This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json) Hash identifier: 3Tbad5Q4LX/QSdrVismSZWGJWkB4LLIaybmmd+WFJFw= Subject key identifier: B5:50:B6:3C:EB:D8:65:AA:48:91:2C:A3:A3:95:EB:80:6C:88:91:DD Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Certificate serial: 019C4358F91B0B8BE675DAA81FF718C95194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft Manifest number: 1176 Signing time: Mon 09 Feb 2026 17:00:30 +0000 Manifest this update: Mon 09 Feb 2026 17:00:30 +0000 Manifest next update: Tue 10 Feb 2026 17:00:30 +0000 Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: /oNtIT5/Xf1WPhlJnnrgeufwSx5dkQTurQBBn+KUIeg=) 2: ZkxTmxBiQkgSo4ZJv_M7YhFQ0hQ.roa (hash: 2n/6N4Jbcs9rQ/9iwExbuGW4el4Ljo8UJZzO/3/a1NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f9:1b:0b:8b:e6:75:da:a8:1f:f7:18:c9:51:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154 Validity Not Before: Feb 9 17:00:30 2026 GMT Not After : Feb 10 17:00:30 2026 GMT Subject: CN=b550b63cebd865aa48912ca3a395eb806c8891dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:cf:ba:43:ca:8a:89:01:79:a6:53:70:88: c7:01:e2:95:18:74:94:c0:60:9e:7a:63:af:d0:ad: 05:80:ab:9d:db:db:4f:b5:2e:c8:8e:fa:9d:42:b6: 58:61:fc:b9:20:bf:ac:12:c0:17:20:14:ab:f9:cc: 83:df:77:65:4e:35:7a:90:a4:07:56:16:71:e0:59: 1d:b2:62:3d:a4:5f:58:28:e0:7b:e3:58:5c:8a:b3: 85:f2:28:e6:5e:66:d0:70:ba:75:f6:12:e1:fa:9d: 6c:56:7e:98:63:ed:b2:0c:20:a3:c4:aa:68:29:51: 98:81:a7:c7:e5:fe:0d:02:22:c1:25:d0:e1:75:a9: fe:08:ef:43:4e:44:c8:5c:ac:bd:1f:40:d3:3c:49: 1a:bb:1a:b4:93:b3:6a:5f:a1:79:11:0b:16:74:a5: f3:2d:76:aa:ec:f5:32:62:70:39:f9:cf:81:86:a0: 97:f8:59:b9:eb:e9:66:82:33:9a:40:25:b6:78:c7: 4e:98:60:21:e6:40:72:82:17:f3:4e:94:ad:65:bb: 30:a0:36:83:55:b9:ba:c3:0c:47:05:5a:b2:cd:48: ed:b1:8c:d2:27:52:e9:d3:e7:b7:32:c0:98:c9:dd: 0d:60:0c:e5:11:26:78:6c:7b:f8:21:fb:29:b1:65: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:B6:3C:EB:D8:65:AA:48:91:2C:A3:A3:95:EB:80:6C:88:91:DD X509v3 Authority Key Identifier: keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:44:12:c6:3d:fe:0e:0d:5b:d7:04:36:22:5c:4f:fc:a5:bd: 15:0e:d0:63:c0:dc:f5:af:49:ae:9c:d0:8e:72:e6:e6:05:64: 96:5b:88:de:64:09:b3:8a:3a:38:56:67:84:87:6d:cf:56:a4: 28:64:2a:c1:da:c7:1a:2a:59:2a:b4:32:27:58:5e:29:9e:f4: ba:aa:f2:16:81:5e:ab:a8:6d:31:0b:a5:09:16:42:66:17:2b: 84:ee:ff:ae:d2:54:ce:54:0b:40:a7:92:fe:d1:f0:24:55:c6: 0e:2a:19:e4:de:44:cd:91:68:97:4e:34:a7:b8:61:1c:46:a1: 64:74:35:c1:ff:7f:b8:76:eb:a8:ad:67:ed:bd:3c:e5:ad:01: a1:0e:72:44:33:04:05:39:1d:db:34:70:dd:16:86:a9:a6:6a: 85:24:b0:41:fb:3a:d2:4d:44:27:47:83:08:51:5a:ca:04:2f: 62:ad:f7:d3:e5:02:5a:94:ad:9d:ff:f6:0f:5c:aa:bc:6b:a6: 44:81:ea:41:da:38:35:9a:fc:99:03:11:31:87:b5:8c:ef:3e: ad:e9:32:bc:b7:9e:aa:e4:d9:3c:2a:23:89:db:fe:96:55:36: 68:22:1d:f5:ae:c5:e7:a0:46:71:a0:7e:61:c9:90:4a:11:0a: bc:b5:15:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPkbC4vmddqoH/cYyVGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDg4ODVjOTcwMmVhYzFmM2QwMTI2M2U2ZDNlNTQ0NDll ZTIxNTQwHhcNMjYwMjA5MTcwMDMwWhcNMjYwMjEwMTcwMDMwWjAzMTEwLwYDVQQD EyhiNTUwYjYzY2ViZDg2NWFhNDg5MTJjYTNhMzk1ZWI4MDZjODg5MWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcDPukPKiokBeaZTcIjHAeKVGHSU wGCeemOv0K0FgKud29tPtS7IjvqdQrZYYfy5IL+sEsAXIBSr+cyD33dlTjV6kKQH VhZx4FkdsmI9pF9YKOB741hcirOF8ijmXmbQcLp19hLh+p1sVn6YY+2yDCCjxKpo KVGYgafH5f4NAiLBJdDhdan+CO9DTkTIXKy9H0DTPEkauxq0k7NqX6F5EQsWdKXz LXaq7PUyYnA5+c+BhqCX+Fm56+lmgjOaQCW2eMdOmGAh5kByghfzTpStZbswoDaD Vbm6wwxHBVqyzUjtsYzSJ1Lp0+e3MsCYyd0NYAzlESZ4bHv4IfspsWUgawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVQtjzr2GWqSJEso6OV64BsiJHdMB8GA1UdIwQY MBaAFDhIiFyXAurB89ASY+bT5URJ7iFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt NDJhNDhkYmMyNTIxLzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx LzEvT0VpSVhKY0M2c0h6MEJKajV0UGxSRW51SVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUQSxj3+ Dg1b1wQ2IlxP/KW9FQ7QY8Dc9a9JrpzQjnLm5gVklluI3mQJs4o6OFZnhIdtz1ak KGQqwdrHGipZKrQyJ1heKZ70uqryFoFeq6htMQulCRZCZhcrhO7/rtJUzlQLQKeS /tHwJFXGDioZ5N5EzZFol040p7hhHEahZHQ1wf9/uHbrqK1n7b085a0BoQ5yRDME BTkd2zRw3RaGqaZqhSSwQfs60k1EJ0eDCFFaygQvYq330+UCWpStnf/2D1yqvGum RIHqQdo4NZr8mQMRMYe1jO8+rekyvLeequTZPCojidv+llU2aCId9a7F56BGcaB+ YcmQShEKvLUVMg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:29 2026 by rpki-client