This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json) Hash identifier: Q3W9+2M/vgzgUplOS0AvNGT/h8LgJoCMmDBRDhSxcIA= Subject key identifier: 95:EF:69:AD:32:0F:8A:91:BE:EB:C6:29:AB:51:9B:0C:CE:DA:6B:4A Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54 Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54 Certificate serial: 019C42B40CF81EBA370786E9C8FFA0F78664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 14:00:21 +0000 Manifest this update: Mon 09 Feb 2026 14:00:21 +0000 Manifest next update: Tue 10 Feb 2026 14:00:21 +0000 Files and hashes: 1: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: wTg5dTNv2ZjIPOt/hag4aZotfUuTnYBMCdBFAxjczZk=) 2: z0CueOCsUcgJjTlUBl8xuP0ejIo.roa (hash: OHQraT5vhktcGhKnSXjBbZgLeUySm12jN55KrjwZnfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:0c:f8:1e:ba:37:07:86:e9:c8:ff:a0:f7:86:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54 Validity Not Before: Feb 9 14:00:21 2026 GMT Not After : Feb 10 14:00:21 2026 GMT Subject: CN=95ef69ad320f8a91beebc629ab519b0cceda6b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:db:17:1a:dd:28:71:40:cc:ee:73:c5:59: 01:b2:55:e6:1e:87:da:04:a3:98:90:c9:90:b1:50: 8d:a0:bb:5e:37:97:1d:97:20:f8:ed:d7:fb:ff:ce: 1a:97:cd:00:40:26:35:e7:a7:32:5d:d7:21:82:27: 79:f8:9b:1b:bf:4f:c5:34:48:78:1a:8e:52:17:f0: 4a:0b:36:4a:54:31:0d:e8:c8:b0:83:9f:a2:2c:7c: f7:28:47:ee:84:80:d0:ca:46:cb:1a:6a:2b:3a:11: be:1c:9e:0a:30:9d:02:cc:c2:50:ca:77:5f:ae:6e: 16:2b:0f:5a:51:57:4f:1b:6c:66:6a:31:5e:71:b5: 89:21:a9:f8:68:d8:fe:e5:b8:cd:2d:89:89:28:c0: 93:7c:99:a8:be:49:61:7d:26:49:e8:d3:77:19:53: d1:f3:67:57:bd:a5:5e:f6:94:21:f2:3b:1e:df:f4: 98:0d:4f:4f:af:7f:e0:cd:e8:9b:6e:1d:8e:66:09: e3:52:2b:a5:46:fb:52:f8:a2:cb:1e:dd:38:fc:6c: 12:8f:5c:ad:ca:11:be:d0:91:3b:58:18:8b:33:b7: 1b:02:c4:b6:fd:9d:1f:dd:1b:e3:cc:4a:25:de:2c: 06:4b:64:01:0e:62:5c:1e:86:d5:a4:d5:58:db:cb: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EF:69:AD:32:0F:8A:91:BE:EB:C6:29:AB:51:9B:0C:CE:DA:6B:4A X509v3 Authority Key Identifier: keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3f:e4:13:fe:d9:15:52:54:8b:d4:1c:36:5f:77:fb:c9:cd: 89:2f:4d:11:bb:e8:de:80:10:62:5a:5c:86:df:4f:5e:e6:9c: 93:e5:88:84:ee:99:43:31:1a:0d:ff:da:a6:42:26:d1:44:54: a0:7f:61:3c:41:2f:2c:02:18:29:a1:ae:f7:49:ee:5c:01:cc: 4b:bf:6c:92:33:70:ef:d2:35:4c:5b:cd:ae:67:ea:ed:12:ef: 77:b4:2d:6f:c3:22:a4:7d:82:03:51:11:32:b3:fd:94:26:f9: ac:7b:f3:19:5e:84:43:2a:ef:e8:db:4d:6f:90:69:5a:32:7a: 74:fd:90:2b:23:fe:9b:4d:9e:b3:10:76:b9:b6:1f:13:cd:53: fc:3b:01:e7:e6:cd:3a:aa:02:60:6e:ec:3a:fa:01:3b:98:83: 80:23:83:6d:52:23:57:50:9d:df:6e:91:c3:b2:74:57:5b:83: df:a1:ad:5c:0b:37:39:6e:cb:08:a7:98:34:a9:fe:ca:66:b1: ae:f5:48:fa:65:b7:fd:9d:01:f0:f8:23:6c:ed:f0:f5:6c:66: 47:85:01:bc:1d:cf:c7:12:8e:45:0f:60:9c:dd:3a:48:af:23: e5:ff:8f:6e:f5:fb:75:0c:d8:0a:b2:48:3e:f5:23:04:4f:c2: c2:74:a1:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAz4Hro3B4bpyP+g94ZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhOGNmY2ZlYjgzZTg4ZjM2YmEyYmYyNDQ1ZGI5ZWMxZTgy ZjBkNTQwHhcNMjYwMjA5MTQwMDIxWhcNMjYwMjEwMTQwMDIxWjAzMTEwLwYDVQQD Eyg5NWVmNjlhZDMyMGY4YTkxYmVlYmM2MjlhYjUxOWIwY2NlZGE2YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjbFxrdKHFAzO5zxVkBslXmHofa BKOYkMmQsVCNoLteN5cdlyD47df7/84al80AQCY156cyXdchgid5+Jsbv0/FNEh4 Go5SF/BKCzZKVDEN6Miwg5+iLHz3KEfuhIDQykbLGmorOhG+HJ4KMJ0CzMJQyndf rm4WKw9aUVdPG2xmajFecbWJIan4aNj+5bjNLYmJKMCTfJmovklhfSZJ6NN3GVPR 82dXvaVe9pQh8jse3/SYDU9Pr3/gzeibbh2OZgnjUiulRvtS+KLLHt04/GwSj1yt yhG+0JE7WBiLM7cbAsS2/Z0f3RvjzEol3iwGS2QBDmJcHobVpNVY28srqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXvaa0yD4qRvuvGKatRmwzO2mtKMB8GA1UdIwQY MBaAFDqM/P64Pojza6K/JEXbnsHoLw1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEt NmE0ZWIzN2EzM2NjLzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MDJjMWEtMjlmNS00OGRkLWFkYTEtNmE0ZWIzN2EzM2Nj LzEvT296OF9yZy1pUE5yb3I4a1JkdWV3ZWd2RFZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdT/kE/7Z FVJUi9QcNl93+8nNiS9NEbvo3oAQYlpcht9PXuack+WIhO6ZQzEaDf/apkIm0URU oH9hPEEvLAIYKaGu90nuXAHMS79skjNw79I1TFvNrmfq7RLvd7Qtb8MipH2CA1ER MrP9lCb5rHvzGV6EQyrv6NtNb5BpWjJ6dP2QKyP+m02esxB2ubYfE81T/DsB5+bN OqoCYG7sOvoBO5iDgCODbVIjV1Cd326Rw7J0V1uD36GtXAs3OW7LCKeYNKn+ymax rvVI+mW3/Z0B8PgjbO3w9WxmR4UBvB3PxxKORQ9gnN06SK8j5f+PbvX7dQzYCrJI PvUjBE/CwnSh3w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:46 2026 by rpki-client