This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json) Hash identifier: XIVvklkbklb9u9lZeHszUdla0ku6+v3can7Y5BIcdeA= Subject key identifier: EF:61:FB:C2:F1:E7:9D:79:6B:52:66:AE:4F:22:26:12:73:E8:42:F1 Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Certificate serial: 019C42EB19556AC153437F7AE371F7CE2CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft Manifest number: 0A0D Signing time: Mon 09 Feb 2026 15:00:29 +0000 Manifest this update: Mon 09 Feb 2026 15:00:29 +0000 Manifest next update: Tue 10 Feb 2026 15:00:29 +0000 Files and hashes: 1: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: Pmo1FjSfPkbHA67lqOOHD6BXnBTcgvQ6HRy43jHHW+M=) 2: wVx12s3RofqhZGn1DU5IkoBo6Ek.roa (hash: rtRYGzz5et6AkfKvUX/IWgHJLFa3ZiIV+HrHpHk9/S8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:19:55:6a:c1:53:43:7f:7a:e3:71:f7:ce:2c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78 Validity Not Before: Feb 9 15:00:29 2026 GMT Not After : Feb 10 15:00:29 2026 GMT Subject: CN=ef61fbc2f1e79d796b5266ae4f22261273e842f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:35:f9:b0:41:56:c8:8d:17:01:82:bc:70: 05:69:d2:ac:3a:43:a8:dd:f1:8b:09:8f:28:7d:54: 85:cd:a1:10:ac:89:22:29:25:bb:b3:44:06:14:cf: 64:9f:7e:f8:ed:68:43:b2:fd:09:36:11:85:7a:f5: d0:4a:ec:00:f5:67:cf:7b:8a:f3:05:73:49:96:11: c3:51:12:d0:53:b1:85:23:78:4f:e1:36:02:47:72: f3:52:05:c7:f4:40:a4:eb:cb:a2:10:23:d5:ec:62: e6:89:a6:ee:58:b7:1b:02:34:42:07:d0:9c:ee:36: 63:0e:83:19:38:dd:26:0c:2a:af:f9:d9:a6:2c:22: 06:52:c1:18:f2:6d:5f:67:6f:bc:30:2d:26:83:5f: 35:fd:02:54:0c:2c:5d:3b:09:43:09:f2:50:b1:f7: 08:08:e9:57:02:d3:10:c9:fa:90:ee:1e:7d:36:c5: 55:11:c6:c3:93:66:a7:54:dc:1b:68:cd:ee:3b:c7: e9:44:bb:be:15:0a:37:b0:2c:79:8c:90:8f:df:59: 1b:32:7d:6d:80:f5:e1:2e:2c:f4:03:38:a8:8b:80: 99:fe:af:d9:87:ee:4c:73:24:f7:e2:3d:c3:59:22: 60:b8:51:01:ed:f7:83:50:4a:72:99:97:76:80:a1: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:61:FB:C2:F1:E7:9D:79:6B:52:66:AE:4F:22:26:12:73:E8:42:F1 X509v3 Authority Key Identifier: keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:a0:0f:29:85:2c:9e:b2:a9:d2:da:a5:e2:f3:7c:b3:14:50: 03:d2:14:59:a9:ed:78:93:5d:99:96:cf:9a:8f:0f:80:c6:d0: e6:99:a7:15:39:1d:9e:96:52:0d:6d:a5:05:05:2f:22:12:ad: f1:b5:93:94:18:b6:88:54:fc:5e:3a:62:14:78:c4:39:32:d5: f3:90:84:93:a3:4f:98:d7:41:8e:88:fc:89:fc:95:50:9c:1c: 90:6b:8e:cc:38:2a:b3:20:56:d8:0b:43:af:71:d9:d5:62:44: 29:5b:8e:ad:d9:4a:69:96:34:f9:30:4f:e1:c5:cd:35:71:46: f0:24:89:9b:60:46:77:19:97:cd:ff:3c:2f:52:1b:6d:1c:33: 4e:6a:28:24:c4:29:d5:0c:92:88:be:27:27:d7:e5:8d:69:eb: 4b:38:6e:cb:33:0c:14:9f:4f:b6:b5:3b:46:15:b1:3d:bf:e5: 08:fb:5e:d0:02:10:4f:3d:6a:9a:f7:a0:3c:29:ee:87:31:6f: de:01:3e:60:96:be:a8:59:3f:90:4f:30:79:64:20:d5:3b:26: c4:ea:75:9e:b1:3e:b5:ee:6a:ee:c7:91:4e:0e:44:d5:a8:31: ff:9b:10:5e:06:de:5b:fd:6b:5a:cb:16:0d:7e:de:e1:cc:5d: 17:1f:db:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xlVasFTQ39643H3zizxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYWNlNzNkYWY1MjEwMmNkYjg0YjdmNTY4MTI5Njk1N2Ew YzlhNzgwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD EyhlZjYxZmJjMmYxZTc5ZDc5NmI1MjY2YWU0ZjIyMjYxMjczZTg0MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP01+bBBVsiNFwGCvHAFadKsOkOo 3fGLCY8ofVSFzaEQrIkiKSW7s0QGFM9kn3747WhDsv0JNhGFevXQSuwA9WfPe4rz BXNJlhHDURLQU7GFI3hP4TYCR3LzUgXH9ECk68uiECPV7GLmiabuWLcbAjRCB9Cc 7jZjDoMZON0mDCqv+dmmLCIGUsEY8m1fZ2+8MC0mg181/QJUDCxdOwlDCfJQsfcI COlXAtMQyfqQ7h59NsVVEcbDk2anVNwbaM3uO8fpRLu+FQo3sCx5jJCP31kbMn1t gPXhLiz0Azioi4CZ/q/Zh+5McyT34j3DWSJguFEB7feDUEpymZd2gKGimwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9h+8Lx5515a1Jmrk8iJhJz6ELxMB8GA1UdIwQY MBaAFKOs5z2vUhAs24S39WgSlpV6DJp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQt YjhjNWY4NGQ5Njg3LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83N2Y1YjktNWI4Yy00NTQ2LTlhMGQtYjhjNWY4NGQ5Njg3 LzEvbzZ6blBhOVNFQ3piaExmMWFCS1dsWG9NbW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqAPKYUs nrKp0tql4vN8sxRQA9IUWanteJNdmZbPmo8PgMbQ5pmnFTkdnpZSDW2lBQUvIhKt 8bWTlBi2iFT8XjpiFHjEOTLV85CEk6NPmNdBjoj8ifyVUJwckGuOzDgqsyBW2AtD r3HZ1WJEKVuOrdlKaZY0+TBP4cXNNXFG8CSJm2BGdxmXzf88L1IbbRwzTmooJMQp 1QySiL4nJ9fljWnrSzhuyzMMFJ9PtrU7RhWxPb/lCPte0AIQTz1qmvegPCnuhzFv 3gE+YJa+qFk/kE8weWQg1TsmxOp1nrE+te5q7seRTg5E1agx/5sQXgbeW/1rWssW DX7e4cxdFx/beg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:23 2026 by rpki-client