This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json) Hash identifier: OEqe8GeVyDUkyWZDD8130pljmvmtHEVr7NDijqngHTc= Subject key identifier: 13:6E:99:3B:98:BE:97:3C:40:EB:F5:61:A1:9B:2D:86:98:E2:1E:63 Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Certificate serial: 019C421015BDFE5210E6403BB885007E37BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft Manifest number: 1318 Signing time: Mon 09 Feb 2026 11:01:16 +0000 Manifest this update: Mon 09 Feb 2026 11:01:16 +0000 Manifest next update: Tue 10 Feb 2026 11:01:16 +0000 Files and hashes: 1: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=) 2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: jXMlziiM3VXQMPv4amwI1x8hoQbtEfyvw9qKuFQz2OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:15:bd:fe:52:10:e6:40:3b:b8:85:00:7e:37:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95 Validity Not Before: Feb 9 11:01:16 2026 GMT Not After : Feb 10 11:01:16 2026 GMT Subject: CN=136e993b98be973c40ebf561a19b2d8698e21e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:90:0d:58:3a:04:36:b7:53:c2:77:63:16: f1:a2:72:53:63:02:66:b0:74:19:16:ff:ff:a9:5a: 36:cf:cc:b9:99:59:31:80:86:e9:f9:9e:fc:10:a2: f9:3f:34:96:a1:a8:2b:b4:d3:34:ff:24:63:09:de: 34:84:da:73:36:80:f4:9a:b3:9e:67:e0:62:19:07: e5:86:40:db:12:ce:50:21:4c:d5:07:c1:86:f6:61: 13:1f:01:f1:5c:7d:dd:38:4d:63:94:44:a4:ab:86: 8d:ea:93:46:1e:a2:71:cf:22:c5:82:36:77:06:34: 79:39:64:fe:38:81:9c:a9:32:5c:fa:0e:06:1d:7e: 32:f6:a6:43:65:4c:b5:e7:d3:48:92:fb:56:13:19: 0d:e0:59:7c:7d:06:c3:ad:b2:48:ca:db:6d:ea:77: fe:94:db:5e:29:d4:34:b5:9c:a8:74:76:1c:44:9b: 51:dd:64:24:63:07:3a:39:ed:ec:d2:29:21:52:6d: 3c:a3:0d:a0:da:38:aa:07:ad:8b:bf:f1:67:a0:4a: 9d:d1:18:88:6b:96:12:6e:ba:90:04:b1:00:7f:61: 25:a0:b3:93:ea:c5:d1:ea:de:cb:0a:6d:35:60:f0: c8:f3:04:92:84:67:41:7e:d6:e0:15:a9:8c:92:97: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6E:99:3B:98:BE:97:3C:40:EB:F5:61:A1:9B:2D:86:98:E2:1E:63 X509v3 Authority Key Identifier: keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f2:a2:2d:7e:1a:0d:b7:ea:70:26:7e:4d:80:09:b7:6c:1c: 73:5c:64:73:7d:ca:9f:50:87:73:85:7a:d9:aa:49:49:10:04: a4:fc:29:53:68:0a:cb:a5:a5:59:0b:f3:34:53:4d:18:b9:59: d9:23:f0:f5:3d:2f:a0:c4:cf:2d:11:19:0c:9d:22:64:7e:a2: 82:7e:1c:71:11:52:8f:cc:a9:c5:06:e1:d9:70:dc:d0:31:e3: b2:c3:94:8c:5d:c1:88:20:8f:0b:bc:5b:73:a5:f8:71:76:e6: dd:75:be:59:2a:a1:38:6d:98:2e:56:e6:45:2d:be:a0:55:b8: d4:5f:62:3e:f4:f0:e5:75:3b:e3:26:44:aa:cf:ae:99:c3:db: b0:2f:73:76:d5:e7:40:6e:a4:2a:7c:59:cc:e4:51:ce:ac:61: 48:7d:fe:df:dd:ff:c7:6a:b0:7b:44:c3:c7:9f:3f:21:29:4a: 60:9f:8a:1c:92:26:c0:7f:68:1a:01:eb:63:03:f4:3e:04:2e: 56:da:4d:86:c6:81:40:cd:b7:39:f8:0c:f6:98:68:be:06:ce: ad:f9:d6:e6:19:c1:9b:b5:fd:60:b8:5f:c7:bc:34:58:c4:a4: 0b:4e:17:62:b5:94:0b:ef:1e:f4:aa:92:5d:bb:52:9a:3f:fe: 3b:eb:b8:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBW9/lIQ5kA7uIUAfje+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGNiNGI4ZDU2OTQ3NzUxMmNlNTc4ODViYTZhMjg5OGZi YzJkOTUwHhcNMjYwMjA5MTEwMTE2WhcNMjYwMjEwMTEwMTE2WjAzMTEwLwYDVQQD EygxMzZlOTkzYjk4YmU5NzNjNDBlYmY1NjFhMTliMmQ4Njk4ZTIxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylSQDVg6BDa3U8J3YxbxonJTYwJm sHQZFv//qVo2z8y5mVkxgIbp+Z78EKL5PzSWoagrtNM0/yRjCd40hNpzNoD0mrOe Z+BiGQflhkDbEs5QIUzVB8GG9mETHwHxXH3dOE1jlESkq4aN6pNGHqJxzyLFgjZ3 BjR5OWT+OIGcqTJc+g4GHX4y9qZDZUy159NIkvtWExkN4Fl8fQbDrbJIyttt6nf+ lNteKdQ0tZyodHYcRJtR3WQkYwc6Oe3s0ikhUm08ow2g2jiqB62Lv/FnoEqd0RiI a5YSbrqQBLEAf2EloLOT6sXR6t7LCm01YPDI8wSShGdBftbgFamMkpdVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNumTuYvpc8QOv1YaGbLYaY4h5jMB8GA1UdIwQY MBaAFKAMtLjVaUd1Es5XiFumoomPvC2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUt MThjNzBlYmY2ODFhLzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mOGZkNTktMDExNS00ZGIzLWJkODUtMThjNzBlYmY2ODFh LzEvb0F5MHVOVnBSM1VTemxlSVc2YWlpWS04TFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPKiLX4a DbfqcCZ+TYAJt2wcc1xkc33Kn1CHc4V62apJSRAEpPwpU2gKy6WlWQvzNFNNGLlZ 2SPw9T0voMTPLREZDJ0iZH6ign4ccRFSj8ypxQbh2XDc0DHjssOUjF3BiCCPC7xb c6X4cXbm3XW+WSqhOG2YLlbmRS2+oFW41F9iPvTw5XU74yZEqs+umcPbsC9zdtXn QG6kKnxZzORRzqxhSH3+393/x2qwe0TDx58/ISlKYJ+KHJImwH9oGgHrYwP0PgQu VtpNhsaBQM23OfgM9phovgbOrfnW5hnBm7X9YLhfx7w0WMSkC04XYrWUC+8e9KqS XbtSmj/+O+u4kQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:01 2026 by rpki-client