This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft File: o4v4pSbaAFbVPHKfvP7bivH0hJs.mft (raw, json) Hash identifier: v16Wxcjxuuy/NALFfbqWktpENyWEAx74S7XIo3epbg0= Subject key identifier: C6:D7:04:C2:97:F5:50:EF:6E:A5:F9:C7:F0:03:DD:4A:1C:19:CF:90 Authority key identifier: A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B Certificate issuer: /CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Certificate serial: 019C41A1A207651853148E9A8BCE3273D8A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft Manifest number: 05D8 Signing time: Mon 09 Feb 2026 09:00:37 +0000 Manifest this update: Mon 09 Feb 2026 09:00:37 +0000 Manifest next update: Tue 10 Feb 2026 09:00:37 +0000 Files and hashes: 1: DsjnP70xJrDmj0g_UlKJTaTYlrE.roa (hash: dQTLlCPrfnfLcZWl7wxf8pl/h6tKSJhaHDIpDeYdmfQ=) 2: o4v4pSbaAFbVPHKfvP7bivH0hJs.crl (hash: jbJgF33UOiGSrBljX/xWflrCn/uQPwfnxUmSn5LZCCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a2:07:65:18:53:14:8e:9a:8b:ce:32:73:d8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38bf8a526da0056d53c729fbcfedb8af1f4849b Validity Not Before: Feb 9 09:00:37 2026 GMT Not After : Feb 10 09:00:37 2026 GMT Subject: CN=c6d704c297f550ef6ea5f9c7f003dd4a1c19cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:04:e5:05:b4:cc:f3:ed:1f:80:d6:38:b8: 84:4e:13:18:4e:da:01:ef:51:03:4f:0f:f9:a6:d2: 67:1b:5b:09:6d:c5:be:39:33:70:5e:84:22:69:40: db:0c:e3:72:fd:1e:f9:20:61:43:54:e5:04:3a:0f: f5:ba:52:1e:44:53:7e:88:ab:b5:6f:de:0f:f5:8d: d1:f2:a4:f7:96:52:34:a8:d8:11:af:4b:49:24:8b: ed:5f:37:a2:80:66:2a:cf:54:4b:7b:34:84:a1:dd: 97:98:46:18:69:4b:ef:b5:a5:cd:f8:a8:f9:32:d4: 00:fb:28:37:ec:61:e1:ea:0b:f5:36:36:22:45:ce: 6f:a7:4a:c8:4f:59:c0:58:5a:f0:c5:d5:00:02:1e: d3:45:ba:c8:a9:51:6f:4b:5a:61:90:6f:c1:db:a1: 19:e3:db:e7:44:e7:ea:c9:bf:2b:aa:57:dc:80:1d: b0:c2:63:67:c0:75:9b:1c:70:25:10:49:12:1f:1d: 55:de:f3:c4:8d:3d:81:bb:10:a2:c6:02:69:31:00: de:b0:63:67:dd:eb:26:43:e9:1d:b1:83:66:16:66: 09:86:0f:f0:e1:a4:1d:f6:e0:90:93:bb:42:41:a7: d9:55:78:0c:e4:f8:4c:10:91:7c:f8:4a:9f:8a:fe: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:04:C2:97:F5:50:EF:6E:A5:F9:C7:F0:03:DD:4A:1C:19:CF:90 X509v3 Authority Key Identifier: keyid:A3:8B:F8:A5:26:DA:00:56:D5:3C:72:9F:BC:FE:DB:8A:F1:F4:84:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4v4pSbaAFbVPHKfvP7bivH0hJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/o4v4pSbaAFbVPHKfvP7bivH0hJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ce:ab:0d:61:3c:74:26:fc:24:c5:95:bc:9c:0a:4d:9d:21: d0:35:28:3a:66:f5:14:d8:73:79:fc:b5:22:57:a2:6f:11:73: a6:18:62:67:e7:8d:86:fa:c0:0b:3e:3f:6b:7f:58:8f:5f:a3: d8:3a:93:78:f5:06:e8:6f:60:ca:b1:b4:6d:7d:aa:ce:2f:5d: 58:7b:9d:e9:7d:c1:2b:c5:a0:e1:32:4b:ee:83:82:e3:e3:aa: 6f:55:93:93:9d:67:a3:33:ec:e8:ee:6f:12:0d:75:8d:db:96: a6:10:d0:e8:59:50:ce:21:4e:a3:b9:19:6e:91:25:30:ea:fd: 3b:6e:59:e9:73:94:b9:db:22:47:05:9c:18:4e:b8:45:01:af: 81:62:ce:cb:c9:57:d8:65:17:d4:63:97:46:4a:9f:96:fb:8a: b8:d2:36:16:c7:db:ef:15:9c:51:1e:18:81:3f:a1:3f:2b:82: c9:36:44:5d:9f:2a:aa:fe:98:42:a3:54:35:30:c1:50:80:e6: 2e:8e:4d:7e:f6:6e:4e:ab:b3:9f:b5:ec:a4:35:6c:66:5f:eb: 2a:53:99:79:f1:8a:f8:7a:82:ea:3b:ca:42:c8:18:45:b9:da: 41:c0:d1:f1:2c:92:d1:9d:83:9f:92:92:98:8d:59:8c:e5:1e: 47:b3:f8:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaIHZRhTFI6ai84yc9ijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOGJmOGE1MjZkYTAwNTZkNTNjNzI5ZmJjZmVkYjhhZjFm NDg0OWIwHhcNMjYwMjA5MDkwMDM3WhcNMjYwMjEwMDkwMDM3WjAzMTEwLwYDVQQD EyhjNmQ3MDRjMjk3ZjU1MGVmNmVhNWY5YzdmMDAzZGQ0YTFjMTljZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMoE5QW0zPPtH4DWOLiEThMYTtoB 71EDTw/5ptJnG1sJbcW+OTNwXoQiaUDbDONy/R75IGFDVOUEOg/1ulIeRFN+iKu1 b94P9Y3R8qT3llI0qNgRr0tJJIvtXzeigGYqz1RLezSEod2XmEYYaUvvtaXN+Kj5 MtQA+yg37GHh6gv1NjYiRc5vp0rIT1nAWFrwxdUAAh7TRbrIqVFvS1phkG/B26EZ 49vnROfqyb8rqlfcgB2wwmNnwHWbHHAlEEkSHx1V3vPEjT2BuxCixgJpMQDesGNn 3esmQ+kdsYNmFmYJhg/w4aQd9uCQk7tCQafZVXgM5PhMEJF8+Eqfiv4uLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbXBMKX9VDvbqX5x/AD3UocGc+QMB8GA1UdIwQY MBaAFKOL+KUm2gBW1Txyn7z+24rx9ISbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgt NjA0YjQ3MjYxNDc2LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWYxMGEtYmQ1My00NzkzLWIxYTgtNjA0YjQ3MjYxNDc2 LzEvbzR2NHBTYmFBRmJWUEhLZnZQN2JpdkgwaEpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd86rDWE8 dCb8JMWVvJwKTZ0h0DUoOmb1FNhzefy1IleibxFzphhiZ+eNhvrACz4/a39Yj1+j 2DqTePUG6G9gyrG0bX2qzi9dWHud6X3BK8Wg4TJL7oOC4+Oqb1WTk51nozPs6O5v Eg11jduWphDQ6FlQziFOo7kZbpElMOr9O25Z6XOUudsiRwWcGE64RQGvgWLOy8lX 2GUX1GOXRkqflvuKuNI2Fsfb7xWcUR4YgT+hPyuCyTZEXZ8qqv6YQqNUNTDBUIDm Lo5NfvZuTquzn7XspDVsZl/rKlOZefGK+HqC6jvKQsgYRbnaQcDR8SyS0Z2Dn5KS mI1ZjOUeR7P49Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:46 2026 by rpki-client