This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft File: OvovwG4aqRNcJjG3O-zFlXsCOpM.mft (raw, json) Hash identifier: y3B1tiD5yU/trbqxHVfllJh54Hlh99ENczRl6+M7Fio= Subject key identifier: 5A:4C:0F:96:36:CC:0A:D6:93:2D:9D:CB:1C:57:DB:46:B2:D7:4B:AE Authority key identifier: 3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 Certificate issuer: /CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Certificate serial: 019C427D6CCBFE6D9BD215A0E5AB54273C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft Manifest number: 14A3 Signing time: Mon 09 Feb 2026 13:00:41 +0000 Manifest this update: Mon 09 Feb 2026 13:00:41 +0000 Manifest next update: Tue 10 Feb 2026 13:00:41 +0000 Files and hashes: 1: 5HgfHalD9LWYJGG7XKJSoxARVl0.roa (hash: swKgBTrDTDtZaOuFjLNTyyxaRwCSohp8AB3ouBvQWOI=) 2: OvovwG4aqRNcJjG3O-zFlXsCOpM.crl (hash: KxF+uEGPJCzwXrH/ZtlSzxzdN992WOFEQkAPreRz9lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:6c:cb:fe:6d:9b:d2:15:a0:e5:ab:54:27:3c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3afa2fc06e1aa9135c2631b73becc5957b023a93 Validity Not Before: Feb 9 13:00:41 2026 GMT Not After : Feb 10 13:00:41 2026 GMT Subject: CN=5a4c0f9636cc0ad6932d9dcb1c57db46b2d74bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:bb:d4:79:74:b6:0b:f6:d1:91:5b:a0:0d: f0:fa:7d:e9:65:c6:08:53:bb:41:13:d3:f2:07:23: a5:39:53:bb:cf:4f:87:51:7f:f0:64:2f:01:2a:1c: 70:e7:32:1c:dd:ef:c9:23:d7:68:16:b7:b3:40:f1: c4:b1:41:71:bf:de:93:ce:be:af:35:fe:e3:f9:2d: aa:c2:76:e6:46:8b:33:08:04:d2:1f:37:8e:96:69: a7:e3:32:e2:bc:dc:11:f6:fd:61:fa:95:70:5e:3e: 5f:ee:6e:99:90:80:b3:30:ae:02:2e:7b:44:e2:6d: 2c:7e:c6:06:b0:a8:e2:02:a8:fa:f0:b1:7a:b2:07: 20:30:af:7d:19:b0:fb:39:5e:24:d3:23:71:fb:18: 63:88:bc:47:cc:e3:d0:21:d1:2f:0b:b4:cc:81:52: 1e:66:43:0e:18:bc:9b:15:b2:b3:ce:a3:b8:89:16: 85:0b:d6:85:19:d6:9b:65:70:16:82:a3:74:ea:46: 2e:90:60:4e:cf:07:2a:a8:92:b0:a0:78:77:d5:9d: ab:4b:05:5f:30:b9:7a:0e:bd:5a:ef:95:cf:7e:d3: 4a:23:c4:0c:cf:2c:ca:f2:d4:b0:0b:d1:7d:db:aa: c2:9e:02:35:07:6d:df:50:32:be:a6:46:ca:67:6e: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4C:0F:96:36:CC:0A:D6:93:2D:9D:CB:1C:57:DB:46:B2:D7:4B:AE X509v3 Authority Key Identifier: keyid:3A:FA:2F:C0:6E:1A:A9:13:5C:26:31:B7:3B:EC:C5:95:7B:02:3A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvovwG4aqRNcJjG3O-zFlXsCOpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/899218-2a19-4d0f-9f1e-ef38e8ce33d1/1/OvovwG4aqRNcJjG3O-zFlXsCOpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:62:60:5e:0a:20:e8:b0:5c:21:56:72:fb:ce:15:96:ae: 07:a8:db:3c:60:88:a4:10:eb:28:b9:cd:6f:f7:b9:db:0e:ae: c9:17:ed:73:6c:5b:c5:8f:1c:f1:32:c9:09:d0:44:0b:16:00: d7:9b:a8:c5:24:c0:db:5b:cd:e7:d2:db:fa:44:5a:43:8a:22: 07:f3:1f:cb:6c:9f:2c:7a:9b:86:fe:a6:be:85:20:40:37:9d: 9c:a7:9c:ad:b4:55:83:93:eb:33:dd:8c:66:6b:88:f3:6f:8b: eb:7c:46:52:6d:b7:15:a1:7d:df:f4:ef:fc:2a:9c:61:f1:bf: a6:13:1a:2f:a5:17:26:46:13:24:37:37:b7:e9:f3:7a:80:97: ba:48:ec:68:78:f2:5a:8e:be:4f:57:ed:29:b1:9b:c4:aa:8b: 46:b2:51:bb:f1:da:85:04:0c:ad:36:19:03:19:aa:ec:a5:91: c6:6f:a4:47:0e:f6:ed:a1:86:7e:fc:93:ee:6f:ee:2e:44:d5: 1d:e2:5c:28:60:f5:7d:8f:13:4a:6a:1a:9f:e4:79:ae:22:6a: 83:b5:d3:e4:78:a9:28:4d:77:7c:54:bd:15:e9:99:52:28:07: 92:9d:4e:8f:9b:ba:7d:28:9b:40:71:19:4d:0b:8d:99:21:3f: 0e:d8:d4:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWzL/m2b0hWg5atUJzwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZmEyZmMwNmUxYWE5MTM1YzI2MzFiNzNiZWNjNTk1N2Iw MjNhOTMwHhcNMjYwMjA5MTMwMDQxWhcNMjYwMjEwMTMwMDQxWjAzMTEwLwYDVQQD Eyg1YTRjMGY5NjM2Y2MwYWQ2OTMyZDlkY2IxYzU3ZGI0NmIyZDc0YmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA+71Hl0tgv20ZFboA3w+n3pZcYI U7tBE9PyByOlOVO7z0+HUX/wZC8BKhxw5zIc3e/JI9doFrezQPHEsUFxv96Tzr6v Nf7j+S2qwnbmRoszCATSHzeOlmmn4zLivNwR9v1h+pVwXj5f7m6ZkICzMK4CLntE 4m0sfsYGsKjiAqj68LF6sgcgMK99GbD7OV4k0yNx+xhjiLxHzOPQIdEvC7TMgVIe ZkMOGLybFbKzzqO4iRaFC9aFGdabZXAWgqN06kYukGBOzwcqqJKwoHh31Z2rSwVf MLl6Dr1a75XPftNKI8QMzyzK8tSwC9F926rCngI1B23fUDK+pkbKZ26KoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpMD5Y2zArWky2dyxxX20ay10uuMB8GA1UdIwQY MBaAFDr6L8BuGqkTXCYxtzvsxZV7AjqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUt ZWYzOGU4Y2UzM2QxLzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84OTkyMTgtMmExOS00ZDBmLTlmMWUtZWYzOGU4Y2UzM2Qx LzEvT3ZvdndHNGFxUk5jSmpHM08tekZsWHNDT3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaRiYF4K IOiwXCFWcvvOFZauB6jbPGCIpBDrKLnNb/e52w6uyRftc2xbxY8c8TLJCdBECxYA 15uoxSTA21vN59Lb+kRaQ4oiB/Mfy2yfLHqbhv6mvoUgQDednKecrbRVg5PrM92M ZmuI82+L63xGUm23FaF93/Tv/CqcYfG/phMaL6UXJkYTJDc3t+nzeoCXukjsaHjy Wo6+T1ftKbGbxKqLRrJRu/HahQQMrTYZAxmq7KWRxm+kRw727aGGfvyT7m/uLkTV HeJcKGD1fY8TSmoan+R5riJqg7XT5HipKE13fFS9FemZUigHkp1Oj5u6fSibQHEZ TQuNmSE/DtjUNA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:13 2026 by rpki-client