This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json) Hash identifier: rpu8Kl4er2YonLCmUtWasl2iFAqcZK4PpbbQz0NVO/c= Subject key identifier: 0F:94:08:5E:CB:A9:67:57:8E:B6:BB:63:54:91:A5:30:E0:F7:F8:6E Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Certificate serial: 019C4246718812849618A2D325CB4A2FCF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft Manifest number: 02F5 Signing time: Mon 09 Feb 2026 12:00:38 +0000 Manifest this update: Mon 09 Feb 2026 12:00:38 +0000 Manifest next update: Tue 10 Feb 2026 12:00:38 +0000 Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: QNqR/0TNlQ5MH2LHXNjy4YwvlgsKyAuQ5o+yCFf1UJg=) 2: qMQrhVdpokolQWUOh4o5Ri8JueU.roa (hash: kVKK0WjFieFltJV66QufbgDou6/7+zDDk1pZJHeL88k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:71:88:12:84:96:18:a2:d3:25:cb:4a:2f:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1 Validity Not Before: Feb 9 12:00:38 2026 GMT Not After : Feb 10 12:00:38 2026 GMT Subject: CN=0f94085ecba967578eb6bb635491a530e0f7f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:d6:73:63:5c:65:64:b3:da:aa:95:1f:28: 34:f9:d5:49:36:0b:41:0c:d7:de:97:c0:9f:d7:d1: 4b:d7:5f:10:6d:cc:53:79:cf:bb:17:88:39:27:28: 0d:39:33:3b:80:91:b6:cf:ad:2f:bd:44:65:8e:0d: ea:c1:af:5c:8e:81:7d:56:49:36:86:6f:00:bf:ec: 94:99:70:c4:cb:57:5c:ec:9c:a7:ba:d3:cc:81:e5: de:16:5c:05:ec:76:7d:18:72:3d:db:82:97:b6:d5: d8:ae:3e:1c:37:52:05:aa:f2:ec:54:90:2b:20:e3: 63:d2:37:e4:0f:68:c5:1b:36:7e:9d:7b:16:43:13: 05:46:7e:b1:09:a5:c0:3b:90:9e:dd:61:9f:a2:b9: e9:25:8c:83:c2:91:2e:66:2a:50:57:56:5c:5e:3b: c9:6b:62:1e:87:5e:92:ab:be:50:89:11:b5:96:65: c9:2e:89:d6:63:7a:ba:75:d2:84:9d:b5:f1:68:9c: 0a:7c:bf:31:b0:2c:32:eb:fc:33:82:a9:ed:76:23: 5e:a2:bf:4a:d3:0c:d8:3f:24:79:f2:40:7c:a3:85: db:c2:3e:3d:6c:10:65:e4:7a:77:23:06:3c:fb:20: 8f:b6:a8:f6:6e:7d:8a:69:51:82:73:f2:9b:61:50: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:94:08:5E:CB:A9:67:57:8E:B6:BB:63:54:91:A5:30:E0:F7:F8:6E X509v3 Authority Key Identifier: keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cc:97:7a:7a:cf:65:bf:49:d3:17:cd:bb:0f:41:3a:f8:eb: 35:70:9c:fd:14:28:bb:5a:37:a6:42:59:c5:2f:1f:95:5b:f2: 82:2a:48:3c:82:76:c3:80:44:7c:98:32:19:0c:e7:32:a4:f2: 56:65:ce:87:15:8f:0e:dc:dc:1d:78:88:40:34:3a:f8:9f:8e: b7:27:01:a5:e6:48:ed:b9:3d:8a:17:49:b1:b5:4c:df:e9:56: 1e:23:b2:dc:77:ff:1d:c0:fe:46:67:b0:15:fa:af:b3:26:b8: ef:33:17:77:e9:c9:36:31:e0:0b:34:78:8d:36:3d:57:8f:5a: ad:9d:47:d9:7f:88:0e:bc:98:fa:81:4a:a6:c3:39:41:59:5b: c3:0d:56:6b:bc:ed:b6:26:1e:72:53:18:ad:cf:a9:33:07:d4: 21:19:b9:19:88:15:06:a2:14:86:d4:64:35:21:61:59:8a:c5: 1d:a3:8a:32:82:99:ff:6e:90:e5:02:05:99:b2:f1:41:cb:be: 9a:a5:ac:23:8b:b5:e0:0b:bc:75:20:89:78:b1:82:6a:99:33: 9a:92:cf:d1:81:0b:6b:8b:aa:e0:73:b8:33:b5:8d:cd:fc:da: 97:65:41:ee:ab:26:69:0a:93:d2:39:f9:d0:b8:08:1d:fd:84: b9:5c:62:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnGIEoSWGKLTJctKL892MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODFmYTY2YmUyY2VhMzRiNTg4M2MyMWM2ZjgzZjM0NjRl MmVlZTEwHhcNMjYwMjA5MTIwMDM4WhcNMjYwMjEwMTIwMDM4WjAzMTEwLwYDVQQD EygwZjk0MDg1ZWNiYTk2NzU3OGViNmJiNjM1NDkxYTUzMGUwZjdmODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPWc2NcZWSz2qqVHyg0+dVJNgtB DNfel8Cf19FL118QbcxTec+7F4g5JygNOTM7gJG2z60vvURljg3qwa9cjoF9Vkk2 hm8Av+yUmXDEy1dc7JynutPMgeXeFlwF7HZ9GHI924KXttXYrj4cN1IFqvLsVJAr IONj0jfkD2jFGzZ+nXsWQxMFRn6xCaXAO5Ce3WGfornpJYyDwpEuZipQV1ZcXjvJ a2Ieh16Sq75QiRG1lmXJLonWY3q6ddKEnbXxaJwKfL8xsCwy6/wzgqntdiNeor9K 0wzYPyR58kB8o4Xbwj49bBBl5Hp3IwY8+yCPtqj2bn2KaVGCc/KbYVB9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+UCF7LqWdXjra7Y1SRpTDg9/huMB8GA1UdIwQY MBaAFNaB+ma+LOo0tYg8Icb4PzRk4u7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEt YTNlZjBhNGEzMTE5LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yNDAxNjUtZDk3NC00MjliLWExYzEtYTNlZjBhNGEzMTE5 LzEvMW9INlpyNHM2alMxaUR3aHh2Z19OR1RpN3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8yXenrP Zb9J0xfNuw9BOvjrNXCc/RQou1o3pkJZxS8flVvygipIPIJ2w4BEfJgyGQznMqTy VmXOhxWPDtzcHXiIQDQ6+J+OtycBpeZI7bk9ihdJsbVM3+lWHiOy3Hf/HcD+Rmew Ffqvsya47zMXd+nJNjHgCzR4jTY9V49arZ1H2X+IDryY+oFKpsM5QVlbww1Wa7zt tiYeclMYrc+pMwfUIRm5GYgVBqIUhtRkNSFhWYrFHaOKMoKZ/26Q5QIFmbLxQcu+ mqWsI4u14Au8dSCJeLGCapkzmpLP0YELa4uq4HO4M7WNzfzal2VB7qsmaQqT0jn5 0LgIHf2EuVxiLA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:18 2026 by rpki-client