This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json) Hash identifier: lSOWwVp+sp8zDtLPxdUNzn10BXtM0HmpD4Bo+PBlPdk= Subject key identifier: 35:F5:F0:06:A1:7D:34:F4:63:7A:29:9B:DF:D9:18:06:2D:C5:2D:03 Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b Certificate serial: 019C43C71F636075EDE44B120F7C58876126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft Manifest number: 1778 Signing time: Mon 09 Feb 2026 19:00:48 +0000 Manifest this update: Mon 09 Feb 2026 19:00:48 +0000 Manifest next update: Tue 10 Feb 2026 19:00:48 +0000 Files and hashes: 1: eB9ojJLa3oWBFrlNK0k4b9Cie5I.roa (hash: ztnCVdjoCnesK+ihroQfAdypwMeqhVL1q+oU4stV8zI=) 2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: gdIWTcdRAg+S2/bAIlnLmvpn87nuTl8KE5NBNEnvsms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:1f:63:60:75:ed:e4:4b:12:0f:7c:58:87:61:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b Validity Not Before: Feb 9 19:00:48 2026 GMT Not After : Feb 10 19:00:48 2026 GMT Subject: CN=35f5f006a17d34f4637a299bdfd918062dc52d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:01:ea:8f:7e:49:60:c2:7a:85:26:d9:fa: 32:02:4d:4a:1e:90:81:ab:14:d5:99:84:c6:c0:c2: 9a:03:ea:b1:3c:8a:a4:3e:6c:43:5c:67:d2:f5:1c: 92:6a:c4:32:58:03:2b:e3:dc:d2:41:91:02:21:a1: d1:d2:37:a3:11:be:e2:62:d7:b9:4c:ef:cc:19:88: 71:d7:50:d3:80:7c:c1:3c:00:77:c1:f0:85:99:30: 35:5a:f3:dc:f9:0e:30:41:8b:be:11:29:69:92:42: 79:4f:2f:8e:95:c4:10:6c:32:ca:e1:c3:d9:e1:aa: 7f:c9:71:5b:0e:e0:11:43:ee:36:07:42:38:4f:60: 3f:41:9c:64:1d:29:f4:13:b5:23:0a:61:9f:e7:aa: 35:36:2b:00:57:0d:25:7d:b0:a7:06:b3:d3:5f:34: 36:35:85:b9:2b:55:de:ce:23:61:72:03:b5:6f:ec: 28:f1:b0:7d:61:31:ca:11:4b:c8:75:28:95:99:75: de:b3:1b:1f:45:42:f8:da:9b:da:49:1a:b1:0b:46: 7e:96:9d:82:9c:49:d2:3e:75:9e:d5:8d:cd:b8:9e: af:ec:d4:a2:e0:97:cb:d9:29:63:a3:8c:c4:c7:0a: 6f:72:c1:5e:6e:c4:cb:2a:45:3c:3e:97:90:b5:bf: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:F0:06:A1:7D:34:F4:63:7A:29:9B:DF:D9:18:06:2D:C5:2D:03 X509v3 Authority Key Identifier: keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:07:59:f9:0a:c3:9e:ce:ec:69:86:03:59:db:10:c2:78:05: 4f:ca:0f:fa:9c:5c:43:7b:39:84:48:d7:ad:16:d1:a1:b0:1b: 35:74:24:45:21:65:8a:98:6b:95:ca:1c:84:bc:5f:50:21:b3: a0:b4:61:54:28:d5:78:b9:fa:94:66:05:3d:56:f5:42:9e:15: 67:df:15:4a:e1:53:3f:89:58:8a:0f:9e:7f:c4:af:b8:d8:58: b2:60:b2:22:14:01:4f:ce:92:e6:fd:1b:95:0a:9f:79:6e:15: 6d:e8:15:8a:c7:a8:a9:7a:92:d1:08:1b:cb:c8:a8:e2:39:36: 8f:65:1d:93:41:24:b6:33:08:ed:51:e1:31:c1:53:c8:e5:e8: 34:ba:c9:41:50:1f:df:da:54:5a:a5:20:3a:18:36:21:4e:22: 90:19:1a:bb:5d:e9:dd:2e:ea:07:13:3e:71:97:b5:1e:ae:39: df:04:58:22:8e:b1:7e:55:16:12:3b:8f:4b:e5:06:7c:f0:60: 01:d5:ec:26:be:90:91:b3:8d:8f:27:b2:f7:bf:72:d6:e5:14: 04:76:90:47:8e:a3:aa:53:b7:43:20:4b:4a:28:70:22:64:ea: 25:61:52:88:98:b1:d3:e8:d7:43:3e:51:06:5b:3d:9b:6c:8f: 2d:08:bc:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxx9jYHXt5EsSD3xYh2EmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExOWM2NDM5NDZhMDU5Mzk3MzU1NDIwZDczYmM0NWYxNGRh MmE3NmIwHhcNMjYwMjA5MTkwMDQ4WhcNMjYwMjEwMTkwMDQ4WjAzMTEwLwYDVQQD EygzNWY1ZjAwNmExN2QzNGY0NjM3YTI5OWJkZmQ5MTgwNjJkYzUyZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJQB6o9+SWDCeoUm2foyAk1KHpCB qxTVmYTGwMKaA+qxPIqkPmxDXGfS9RySasQyWAMr49zSQZECIaHR0jejEb7iYte5 TO/MGYhx11DTgHzBPAB3wfCFmTA1WvPc+Q4wQYu+ESlpkkJ5Ty+OlcQQbDLK4cPZ 4ap/yXFbDuARQ+42B0I4T2A/QZxkHSn0E7UjCmGf56o1NisAVw0lfbCnBrPTXzQ2 NYW5K1XeziNhcgO1b+wo8bB9YTHKEUvIdSiVmXXesxsfRUL42pvaSRqxC0Z+lp2C nEnSPnWe1Y3NuJ6v7NSi4JfL2Sljo4zExwpvcsFebsTLKkU8PpeQtb9WkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX18AahfTT0Y3opm9/ZGAYtxS0DMB8GA1UdIwQY MBaAFKGcZDlGoFk5c1VCDXO8RfFNoqdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYt YWMzYjZhNDU2N2JhLzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9lZWViODUtMjlkNC00NmJiLWIzZjYtYWMzYjZhNDU2N2Jh LzEvb1p4a09VYWdXVGx6VlVJTmM3eEY4VTJpcDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQdZ+QrD ns7saYYDWdsQwngFT8oP+pxcQ3s5hEjXrRbRobAbNXQkRSFliphrlcochLxfUCGz oLRhVCjVeLn6lGYFPVb1Qp4VZ98VSuFTP4lYig+ef8SvuNhYsmCyIhQBT86S5v0b lQqfeW4VbegViseoqXqS0Qgby8io4jk2j2Udk0EktjMI7VHhMcFTyOXoNLrJQVAf 39pUWqUgOhg2IU4ikBkau13p3S7qBxM+cZe1Hq453wRYIo6xflUWEjuPS+UGfPBg AdXsJr6QkbONjyey979y1uUUBHaQR46jqlO3QyBLSihwImTqJWFSiJix0+jXQz5R Bls9m2yPLQi8xQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:17 2026 by rpki-client