This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json) Hash identifier: RjScsmaUTcVEx4fw4YIjDRf9N1gfhpvJ6reWaEKYUhc= Subject key identifier: 89:1C:61:8D:DD:EA:10:45:41:69:32:1F:C2:6F:D2:50:88:B5:A8:F3 Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f Certificate serial: 019C420F8855CF51AB258B62B9669CED7EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft Manifest number: 1514 Signing time: Mon 09 Feb 2026 11:00:39 +0000 Manifest this update: Mon 09 Feb 2026 11:00:39 +0000 Manifest next update: Tue 10 Feb 2026 11:00:39 +0000 Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: CBpXYtE8K1LANBkjZu4+FJIc2FD9yHwGOioTDuuUBHc=) 2: TIBIPgd0Nln-DuzUf3r64T4_MDg.roa (hash: Wc4+19rN5KfObjYjXDD+w/Qt81kPFgbecT9pFJ34v+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:88:55:cf:51:ab:25:8b:62:b9:66:9c:ed:7e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f Validity Not Before: Feb 9 11:00:39 2026 GMT Not After : Feb 10 11:00:39 2026 GMT Subject: CN=891c618dddea10454169321fc26fd25088b5a8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:63:48:24:c7:5b:0a:04:37:f8:b7:24:85: 0d:fc:b3:48:a7:29:6a:bd:df:07:cb:43:60:90:d6: cf:50:b8:9f:71:b9:b7:f5:96:9b:58:5f:9f:a7:c8: dd:97:de:17:23:1c:99:1e:1f:bc:12:3f:98:5f:0c: 86:82:46:76:a5:c0:b1:ef:a2:87:e0:10:8d:20:92: c9:39:a8:69:90:8e:4f:58:32:8d:79:76:7c:1c:b8: 1b:76:03:ff:b3:21:9b:d8:e6:cc:5b:d1:0a:38:ca: 96:19:a8:47:18:7b:8f:ba:35:04:93:95:91:00:a0: bf:ff:05:c9:4d:f1:bb:f1:ed:f1:b5:e9:d1:30:e6: 06:43:22:e1:e8:0a:fc:bd:6d:f6:c1:80:9c:ed:1f: 66:06:1b:1f:70:cd:fe:60:30:90:32:cf:75:68:e4: 20:42:99:0c:91:49:e1:8f:f3:35:f8:d5:f0:4d:87: 71:24:51:1f:84:eb:fc:55:29:da:1f:45:af:3d:1b: 02:5e:6d:17:d0:a4:41:15:a3:de:1d:26:75:b6:bc: ef:4c:d6:c4:dc:b8:fa:0f:11:58:d0:0d:9a:34:f0: d2:e2:16:02:ba:c0:72:79:73:79:33:c1:1d:52:4b: c4:f2:35:75:0d:5a:65:e2:85:43:63:93:d7:ec:54: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1C:61:8D:DD:EA:10:45:41:69:32:1F:C2:6F:D2:50:88:B5:A8:F3 X509v3 Authority Key Identifier: keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:47:a8:ca:9e:16:12:25:c8:e7:0a:90:9d:7d:f7:be:0a:b2: bf:23:41:f5:0e:7e:34:f9:be:ed:b7:8e:68:18:c9:4a:86:ca: 5d:c6:94:fb:22:93:07:de:54:a7:78:9a:89:80:bc:b1:db:10: 52:22:ca:10:cf:f2:3c:ff:76:51:09:41:40:4a:9d:45:f7:52: 00:f8:d4:ad:16:59:26:64:86:08:a4:09:17:e7:33:fc:bd:d5: c9:de:f5:ef:57:98:78:a3:0c:e2:40:c8:3f:5c:93:5c:13:7d: db:4a:ee:aa:c3:ab:d6:19:79:93:5e:b9:ad:08:1c:c6:19:6c: 74:cd:3e:22:84:66:d3:a3:65:74:35:ea:3c:1d:b5:77:c0:ac: 59:81:cd:2f:e7:d1:8b:b4:5d:b8:b2:64:07:b1:a5:30:9a:9b: cc:04:ee:c2:df:ff:19:4c:42:e9:02:e9:f5:a2:e0:a7:fc:75: 30:2c:9c:1b:a3:dd:0c:f4:09:0c:98:40:66:2a:ae:9f:30:c7: bb:01:24:6f:65:52:a9:ad:bd:2f:3a:e3:a0:a8:09:63:b2:ec: a9:e9:a8:83:f4:12:51:40:49:9a:2a:54:f4:b0:f8:d2:59:51: 9a:73:5d:27:01:2c:5e:cf:0b:cf:c0:ec:d5:5a:b7:e1:41:2f: 26:1a:73:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4hVz1GrJYtiuWac7X7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDEzMTY0YTEzYzI0Y2E3Nzg0Nzc3NGE2ZWI1NzEwNWVl NzgwOWYwHhcNMjYwMjA5MTEwMDM5WhcNMjYwMjEwMTEwMDM5WjAzMTEwLwYDVQQD Eyg4OTFjNjE4ZGRkZWExMDQ1NDE2OTMyMWZjMjZmZDI1MDg4YjVhOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I9jSCTHWwoEN/i3JIUN/LNIpylq vd8Hy0NgkNbPULifcbm39ZabWF+fp8jdl94XIxyZHh+8Ej+YXwyGgkZ2pcCx76KH 4BCNIJLJOahpkI5PWDKNeXZ8HLgbdgP/syGb2ObMW9EKOMqWGahHGHuPujUEk5WR AKC//wXJTfG78e3xtenRMOYGQyLh6Ar8vW32wYCc7R9mBhsfcM3+YDCQMs91aOQg QpkMkUnhj/M1+NXwTYdxJFEfhOv8VSnaH0WvPRsCXm0X0KRBFaPeHSZ1trzvTNbE 3Lj6DxFY0A2aNPDS4hYCusByeXN5M8EdUkvE8jV1DVpl4oVDY5PX7FS/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkcYY3d6hBFQWkyH8Jv0lCItajzMB8GA1UdIwQY MBaAFDtBMWShPCTKd4R3dKbrVxBe54CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTIt YzY4ZDdmOWM3ODE4LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YWEwNTgtMzg0Yy00MjM0LWI0OTItYzY4ZDdmOWM3ODE4 LzEvTzBFeFpLRThKTXAzaEhkMHB1dFhFRjduZ0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0eoyp4W EiXI5wqQnX33vgqyvyNB9Q5+NPm+7beOaBjJSobKXcaU+yKTB95Up3iaiYC8sdsQ UiLKEM/yPP92UQlBQEqdRfdSAPjUrRZZJmSGCKQJF+cz/L3Vyd7171eYeKMM4kDI P1yTXBN920ruqsOr1hl5k165rQgcxhlsdM0+IoRm06NldDXqPB21d8CsWYHNL+fR i7RduLJkB7GlMJqbzATuwt//GUxC6QLp9aLgp/x1MCycG6PdDPQJDJhAZiqunzDH uwEkb2VSqa29LzrjoKgJY7Lsqemog/QSUUBJmipU9LD40llRmnNdJwEsXs8Lz8Ds 1Vq34UEvJhpzgA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:25 2026 by rpki-client