This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft File: OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft (raw, json) Hash identifier: N0aXE3D3sxFXoKVI+vFyJ6mSuSQZIYPhZ8jjaIMreGE= Subject key identifier: 57:88:E4:E2:80:51:36:2B:03:0F:77:72:06:1A:AB:5B:DD:A0:BE:C7 Authority key identifier: 3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A Certificate issuer: /CN=3af1507fda4e704828c7e03caf626456aafc5b1a Certificate serial: 019C41A1AB137F07502347289E68A669D794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft Manifest number: 173B Signing time: Mon 09 Feb 2026 09:00:39 +0000 Manifest this update: Mon 09 Feb 2026 09:00:39 +0000 Manifest next update: Tue 10 Feb 2026 09:00:39 +0000 Files and hashes: 1: JarLaEzkDzbmZJJ38af3qQLqeXM.roa (hash: PZ9i3KgsocU0Ak3wOk/fU4TiIXG7bFd+0z1g3xOW5fo=) 2: OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl (hash: pRPQIbI8J4lVCOBSakHpdx+tjSx8rd5LHLrbCRjYNfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ab:13:7f:07:50:23:47:28:9e:68:a6:69:d7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af1507fda4e704828c7e03caf626456aafc5b1a Validity Not Before: Feb 9 09:00:39 2026 GMT Not After : Feb 10 09:00:39 2026 GMT Subject: CN=5788e4e28051362b030f7772061aab5bdda0bec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:1e:29:eb:2e:14:49:c9:c0:2d:6b:c7:bc: e2:c9:0a:f9:0b:17:5d:86:16:85:1b:0f:1d:e9:f1: e0:2b:25:3c:43:f5:2f:cf:21:13:e1:1d:f0:31:ab: 29:4a:5c:94:13:0b:87:e4:57:16:c6:2b:80:7a:8e: b8:5a:ea:06:63:cf:59:cb:ee:e9:2a:d4:de:18:8b: fe:25:f0:67:b7:2c:c8:e4:74:a5:97:50:bc:fd:ab: e7:aa:52:8e:81:46:05:67:e7:c5:41:99:fb:2c:44: 69:b4:8a:dc:f3:eb:f0:38:69:ba:c2:0b:17:39:6f: 5e:73:b9:c9:22:15:f1:5b:dc:1b:0d:2b:48:7d:a6: bc:a0:fe:b1:b6:19:57:b4:e9:37:f8:ba:a9:7c:43: 51:81:2d:40:fd:29:9e:9a:f4:14:f9:56:ca:31:68: 26:d8:b6:74:c6:8a:06:9a:99:85:52:c7:ea:fd:8d: 7d:a4:66:6a:86:c8:88:02:5b:b4:9b:ff:db:e2:d6: 3c:c2:a5:ea:ff:3a:23:34:e0:33:31:70:66:c1:2c: 55:ce:5e:7a:13:70:51:41:95:4b:30:3b:2a:e7:c2: 3c:f9:98:e0:48:aa:39:fb:bd:cc:d0:0b:95:d9:70: 70:ae:fd:5a:e8:81:06:c8:d9:b5:0a:81:8e:fc:09: 11:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:88:E4:E2:80:51:36:2B:03:0F:77:72:06:1A:AB:5B:DD:A0:BE:C7 X509v3 Authority Key Identifier: keyid:3A:F1:50:7F:DA:4E:70:48:28:C7:E0:3C:AF:62:64:56:AA:FC:5B:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvFQf9pOcEgox-A8r2JkVqr8Wxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9f50e1-3ec4-46dc-b4f7-874234ed1e5e/1/OvFQf9pOcEgox-A8r2JkVqr8Wxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:51:2b:6e:3e:ce:82:8c:bf:a0:80:c9:5a:e0:d7:91:fe:ac: 2e:b9:b4:1c:eb:cc:46:b9:70:53:57:5a:3a:48:f6:59:1b:a9: 2c:c9:30:4b:11:f3:11:64:99:60:9b:5d:91:cf:23:b0:95:e7: 43:42:5d:22:d6:bd:69:df:78:16:62:f3:0e:53:52:41:36:f5: b0:e2:d5:aa:46:c9:93:55:4b:c4:7c:54:b6:ea:95:b3:9b:44: 48:5e:f7:5c:74:a3:0b:3c:eb:4d:34:4f:2d:38:9c:77:5b:69: 2b:d5:b1:3f:94:88:65:66:1d:92:41:38:55:70:31:96:92:2c: 7d:cd:b0:72:05:1d:b1:e1:cf:fc:27:89:0c:73:19:85:c3:f0: 9c:dc:1e:b8:fc:a0:cd:ce:1e:04:53:09:77:6c:db:34:8e:10: b9:e9:97:45:b9:50:41:b3:31:9b:3d:44:47:79:c3:24:53:ef: 24:cd:a5:8e:40:56:7a:40:9e:3c:a3:d7:50:54:f4:76:89:a9: 4a:76:95:16:9d:81:0f:60:75:19:5a:ca:a7:3b:75:2c:56:4c: e8:1d:c5:5c:9b:eb:f9:4b:b7:00:82:be:37:e3:cb:a7:56:ae: e0:b9:18:9c:21:c4:b0:1e:da:5a:6e:f0:68:82:72:19:dc:c6: e4:65:39:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoasTfwdQI0conmimadeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjE1MDdmZGE0ZTcwNDgyOGM3ZTAzY2FmNjI2NDU2YWFm YzViMWEwHhcNMjYwMjA5MDkwMDM5WhcNMjYwMjEwMDkwMDM5WjAzMTEwLwYDVQQD Eyg1Nzg4ZTRlMjgwNTEzNjJiMDMwZjc3NzIwNjFhYWI1YmRkYTBiZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRweKesuFEnJwC1rx7ziyQr5Cxdd hhaFGw8d6fHgKyU8Q/UvzyET4R3wMaspSlyUEwuH5FcWxiuAeo64WuoGY89Zy+7p KtTeGIv+JfBntyzI5HSll1C8/avnqlKOgUYFZ+fFQZn7LERptIrc8+vwOGm6wgsX OW9ec7nJIhXxW9wbDStIfaa8oP6xthlXtOk3+LqpfENRgS1A/SmemvQU+VbKMWgm 2LZ0xooGmpmFUsfq/Y19pGZqhsiIAlu0m//b4tY8wqXq/zojNOAzMXBmwSxVzl56 E3BRQZVLMDsq58I8+ZjgSKo5+73M0AuV2XBwrv1a6IEGyNm1CoGO/AkR8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeI5OKAUTYrAw93cgYaq1vdoL7HMB8GA1UdIwQY MBaAFDrxUH/aTnBIKMfgPK9iZFaq/FsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0Zjct ODc0MjM0ZWQxZTVlLzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC85ZjUwZTEtM2VjNC00NmRjLWI0ZjctODc0MjM0ZWQxZTVl LzEvT3ZGUWY5cE9jRWdveC1BOHIySmtWcXI4V3hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVErbj7O goy/oIDJWuDXkf6sLrm0HOvMRrlwU1daOkj2WRupLMkwSxHzEWSZYJtdkc8jsJXn Q0JdIta9ad94FmLzDlNSQTb1sOLVqkbJk1VLxHxUtuqVs5tESF73XHSjCzzrTTRP LTicd1tpK9WxP5SIZWYdkkE4VXAxlpIsfc2wcgUdseHP/CeJDHMZhcPwnNweuPyg zc4eBFMJd2zbNI4QuemXRblQQbMxmz1ER3nDJFPvJM2ljkBWekCePKPXUFT0domp SnaVFp2BD2B1GVrKpzt1LFZM6B3FXJvr+Uu3AIK+N+PLp1au4LkYnCHEsB7aWm7w aIJyGdzG5GU5GA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:08 2026 by rpki-client