This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft File: oGXmV0nKpfu0kekGl32xjTVZv0M.mft (raw, json) Hash identifier: mXRmbOXoAFoRbzEStycdowRWlIVVFlKw/0M3NnkSyn4= Subject key identifier: 13:5E:1B:1A:2B:72:27:B9:B8:C9:FB:B8:FA:74:0D:74:E6:72:B8:9D Authority key identifier: A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 Certificate issuer: /CN=a065e65749caa5fbb491e906977db18d3559bf43 Certificate serial: 019C42103239A880DB828A2D49805D8E26DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft Manifest number: 1550 Signing time: Mon 09 Feb 2026 11:01:23 +0000 Manifest this update: Mon 09 Feb 2026 11:01:23 +0000 Manifest next update: Tue 10 Feb 2026 11:01:23 +0000 Files and hashes: 1: OPZKD3Vt0sTBmYCk7cCKUWbrGKI.roa (hash: YresaaNN//tsTeKLfmj6Notknbb5CDEFkmcoLMPi/SQ=) 2: oGXmV0nKpfu0kekGl32xjTVZv0M.crl (hash: NfIEb8W/5huOgnEHr33d/jxu1tt3uDsBbQv2Om2zijw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:32:39:a8:80:db:82:8a:2d:49:80:5d:8e:26:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a065e65749caa5fbb491e906977db18d3559bf43 Validity Not Before: Feb 9 11:01:23 2026 GMT Not After : Feb 10 11:01:23 2026 GMT Subject: CN=135e1b1a2b7227b9b8c9fbb8fa740d74e672b89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:f9:23:10:35:47:4a:93:1e:87:78:49:7d: fe:e5:af:99:94:cf:0e:3e:5b:dd:5c:ca:73:c1:7c: 7a:30:4b:7e:a9:7c:3c:11:61:13:4e:07:bc:21:c7: 3c:59:53:77:1c:69:d1:7e:81:75:a7:d5:8a:19:d1: 75:8e:67:07:ee:6e:6b:c1:ce:94:ba:2e:4b:6e:ed: 1f:5a:ac:a8:6a:20:3c:65:d0:3b:95:ec:2e:3d:05: 84:1a:f6:14:6b:10:d5:73:e9:04:65:65:a7:8b:ee: 0d:00:81:aa:0d:9a:69:df:7c:26:33:2f:3c:98:81: 46:35:63:d6:f3:e5:e4:a0:b1:09:31:de:93:a8:48: d2:f2:a9:e5:e0:ad:0b:bc:fa:e9:63:11:10:9c:c8: 4c:68:1b:4f:db:fc:bc:9c:71:80:34:0b:45:1f:54: ea:01:ab:6d:eb:ec:c0:b2:61:bc:d1:14:a7:59:b4: 53:5f:1e:e3:ae:e8:19:57:b6:04:b1:d2:bf:42:fa: ae:5e:68:89:79:1d:ca:d0:62:30:7d:73:cd:aa:1a: 30:01:de:82:78:f5:f6:53:72:11:c1:9c:23:56:22: e8:8a:77:d2:e3:ee:bd:9c:68:bf:1b:7c:86:90:73: 5c:af:01:92:8e:11:25:dd:aa:b4:41:66:12:b7:fd: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5E:1B:1A:2B:72:27:B9:B8:C9:FB:B8:FA:74:0D:74:E6:72:B8:9D X509v3 Authority Key Identifier: keyid:A0:65:E6:57:49:CA:A5:FB:B4:91:E9:06:97:7D:B1:8D:35:59:BF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGXmV0nKpfu0kekGl32xjTVZv0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3e73a6-1da7-47f6-a38c-0ee847d3fb79/1/oGXmV0nKpfu0kekGl32xjTVZv0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fd:a9:0f:f3:ed:50:c8:68:05:ed:61:3c:83:a5:a9:15:f2: 6f:d0:aa:f7:35:18:4e:72:8f:28:b4:f5:f6:55:52:1e:5a:0b: 0f:76:40:c0:03:82:cd:2d:fb:87:2b:dd:1e:0d:d9:95:d9:e7: 19:6e:23:d4:b6:87:2f:b8:02:fc:eb:8f:07:a9:7d:9b:b1:92: 9e:70:8d:7a:d9:86:a8:d9:cf:0d:aa:86:7a:aa:94:44:ed:3d: 36:96:a5:b0:1a:c6:96:3b:eb:1e:a5:14:dd:77:30:bc:2b:0c: 67:b6:6a:85:5a:dd:bc:6c:d1:bb:0b:f0:ff:42:13:52:ac:71: a3:44:5b:c4:20:71:e4:90:a9:63:03:ba:5a:de:15:2f:4b:28: 64:6b:e2:f0:b7:d7:08:33:9a:09:7f:96:1e:91:ce:8d:4b:35: 5c:9a:de:7b:50:40:8f:3a:1e:9f:41:d6:3f:73:c0:4f:6d:37: b9:0d:ef:40:57:e3:df:63:fe:b5:de:16:63:be:a5:f2:9c:8b: c0:64:d4:d5:45:bf:9c:97:9a:06:5b:a6:18:11:ed:fc:83:24: 16:6a:68:3b:43:ca:b4:f9:49:78:4d:f5:2c:2b:0f:48:09:4a: 6a:7b:da:1c:e1:44:06:fb:ae:34:c6:1d:73:d6:05:c9:a0:fc: 8e:55:92:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDI5qIDbgootSYBdjibbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjVlNjU3NDljYWE1ZmJiNDkxZTkwNjk3N2RiMThkMzU1 OWJmNDMwHhcNMjYwMjA5MTEwMTIzWhcNMjYwMjEwMTEwMTIzWjAzMTEwLwYDVQQD EygxMzVlMWIxYTJiNzIyN2I5YjhjOWZiYjhmYTc0MGQ3NGU2NzJiODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMP5IxA1R0qTHod4SX3+5a+ZlM8O PlvdXMpzwXx6MEt+qXw8EWETTge8Icc8WVN3HGnRfoF1p9WKGdF1jmcH7m5rwc6U ui5Lbu0fWqyoaiA8ZdA7lewuPQWEGvYUaxDVc+kEZWWni+4NAIGqDZpp33wmMy88 mIFGNWPW8+XkoLEJMd6TqEjS8qnl4K0LvPrpYxEQnMhMaBtP2/y8nHGANAtFH1Tq Aatt6+zAsmG80RSnWbRTXx7jrugZV7YEsdK/QvquXmiJeR3K0GIwfXPNqhowAd6C ePX2U3IRwZwjViLoinfS4+69nGi/G3yGkHNcrwGSjhEl3aq0QWYSt/0DBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNeGxorcie5uMn7uPp0DXTmcridMB8GA1UdIwQY MBaAFKBl5ldJyqX7tJHpBpd9sY01Wb9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMt MGVlODQ3ZDNmYjc5LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zZTczYTYtMWRhNy00N2Y2LWEzOGMtMGVlODQ3ZDNmYjc5 LzEvb0dYbVYwbktwZnUwa2VrR2wzMnhqVFZadjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf2pD/Pt UMhoBe1hPIOlqRXyb9Cq9zUYTnKPKLT19lVSHloLD3ZAwAOCzS37hyvdHg3Zldnn GW4j1LaHL7gC/OuPB6l9m7GSnnCNetmGqNnPDaqGeqqURO09NpalsBrGljvrHqUU 3XcwvCsMZ7ZqhVrdvGzRuwvw/0ITUqxxo0RbxCBx5JCpYwO6Wt4VL0soZGvi8LfX CDOaCX+WHpHOjUs1XJree1BAjzoen0HWP3PAT203uQ3vQFfj32P+td4WY76l8pyL wGTU1UW/nJeaBlumGBHt/IMkFmpoO0PKtPlJeE31LCsPSAlKanvaHOFEBvuuNMYd c9YFyaD8jlWS9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:54 2026 by rpki-client