This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json) Hash identifier: O+vvUuNO957TEqfMnA+hyiv86DkUlDhQkINrwg0sSo4= Subject key identifier: 10:B9:C9:C9:04:89:B6:B6:97:2E:3B:CD:0D:0E:27:0D:BB:25:D6:38 Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94 Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894 Certificate serial: 019C438FB3F44A6D58CCCEF395BB87D3378D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 18:00:17 +0000 Manifest this update: Mon 09 Feb 2026 18:00:17 +0000 Manifest next update: Tue 10 Feb 2026 18:00:17 +0000 Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: GjE5bdFEPVYXC5+ocuWQdzuOLrVGgxPmJPAK10zzIgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b3:f4:4a:6d:58:cc:ce:f3:95:bb:87:d3:37:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894 Validity Not Before: Feb 9 18:00:17 2026 GMT Not After : Feb 10 18:00:17 2026 GMT Subject: CN=10b9c9c90489b6b6972e3bcd0d0e270dbb25d638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:f4:3a:61:5d:0f:6d:3e:7a:e9:19:44:b2: 6e:19:18:c9:b8:84:23:d8:ff:73:ec:62:83:c7:ba: 46:58:fc:0b:6a:b1:fa:7e:52:99:ba:f0:94:85:88: 11:ed:1c:fb:98:52:63:71:cf:25:f7:bc:39:00:38: 5a:e9:c4:fb:14:22:c4:ad:bf:c3:5a:b0:93:c7:ff: 1e:47:e3:c4:9b:46:6b:da:92:e4:5f:29:12:35:62: b5:a8:c9:e6:28:9b:5d:31:4b:bf:31:06:6b:9b:44: ef:29:3e:3a:72:a2:9c:47:db:62:22:a4:1f:d7:bd: 50:33:17:10:8c:83:86:4b:d5:2c:77:a5:fb:8f:70: 7e:1e:a3:85:67:85:33:8f:73:dc:4f:5d:22:92:67: c8:a8:c9:67:32:fc:7d:53:fe:eb:e6:14:8c:72:ed: 19:50:04:2b:fa:64:33:77:b0:4b:2f:e5:bb:d2:6e: 96:77:f9:24:65:c7:99:6e:26:86:37:23:7b:ac:d6: 82:3a:f0:2f:f9:67:9f:a4:82:f5:bd:e1:5e:d7:8b: df:d0:66:4f:a4:fc:6f:7d:76:c0:41:b8:c9:66:f4: 62:03:42:91:70:47:7d:9b:93:a3:c8:c1:2d:ce:3e: 1b:e6:b2:07:8a:b0:2a:a9:58:63:c1:a0:60:8e:d7: 12:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B9:C9:C9:04:89:B6:B6:97:2E:3B:CD:0D:0E:27:0D:BB:25:D6:38 X509v3 Authority Key Identifier: keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:8a:06:9d:ee:01:8b:69:47:32:68:7f:53:9b:84:cf:fa: a8:88:7b:f3:c9:b2:1c:83:2a:84:b4:bf:b7:12:e7:f1:2b:98: ad:90:2c:5d:c7:b4:86:8a:58:d8:34:e6:3e:14:d5:4a:e6:b3: cd:fe:ab:d2:96:d4:f9:03:e7:ee:3c:24:48:4c:3a:f5:15:e1: 27:d0:1a:32:7a:66:01:2f:b3:38:d8:29:ea:7a:81:dc:4f:94: df:ed:15:d2:ee:e1:6c:9e:b7:93:1d:06:30:16:dd:91:bd:24: 3b:02:a4:30:ae:df:ea:d4:6a:a2:59:3d:ae:3d:dd:f2:51:88: a3:0f:ee:5b:76:ae:ee:7c:dc:7c:b8:9a:13:c6:78:78:c8:74: 08:7e:70:7b:ff:73:71:ec:1a:51:14:a7:a7:74:b6:27:62:5f: 86:d2:c8:a8:f8:90:c6:ac:f5:cb:4a:31:d4:05:1b:ca:ab:6c: 47:ff:94:8c:85:0c:28:4b:f9:06:93:94:ee:8a:3f:f5:5e:96: 34:36:a4:0a:6e:a8:75:13:e2:8d:e2:5a:ac:73:80:ae:74:f4: f8:d6:0f:15:cd:e7:03:d2:16:f1:d4:f6:55:16:f1:de:d6:3e: e5:66:2b:04:4d:26:2e:91:b2:ca:53:48:25:b7:17:47:ab:7e: 71:bf:fe:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7P0Sm1YzM7zlbuH0zeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZGNkMThmMzM0Yzg3YTViNTdkZDc4N2VjMzI3NDM1NWY5 ZDU4OTQwHhcNMjYwMjA5MTgwMDE3WhcNMjYwMjEwMTgwMDE3WjAzMTEwLwYDVQQD EygxMGI5YzljOTA0ODliNmI2OTcyZTNiY2QwZDBlMjcwZGJiMjVkNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXr0OmFdD20+eukZRLJuGRjJuIQj 2P9z7GKDx7pGWPwLarH6flKZuvCUhYgR7Rz7mFJjcc8l97w5ADha6cT7FCLErb/D WrCTx/8eR+PEm0Zr2pLkXykSNWK1qMnmKJtdMUu/MQZrm0TvKT46cqKcR9tiIqQf 171QMxcQjIOGS9Usd6X7j3B+HqOFZ4Uzj3PcT10ikmfIqMlnMvx9U/7r5hSMcu0Z UAQr+mQzd7BLL+W70m6Wd/kkZceZbiaGNyN7rNaCOvAv+WefpIL1veFe14vf0GZP pPxvfXbAQbjJZvRiA0KRcEd9m5OjyMEtzj4b5rIHirAqqVhjwaBgjtcSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC5yckEiba2ly47zQ0OJw27JdY4MB8GA1UdIwQY MBaAFDvc0Y8zTIeltX3Xh+wydDVfnViUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEt NzljNDFhYzliNmY4LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEtNzljNDFhYzliNmY4 LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawmKBp3u AYtpRzJof1ObhM/6qIh788myHIMqhLS/txLn8SuYrZAsXce0hopY2DTmPhTVSuaz zf6r0pbU+QPn7jwkSEw69RXhJ9AaMnpmAS+zONgp6nqB3E+U3+0V0u7hbJ63kx0G MBbdkb0kOwKkMK7f6tRqolk9rj3d8lGIow/uW3au7nzcfLiaE8Z4eMh0CH5we/9z cewaURSnp3S2J2JfhtLIqPiQxqz1y0ox1AUbyqtsR/+UjIUMKEv5BpOU7oo/9V6W NDakCm6odRPijeJarHOArnT0+NYPFc3nA9IW8dT2VRbx3tY+5WYrBE0mLpGyylNI JbcXR6t+cb/+lg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:49 2026 by rpki-client