This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json) Hash identifier: e4eoiAmaPpMfwbuJ1y7nVGb7fj+qlNj9w2A//7jqP/A= Subject key identifier: FF:02:C4:F8:B0:C6:8F:9F:FB:8A:95:6E:81:73:2D:C0:6C:08:C7:8E Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb Certificate serial: 019C41A17BA662DFDE13570AC3A75483B85E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft Manifest number: 13F2 Signing time: Mon 09 Feb 2026 09:00:27 +0000 Manifest this update: Mon 09 Feb 2026 09:00:27 +0000 Manifest next update: Tue 10 Feb 2026 09:00:27 +0000 Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=) 2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: hlzHor9TtWDzLg7LhPxHIJgdnn7SUp2V+FetlEAv+0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7b:a6:62:df:de:13:57:0a:c3:a7:54:83:b8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb Validity Not Before: Feb 9 09:00:27 2026 GMT Not After : Feb 10 09:00:27 2026 GMT Subject: CN=ff02c4f8b0c68f9ffb8a956e81732dc06c08c78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:fb:b3:2d:79:c0:96:9b:bf:da:92:69:1f: d5:6a:50:b0:3f:31:82:0d:6a:27:3a:ff:17:b8:97: 74:7e:2e:d5:c2:c0:85:86:92:4b:98:71:a9:df:22: 93:eb:ce:40:08:89:59:e5:2f:92:95:17:70:76:4f: 47:4b:19:8f:55:18:61:6c:95:4f:85:66:f6:ec:f2: 76:4a:52:2e:4a:8a:ba:c7:7a:d8:a9:b6:16:79:5f: f8:cc:0f:3f:19:6c:9b:eb:f3:09:e3:9e:98:35:6e: b1:36:21:75:3b:c0:4d:16:27:50:c1:0d:bc:fc:c9: 46:9c:b5:47:94:77:f4:8d:9b:59:5b:d4:88:c2:59: 8b:76:d0:b4:27:63:3a:80:75:f1:e0:23:09:5d:c1: 90:8a:c1:0c:5e:7a:7d:77:0c:c1:25:1c:cd:af:aa: 27:c1:cf:8b:e5:70:18:57:3c:38:fc:3e:be:74:03: d8:db:ac:33:69:8d:71:1f:b0:26:91:18:78:90:42: fc:5d:46:56:63:a7:43:e7:26:53:9d:5f:b7:43:31: 1f:8e:2b:b5:a0:33:35:18:ae:fc:12:f8:52:26:16: 60:58:f8:2a:d5:d6:d9:9e:8c:57:4c:38:3e:07:62: 4c:dd:9d:83:37:7a:f2:e4:65:82:25:c0:55:43:0c: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:02:C4:F8:B0:C6:8F:9F:FB:8A:95:6E:81:73:2D:C0:6C:08:C7:8E X509v3 Authority Key Identifier: keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1b:48:a5:e8:b7:43:c6:92:f1:9e:0e:60:b9:c9:31:6b:f7: 71:e0:78:a8:81:1b:ff:9c:9a:a4:74:b6:49:e2:15:34:8c:84: c6:dd:2d:4d:8b:90:a2:37:19:06:ac:cf:3e:e9:61:68:9d:2f: 99:85:33:a8:e0:8d:e7:b5:10:88:1a:ec:05:8f:8e:62:7c:dd: 06:07:25:65:35:79:42:55:75:47:06:88:b5:ee:af:cd:c2:cc: 36:a6:e9:f6:fa:48:07:33:be:73:d8:35:8f:34:d1:89:73:b2: 53:5d:7a:15:d5:47:a6:82:84:81:07:99:fc:72:45:31:83:64: 5f:db:07:9e:60:df:2d:35:30:1f:aa:23:83:a1:12:21:4d:da: 65:5b:35:c0:4a:09:46:a0:5c:eb:e1:3c:0f:57:ba:58:44:5f: 6e:f6:17:a4:16:7f:13:92:b6:2d:40:1c:fa:fa:cd:fb:87:6f: ed:e2:0b:44:f3:5a:2c:ab:bc:2f:de:12:96:78:3c:a9:c1:ff: e1:d9:57:8b:39:11:a9:e3:13:52:5c:d4:b9:84:6f:aa:8b:b7: 36:2d:fd:2b:56:b5:40:81:ce:08:4b:d8:0f:ea:b8:3a:15:db: f5:e1:05:f9:1a:7b:68:12:6b:04:b4:b1:d0:bd:6f:97:39:9d: 71:53:6f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXumYt/eE1cKw6dUg7heMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0 M2I0Y2IwHhcNMjYwMjA5MDkwMDI3WhcNMjYwMjEwMDkwMDI3WjAzMTEwLwYDVQQD EyhmZjAyYzRmOGIwYzY4ZjlmZmI4YTk1NmU4MTczMmRjMDZjMDhjNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxD7sy15wJabv9qSaR/ValCwPzGC DWonOv8XuJd0fi7VwsCFhpJLmHGp3yKT685ACIlZ5S+SlRdwdk9HSxmPVRhhbJVP hWb27PJ2SlIuSoq6x3rYqbYWeV/4zA8/GWyb6/MJ456YNW6xNiF1O8BNFidQwQ28 /MlGnLVHlHf0jZtZW9SIwlmLdtC0J2M6gHXx4CMJXcGQisEMXnp9dwzBJRzNr6on wc+L5XAYVzw4/D6+dAPY26wzaY1xH7AmkRh4kEL8XUZWY6dD5yZTnV+3QzEfjiu1 oDM1GK78EvhSJhZgWPgq1dbZnoxXTDg+B2JM3Z2DN3ry5GWCJcBVQwyvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8CxPiwxo+f+4qVboFzLcBsCMeOMB8GA1UdIwQY MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhtIpei3 Q8aS8Z4OYLnJMWv3ceB4qIEb/5yapHS2SeIVNIyExt0tTYuQojcZBqzPPulhaJ0v mYUzqOCN57UQiBrsBY+OYnzdBgclZTV5QlV1RwaIte6vzcLMNqbp9vpIBzO+c9g1 jzTRiXOyU116FdVHpoKEgQeZ/HJFMYNkX9sHnmDfLTUwH6ojg6ESIU3aZVs1wEoJ RqBc6+E8D1e6WERfbvYXpBZ/E5K2LUAc+vrN+4dv7eILRPNaLKu8L94Slng8qcH/ 4dlXizkRqeMTUlzUuYRvqou3Ni39K1a1QIHOCEvYD+q4OhXb9eEF+Rp7aBJrBLSx 0L1vlzmdcVNvAw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:16 2026 by rpki-client