This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json) Hash identifier: GQYXzULs6+DLZxJUUwDfX/gM5tinqZw+TKmA7VGQ5k0= Subject key identifier: 8F:5D:BC:A7:23:72:14:D2:9E:64:A6:D0:33:E1:8A:20:FB:EF:E7:51 Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Certificate serial: 019C4246B58482F71E0825DE034C756E178D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft Manifest number: 145E Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: 1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa (hash: 4gk83pk4KN/M2N7zNy4kba1x3tC2aGnSA6i7cR5tf1Q=) 2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: RDjas5sGJXonQIyU1W3mj2LEOUw3LTNN6OAeDlld3zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b5:84:82:f7:1e:08:25:de:03:4c:75:6e:17:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=8f5dbca7237214d29e64a6d033e18a20fbefe751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1e:1b:57:ba:99:e1:c7:5d:53:3a:2d:e9:2c: e2:16:67:64:91:3c:30:fc:1d:ff:b3:75:0d:cc:8e: 13:51:05:a0:c5:8e:5b:cf:1d:82:b0:33:f2:fa:9e: 89:9f:f1:79:fe:77:d2:0e:8b:88:c0:65:f8:69:cd: 56:46:d4:29:3c:f0:e8:11:55:01:45:79:04:b3:4c: b9:86:a2:b0:f7:95:42:37:19:17:be:35:f4:0e:b1: ae:5d:d3:98:a4:1a:44:75:cc:d7:94:5b:a8:9f:4e: 6b:1f:b1:47:6b:93:34:47:53:56:e2:da:71:72:d6: 82:1b:f0:6c:86:3b:d4:0b:18:45:b2:e9:e7:b3:8f: 22:08:59:28:20:dd:cf:e5:65:10:d5:9a:77:9c:00: a4:b9:93:20:ac:97:51:6b:7f:4f:2e:4e:11:aa:2c: 38:09:8b:19:f4:c2:d1:a9:29:38:99:97:67:35:56: 68:d7:f9:19:0a:ce:73:75:0b:ad:ff:4c:b0:62:43: 2a:38:86:48:c7:32:7f:8f:34:91:79:bb:29:76:a1: 38:18:93:bf:5b:8d:83:e0:47:6d:06:07:bc:05:39: 33:f5:ee:57:68:ca:da:96:b9:45:06:b1:f1:c6:c7: 68:46:4e:12:38:14:a5:40:01:ba:ee:25:d1:20:55: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5D:BC:A7:23:72:14:D2:9E:64:A6:D0:33:E1:8A:20:FB:EF:E7:51 X509v3 Authority Key Identifier: keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:85:b4:9e:1d:79:19:93:48:ff:1d:83:ea:cb:aa:c5:5e:87: 58:c4:41:33:f2:c0:62:a0:84:bc:b5:85:0c:7b:83:38:55:71: 5b:e5:f6:1a:6b:e6:7e:30:d9:b2:cc:33:da:de:b8:c3:ad:40: e2:9b:d1:48:c9:7c:c9:8d:e3:25:e7:9e:0e:0c:3b:da:ff:93: 28:ef:ab:75:d5:d2:e9:61:50:23:19:b1:0b:32:9e:19:ed:4b: 7e:c2:cb:ed:fc:cd:68:be:d9:81:b4:1a:86:08:8a:57:14:3a: d3:43:d0:de:5e:b4:ad:e5:52:e1:2c:9c:78:6c:c8:6a:c9:67: bb:88:b3:af:8e:5e:30:a6:76:5d:31:10:86:46:c6:03:1a:62: 8f:06:a6:46:52:22:ba:e6:ba:48:62:2b:a9:f3:9a:45:46:88: f8:6a:8a:4e:e5:bf:03:6c:d9:90:25:4a:9b:9b:c4:0d:77:4c: 26:ae:85:4e:95:03:58:64:bd:57:c7:1d:a2:b1:55:05:a7:f9: 71:d5:41:b2:e6:50:99:e1:bd:6e:96:1b:85:c7:73:cd:51:cd: 8c:2a:52:f7:33:de:55:89:8f:2f:34:96:08:d8:38:c5:93:09: 22:e3:3e:99:f1:99:b6:ff:9a:eb:6f:63:20:b7:50:d0:9e:db: b8:8b:b3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrWEgvceCCXeA0x1bheNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2ViNDA1OTg3YTNhYThiYmU1OTlkOGVmNDY2M2M5MjQy YTM0YjgwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD Eyg4ZjVkYmNhNzIzNzIxNGQyOWU2NGE2ZDAzM2UxOGEyMGZiZWZlNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x4bV7qZ4cddUzot6SziFmdkkTww /B3/s3UNzI4TUQWgxY5bzx2CsDPy+p6Jn/F5/nfSDouIwGX4ac1WRtQpPPDoEVUB RXkEs0y5hqKw95VCNxkXvjX0DrGuXdOYpBpEdczXlFuon05rH7FHa5M0R1NW4tpx ctaCG/BshjvUCxhFsunns48iCFkoIN3P5WUQ1Zp3nACkuZMgrJdRa39PLk4Rqiw4 CYsZ9MLRqSk4mZdnNVZo1/kZCs5zdQut/0ywYkMqOIZIxzJ/jzSRebspdqE4GJO/ W42D4EdtBge8BTkz9e5XaMralrlFBrHxxsdoRk4SOBSlQAG67iXRIFWROwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9dvKcjchTSnmSm0DPhiiD77+dRMB8GA1UdIwQY MBaAFKPOtAWYejqou+WZ2O9GY8kkKjS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUt NWRiODUxZDZmMDg2LzEvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUtNWRiODUxZDZmMDg2 LzEvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYW0nh15 GZNI/x2D6suqxV6HWMRBM/LAYqCEvLWFDHuDOFVxW+X2GmvmfjDZsswz2t64w61A 4pvRSMl8yY3jJeeeDgw72v+TKO+rddXS6WFQIxmxCzKeGe1LfsLL7fzNaL7ZgbQa hgiKVxQ600PQ3l60reVS4SyceGzIaslnu4izr45eMKZ2XTEQhkbGAxpijwamRlIi uua6SGIrqfOaRUaI+GqKTuW/A2zZkCVKm5vEDXdMJq6FTpUDWGS9V8cdorFVBaf5 cdVBsuZQmeG9bpYbhcdzzVHNjCpS9zPeVYmPLzSWCNg4xZMJIuM+mfGZtv+a629j ILdQ0J7buIuzYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:24 2026 by rpki-client