This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json) Hash identifier: uRPsTlHBMiBMYjTaW37QCbD3S6sL4bDThw+V89JmSj8= Subject key identifier: 74:3C:28:54:4F:14:ED:1B:49:58:B8:47:2E:D5:5F:C7:D3:B2:56:FC Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98 Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98 Certificate serial: 019C42461F84871F03FE1F1CFE53B3CB24D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft Manifest number: 11D8 Signing time: Mon 09 Feb 2026 12:00:17 +0000 Manifest this update: Mon 09 Feb 2026 12:00:17 +0000 Manifest next update: Tue 10 Feb 2026 12:00:17 +0000 Files and hashes: 1: THUvGSRSDdO8NyiSUs_kzMBgKSg.roa (hash: f2duUHB5LK8Of3Fa8X+WHnO6K86lhJ6HdId3wsUMfg8=) 2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: hBh8QcrUjCbY1S6h40kxARkbYH7pRjTZqrUjzB26erk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1f:84:87:1f:03:fe:1f:1c:fe:53:b3:cb:24:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98 Validity Not Before: Feb 9 12:00:17 2026 GMT Not After : Feb 10 12:00:17 2026 GMT Subject: CN=743c28544f14ed1b4958b8472ed55fc7d3b256fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:07:16:67:2b:f0:63:4d:de:68:5b:6f:fa: 0a:4e:9c:75:f2:fc:1c:8d:84:ca:e5:53:a5:83:3e: 59:d1:05:92:a1:8c:c7:b1:be:a9:a3:9b:46:e0:68: 11:d5:82:88:b7:ef:3c:3c:2a:0c:91:46:08:7e:c9: 5b:dc:4c:3e:5f:29:17:01:69:8d:81:01:61:44:23: be:bd:2d:4d:bf:ef:a0:7e:fb:b5:02:03:c8:37:97: e7:a3:b6:d8:5b:71:c0:31:21:c0:91:2e:71:33:ed: 3a:c9:83:81:c4:b1:2a:2a:79:0a:59:7e:60:1f:a4: c0:b2:88:8e:db:a6:46:c2:5d:3c:71:32:a8:a1:f4: f6:96:6a:ad:78:7f:89:60:6b:48:97:93:5a:11:d3: a6:29:7a:57:ea:ce:b4:32:11:49:0a:93:c2:ca:24: 45:5b:1d:4d:41:df:bf:36:7e:03:26:65:8d:6b:72: 04:5d:68:5d:65:c6:5b:3c:26:7b:93:8d:e5:01:5a: ad:7d:5d:91:e0:cd:8b:2b:98:80:b0:f1:34:20:b2: e0:c2:b2:d7:4e:56:8e:6c:e1:88:a5:c6:a2:f0:20: 37:c6:ef:13:b9:ce:d1:6f:b0:3f:d5:8b:e1:0a:cd: 10:8a:a3:11:15:92:57:54:6b:23:52:dc:b6:80:a2: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3C:28:54:4F:14:ED:1B:49:58:B8:47:2E:D5:5F:C7:D3:B2:56:FC X509v3 Authority Key Identifier: keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:57:46:39:10:88:33:e6:a6:18:0d:3a:26:86:3a:3a:33:bb: 90:fc:1d:83:57:36:d0:5d:1f:50:13:cc:ad:fc:69:4d:ee:0f: 50:fa:e0:0d:99:f0:c3:f6:7a:9b:e7:da:fc:3e:34:db:93:82: b9:3f:95:35:6b:45:97:0b:67:b5:9c:ec:ce:6c:11:fa:0a:ef: 2a:01:4b:ba:0e:a0:ed:be:2f:7e:a8:40:49:fd:e8:77:3f:86: 60:85:d7:fe:4d:a2:68:24:85:4c:61:00:72:07:4c:a8:4b:33: c7:cc:6c:b1:b7:0e:9c:32:a6:37:94:e7:95:6e:67:7a:83:e7: 93:7b:11:e9:f0:e0:ac:39:13:f0:cb:07:88:17:c5:67:a4:26: 6e:5f:36:74:e7:ab:3c:40:a7:50:a2:cd:eb:ab:b3:45:0b:9a: fd:c0:ed:53:e5:c5:9d:6a:44:73:c7:d3:07:1a:92:28:cf:5e: 54:92:39:17:1a:fd:d5:49:4d:12:b0:36:6e:1c:ec:9f:6a:8d: b9:83:53:bc:b3:c0:70:22:60:4c:d7:1a:f7:8b:57:27:f7:61: f3:6b:11:2f:f9:b8:6d:8d:fd:65:1e:b4:0f:6f:cb:8d:4c:4a: 60:77:9f:c4:5a:1a:69:bd:34:29:9b:24:67:9f:7e:bb:f2:0c: b7:a3:ba:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRh+Ehx8D/h8c/lOzyyTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk NzhhOTgwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD Eyg3NDNjMjg1NDRmMTRlZDFiNDk1OGI4NDcyZWQ1NWZjN2QzYjI1NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGwHFmcr8GNN3mhbb/oKTpx18vwc jYTK5VOlgz5Z0QWSoYzHsb6po5tG4GgR1YKIt+88PCoMkUYIfslb3Ew+XykXAWmN gQFhRCO+vS1Nv++gfvu1AgPIN5fno7bYW3HAMSHAkS5xM+06yYOBxLEqKnkKWX5g H6TAsoiO26ZGwl08cTKoofT2lmqteH+JYGtIl5NaEdOmKXpX6s60MhFJCpPCyiRF Wx1NQd+/Nn4DJmWNa3IEXWhdZcZbPCZ7k43lAVqtfV2R4M2LK5iAsPE0ILLgwrLX TlaObOGIpcai8CA3xu8Tuc7Rb7A/1YvhCs0QiqMRFZJXVGsjUty2gKLWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQ8KFRPFO0bSVi4Ry7VX8fTslb8MB8GA1UdIwQY MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt MGMxZjY5YjdhZWU3LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3 LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFdGORCI M+amGA06JoY6OjO7kPwdg1c20F0fUBPMrfxpTe4PUPrgDZnww/Z6m+fa/D4025OC uT+VNWtFlwtntZzszmwR+grvKgFLug6g7b4vfqhASf3odz+GYIXX/k2iaCSFTGEA cgdMqEszx8xssbcOnDKmN5TnlW5neoPnk3sR6fDgrDkT8MsHiBfFZ6Qmbl82dOer PECnUKLN66uzRQua/cDtU+XFnWpEc8fTBxqSKM9eVJI5Fxr91UlNErA2bhzsn2qN uYNTvLPAcCJgTNca94tXJ/dh82sRL/m4bY39ZR60D2/LjUxKYHefxFoaab00KZsk Z59+u/IMt6O69w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:19 2026 by rpki-client