This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json) Hash identifier: 8GNKjoOzbGoiJuyIyxJQoWnskMywVpk7IjZdPB9piJk= Subject key identifier: 4A:9E:3C:4D:8C:A7:AC:4B:FB:C9:69:A2:10:5A:66:2F:08:02:55:84 Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a Certificate serial: 019C446B930BF267EBA6A3B8EC7F951C1E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft Manifest number: 0BA2 Signing time: Mon 09 Feb 2026 22:00:26 +0000 Manifest this update: Mon 09 Feb 2026 22:00:26 +0000 Manifest next update: Tue 10 Feb 2026 22:00:26 +0000 Files and hashes: 1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=) 2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: lzY+Cgf9IA35zDNVrbKmReZmDlKvw2R8JFHZ3lqzhmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:93:0b:f2:67:eb:a6:a3:b8:ec:7f:95:1c:1e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a Validity Not Before: Feb 9 22:00:26 2026 GMT Not After : Feb 10 22:00:26 2026 GMT Subject: CN=4a9e3c4d8ca7ac4bfbc969a2105a662f08025584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:e3:3d:64:c0:a8:f8:7c:15:cd:df:4d:2c: df:4c:e4:e5:27:a0:ac:84:74:fe:e9:fe:71:04:12: 3a:bf:02:ac:41:19:95:f6:4a:48:bf:25:57:c1:fd: fb:6a:cc:04:9d:8d:d7:2a:1d:37:e2:3d:0a:15:73: 5c:a2:f2:c9:11:fa:94:55:8a:ee:1f:90:87:3d:ae: 1a:8b:41:16:26:0a:da:ec:be:e5:81:f6:4b:8d:15: 2c:e5:f0:4a:c7:9d:e3:76:e5:74:37:ea:25:cc:4f: df:8a:cb:29:f4:a8:c7:c1:a4:a0:38:46:f9:03:17: 4f:d7:52:e8:c6:8c:84:99:a0:a5:30:dd:df:de:cd: 25:c7:35:dd:43:d7:20:d4:1a:6d:79:dd:bb:76:6a: 56:ec:14:e0:6e:a9:f3:69:1c:60:4d:25:dd:66:74: 1d:dc:a3:f8:a6:5c:15:9d:45:a3:e5:b6:de:42:8e: 50:85:b0:5a:49:36:a9:b5:7f:18:03:a0:0e:55:cc: 34:c8:6f:11:db:92:a9:84:83:02:c5:11:1b:39:e4: 8b:e3:a1:e2:92:6a:24:66:b8:fb:cb:0d:34:77:75: bd:e6:52:d8:c6:82:4a:52:fc:cd:52:99:d4:b5:99: 2e:64:34:43:ed:d7:ce:a8:e0:5d:c5:ce:08:c4:b2: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:3C:4D:8C:A7:AC:4B:FB:C9:69:A2:10:5A:66:2F:08:02:55:84 X509v3 Authority Key Identifier: keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e8:a3:20:20:be:0f:9a:2c:a1:e3:d6:78:61:ad:70:01:cd: 1d:87:4c:75:f7:11:fd:53:68:97:c1:e8:c4:72:fb:be:d0:2e: 07:49:70:3f:55:02:95:a8:de:2d:d7:44:3f:cb:02:3d:0a:46: 40:0e:19:d5:05:7c:1b:94:b2:37:c4:a9:26:0b:7f:89:29:69: b7:a9:0f:cd:d2:66:13:56:ab:a0:8c:00:2b:d8:ea:12:fe:7a: 30:c5:05:6f:52:10:bb:d4:ae:1d:66:18:ff:d2:0f:1e:14:06: bb:08:c1:30:74:47:1d:2b:79:09:68:38:0c:11:f8:b2:8f:3e: 2c:3c:a4:5f:61:d1:c3:b1:4d:f7:aa:b5:e6:4a:37:d5:27:af: 6d:0b:48:ad:13:74:4c:22:8d:2d:7c:2c:96:fc:d5:7b:43:36: 4a:58:c0:57:31:76:b0:fe:82:c8:97:9e:10:f7:ae:b8:07:01: 50:d4:13:dd:f1:c0:8a:80:be:b9:3e:80:53:b0:65:f8:f7:a2: c9:03:0f:20:aa:b2:fe:e6:5c:a7:e1:d6:1d:95:a9:08:95:0d: 03:ba:34:2f:82:43:b3:a8:f2:74:36:72:6f:f4:fb:83:07:64: 08:ed:86:5c:36:77:85:bc:17:ff:09:c4:b6:1a:f5:b4:c7:95: 60:74:a5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5ML8mfrpqO47H+VHB6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTNhOThhNzQ5ZTU2OTc0NGExZWRlMmM5NDBmMmU0MzNj NDQwOGEwHhcNMjYwMjA5MjIwMDI2WhcNMjYwMjEwMjIwMDI2WjAzMTEwLwYDVQQD Eyg0YTllM2M0ZDhjYTdhYzRiZmJjOTY5YTIxMDVhNjYyZjA4MDI1NTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9HjPWTAqPh8Fc3fTSzfTOTlJ6Cs hHT+6f5xBBI6vwKsQRmV9kpIvyVXwf37aswEnY3XKh034j0KFXNcovLJEfqUVYru H5CHPa4ai0EWJgra7L7lgfZLjRUs5fBKx53jduV0N+olzE/fissp9KjHwaSgOEb5 AxdP11LoxoyEmaClMN3f3s0lxzXdQ9cg1Bpted27dmpW7BTgbqnzaRxgTSXdZnQd 3KP4plwVnUWj5bbeQo5QhbBaSTaptX8YA6AOVcw0yG8R25KphIMCxREbOeSL46Hi kmokZrj7yw00d3W95lLYxoJKUvzNUpnUtZkuZDRD7dfOqOBdxc4IxLK93wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqePE2Mp6xL+8lpohBaZi8IAlWEMB8GA1UdIwQY MBaAFHZTqYp0nlaXRKHt4slA8uQzxECKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEt YjlkYzJmMmIwMDJjLzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEtYjlkYzJmMmIwMDJj LzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOijICC+ D5osoePWeGGtcAHNHYdMdfcR/VNol8HoxHL7vtAuB0lwP1UClajeLddEP8sCPQpG QA4Z1QV8G5SyN8SpJgt/iSlpt6kPzdJmE1aroIwAK9jqEv56MMUFb1IQu9SuHWYY /9IPHhQGuwjBMHRHHSt5CWg4DBH4so8+LDykX2HRw7FN96q15ko31SevbQtIrRN0 TCKNLXwslvzVe0M2SljAVzF2sP6CyJeeEPeuuAcBUNQT3fHAioC+uT6AU7Bl+Pei yQMPIKqy/uZcp+HWHZWpCJUNA7o0L4JDs6jydDZyb/T7gwdkCO2GXDZ3hbwX/wnE thr1tMeVYHSl9w== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:38 2026 by rpki-client