This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json) Hash identifier: WV6taGs2wfJWiCVEy2K8mUsikD/d+eNQW/Jz2G7jp/g= Subject key identifier: AC:A3:E6:96:B9:01:29:ED:13:EB:35:1F:E4:B2:C0:09:DB:46:99:65 Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Certificate serial: 019C43901360BB6914278E02D84E706348A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: aLb1QfxGps1rjvR1qQZuSPONoqJ9ovyV+CCTn2+86Wc=) 2: aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (hash: MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:13:60:bb:69:14:27:8e:02:d8:4e:70:63:48:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=aca3e696b90129ed13eb351fe4b2c009db469965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:c9:a8:db:69:98:46:72:16:d2:1e:3f:ad: a5:b7:0b:de:ff:ab:38:f1:e2:3c:8c:ef:c8:2c:c9: 29:3a:f1:fc:13:d6:8d:c3:56:50:1b:a2:d8:18:b5: 68:b0:90:21:7c:0c:c0:f8:4f:e6:e8:dd:d3:1b:fe: 65:f7:db:8c:83:03:c2:09:67:4e:47:20:2c:75:4b: 67:db:3e:4c:24:bf:31:5d:56:e9:ef:50:58:20:7f: 70:a6:8a:74:5c:65:1b:44:91:d5:20:86:2b:17:3d: 8e:38:93:84:78:11:73:97:c4:6d:57:ff:d7:8e:87: 96:e8:61:c1:7c:98:99:92:36:48:30:10:47:2e:75: 87:0f:11:11:a9:7e:fd:0d:f7:ed:de:b1:f9:0a:17: 52:e4:29:0c:6b:44:e5:f1:23:6e:fd:15:55:11:14: bc:37:1d:3c:52:8b:97:1f:bd:40:29:3a:81:40:5d: 49:fc:6d:a6:b4:12:f0:de:db:c3:3a:6f:d5:ad:ec: cd:8d:cb:54:68:2f:c0:8d:a0:f9:5c:85:2d:ad:df: 37:91:eb:87:2d:48:4f:15:d5:de:e5:7f:ba:a3:00: 71:d6:0e:ac:96:6e:6c:1f:ec:b7:9a:d4:66:64:18: 88:cb:4d:a5:46:5d:4e:ef:b8:21:52:da:7f:f9:48: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A3:E6:96:B9:01:29:ED:13:EB:35:1F:E4:B2:C0:09:DB:46:99:65 X509v3 Authority Key Identifier: keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:53:35:3c:3c:ce:d1:48:a5:38:ac:68:2e:8c:2c:06:dd:41: 11:87:3d:5b:1d:b6:94:41:bd:49:1b:6a:7e:95:d9:f0:f3:63: 56:59:42:b7:e6:3c:03:40:c8:34:0d:ce:82:fa:b8:1a:81:a4: fe:91:47:ef:ed:a3:77:19:c0:a7:ca:b6:59:1a:37:ea:f7:f0: 90:b3:74:7d:93:3c:d4:f7:8e:31:7e:19:00:c2:f2:e2:f0:bb: 9b:75:72:94:d7:9f:da:59:42:2d:d2:4e:9c:7a:98:d8:88:cc: 4c:97:e3:7b:67:12:4a:0e:40:03:64:85:af:f6:1f:3b:1b:39: 65:43:57:3c:2a:7a:bc:b5:cf:b9:5c:a8:23:4f:bd:ce:18:81: 54:4b:7a:5e:7a:97:3b:78:92:36:3a:19:22:02:6e:89:8a:02: b3:11:01:67:df:33:9a:69:5e:47:00:74:6b:44:7a:14:c3:07: 09:e7:4d:8d:31:db:a0:04:ea:07:69:3b:54:de:16:d1:43:20: f9:5c:c9:3b:72:55:d1:2d:f1:d4:2d:6b:50:1a:ce:01:0c:99: 7b:93:64:bd:58:db:99:54:cc:a0:51:9c:56:81:a9:1c:bc:3e: d0:e6:92:33:3a:6b:7a:4b:cf:e7:52:81:03:63:42:67:f1:2a: 4a:ed:55:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBNgu2kUJ44C2E5wY0inMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh OWNhZGQwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD EyhhY2EzZTY5NmI5MDEyOWVkMTNlYjM1MWZlNGIyYzAwOWRiNDY5OTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIbJqNtpmEZyFtIeP62ltwve/6s4 8eI8jO/ILMkpOvH8E9aNw1ZQG6LYGLVosJAhfAzA+E/m6N3TG/5l99uMgwPCCWdO RyAsdUtn2z5MJL8xXVbp71BYIH9wpop0XGUbRJHVIIYrFz2OOJOEeBFzl8RtV//X joeW6GHBfJiZkjZIMBBHLnWHDxERqX79Dfft3rH5ChdS5CkMa0Tl8SNu/RVVERS8 Nx08UouXH71AKTqBQF1J/G2mtBLw3tvDOm/VrezNjctUaC/AjaD5XIUtrd83keuH LUhPFdXe5X+6owBx1g6slm5sH+y3mtRmZBiIy02lRl1O77ghUtp/+UjVxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyj5pa5ASntE+s1H+SywAnbRpllMB8GA1UdIwQY MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1 LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVM1PDzO 0UilOKxoLowsBt1BEYc9Wx22lEG9SRtqfpXZ8PNjVllCt+Y8A0DINA3Ogvq4GoGk /pFH7+2jdxnAp8q2WRo36vfwkLN0fZM81PeOMX4ZAMLy4vC7m3VylNef2llCLdJO nHqY2IjMTJfje2cSSg5AA2SFr/YfOxs5ZUNXPCp6vLXPuVyoI0+9zhiBVEt6XnqX O3iSNjoZIgJuiYoCsxEBZ98zmmleRwB0a0R6FMMHCedNjTHboATqB2k7VN4W0UMg +VzJO3JV0S3x1C1rUBrOAQyZe5NkvVjbmVTMoFGcVoGpHLw+0OaSMzprekvP51KB A2NCZ/EqSu1Vuw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:47 2026 by rpki-client