This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft File: ORRiNk7UX2dq1Qqeri00LYz9dEE.mft (raw, json) Hash identifier: tApoXphceHSCyYKyQOz65HWqRvusnfUFlMSElyjPosE= Subject key identifier: 8D:94:48:33:6C:D4:06:23:9A:95:02:20:2E:68:A4:30:E9:BC:7A:74 Authority key identifier: 39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 Certificate issuer: /CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Certificate serial: 019C43FE8192E1829DD7AF237DEF2320CB3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 20:01:18 +0000 Manifest this update: Mon 09 Feb 2026 20:01:18 +0000 Manifest next update: Tue 10 Feb 2026 20:01:18 +0000 Files and hashes: 1: ORRiNk7UX2dq1Qqeri00LYz9dEE.crl (hash: 7Em6/8GyVXxCOsrxChDBmDf6HkLelaskO3Mwp3lzA+o=) 2: bIXByjX6LuW26aekk-7LgPK4WBo.roa (hash: YUnrsrT600MTRy40cCZkhQACX77mVDjnM+ubjSZDc0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:81:92:e1:82:9d:d7:af:23:7d:ef:23:20:cb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391462364ed45f676ad50a9eae2d342d8cfd7441 Validity Not Before: Feb 9 20:01:18 2026 GMT Not After : Feb 10 20:01:18 2026 GMT Subject: CN=8d9448336cd406239a9502202e68a430e9bc7a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:b0:dc:84:a2:fa:b7:2d:71:50:5d:6d:9b: 47:e3:c8:55:f3:6a:0f:70:d9:dc:ef:8c:85:a6:87: a0:8c:20:52:a2:d7:40:ab:cc:50:a5:58:58:a2:b4: 76:47:b2:b6:c7:c8:22:7e:d1:06:66:f0:a3:d5:82: bb:0b:02:31:92:e1:91:95:2c:03:6f:82:26:6c:4a: d3:76:70:c5:b3:9b:4e:4f:5f:00:50:35:05:c4:9c: 78:16:ed:62:8d:df:a2:d0:da:3c:1c:7b:c2:4d:43: 5d:a2:63:bd:b3:cb:92:37:04:ac:b0:fe:33:a0:21: cc:7a:64:ad:15:eb:35:00:ed:97:5d:a9:50:de:de: 7b:1d:af:a9:42:dd:a7:b8:55:b3:ee:9a:eb:b9:d7: 0e:dc:33:95:bb:84:7b:3f:66:2c:fc:d4:a7:26:ac: 3a:8d:c8:4c:2c:1c:00:42:2d:c5:be:57:72:7c:57: 1d:f0:bc:f2:8d:9f:fe:97:5f:36:57:29:84:63:b0: 00:2a:eb:df:62:81:fc:28:18:17:80:de:f9:29:00: b3:8e:c0:6a:57:34:36:5d:4c:89:66:98:fb:0b:04: d3:f2:98:39:32:85:19:00:33:20:9c:18:f9:20:ae: 69:1a:f1:42:8b:01:60:97:fa:c0:de:f4:46:ab:03: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:94:48:33:6C:D4:06:23:9A:95:02:20:2E:68:A4:30:E9:BC:7A:74 X509v3 Authority Key Identifier: keyid:39:14:62:36:4E:D4:5F:67:6A:D5:0A:9E:AE:2D:34:2D:8C:FD:74:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORRiNk7UX2dq1Qqeri00LYz9dEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7dae2f-d236-41f7-b1bc-8448dcfb27aa/1/ORRiNk7UX2dq1Qqeri00LYz9dEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:06:fe:15:f2:cc:e0:cb:84:1d:21:68:9f:65:5f:a9:b8:a8: a7:fa:e0:71:89:8c:53:2d:dc:b3:d5:4c:7b:30:2b:67:d5:96: 54:b6:f3:0f:1d:48:59:c6:6e:a2:0a:2b:9a:7d:44:78:23:6c: 87:c2:dc:af:3a:98:d0:22:2c:e0:3e:f6:70:b5:6b:a8:61:5f: a3:b0:44:ff:6c:18:07:4c:88:39:13:8f:48:9a:aa:bc:47:ea: 0a:2d:15:17:62:48:01:9a:35:8f:28:36:e5:2c:d6:5c:8f:aa: 1c:45:14:05:98:e8:49:6b:5a:00:dc:40:14:f0:f8:94:d0:15: 57:df:e1:73:03:3e:9a:25:d1:e4:fb:c9:8a:7a:a7:1c:8b:85: ee:83:aa:d1:66:90:a3:f5:54:3b:5a:41:8d:85:07:d4:88:f9: 07:d2:06:96:c9:c2:ec:48:2d:7d:40:14:1b:78:34:62:c4:60: 09:ef:3c:d4:d3:da:dd:a1:5f:f8:05:e8:a5:25:58:11:23:6f: 58:bb:7e:9a:11:ee:e3:14:bf:b9:ee:67:67:63:c5:09:03:ec: e8:0c:36:98:65:eb:5c:f4:c2:2a:6c:a7:00:dc:4f:16:75:d0: 92:ae:4b:00:ae:95:08:68:bd:c5:3d:c0:c9:81:45:8f:bf:e0: 4a:1f:34:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/oGS4YKd168jfe8jIMs9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTQ2MjM2NGVkNDVmNjc2YWQ1MGE5ZWFlMmQzNDJkOGNm ZDc0NDEwHhcNMjYwMjA5MjAwMTE4WhcNMjYwMjEwMjAwMTE4WjAzMTEwLwYDVQQD Eyg4ZDk0NDgzMzZjZDQwNjIzOWE5NTAyMjAyZTY4YTQzMGU5YmM3YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJmw3ISi+rctcVBdbZtH48hV82oP cNnc74yFpoegjCBSotdAq8xQpVhYorR2R7K2x8giftEGZvCj1YK7CwIxkuGRlSwD b4ImbErTdnDFs5tOT18AUDUFxJx4Fu1ijd+i0No8HHvCTUNdomO9s8uSNwSssP4z oCHMemStFes1AO2XXalQ3t57Ha+pQt2nuFWz7prrudcO3DOVu4R7P2Ys/NSnJqw6 jchMLBwAQi3FvldyfFcd8LzyjZ/+l182VymEY7AAKuvfYoH8KBgXgN75KQCzjsBq VzQ2XUyJZpj7CwTT8pg5MoUZADMgnBj5IK5pGvFCiwFgl/rA3vRGqwOZbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2USDNs1AYjmpUCIC5opDDpvHp0MB8GA1UdIwQY MBaAFDkUYjZO1F9natUKnq4tNC2M/XRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMt ODQ0OGRjZmIyN2FhLzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZGFlMmYtZDIzNi00MWY3LWIxYmMtODQ0OGRjZmIyN2Fh LzEvT1JSaU5rN1VYMmRxMVFxZXJpMDBMWXo5ZEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAb+FfLM 4MuEHSFon2Vfqbiop/rgcYmMUy3cs9VMezArZ9WWVLbzDx1IWcZuogormn1EeCNs h8LcrzqY0CIs4D72cLVrqGFfo7BE/2wYB0yIOROPSJqqvEfqCi0VF2JIAZo1jyg2 5SzWXI+qHEUUBZjoSWtaANxAFPD4lNAVV9/hcwM+miXR5PvJinqnHIuF7oOq0WaQ o/VUO1pBjYUH1Ij5B9IGlsnC7EgtfUAUG3g0YsRgCe881NPa3aFf+AXopSVYESNv WLt+mhHu4xS/ue5nZ2PFCQPs6Aw2mGXrXPTCKmynANxPFnXQkq5LAK6VCGi9xT3A yYFFj7/gSh80zw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:55 2026 by rpki-client