This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft File: owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft (raw, json) Hash identifier: CKJ887kH0Hi00K77DxuyeGKVzOnbAKXnqVOodmJDe1E= Subject key identifier: FD:BB:60:93:A2:B0:34:8D:63:39:47:BF:9D:DC:77:EC:48:CC:33:FB Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A Certificate issuer: /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Certificate serial: 019C4359330884BFD66C2D5B3CB24DAE5CE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft Manifest number: 09AC Signing time: Mon 09 Feb 2026 17:00:45 +0000 Manifest this update: Mon 09 Feb 2026 17:00:45 +0000 Manifest next update: Tue 10 Feb 2026 17:00:45 +0000 Files and hashes: 1: 8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (hash: 1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=) 2: owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl (hash: S3SDkFkV/Ke9maiyaiWtW3C7LX789paa9Ot6FMnr+AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:33:08:84:bf:d6:6c:2d:5b:3c:b2:4d:ae:5c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a Validity Not Before: Feb 9 17:00:45 2026 GMT Not After : Feb 10 17:00:45 2026 GMT Subject: CN=fdbb6093a2b0348d633947bf9ddc77ec48cc33fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:77:7c:eb:4a:cf:d9:3c:0d:a5:e3:01:e3: 40:3a:fa:ab:42:f9:36:0a:b0:49:8a:c5:ba:42:67: e3:9c:df:dc:93:7b:30:47:9f:20:02:d8:82:dd:61: 88:85:f3:81:85:86:9a:63:6d:e7:d9:ed:de:0b:2b: 21:68:16:87:b5:eb:aa:8e:81:18:2b:2c:cb:2f:f2: d6:8a:79:17:d9:c7:56:fd:9d:06:21:97:a2:4e:e2: f3:5e:d0:4e:7c:1c:26:db:8c:c6:6d:c5:95:e4:d8: ff:54:a8:46:43:cc:3b:c5:be:1c:c2:9b:db:68:cb: ce:60:dc:df:15:81:85:df:0e:10:10:15:20:03:c2: e0:42:93:ec:7f:94:5d:ec:30:7c:30:75:bb:3a:f5: f7:68:91:5c:73:4b:33:f8:05:8b:c4:96:72:13:39: b2:74:ad:66:07:3b:4f:0b:17:88:4a:19:e2:e8:c7: 2f:32:54:6a:16:84:70:60:73:3a:a8:0f:54:4c:c2: 5c:70:48:f1:0e:4d:20:f5:54:75:a7:1e:3b:35:81: c2:cf:f3:ed:c3:cd:b7:e9:cf:49:42:d0:8e:4e:d0: fa:a8:b0:25:ca:ce:80:56:47:7a:c5:fd:4b:6d:12: ed:0d:01:8c:8d:97:8e:5f:4c:9b:63:3b:88:b9:0d: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BB:60:93:A2:B0:34:8D:63:39:47:BF:9D:DC:77:EC:48:CC:33:FB X509v3 Authority Key Identifier: keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:63:d8:ad:26:5b:76:bf:4a:96:c0:a0:77:42:33:b2:f3:a6: ef:f6:af:91:95:e5:b3:96:6e:ba:64:82:04:a2:0b:a8:59:35: b7:4d:5e:3d:af:ae:c7:7a:52:a9:ba:fb:5e:4b:50:11:ba:e7: c3:d3:4f:de:64:6c:a7:7d:2c:5c:dc:37:9f:12:81:6c:c9:97: 67:44:3c:d5:9d:1c:f2:33:ba:73:44:15:74:6e:f1:37:ef:a4: 02:a2:25:f7:ce:b8:1d:07:bf:26:3c:a7:bb:b0:a7:16:2a:7b: b1:f7:d0:19:77:12:8a:a7:6c:ae:ea:bd:50:aa:75:af:5d:1b: 7a:a0:f7:3e:ed:0f:b2:f5:d3:b3:bc:de:2d:73:04:39:cf:5d: 34:14:17:ff:ef:60:77:68:4b:f9:53:77:9f:1d:af:09:d4:ea: 78:45:dd:ed:25:5a:5f:9a:c4:3c:a3:d7:75:84:9f:ca:01:81: 49:59:c2:59:73:15:a9:db:41:67:54:2e:ae:ab:23:01:1a:76: b6:95:47:61:25:7e:12:9e:3f:3f:f8:f5:a9:5a:27:f4:24:66: 03:e8:d6:7e:51:29:6e:8f:21:e6:3f:1b:6c:f7:3c:3c:a6:1d: 24:08:9d:2d:91:6a:29:b4:ca:01:8a:3c:31:90:2d:e3:d2:20: 13:05:0c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTMIhL/WbC1bPLJNrlzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMDIwYWU5NmI1ZjBjNWI3MzM5ZTYxNTRkY2VjNmYxNmNi NjNmNWEwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD EyhmZGJiNjA5M2EyYjAzNDhkNjMzOTQ3YmY5ZGRjNzdlYzQ4Y2MzM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9F3fOtKz9k8DaXjAeNAOvqrQvk2 CrBJisW6QmfjnN/ck3swR58gAtiC3WGIhfOBhYaaY23n2e3eCyshaBaHteuqjoEY KyzLL/LWinkX2cdW/Z0GIZeiTuLzXtBOfBwm24zGbcWV5Nj/VKhGQ8w7xb4cwpvb aMvOYNzfFYGF3w4QEBUgA8LgQpPsf5Rd7DB8MHW7OvX3aJFcc0sz+AWLxJZyEzmy dK1mBztPCxeIShni6McvMlRqFoRwYHM6qA9UTMJccEjxDk0g9VR1px47NYHCz/Pt w8236c9JQtCOTtD6qLAlys6AVkd6xf1LbRLtDQGMjZeOX0ybYzuIuQ1lOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP27YJOisDSNYzlHv53cd+xIzDP7MB8GA1UdIwQY MBaAFKMCCulrXwxbcznmFU3OxvFstj9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAt M2I3YzEyNjcyNWQ1LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9jNmU5NzItNGVkMS00NTI2LWEzMjAtM2I3YzEyNjcyNWQ1 LzEvb3dJSzZXdGZERnR6T2VZVlRjN0c4V3kyUDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GPYrSZb dr9KlsCgd0IzsvOm7/avkZXls5ZuumSCBKILqFk1t01ePa+ux3pSqbr7XktQEbrn w9NP3mRsp30sXNw3nxKBbMmXZ0Q81Z0c8jO6c0QVdG7xN++kAqIl9864HQe/Jjyn u7CnFip7sffQGXcSiqdsruq9UKp1r10beqD3Pu0PsvXTs7zeLXMEOc9dNBQX/+9g d2hL+VN3nx2vCdTqeEXd7SVaX5rEPKPXdYSfygGBSVnCWXMVqdtBZ1QurqsjARp2 tpVHYSV+Ep4/P/j1qVon9CRmA+jWflEpbo8h5j8bbPc8PKYdJAidLZFqKbTKAYo8 MZAt49IgEwUMtw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:29 2026 by rpki-client