This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json) Hash identifier: eqbMQprJTHrxO45Bsp9xh8N5jYdBa1xlxAzXztliZC4= Subject key identifier: B8:C4:95:F3:CF:27:6C:74:E1:7B:A9:7C:B5:4A:4B:9B:B6:9F:F3:59 Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351 Certificate serial: 019C44D9E29934D6002EF9AD2F13F994A733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft Manifest number: 1814 Signing time: Tue 10 Feb 2026 00:00:55 +0000 Manifest this update: Tue 10 Feb 2026 00:00:55 +0000 Manifest next update: Wed 11 Feb 2026 00:00:55 +0000 Files and hashes: 1: LnaW5765Yz17Jsu6jhp4pcS4phE.roa (hash: IQeYGnlewk42LV1orLSIQiV+CC/nS8IwBcXiQsT3VkU=) 2: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: h61iq768i+CRNRlfBfeGz/brJ6rQrCUjLC4VE5n9eD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:e2:99:34:d6:00:2e:f9:ad:2f:13:f9:94:a7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351 Validity Not Before: Feb 10 00:00:55 2026 GMT Not After : Feb 11 00:00:55 2026 GMT Subject: CN=b8c495f3cf276c74e17ba97cb54a4b9bb69ff359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:b5:5a:1a:2e:bf:df:9a:1e:74:85:ed:c3: 10:d8:b3:4a:f4:e4:38:fe:7a:8b:27:e1:d6:6c:25: d3:a4:5f:66:0e:ad:ba:df:9a:25:c9:28:22:77:9f: 32:e7:e1:94:d6:7b:56:cd:26:9e:9f:73:b8:ff:1b: c8:e5:98:17:23:7e:9d:4e:13:b6:9f:1d:4c:18:e7: a1:56:2e:34:fb:6a:69:17:8b:36:aa:c1:5e:b1:0e: 20:f7:48:38:c1:ea:9a:51:12:94:ec:af:ea:8c:da: ed:d6:2e:c0:f7:a8:23:5b:47:96:c8:42:cf:a3:55: 16:67:78:f3:b0:1b:08:d2:f9:97:60:c0:d1:f9:a6: 35:8f:f1:16:dd:df:06:e9:1a:32:25:e8:ff:6c:55: f4:92:db:9b:b9:77:0a:41:e3:e4:bf:96:01:5b:f4: a9:8b:20:bb:ec:7d:da:5d:bc:4b:bc:30:f2:22:c7: 9c:58:da:3d:da:90:01:4b:5a:7b:31:9c:2f:c2:36: 56:9a:45:23:66:a5:51:ab:1a:7c:81:a5:7f:cd:ea: ce:b1:49:4a:90:f5:2e:c8:8c:b4:d6:27:7b:b7:b4: 90:b2:67:7d:5c:43:30:85:dc:77:5c:2c:b0:b8:85: a4:22:68:6e:81:88:25:b0:61:19:a7:94:90:7a:a5: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C4:95:F3:CF:27:6C:74:E1:7B:A9:7C:B5:4A:4B:9B:B6:9F:F3:59 X509v3 Authority Key Identifier: keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2c:41:2f:fb:51:7d:da:cd:bf:c8:7f:a3:eb:f0:c7:7d:f9: 33:3f:61:f8:03:22:20:b5:13:06:5c:47:43:94:9d:83:c1:8c: b2:af:e0:54:06:59:d5:25:4a:cc:a7:78:50:c4:d5:b6:29:4c: 6d:cf:4e:5f:84:20:46:74:9b:7d:1d:39:be:a2:02:fc:90:44: ac:1f:05:3f:e1:c0:31:24:73:90:4e:9e:f3:6b:ee:8f:fc:ed: 91:1e:d2:0a:ff:d3:61:18:f1:f3:6b:b4:45:5d:ed:3e:bf:d3: 1e:b4:9a:ef:65:9d:e2:83:ef:3b:7a:14:94:9a:dd:e8:52:90: 7c:e8:f7:56:b7:6f:22:db:81:34:9c:ac:a2:80:65:5e:20:0c: a0:73:a6:71:8b:31:29:0e:0c:d7:2e:fb:41:f0:a8:c9:f8:2a: 57:07:7d:31:db:01:3f:da:f5:7c:7b:1a:25:a6:df:af:7f:00: b8:78:c6:21:ff:00:1c:84:fd:13:db:41:5f:5b:c7:b6:cf:80: 65:6c:f3:01:f2:6a:be:60:79:06:98:cc:3a:ce:87:2f:a3:c4: 1c:5c:d9:ad:52:22:fb:f7:ad:cf:3b:35:81:f6:e8:b7:96:60: b5:d3:da:2f:31:db:4f:d3:01:4d:aa:da:71:75:26:7f:03:70: fd:b5:ec:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2eKZNNYALvmtLxP5lKczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3 YzEzNTEwHhcNMjYwMjEwMDAwMDU1WhcNMjYwMjExMDAwMDU1WjAzMTEwLwYDVQQD EyhiOGM0OTVmM2NmMjc2Yzc0ZTE3YmE5N2NiNTRhNGI5YmI2OWZmMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0e1Whouv9+aHnSF7cMQ2LNK9OQ4 /nqLJ+HWbCXTpF9mDq2635olySgid58y5+GU1ntWzSaen3O4/xvI5ZgXI36dThO2 nx1MGOehVi40+2ppF4s2qsFesQ4g90g4weqaURKU7K/qjNrt1i7A96gjW0eWyELP o1UWZ3jzsBsI0vmXYMDR+aY1j/EW3d8G6RoyJej/bFX0ktubuXcKQePkv5YBW/Sp iyC77H3aXbxLvDDyIsecWNo92pABS1p7MZwvwjZWmkUjZqVRqxp8gaV/zerOsUlK kPUuyIy01id7t7SQsmd9XEMwhdx3XCywuIWkImhugYglsGEZp5SQeqWvTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjElfPPJ2x04XupfLVKS5u2n/NZMB8GA1UdIwQY MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt NzMwZmNkMGU1ZGNhLzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXixBL/tR fdrNv8h/o+vwx335Mz9h+AMiILUTBlxHQ5Sdg8GMsq/gVAZZ1SVKzKd4UMTVtilM bc9OX4QgRnSbfR05vqIC/JBErB8FP+HAMSRzkE6e82vuj/ztkR7SCv/TYRjx82u0 RV3tPr/THrSa72Wd4oPvO3oUlJrd6FKQfOj3VrdvItuBNJysooBlXiAMoHOmcYsx KQ4M1y77QfCoyfgqVwd9MdsBP9r1fHsaJabfr38AuHjGIf8AHIT9E9tBX1vHts+A ZWzzAfJqvmB5BpjMOs6HL6PEHFzZrVIi+/etzzs1gfbot5ZgtdPaLzHbT9MBTara cXUmfwNw/bXs8g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:50 2026 by rpki-client