This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json) Hash identifier: kUV9XHz2brPPwOfBYyBjUTrg+XLV8ODCdlHtOn43pvQ= Subject key identifier: 8C:DB:5A:B7:7D:87:ED:90:DF:A2:36:C9:4D:73:95:6A:E3:36:52:CB Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62 Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62 Certificate serial: 019C41D8BFF97E38C3B3A52238A003CF5A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft Manifest number: 10B6 Signing time: Mon 09 Feb 2026 10:00:49 +0000 Manifest this update: Mon 09 Feb 2026 10:00:49 +0000 Manifest next update: Tue 10 Feb 2026 10:00:49 +0000 Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: a4I/Q5RLNVLiKtAAkRtl4BHTHcGhqLn/jSxZgXbTXmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:bf:f9:7e:38:c3:b3:a5:22:38:a0:03:cf:5a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62 Validity Not Before: Feb 9 10:00:49 2026 GMT Not After : Feb 10 10:00:49 2026 GMT Subject: CN=8cdb5ab77d87ed90dfa236c94d73956ae33652cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:fb:78:fc:a6:ef:a3:02:7f:c3:3a:0c:b0: 33:f8:ca:95:e0:d4:dc:3e:b7:fc:4f:7b:f0:06:fd: 4f:83:f8:1f:a3:6d:57:8f:53:03:8a:ac:6f:e8:95: c1:bc:ed:ec:aa:2c:c4:d8:1e:e6:03:bf:1a:68:06: db:dd:62:14:96:a7:ce:11:a4:27:03:e5:cd:a4:92: 97:5e:8f:34:14:ed:0b:34:b2:51:1b:31:ba:3d:49: c5:a3:f1:3f:5d:dd:67:43:b3:86:aa:be:2c:12:8f: 7c:6a:e2:7b:66:6a:e8:e4:56:41:26:af:10:c5:0c: 90:8d:02:37:64:19:8b:7c:cc:d7:b4:4c:81:8a:a9: 92:54:80:a3:44:d7:6e:73:54:d0:8d:78:de:cc:0d: 1c:7b:b4:fd:1c:28:75:a1:8b:55:54:fc:8a:08:8c: ec:0d:92:48:23:a1:59:22:0e:4b:44:d8:d9:66:87: bf:e6:10:0f:2b:40:cf:0a:8c:27:f8:21:cc:d6:f4: db:e1:54:95:59:2c:79:cb:bb:42:a0:78:31:3a:94: 8b:f7:f4:97:39:f0:ae:9c:f3:7c:e4:04:80:ec:b0: 4a:af:f2:34:e2:f2:53:f2:5b:9f:93:1a:38:ab:70: c6:cf:01:14:03:97:0e:d8:16:71:36:08:7c:74:74: c7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:5A:B7:7D:87:ED:90:DF:A2:36:C9:4D:73:95:6A:E3:36:52:CB X509v3 Authority Key Identifier: keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fe:43:6e:ac:46:bc:9c:a5:29:fb:74:c6:70:cd:75:0c:dd: a1:c1:a6:f2:f3:ee:fe:35:69:43:69:cc:9c:10:95:09:1a:c9: 19:a0:7f:4f:cf:13:6f:0a:a9:cf:65:1e:46:c0:07:bc:4b:58: 14:60:2e:7d:09:ef:8c:a6:36:85:ab:31:6a:b3:02:d2:77:32: 87:9a:d3:48:1c:dd:9b:1b:c5:b7:c0:97:e5:ca:92:ba:fb:56: f8:70:e4:2f:06:46:32:f9:57:42:b7:d8:1c:c9:78:27:41:a4: 62:85:75:67:e5:95:b1:19:5b:b3:95:9b:15:87:b8:85:ad:dc: 0f:65:ea:ba:27:8f:e3:59:d2:6b:0d:5d:be:a2:01:c5:aa:fe: 23:b7:ab:75:60:84:24:fe:50:2d:58:16:ad:46:28:06:af:40: 0f:37:c9:46:89:d7:f4:fa:4a:3a:60:f8:06:e0:0c:24:15:43: fa:30:f8:ab:5e:5a:ba:3d:fa:6c:f1:94:c8:19:fd:72:d1:aa: f5:f6:bf:86:24:ac:6e:38:eb:3e:07:e0:59:ae:f9:aa:90:ed: 59:4f:b7:a3:21:3b:db:57:2a:01:9a:dd:1a:3b:2e:70:c4:c6: 7c:53:57:ce:40:eb:fa:46:d7:ce:17:60:99:3e:ba:06:05:d5: ea:19:61:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2L/5fjjDs6UiOKADz1oiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNTVlN2ZlYjkwNzEzNzI5OWY1NzkyYzM2Mzk1ZWZiYTli MzRiNjIwHhcNMjYwMjA5MTAwMDQ5WhcNMjYwMjEwMTAwMDQ5WjAzMTEwLwYDVQQD Eyg4Y2RiNWFiNzdkODdlZDkwZGZhMjM2Yzk0ZDczOTU2YWUzMzY1MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC37ePym76MCf8M6DLAz+MqV4NTc Prf8T3vwBv1Pg/gfo21Xj1MDiqxv6JXBvO3sqizE2B7mA78aaAbb3WIUlqfOEaQn A+XNpJKXXo80FO0LNLJRGzG6PUnFo/E/Xd1nQ7OGqr4sEo98auJ7Zmro5FZBJq8Q xQyQjQI3ZBmLfMzXtEyBiqmSVICjRNduc1TQjXjezA0ce7T9HCh1oYtVVPyKCIzs DZJII6FZIg5LRNjZZoe/5hAPK0DPCown+CHM1vTb4VSVWSx5y7tCoHgxOpSL9/SX OfCunPN85ASA7LBKr/I04vJT8lufkxo4q3DGzwEUA5cO2BZxNgh8dHTHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzbWrd9h+2Q36I2yU1zlWrjNlLLMB8GA1UdIwQY MBaAFDtV5/65BxNymfV5LDY5Xvups0tiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAt YTQ0MWUyNGJlMDM2LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAtYTQ0MWUyNGJlMDM2 LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP5DbqxG vJylKft0xnDNdQzdocGm8vPu/jVpQ2nMnBCVCRrJGaB/T88Tbwqpz2UeRsAHvEtY FGAufQnvjKY2hasxarMC0ncyh5rTSBzdmxvFt8CX5cqSuvtW+HDkLwZGMvlXQrfY HMl4J0GkYoV1Z+WVsRlbs5WbFYe4ha3cD2XquieP41nSaw1dvqIBxar+I7erdWCE JP5QLVgWrUYoBq9ADzfJRonX9PpKOmD4BuAMJBVD+jD4q15auj36bPGUyBn9ctGq 9fa/hiSsbjjrPgfgWa75qpDtWU+3oyE721cqAZrdGjsucMTGfFNXzkDr+kbXzhdg mT66BgXV6hlh0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:18 2026 by rpki-client