This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json) Hash identifier: VILd5rA+dhuWi2BtUcUSMUSRHlpA32lwuhZz6sz5gcg= Subject key identifier: 63:37:6C:BB:89:BA:DE:3D:02:43:57:A3:21:71:F6:53:BB:0D:D6:B7 Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8 Certificate serial: 019C43227916AB4599F7A4F2162F7CC16C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft Manifest number: 10B4 Signing time: Mon 09 Feb 2026 16:00:58 +0000 Manifest this update: Mon 09 Feb 2026 16:00:58 +0000 Manifest next update: Tue 10 Feb 2026 16:00:58 +0000 Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: JEc7A0fuvdgYbSN7E7Fxgz9peAsVPH9izQwSPLYAfp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:79:16:ab:45:99:f7:a4:f2:16:2f:7c:c1:6c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8 Validity Not Before: Feb 9 16:00:58 2026 GMT Not After : Feb 10 16:00:58 2026 GMT Subject: CN=63376cbb89bade3d024357a32171f653bb0dd6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:05:87:38:4c:35:b3:8b:a1:03:05:ec:79: 5d:a7:dd:02:82:d0:3c:e9:b3:fb:d5:2e:29:3d:a0: 68:71:d6:b0:ef:16:4c:13:76:1e:dd:75:3f:17:6c: 52:36:f2:79:84:ad:f4:eb:35:4c:c7:02:87:44:f1: e8:af:b1:7a:3e:a1:fc:8f:e7:2a:90:2f:d1:66:ca: 0d:70:2e:37:4c:f1:68:b6:17:90:7f:3a:73:6f:1c: bf:49:81:aa:ea:50:3f:86:73:2b:3f:c2:d1:e6:c0: 32:e5:d4:8b:17:39:f0:8d:40:fc:ba:11:4b:3a:a5: 8a:cd:82:d7:ed:7f:ae:9c:46:5e:1a:76:32:24:8e: de:c2:ce:cd:a2:d2:82:be:e2:21:a6:34:c8:f5:6f: 28:46:46:ec:2d:69:a4:4b:94:fb:8e:73:36:b7:ce: be:23:c4:80:b3:97:4c:0e:f4:14:62:b7:f4:f7:f1: 02:0a:62:b2:05:a8:9e:50:bd:49:56:d6:29:f2:60: 33:88:56:88:ee:31:54:41:75:38:be:4f:a0:21:e3: d5:16:31:cf:0e:49:cb:83:79:a3:5f:7d:10:d4:55: 18:ab:e6:7f:e7:6f:5f:8a:fb:11:9c:2c:00:91:bd: 44:eb:94:5a:62:9b:93:b1:ad:73:fb:13:76:4b:b8: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:6C:BB:89:BA:DE:3D:02:43:57:A3:21:71:F6:53:BB:0D:D6:B7 X509v3 Authority Key Identifier: keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3e:8c:32:41:3c:b8:70:5d:17:d7:88:94:5f:06:13:b0:6d: 25:ea:db:b4:c9:85:f1:e9:96:4c:41:32:82:17:bf:89:2e:3d: 8b:97:f9:83:7e:4c:a2:6d:b5:7d:f7:b6:23:38:f6:1b:27:f7: 5a:5d:c7:1c:20:41:7d:ac:75:27:0e:21:2e:15:f1:38:1a:36: b2:3f:cb:65:e1:d8:8c:b2:49:cf:f4:2c:e1:0e:e9:39:c4:2a: 22:c2:03:c3:87:3a:4e:8b:14:6d:95:dd:91:2a:d3:5d:c2:30: f5:be:09:20:19:e7:80:e3:fd:bd:fc:45:b9:62:35:06:47:63: 91:d0:a8:cc:1a:e9:be:59:2b:80:0d:a5:be:e3:37:10:c7:b5: 4a:21:ed:e3:4e:8e:90:d7:cf:46:83:9e:f4:16:2f:a6:9a:9e: b3:ab:92:7c:d9:53:c0:e7:e3:8a:70:5f:46:e1:60:a1:2f:1d: a6:b6:4d:b4:a5:e8:c4:cc:77:b1:68:51:0f:58:c3:9b:92:71: 6c:a1:93:a5:dd:a6:29:20:90:55:04:8b:99:53:52:e6:5c:33: 48:af:3f:cd:fc:3c:d8:b5:75:8c:1c:67:cc:26:e6:a7:1b:d7: 4c:0d:ff:a7:7c:f3:8a:b4:cf:f2:b2:0e:ef:41:85:ed:c7:e7: d3:56:97:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInkWq0WZ96TyFi98wWx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjFjM2YyZjYxNTgxMTBlODBlOTJlMmEzMjIxZDY5NWMy N2E3ZDgwHhcNMjYwMjA5MTYwMDU4WhcNMjYwMjEwMTYwMDU4WjAzMTEwLwYDVQQD Eyg2MzM3NmNiYjg5YmFkZTNkMDI0MzU3YTMyMTcxZjY1M2JiMGRkNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2okFhzhMNbOLoQMF7Hldp90CgtA8 6bP71S4pPaBocdaw7xZME3Ye3XU/F2xSNvJ5hK306zVMxwKHRPHor7F6PqH8j+cq kC/RZsoNcC43TPFotheQfzpzbxy/SYGq6lA/hnMrP8LR5sAy5dSLFznwjUD8uhFL OqWKzYLX7X+unEZeGnYyJI7ews7NotKCvuIhpjTI9W8oRkbsLWmkS5T7jnM2t86+ I8SAs5dMDvQUYrf09/ECCmKyBaieUL1JVtYp8mAziFaI7jFUQXU4vk+gIePVFjHP DknLg3mjX30Q1FUYq+Z/529fivsRnCwAkb1E65RaYpuTsa1z+xN2S7jsKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM3bLuJut49AkNXoyFx9lO7Dda3MB8GA1UdIwQY MBaAFKMhw/L2FYEQ6A6S4qMiHWlcJ6fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYt Y2ZmNDYxZTBkZjM0LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83ZDNhNTUtY2NiNy00ZDBjLWJkMjYtY2ZmNDYxZTBkZjM0 LzEvb3lIRDh2WVZnUkRvRHBMaW95SWRhVnducDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz6MMkE8 uHBdF9eIlF8GE7BtJerbtMmF8emWTEEyghe/iS49i5f5g35Mom21ffe2Izj2Gyf3 Wl3HHCBBfax1Jw4hLhXxOBo2sj/LZeHYjLJJz/Qs4Q7pOcQqIsIDw4c6TosUbZXd kSrTXcIw9b4JIBnngOP9vfxFuWI1BkdjkdCozBrpvlkrgA2lvuM3EMe1SiHt406O kNfPRoOe9BYvppqes6uSfNlTwOfjinBfRuFgoS8dprZNtKXoxMx3sWhRD1jDm5Jx bKGTpd2mKSCQVQSLmVNS5lwzSK8/zfw82LV1jBxnzCbmpxvXTA3/p3zzirTP8rIO 70GF7cfn01aX7A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:45 2026 by rpki-client