This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json) Hash identifier: LO4K8X3C60QAn79shFGgO4I0vMJyA9aqw0yshdRHAZ8= Subject key identifier: 29:8E:0A:B7:2B:92:04:6C:DE:1A:62:E7:C5:5E:F7:AE:DD:C1:0E:FF Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Certificate serial: 019C4322832723F82748FDB6AF26F6150795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:00 +0000 Manifest this update: Mon 09 Feb 2026 16:01:00 +0000 Manifest next update: Tue 10 Feb 2026 16:01:00 +0000 Files and hashes: 1: 1-gO4QgPPqp1Kak3_666d1-5pe9c.roa (hash: qTzaIkVWn2wQ4/BhUvBh5PhVLGzlNE9Q4I9h2wouay8=) 2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: 4bfSfv/X2A0O2Fq13+DvyqWGBa84zi+Z7NTh9tQBNDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:83:27:23:f8:27:48:fd:b6:af:26:f6:15:07:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8 Validity Not Before: Feb 9 16:01:00 2026 GMT Not After : Feb 10 16:01:00 2026 GMT Subject: CN=298e0ab72b92046cde1a62e7c55ef7aeddc10eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:04:cf:47:bc:19:fd:79:be:14:4a:b4:fc: 89:00:29:fb:75:dc:7c:09:49:8f:fc:72:21:66:a0: 41:9d:eb:7b:fe:ac:7f:f9:9f:a3:5d:26:55:d5:52: 47:74:1f:79:82:f9:36:9f:57:76:76:79:87:aa:cf: 87:8c:92:a6:e0:2a:55:34:6d:22:d5:1c:ed:d8:1a: 36:4b:74:7d:3b:4b:3d:01:ba:cd:cc:89:1c:8d:cc: 8e:78:ad:8c:26:77:27:a6:78:ca:73:c9:09:e8:e3: d9:fe:bf:73:3c:e1:5b:34:25:5e:69:11:90:b2:84: e9:02:5a:60:27:49:d7:af:44:02:7e:12:23:f7:6e: 7b:7a:61:be:6c:26:d1:a8:e9:a0:1a:38:b3:ec:a8: 04:29:0e:50:3f:d0:07:b4:c7:a1:34:11:95:73:d7: 9e:2d:4d:f6:a9:84:e8:03:df:4c:03:53:34:db:08: 2a:04:04:41:ca:80:ca:b3:40:7f:af:28:a4:70:89: 51:bf:62:66:a1:93:8e:82:4e:29:d3:bc:5d:43:d0: ac:43:d9:ff:7b:ee:b9:28:26:b4:3f:a4:15:ee:db: 96:6c:cb:19:f0:83:18:58:91:6b:f2:a6:3f:98:f3: ae:db:68:ce:fe:89:1d:9b:9e:2f:3c:2c:b9:68:f8: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8E:0A:B7:2B:92:04:6C:DE:1A:62:E7:C5:5E:F7:AE:DD:C1:0E:FF X509v3 Authority Key Identifier: keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:78:c2:58:32:60:ca:95:98:93:65:da:db:7e:32:e5:f7:00: 4e:77:71:c4:d1:40:b3:d6:9c:80:7f:43:f0:20:5f:a0:8a:dd: f4:96:90:6a:80:59:04:fd:68:57:0d:50:32:83:42:c4:de:ce: 72:a3:4c:2f:7b:cd:31:fc:ca:63:a8:6d:0e:47:93:3c:9a:b6: 64:ca:9e:91:13:75:29:58:50:0b:8b:e4:95:16:43:5c:8c:96: 53:e6:eb:c6:25:49:27:70:32:a1:83:8c:2c:d6:e3:eb:c0:cd: 24:d6:cd:e1:64:5d:81:cb:32:33:af:b5:f8:cc:7d:c7:3d:cf: 89:ec:6e:6d:25:c8:7a:2a:bf:72:43:d4:06:ed:54:3e:c5:ca: b8:a0:1d:d8:ea:a4:f5:43:96:ec:42:cd:f1:26:9c:fe:4e:f8: 8a:13:af:7e:e8:76:71:5e:57:22:73:8e:d7:e0:6d:b8:52:e4: e1:c1:f1:8f:25:86:af:1d:5b:66:2e:f6:72:9c:04:8e:6c:64: 90:4c:ba:ab:a1:3d:c0:bd:7f:de:4e:49:13:39:b3:7f:49:3d: db:a0:ab:88:a4:d2:66:54:a5:77:92:ee:67:13:a3:dc:b5:4f: 3f:d3:43:ec:9f:8d:a9:dd:4f:a8:fe:1d:80:cc:e4:84:b3:5e: 2a:4b:a1:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoMnI/gnSP22ryb2FQeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm YjEzZTgwHhcNMjYwMjA5MTYwMTAwWhcNMjYwMjEwMTYwMTAwWjAzMTEwLwYDVQQD EygyOThlMGFiNzJiOTIwNDZjZGUxYTYyZTdjNTVlZjdhZWRkYzEwZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvokEz0e8Gf15vhRKtPyJACn7ddx8 CUmP/HIhZqBBnet7/qx/+Z+jXSZV1VJHdB95gvk2n1d2dnmHqs+HjJKm4CpVNG0i 1Rzt2Bo2S3R9O0s9AbrNzIkcjcyOeK2MJncnpnjKc8kJ6OPZ/r9zPOFbNCVeaRGQ soTpAlpgJ0nXr0QCfhIj9257emG+bCbRqOmgGjiz7KgEKQ5QP9AHtMehNBGVc9ee LU32qYToA99MA1M02wgqBARByoDKs0B/ryikcIlRv2JmoZOOgk4p07xdQ9CsQ9n/ e+65KCa0P6QV7tuWbMsZ8IMYWJFr8qY/mPOu22jO/okdm54vPCy5aPi9PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmOCrcrkgRs3hpi58Ve967dwQ7/MB8GA1UdIwQY MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHjCWDJg ypWYk2Xa234y5fcATndxxNFAs9acgH9D8CBfoIrd9JaQaoBZBP1oVw1QMoNCxN7O cqNML3vNMfzKY6htDkeTPJq2ZMqekRN1KVhQC4vklRZDXIyWU+brxiVJJ3AyoYOM LNbj68DNJNbN4WRdgcsyM6+1+Mx9xz3PiexubSXIeiq/ckPUBu1UPsXKuKAd2Oqk 9UOW7ELN8Sac/k74ihOvfuh2cV5XInOO1+BtuFLk4cHxjyWGrx1bZi72cpwEjmxk kEy6q6E9wL1/3k5JEzmzf0k926CriKTSZlSld5LuZxOj3LVPP9ND7J+Nqd1PqP4d gMzkhLNeKkuh/g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:02 2026 by rpki-client