This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json) Hash identifier: FNUzxa8ll5Fl1mfLnTOKkINNaObCLIpNtYrYpc5cvQI= Subject key identifier: 5B:DB:71:C0:75:A0:18:5C:2C:7E:15:2A:51:6E:72:C3:75:47:79:86 Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Certificate serial: 019C427D6D8A955D2F20933F1623702D13A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft Manifest number: 064D Signing time: Mon 09 Feb 2026 13:00:42 +0000 Manifest this update: Mon 09 Feb 2026 13:00:42 +0000 Manifest next update: Tue 10 Feb 2026 13:00:42 +0000 Files and hashes: 1: 8y7GNNa3VSZ0w99_9ipLylxWc2w.roa (hash: 5mPkRAu5BGZlM5kj1fiinENXANd4dMpIzIY3DWFLsx0=) 2: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: ERDhEyQkw18lvjFpaOr0YfiuVLXDZL/9bX7iAvtwI0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:6d:8a:95:5d:2f:20:93:3f:16:23:70:2d:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8 Validity Not Before: Feb 9 13:00:42 2026 GMT Not After : Feb 10 13:00:42 2026 GMT Subject: CN=5bdb71c075a0185c2c7e152a516e72c375477986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3d:af:48:c0:42:4a:1b:16:b2:0c:f5:61:3b: 4b:41:13:22:d1:59:92:86:8d:56:47:d8:ef:ae:f8: e1:81:b6:17:3b:9e:8f:b3:b7:b7:bc:56:45:a6:a7: 67:ab:e5:4e:7b:6c:5b:88:7d:4d:d6:c0:57:d5:0f: a3:9e:e2:0b:80:1e:b5:41:19:80:29:b8:ac:47:62: fe:da:cf:48:d2:97:be:93:35:e8:12:e4:2a:ff:fa: 33:12:0d:e3:39:0a:05:ed:8f:a3:e9:46:68:c6:39: 71:68:70:a5:9e:0b:77:89:16:75:55:15:10:de:72: f7:72:e8:9b:3d:d2:d2:ca:cb:73:88:84:62:38:21: f3:c6:b6:60:14:c8:94:b8:53:eb:c8:87:e7:aa:78: ba:ae:87:0f:67:50:c3:38:d1:5c:e9:27:a9:b4:7f: 43:32:10:34:3d:be:40:fc:42:24:29:96:91:95:2c: 21:0a:b1:2a:9e:bb:a9:8a:c4:cc:8b:7e:5d:12:54: 4f:1e:65:9a:cd:16:92:88:b6:e1:7f:a4:ea:1a:87: 03:f6:3a:86:f2:0a:8e:e0:f8:fc:32:3e:69:83:be: bd:f5:6b:e8:6a:9d:d9:57:62:cb:ef:f7:4b:56:9f: 70:64:85:ff:3c:c7:40:e0:3e:60:36:0a:5b:84:6e: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DB:71:C0:75:A0:18:5C:2C:7E:15:2A:51:6E:72:C3:75:47:79:86 X509v3 Authority Key Identifier: keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:fa:f9:c8:6e:cd:32:c5:d3:44:52:b7:37:d6:81:0f:b0:15: 67:da:80:93:ab:81:eb:8d:49:8d:ed:96:e5:b9:b4:f6:56:10: e7:21:0c:04:aa:cd:e7:98:71:be:95:6b:1e:c8:a6:8b:ba:4e: fa:60:5c:4e:2e:a8:00:1b:c5:cc:7b:af:87:5b:e9:c1:b7:45: 74:96:b7:ff:02:34:30:10:1f:b5:95:c5:1f:3a:17:72:9c:f8: 5b:70:3d:e4:29:bf:4d:67:56:7b:01:d9:9f:b6:35:a8:89:f0: f6:9c:2b:fd:1e:66:a6:c5:d3:ec:7f:4a:09:39:a9:7f:35:a2: a5:13:1c:26:1e:e0:8d:bf:28:6e:85:6e:08:db:a2:15:b9:eb: f9:c9:ac:56:ac:90:7a:14:91:c0:c9:0c:5c:6c:ea:b8:06:06: 41:ad:38:d0:36:37:32:d2:fc:d4:dc:16:be:22:1d:5d:d3:89: 97:6e:8a:d6:9e:fc:bf:97:f9:de:2f:42:7f:ba:64:72:aa:cb: a4:40:ff:91:8f:75:b1:f3:2a:4d:ef:e2:b5:c1:60:9d:00:91: 4e:8f:01:a5:ee:37:24:7c:53:01:3e:0c:bd:3b:3c:bf:b2:0c: 79:9a:f5:3e:17:ae:80:ce:13:25:ba:ad:3d:aa:71:e5:b5:c7: 18:34:8e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfW2KlV0vIJM/FiNwLROlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2EzN2RlZDFiNzBjODFiNzRhNDMwZjliNGQ3YWNjNjI4 MDVlZDgwHhcNMjYwMjA5MTMwMDQyWhcNMjYwMjEwMTMwMDQyWjAzMTEwLwYDVQQD Eyg1YmRiNzFjMDc1YTAxODVjMmM3ZTE1MmE1MTZlNzJjMzc1NDc3OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8z2vSMBCShsWsgz1YTtLQRMi0VmS ho1WR9jvrvjhgbYXO56Ps7e3vFZFpqdnq+VOe2xbiH1N1sBX1Q+jnuILgB61QRmA KbisR2L+2s9I0pe+kzXoEuQq//ozEg3jOQoF7Y+j6UZoxjlxaHClngt3iRZ1VRUQ 3nL3cuibPdLSystziIRiOCHzxrZgFMiUuFPryIfnqni6rocPZ1DDONFc6SeptH9D MhA0Pb5A/EIkKZaRlSwhCrEqnrupisTMi35dElRPHmWazRaSiLbhf6TqGocD9jqG 8gqO4Pj8Mj5pg7699Wvoap3ZV2LL7/dLVp9wZIX/PMdA4D5gNgpbhG4cVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvbccB1oBhcLH4VKlFucsN1R3mGMB8GA1UdIwQY MBaAFKLKN97RtwyBt0pDD5tNesxigF7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2Yt MzA2MTg5ZDVjMDQ5LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2YtMzA2MTg5ZDVjMDQ5 LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Pr5yG7N MsXTRFK3N9aBD7AVZ9qAk6uB641Jje2W5bm09lYQ5yEMBKrN55hxvpVrHsimi7pO +mBcTi6oABvFzHuvh1vpwbdFdJa3/wI0MBAftZXFHzoXcpz4W3A95Cm/TWdWewHZ n7Y1qInw9pwr/R5mpsXT7H9KCTmpfzWipRMcJh7gjb8oboVuCNuiFbnr+cmsVqyQ ehSRwMkMXGzquAYGQa040DY3MtL81NwWviIdXdOJl26K1p78v5f53i9Cf7pkcqrL pED/kY91sfMqTe/itcFgnQCRTo8Bpe43JHxTAT4MvTs8v7IMeZr1PheugM4TJbqt Papx5bXHGDSOKw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:41 2026 by rpki-client