f1: d6:81:2d:f4:58:1a:9a:45:a2:61:71:c2:ba:ef:0b: 61:e5:44:0f:a0:54:8a:57:a0:f6:b7:df:09:81:bb: 91:62:a3:6b:f4:ba:3e:f2:0e:dd:0e:69:62:9a:d3: 3e:d0:13:3c:7b:23:13:ce:e0:60:a0:17:02:d2:cb: 71:51:7c:b9:a5:c7:b1:af:17:20:b4:8d:21:89:d6: b8:9e:01:1b:66:fb:f9:1e:ed:6d:ab:3c:51:ed:fc: d6:b9:3e:5b:0c:15:7e:cf:39:45:e0:4f:e2:55:dc: a0:b0:78:e9:52:bd:90:32:26:cd:b6:8b:6f:d1:98: 9f:96:9b:fa:87:66:37:e0:0d:01:94:71:a2:47:70: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:13:62:37:B1:E2:72:40:2E:75:8F:2A:47:49:27:17:6F:89:3F:CF X509v3 Authority Key Identifier: keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:49:f8:a6:86:79:e7:eb:d8:f0:f2:21:95:06:08:8c:36:a7: 03:37:1a:ae:4f:9f:c0:8a:93:48:44:22:3d:c5:6f:d4:c0:5f: 3b:13:d7:f8:0a:36:71:89:07:6a:09:50:59:e8:e9:52:b5:30: 45:7e:53:20:3e:a1:f7:c4:65:4a:af:68:19:b2:01:41:33:82: 5a:3f:b0:57:b1:e0:e1:d8:be:c8:ac:ee:aa:3d:4c:94:79:f5: 1d:96:04:8a:7f:22:6c:f0:bd:d7:bc:7a:3b:f6:82:8a:10:f7: e8:6b:8a:d3:0b:94:45:0c:83:7b:4c:e0:9e:55:fc:c7:04:15: af:9a:48:76:86:1b:a9:91:d8:82:ae:e4:55:c6:4b:6d:c9:4b: 05:17:4a:24:eb:b7:11:4a:bc:78:02:eb:02:64:6b:93:82:88: 8f:ae:0f:0b:1a:c3:ff:4c:a6:36:4f:51:04:53:1b:14:0f:a8: a0:78:d7:fb:15:c3:b6:9b:9f:44:2e:d2:61:f4:2f:42:66:82: 5f:45:87:34:1c:31:2f:df:09:8e:2b:5e:f3:32:d7:62:05:01: 40:46:c7:b8:1c:a1:4a:9b:07:3a:9e:2b:f8:e9:8e:1e:ee:0f: b6:eb:02:0e:bd:d3:a1:21:07:8c:a2:67:21:79:bc:67:53:97: 13:78:cd:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQrwYdhPnPQaMY+llxUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTZmYzcyNjJiYTc4MmRkNWY2NDMwODU5ODJiNWQzNjcw M2RiZmIwHhcNMjYwMjA5MTMwMDE2WhcNMjYwMjEwMTMwMDE2WjAzMTEwLwYDVQQD EyhiNTEzNjIzN2IxZTI3MjQwMmU3NThmMmE0NzQ5MjcxNzZmODkzZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lLaz1gsgFvlygwLW54sS9kl5Wf VaCPBYoHU6j2/3898jx7ChQIXiFmJcwfMCz1hq+FGprg0F0UxzxwDPbD6PrKgVoM vaPMxbqXO0bSWdcV+UgdP8lUJTru0QkjfYhG5AhMBvfRYT7N9GKEOdY0OXIVCjUj avHWgS30WBqaRaJhccK67wth5UQPoFSKV6D2t98JgbuRYqNr9Lo+8g7dDmlimtM+ 0BM8eyMTzuBgoBcC0stxUXy5pcexrxcgtI0hida4ngEbZvv5Hu1tqzxR7fzWuT5b DBV+zzlF4E/iVdygsHjpUr2QMibNtotv0Ziflpv6h2Y34A0BlHGiR3BikwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUTYjex4nJALnWPKkdJJxdviT/PMB8GA1UdIwQY MBaAFKGm/HJiungt1fZDCFmCtdNnA9v7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTct YzUzNzg1ODFiMGUxLzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81ZjEzYTUtYThkYi00YzM3LWI3YTctYzUzNzg1ODFiMGUx LzEvb2FiOGNtSzZlQzNWOWtNSVdZSzEwMmNEMl9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEn4poZ5 5+vY8PIhlQYIjDanAzcark+fwIqTSEQiPcVv1MBfOxPX+Ao2cYkHaglQWejpUrUw RX5TID6h98RlSq9oGbIBQTOCWj+wV7Hg4di+yKzuqj1MlHn1HZYEin8ibPC917x6 O/aCihD36GuK0wuURQyDe0zgnlX8xwQVr5pIdoYbqZHYgq7kVcZLbclLBRdKJOu3 EUq8eALrAmRrk4KIj64PCxrD/0ymNk9RBFMbFA+ooHjX+xXDtpufRC7SYfQvQmaC X0WHNBwxL98Jjite8zLXYgUBQEbHuByhSpsHOp4r+OmOHu4PtusCDr3ToSEHjKJn IXm8Z1OXE3jNVg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:32 2026 by rpki-client