This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json) Hash identifier: Ea3BnRpBL2NmqxCXGcyx7X8G1qoAvmSUQqctF7AbOd4= Subject key identifier: 59:2A:BC:63:9E:0C:A9:20:6E:B4:2C:5E:28:B0:C9:82:7F:4B:1C:20 Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Certificate serial: 019C420F31C0542C7FCFF74BB3718FBF11B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft Manifest number: 0813 Signing time: Mon 09 Feb 2026 11:00:17 +0000 Manifest this update: Mon 09 Feb 2026 11:00:17 +0000 Manifest next update: Tue 10 Feb 2026 11:00:17 +0000 Files and hashes: 1: EKDCPhWPs30l0DSrD9ZjD1tFQkw.asa (hash: /VjX2BQnC3wIjMi5VEBP8mPkyeVmam6lGlm8WGBjxBI=) 2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: 6bbnNDO8YGwhxO/cje6yj73jtdiqUk/hJ8A9zz0ntYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:31:c0:54:2c:7f:cf:f7:4b:b3:71:8f:bf:11:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Validity Not Before: Feb 9 11:00:17 2026 GMT Not After : Feb 10 11:00:17 2026 GMT Subject: CN=592abc639e0ca9206eb42c5e28b0c9827f4b1c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:b5:64:8e:bb:8b:98:2b:94:da:31:1f:b4: 5d:f8:03:7e:af:03:61:bd:c4:fb:c7:b3:92:6d:63: 70:9a:a1:d8:59:fd:8a:f0:6a:3c:da:a2:15:6a:f5: 2f:c3:42:9c:62:29:37:ea:d4:b8:9e:17:18:5b:49: 3f:2a:7a:89:26:ea:1d:38:7c:fc:56:2a:bb:0e:e9: 2e:ec:04:0a:81:14:f7:12:03:24:76:9b:f4:a0:64: ac:ec:2b:a5:b8:cc:62:a4:a4:bc:15:7d:2e:97:b3: a4:13:6b:65:d6:52:b6:67:96:3e:47:6c:aa:45:61: db:1e:fc:06:03:e6:a2:d6:da:5e:9e:ab:71:0c:33: e6:a8:52:f2:7b:9b:02:4a:33:49:d8:f3:38:00:4a: 20:5f:6d:95:4f:b1:10:76:bb:24:ec:80:c8:50:df: 27:e7:12:04:41:a9:ff:1b:77:7d:1d:cc:27:f0:a9: 42:1a:67:d4:c9:97:e5:d8:21:b4:74:07:5d:ff:e6: a7:86:13:db:77:da:54:c0:24:94:ea:9a:6c:f9:6f: fa:d2:fc:b0:88:fc:b0:51:55:66:c9:f9:6b:1e:e5: 35:dc:20:5a:37:f1:89:7e:e7:62:0e:d7:21:a9:cb: fb:4c:fb:57:49:c5:1f:9f:84:87:b9:14:e8:7d:9f: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:BC:63:9E:0C:A9:20:6E:B4:2C:5E:28:B0:C9:82:7F:4B:1C:20 X509v3 Authority Key Identifier: keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:56:8f:c1:83:18:87:e9:4d:78:02:0f:76:93:76:56:74: 23:7a:ce:ca:a0:4b:71:1e:05:81:7d:24:70:fd:8c:d7:56:d0: 13:c3:8d:28:16:6a:fe:17:ed:87:66:65:b7:d4:8f:fb:40:61: 2e:bc:eb:d3:bb:93:2c:f7:fb:dc:d6:16:49:dc:fe:e4:34:51: a2:3a:70:bf:02:f3:1b:f4:16:4e:2d:00:f9:39:51:17:d2:14: c6:60:53:17:d0:5a:34:70:dd:b0:33:35:49:64:b9:0b:f8:f3: da:15:02:d6:e5:24:09:75:f2:a9:92:90:14:4a:c9:8f:14:3e: 93:e0:4c:94:6e:7a:1e:2d:aa:39:6b:7d:62:0d:c5:0a:7e:0d: c4:6c:fa:98:05:f4:7b:a2:84:e1:80:a8:1d:55:55:2f:1f:c4: 00:42:fb:b7:a8:b5:b1:c7:6f:e8:ac:26:04:a4:d7:6c:4d:8c: de:17:88:fb:5d:84:9e:56:51:b0:11:e3:13:c4:a6:33:58:ea: b0:8c:05:80:71:26:19:e5:c9:10:c6:04:4b:4b:ca:3c:ad:5a: 74:75:76:76:95:34:d1:35:95:5d:67:c9:ae:5e:b9:3a:0e:87: c9:09:a8:52:15:b6:88:01:c9:63:f4:09:53:0b:24:c5:32:ea: cc:c9:f4:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzHAVCx/z/dLs3GPvxG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5 MmM4YjcwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD Eyg1OTJhYmM2MzllMGNhOTIwNmViNDJjNWUyOGIwYzk4MjdmNGIxYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2e1ZI67i5grlNoxH7Rd+AN+rwNh vcT7x7OSbWNwmqHYWf2K8Go82qIVavUvw0KcYik36tS4nhcYW0k/KnqJJuodOHz8 Viq7Duku7AQKgRT3EgMkdpv0oGSs7CuluMxipKS8FX0ul7OkE2tl1lK2Z5Y+R2yq RWHbHvwGA+ai1tpenqtxDDPmqFLye5sCSjNJ2PM4AEogX22VT7EQdrsk7IDIUN8n 5xIEQan/G3d9Hcwn8KlCGmfUyZfl2CG0dAdd/+anhhPbd9pUwCSU6pps+W/60vyw iPywUVVmyflrHuU13CBaN/GJfudiDtchqcv7TPtXScUfn4SHuRTofZ+EqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkqvGOeDKkgbrQsXiiwyYJ/SxwgMB8GA1UdIwQY MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqhWj8GD GIfpTXgCD3aTdlZ0I3rOyqBLcR4FgX0kcP2M11bQE8ONKBZq/hfth2Zlt9SP+0Bh Lrzr07uTLPf73NYWSdz+5DRRojpwvwLzG/QWTi0A+TlRF9IUxmBTF9BaNHDdsDM1 SWS5C/jz2hUC1uUkCXXyqZKQFErJjxQ+k+BMlG56Hi2qOWt9Yg3FCn4NxGz6mAX0 e6KE4YCoHVVVLx/EAEL7t6i1scdv6KwmBKTXbE2M3heI+12EnlZRsBHjE8SmM1jq sIwFgHEmGeXJEMYES0vKPK1adHV2dpU00TWVXWfJrl65Og6HyQmoUhW2iAHJY/QJ UwskxTLqzMn01Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:58 2026 by rpki-client