This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json) Hash identifier: /4Wt465c0JvDIZ2MDOfyCk4ymaLzSQEogXNBr8CBkiA= Subject key identifier: 84:49:70:F6:9B:3F:CB:D1:BF:C4:FE:0C:68:B9:6C:A2:F3:A9:D8:50 Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Certificate serial: 019C427D88C890A09DC599781CE0820E9BF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:00:49 +0000 Manifest this update: Mon 09 Feb 2026 13:00:49 +0000 Manifest next update: Tue 10 Feb 2026 13:00:49 +0000 Files and hashes: 1: EGhCTTfVVprxfgVg9w5atVlArWI.roa (hash: JDsw+DMZgV8QwOWY/aZzhS3S31WDwwwLV0nKa6xyF8c=) 2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: UKDf8rBSfOgI8Z/T7P/2KkblRb5+sSRP1IQiD+0Pw2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:88:c8:90:a0:9d:c5:99:78:1c:e0:82:0e:9b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Validity Not Before: Feb 9 13:00:49 2026 GMT Not After : Feb 10 13:00:49 2026 GMT Subject: CN=844970f69b3fcbd1bfc4fe0c68b96ca2f3a9d850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:56:6d:d1:d2:e5:af:81:fa:f5:ec:2b:93: 00:19:dc:53:3d:4b:66:fe:b7:ff:d7:fe:36:c0:34: 7f:2c:a8:1a:0a:1f:0d:2a:ae:fc:c0:9e:b1:8e:67: 48:48:ac:b9:10:4d:a8:e9:a4:c0:82:18:27:d2:03: 4e:3b:04:ad:b2:50:67:5c:e6:08:9d:c5:b4:7e:f9: 0b:34:f9:9a:07:81:a6:ab:6b:ce:32:f6:d3:ed:ea: eb:59:c3:ed:5b:11:a4:9f:73:5a:4d:2f:c0:ce:d5: 43:42:ef:38:3d:98:d8:64:07:f1:69:20:39:61:8b: 93:0b:5d:e1:42:b4:f6:fc:dc:12:a9:4a:f9:59:a4: 09:1c:2b:f1:4b:d8:5e:1d:27:61:11:a4:c8:d9:bb: 27:9f:0f:0a:76:bd:a5:14:41:ba:b3:9c:3e:c6:ed: ca:89:10:db:3e:3e:0b:0c:6a:77:32:60:72:7a:0d: c9:cf:b4:fb:dc:96:c9:fd:5b:cc:36:80:23:41:35: f1:c1:50:4a:83:fa:bc:41:36:35:c2:9f:59:b8:d8: 61:33:d7:24:5f:a9:20:40:b5:43:de:45:cc:f8:e5: 6e:60:25:ed:a7:29:4c:2e:0f:ba:aa:7f:be:2d:e5: 66:3a:35:0a:fb:1d:d3:74:ec:bd:bf:1e:b0:ac:63: 8a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:49:70:F6:9B:3F:CB:D1:BF:C4:FE:0C:68:B9:6C:A2:F3:A9:D8:50 X509v3 Authority Key Identifier: keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c3:7e:4f:28:ee:08:3e:64:01:f4:f2:d6:9a:ec:77:c7:53: f7:05:20:ba:68:37:62:12:2b:31:c4:b7:54:1b:b5:dd:b2:eb: 32:d2:e1:d5:ac:5e:d4:98:6e:3c:87:57:9d:d5:cb:79:34:16: cc:7e:c9:48:f6:07:60:e0:f1:be:75:b9:38:c0:47:43:52:64: 1a:38:23:35:5a:7b:22:c9:c9:12:c3:5a:a5:35:7a:c7:31:51: d7:35:56:bf:ee:c7:08:2d:68:e0:bc:a6:e7:16:6f:a4:31:2e: 62:88:3b:dd:e5:70:37:c5:5b:a6:7b:17:c6:4c:19:b8:e1:d7: e9:09:8f:ac:24:18:0a:e5:dd:5f:44:fb:5e:56:71:71:f5:b5: 8f:c4:f5:73:14:5d:3b:47:71:f1:0d:60:74:ac:8e:b5:31:81: 82:1c:1f:1f:a3:e0:6b:2f:c6:80:f1:9e:fb:6a:9e:8b:f0:f5: 6c:d4:92:a6:6a:91:8e:c4:b7:0d:65:36:4c:76:92:9e:04:dc: 87:5a:84:25:a2:2a:d3:f0:f0:19:2e:47:a5:e2:99:6b:08:8d: d8:76:1e:a1:e3:17:82:8c:61:77:ac:2e:44:db:fe:fe:f0:d8: 42:00:41:a7:18:3a:cd:6d:a0:f0:d4:bc:1a:76:f3:ea:e3:63: c5:9b:79:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYjIkKCdxZl4HOCCDpvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi ZDIwYjgwHhcNMjYwMjA5MTMwMDQ5WhcNMjYwMjEwMTMwMDQ5WjAzMTEwLwYDVQQD Eyg4NDQ5NzBmNjliM2ZjYmQxYmZjNGZlMGM2OGI5NmNhMmYzYTlkODUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujVWbdHS5a+B+vXsK5MAGdxTPUtm /rf/1/42wDR/LKgaCh8NKq78wJ6xjmdISKy5EE2o6aTAghgn0gNOOwStslBnXOYI ncW0fvkLNPmaB4Gmq2vOMvbT7errWcPtWxGkn3NaTS/AztVDQu84PZjYZAfxaSA5 YYuTC13hQrT2/NwSqUr5WaQJHCvxS9heHSdhEaTI2bsnnw8Kdr2lFEG6s5w+xu3K iRDbPj4LDGp3MmByeg3Jz7T73JbJ/VvMNoAjQTXxwVBKg/q8QTY1wp9ZuNhhM9ck X6kgQLVD3kXM+OVuYCXtpylMLg+6qn++LeVmOjUK+x3TdOy9vx6wrGOK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRJcPabP8vRv8T+DGi5bKLzqdhQMB8GA1UdIwQY MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8N+Tyju CD5kAfTy1prsd8dT9wUgumg3YhIrMcS3VBu13bLrMtLh1axe1JhuPIdXndXLeTQW zH7JSPYHYODxvnW5OMBHQ1JkGjgjNVp7IsnJEsNapTV6xzFR1zVWv+7HCC1o4Lym 5xZvpDEuYog73eVwN8VbpnsXxkwZuOHX6QmPrCQYCuXdX0T7XlZxcfW1j8T1cxRd O0dx8Q1gdKyOtTGBghwfH6Pgay/GgPGe+2qei/D1bNSSpmqRjsS3DWU2THaSngTc h1qEJaIq0/DwGS5HpeKZawiN2HYeoeMXgoxhd6wuRNv+/vDYQgBBpxg6zW2g8NS8 Gnbz6uNjxZt5Cg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:29 2026 by rpki-client