This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft File: OPp_x3GCjPs5cigk9_3z7cSzxSk.mft (raw, json) Hash identifier: 5ATcQSV7n0RIyIYUj2RfjWxriIu9Bx2ChKd8ayozlEI= Subject key identifier: A3:06:E3:49:05:AE:24:53:5E:51:C8:4C:70:92:B6:70:0D:A2:5D:8D Authority key identifier: 38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29 Certificate issuer: /CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529 Certificate serial: 019C427DEF123F94716D9DC32B1B23CB8445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft Manifest number: 0205 Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: OPp_x3GCjPs5cigk9_3z7cSzxSk.crl (hash: jHV0do/EevKVbnOSNfF+BU2mMzMMzAMTGRfOG9llvwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ef:12:3f:94:71:6d:9d:c3:2b:1b:23:cb:84:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fa7fc771828cfb39722824f7fdf3edc4b3c529 Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=a306e34905ae24535e51c84c7092b6700da25d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:e3:21:78:2f:af:bf:ca:29:b0:96:56:1c: ef:3b:bb:a9:96:62:57:b2:96:50:48:38:2e:8c:3b: 01:ee:1d:83:fa:dd:d8:6a:b1:f7:9a:8b:9d:37:17: 9d:d2:fe:f5:67:da:90:13:79:ca:97:f9:63:5b:e2: d6:10:5a:04:d8:42:44:4f:4c:c3:03:c1:5b:29:a7: e3:22:42:32:d8:ba:24:c8:76:33:97:05:5a:25:65: 54:9f:5a:0b:3b:25:3e:a8:1c:05:70:d4:7b:52:48: 2e:94:a3:0c:2a:c5:a5:a2:20:01:37:15:a2:e2:53: 2a:a5:ea:6a:e8:41:a6:12:d9:64:7c:db:ed:c1:02: 31:b6:1a:28:2d:a9:65:2e:b6:ca:c9:cf:ce:8f:16: 8e:5e:06:17:b6:91:33:56:c4:be:98:ec:0c:2f:7a: d0:a0:3a:ac:c3:75:e2:4a:4f:a6:17:82:86:af:09: 77:4a:c1:97:2d:e1:86:15:8f:32:81:18:24:56:62: 87:eb:85:58:62:ef:33:9b:df:3c:b7:17:f9:63:a2: 3f:dc:26:6c:0e:39:69:f2:50:3e:fc:a4:e0:f8:45: ed:49:35:c7:da:ba:47:1e:73:cf:69:93:f3:ea:e0: 9f:64:1b:ef:ec:b2:d4:54:91:6a:40:79:57:54:1b: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:E3:49:05:AE:24:53:5E:51:C8:4C:70:92:B6:70:0D:A2:5D:8D X509v3 Authority Key Identifier: keyid:38:FA:7F:C7:71:82:8C:FB:39:72:28:24:F7:FD:F3:ED:C4:B3:C5:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPp_x3GCjPs5cigk9_3z7cSzxSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/951a33-f840-4aac-9556-1297782755fd/1/OPp_x3GCjPs5cigk9_3z7cSzxSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:75:13:49:64:70:30:57:d7:63:6e:ac:47:ef:57:a4:32: 31:f4:da:1c:eb:af:30:ef:11:f1:f3:9b:08:05:8d:ca:3e:cd: 54:25:13:3f:e5:66:6a:f6:62:e9:44:2b:e7:9c:a5:9d:5d:33: f5:6f:cb:f3:f5:3c:82:38:28:92:55:3c:ad:de:6f:97:55:5f: 77:18:62:bc:91:89:26:cd:f0:56:70:72:5b:d6:8e:27:04:f9: 7b:c7:ab:ff:a8:e5:20:e4:6e:1c:48:02:61:ab:0c:d8:03:f7: 9c:a2:ed:36:ed:b3:c4:22:6b:8d:96:55:84:28:21:26:b2:61: c9:1e:4a:d8:dd:3e:1a:ea:e0:7d:a2:d6:11:45:1f:5e:ba:49: 8d:3f:b2:43:ab:d0:94:fd:f9:c4:d0:55:bc:70:3a:b8:6f:34: a7:d7:fb:3c:67:35:8b:2c:7b:1e:42:8c:c3:f7:91:35:ad:ab: 88:25:26:5a:a8:e8:0d:48:57:3c:cd:75:3f:d5:ac:e6:15:e1: cd:10:c8:48:8b:16:8e:d0:bb:1c:b6:eb:e7:61:4c:b1:d8:1b: 57:c2:c2:da:48:2e:95:7b:f9:32:cb:6d:35:27:eb:dc:9c:2f: 08:53:e8:17:40:0a:8b:15:04:6b:f3:ba:a9:21:5b:04:46:0f: 09:3b:b6:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfe8SP5RxbZ3DKxsjy4RFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZmE3ZmM3NzE4MjhjZmIzOTcyMjgyNGY3ZmRmM2VkYzRi M2M1MjkwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD EyhhMzA2ZTM0OTA1YWUyNDUzNWU1MWM4NGM3MDkyYjY3MDBkYTI1ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3jIXgvr7/KKbCWVhzvO7uplmJX spZQSDgujDsB7h2D+t3YarH3moudNxed0v71Z9qQE3nKl/ljW+LWEFoE2EJET0zD A8FbKafjIkIy2LokyHYzlwVaJWVUn1oLOyU+qBwFcNR7UkgulKMMKsWloiABNxWi 4lMqpepq6EGmEtlkfNvtwQIxthooLallLrbKyc/OjxaOXgYXtpEzVsS+mOwML3rQ oDqsw3XiSk+mF4KGrwl3SsGXLeGGFY8ygRgkVmKH64VYYu8zm988txf5Y6I/3CZs Djlp8lA+/KTg+EXtSTXH2rpHHnPPaZPz6uCfZBvv7LLUVJFqQHlXVBufdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMG40kFriRTXlHITHCStnANol2NMB8GA1UdIwQY MBaAFDj6f8dxgoz7OXIoJPf98+3Es8UpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BwX3gzR0NqUHM1Y2lnazlfM3o3Y1N6eFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85NTFhMzMtZjg0MC00YWFjLTk1NTYt MTI5Nzc4Mjc1NWZkLzEvT1BwX3gzR0NqUHM1Y2lnazlfM3o3Y1N6eFNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85NTFhMzMtZjg0MC00YWFjLTk1NTYtMTI5Nzc4Mjc1NWZk LzEvT1BwX3gzR0NqUHM1Y2lnazlfM3o3Y1N6eFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCl1E0lk cDBX12NurEfvV6QyMfTaHOuvMO8R8fObCAWNyj7NVCUTP+VmavZi6UQr55ylnV0z 9W/L8/U8gjgoklU8rd5vl1VfdxhivJGJJs3wVnByW9aOJwT5e8er/6jlIORuHEgC YasM2AP3nKLtNu2zxCJrjZZVhCghJrJhyR5K2N0+GurgfaLWEUUfXrpJjT+yQ6vQ lP35xNBVvHA6uG80p9f7PGc1iyx7HkKMw/eRNa2riCUmWqjoDUhXPM11P9Ws5hXh zRDISIsWjtC7HLbr52FMsdgbV8LC2kgulXv5MsttNSfr3JwvCFPoF0AKixUEa/O6 qSFbBEYPCTu2AA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:20 2026 by rpki-client