This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft File: oLwgSfIYtv2rytdZTCUjso2kd8E.mft (raw, json) Hash identifier: hoDi+hChk7yaQIKj6mZdkFPFejbmekhk+irqvTsvbn8= Subject key identifier: CF:58:02:10:1B:53:70:9E:BF:AF:D2:0D:33:F6:DD:69:79:1D:6B:AB Authority key identifier: A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1 Certificate issuer: /CN=a0bc2049f218b6fdabcad7594c2523b28da477c1 Certificate serial: 019C420FDB8B60B54D66373C6D9DB1D7B474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 11:01:01 +0000 Manifest this update: Mon 09 Feb 2026 11:01:01 +0000 Manifest next update: Tue 10 Feb 2026 11:01:01 +0000 Files and hashes: 1: oLwgSfIYtv2rytdZTCUjso2kd8E.crl (hash: wqp1+LWw8i3CLwRRh/bo9WIW28ffTNJRvKfjIe7Shno=) 2: p7q0kuT4l_QfTZ5_ImIne2o94fw.roa (hash: +S1UVYMeaTeGs9fWcZKSGrpvJ3bbJy0eiN+e0mJvcII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:db:8b:60:b5:4d:66:37:3c:6d:9d:b1:d7:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bc2049f218b6fdabcad7594c2523b28da477c1 Validity Not Before: Feb 9 11:01:01 2026 GMT Not After : Feb 10 11:01:01 2026 GMT Subject: CN=cf5802101b53709ebfafd20d33f6dd69791d6bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:99:ee:e3:c1:56:ae:d6:74:35:4d:2f:35: 45:d0:9a:4b:e7:55:eb:18:62:97:7d:3a:d1:41:35: b8:28:8d:2f:a7:9b:d8:14:80:6f:9c:76:db:74:46: f1:98:7b:a6:e4:e8:d2:a5:9c:27:b9:b3:43:68:9c: 5e:25:51:de:e9:64:5f:4a:ae:6e:45:5a:24:2f:1a: 59:e1:02:7e:18:bf:33:62:6c:a0:79:08:e2:0b:3d: 81:4f:0e:1d:e2:9d:f2:c5:be:52:68:18:e8:1d:fd: 3a:d0:ff:05:1c:53:31:00:83:80:7c:e9:95:dc:71: 77:7a:da:bf:fb:ee:98:db:b3:83:5d:1a:c6:9d:1a: f7:d6:51:47:f5:79:1e:e5:6f:3a:5c:8e:b5:0e:5c: 0e:9b:6b:ef:fd:f5:b9:2e:8a:85:0b:e0:48:15:60: 87:52:42:f9:20:a6:3d:7d:fc:61:02:16:08:8c:38: a7:f5:48:0e:f4:9d:03:c7:21:71:c9:0f:4f:7c:ba: 38:df:9b:0d:3b:b5:dd:70:af:48:f3:a5:47:0f:3b: 50:7b:40:91:d3:e2:5f:53:d6:65:d9:f0:c1:87:50: 87:61:90:52:ce:28:03:35:3f:84:33:03:9a:99:c1: 15:ae:7d:29:33:32:fd:5d:27:ae:b3:ae:78:6d:3a: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:58:02:10:1B:53:70:9E:BF:AF:D2:0D:33:F6:DD:69:79:1D:6B:AB X509v3 Authority Key Identifier: keyid:A0:BC:20:49:F2:18:B6:FD:AB:CA:D7:59:4C:25:23:B2:8D:A4:77:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLwgSfIYtv2rytdZTCUjso2kd8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/15b403-2219-4786-ab02-19912a0e4918/1/oLwgSfIYtv2rytdZTCUjso2kd8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:fc:d7:b8:3d:ce:44:c3:a2:cf:92:6a:fb:64:86:f2:59: 97:64:2f:d0:10:81:f7:33:16:3b:cb:ca:cb:60:58:0d:dd:aa: fe:90:a0:39:d5:60:e4:02:38:19:be:a6:5f:68:16:27:ac:35: 1f:30:38:28:7e:9d:05:63:26:36:01:68:ab:aa:41:e8:9f:cb: 2f:a5:f7:46:85:56:cf:bf:2c:f8:f8:af:2c:a2:ea:f6:03:6e: 47:f0:67:f5:05:8f:4e:ff:b5:73:1e:29:ab:c3:d1:21:18:d2: a0:21:49:71:d8:ad:4d:b0:44:57:ca:b5:92:e5:b4:37:a0:3b: ce:44:6a:9c:0f:81:8e:9c:9d:b0:79:85:05:df:97:fe:22:19: 42:e3:2a:05:51:05:36:ce:0e:9a:f0:65:8c:58:c1:72:5f:f4: 19:65:32:70:e1:41:69:db:58:2d:45:bb:d2:57:ba:20:62:2d: f2:a4:2e:6f:5d:73:d0:73:db:d0:a0:f2:71:5b:2e:39:85:93: f2:f7:b5:aa:dd:eb:b3:8b:96:2b:c2:b3:fd:00:98:23:aa:a1: a4:98:a3:b0:bb:0e:c2:ce:43:c1:1f:3c:e8:20:ef:fe:23:3a: 6f:46:a9:2a:5f:7d:ad:13:b0:28:bb:7d:14:4b:86:d8:2a:d1: 3d:41:17:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9uLYLVNZjc8bZ2x17R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmMyMDQ5ZjIxOGI2ZmRhYmNhZDc1OTRjMjUyM2IyOGRh NDc3YzEwHhcNMjYwMjA5MTEwMTAxWhcNMjYwMjEwMTEwMTAxWjAzMTEwLwYDVQQD EyhjZjU4MDIxMDFiNTM3MDllYmZhZmQyMGQzM2Y2ZGQ2OTc5MWQ2YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqZ7uPBVq7WdDVNLzVF0JpL51Xr GGKXfTrRQTW4KI0vp5vYFIBvnHbbdEbxmHum5OjSpZwnubNDaJxeJVHe6WRfSq5u RVokLxpZ4QJ+GL8zYmygeQjiCz2BTw4d4p3yxb5SaBjoHf060P8FHFMxAIOAfOmV 3HF3etq/++6Y27ODXRrGnRr31lFH9Xke5W86XI61DlwOm2vv/fW5LoqFC+BIFWCH UkL5IKY9ffxhAhYIjDin9UgO9J0DxyFxyQ9PfLo435sNO7XdcK9I86VHDztQe0CR 0+JfU9Zl2fDBh1CHYZBSzigDNT+EMwOamcEVrn0pMzL9XSeus654bTp8ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9YAhAbU3Cev6/SDTP23Wl5HWurMB8GA1UdIwQY MBaAFKC8IEnyGLb9q8rXWUwlI7KNpHfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDIt MTk5MTJhMGU0OTE4LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNWI0MDMtMjIxOS00Nzg2LWFiMDItMTk5MTJhMGU0OTE4 LzEvb0x3Z1NmSVl0djJyeXRkWlRDVWpzbzJrZDhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWv817g9 zkTDos+SavtkhvJZl2Qv0BCB9zMWO8vKy2BYDd2q/pCgOdVg5AI4Gb6mX2gWJ6w1 HzA4KH6dBWMmNgFoq6pB6J/LL6X3RoVWz78s+PivLKLq9gNuR/Bn9QWPTv+1cx4p q8PRIRjSoCFJcditTbBEV8q1kuW0N6A7zkRqnA+BjpydsHmFBd+X/iIZQuMqBVEF Ns4OmvBljFjBcl/0GWUycOFBadtYLUW70le6IGIt8qQub11z0HPb0KDycVsuOYWT 8ve1qt3rs4uWK8Kz/QCYI6qhpJijsLsOws5DwR886CDv/iM6b0apKl99rROwKLt9 FEuG2CrRPUEXvw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:47 2026 by rpki-client