This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json) Hash identifier: 5zUn6KhFLs8AAEdr6UtRzJ0Fvja7YZg1QF2opLxVbik= Subject key identifier: 74:5B:76:B9:48:35:B6:29:3B:5A:EB:EF:E6:66:DE:5B:3D:F8:F5:F2 Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b Certificate serial: 019C427DF03EAC80BE9C4E9C3A0F4F44A1B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft Manifest number: 08F5 Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: ER7043w15E5TfxjID-TYUpdQDx0.roa (hash: QCEnuybWNl7OwdBInx1m2/kcO9FbiGhdTyF0PQgFlqg=) 2: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: iwbXBHnzVNCRujfSgn+yrHwza4kPtTHho5Ye2y0JuQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f0:3e:ac:80:be:9c:4e:9c:3a:0f:4f:44:a1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=745b76b94835b6293b5aebefe666de5b3df8f5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:ce:a3:bd:58:cc:c5:63:81:73:92:91:93: b2:0f:3c:67:61:73:b7:75:a3:e9:4b:51:9f:65:e7: a6:e4:a9:63:6e:69:bf:73:e2:4c:d8:40:3d:28:b9: 9e:8c:81:a4:17:75:02:c2:cf:b1:b0:50:8e:f6:35: 0a:2d:2d:f4:1d:bf:0d:80:2e:3a:18:8d:39:c1:36: 6c:c8:c2:26:31:10:22:0f:82:87:cf:c0:8e:56:5d: 05:dd:a2:b0:fb:ab:e2:a3:fb:3f:77:1b:e1:70:6e: 7e:58:fe:71:f0:7b:ba:b8:9a:a5:e8:66:84:7b:99: 55:56:02:38:6b:c5:b4:58:52:d2:ca:70:f9:f9:6d: 7e:45:b3:48:d5:07:03:a3:01:7e:76:eb:ab:a0:f3: c6:52:7a:b3:d4:a0:6c:71:1c:14:d8:3f:59:9a:de: a0:7c:18:e2:08:52:0e:45:fc:53:7b:b6:96:28:e8: fc:92:80:dc:59:8b:37:4c:e8:e8:5e:48:8a:64:47: a1:bc:2a:78:48:bb:3e:fb:cf:e5:15:5c:13:c1:27: 40:a6:38:06:c3:fe:40:56:1b:d2:ea:9e:9e:22:98: 91:da:5f:14:b3:13:ea:ba:79:6c:19:47:bd:65:e4: 62:b8:01:27:40:d7:02:8b:1a:26:47:8c:c7:de:88: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5B:76:B9:48:35:B6:29:3B:5A:EB:EF:E6:66:DE:5B:3D:F8:F5:F2 X509v3 Authority Key Identifier: keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6b:b3:54:30:1f:aa:f4:76:c3:df:aa:46:24:fe:37:ff:89: e9:60:66:2e:21:b5:a4:34:f8:ea:d3:6b:d6:39:35:ca:1c:aa: 85:de:5b:36:83:35:c0:2a:78:aa:2d:79:82:14:a9:8f:d4:c4: 97:bd:22:3c:56:ec:01:f6:6f:a8:f2:cd:b7:59:84:6d:17:05: 5a:dd:47:d5:d5:51:75:ac:83:81:1a:34:8e:f5:da:64:18:d0: 14:9b:96:5b:74:b3:02:cb:7c:5b:bf:43:d5:36:bd:78:3b:98: 53:7f:f0:17:01:a1:46:48:03:35:b5:a4:dd:24:04:86:cc:5b: 29:ae:30:da:46:d1:34:d0:af:92:e2:7a:6c:98:ac:d5:6c:b4: bd:41:8c:5f:75:bc:53:f9:c3:8a:a4:61:1b:47:cf:ce:42:23: 8b:3a:87:6e:15:a1:86:47:9d:3d:2e:34:e7:42:65:07:d9:b6: 4e:79:53:44:f9:65:59:8c:9e:55:1a:33:f0:09:72:3f:4d:7c: dd:84:2c:48:c1:18:42:0e:1f:6a:98:6d:b1:0a:28:3c:19:69: fc:98:e3:f2:67:e1:d9:53:8e:35:61:5b:7f:61:c0:c8:96:d3: b1:ec:da:be:5c:d3:08:dd:fe:71:d2:e8:29:63:ac:fb:fb:ad: 36:33:27:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffA+rIC+nE6cOg9PRKG5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzc1MDg5OTRjYTRkMmNjMTg5ZDM1ZjMzODJhMmE4YWI1 N2I4NGIwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD Eyg3NDViNzZiOTQ4MzViNjI5M2I1YWViZWZlNjY2ZGU1YjNkZjhmNWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7/Oo71YzMVjgXOSkZOyDzxnYXO3 daPpS1GfZeem5Kljbmm/c+JM2EA9KLmejIGkF3UCws+xsFCO9jUKLS30Hb8NgC46 GI05wTZsyMImMRAiD4KHz8COVl0F3aKw+6vio/s/dxvhcG5+WP5x8Hu6uJql6GaE e5lVVgI4a8W0WFLSynD5+W1+RbNI1QcDowF+duuroPPGUnqz1KBscRwU2D9Zmt6g fBjiCFIORfxTe7aWKOj8koDcWYs3TOjoXkiKZEehvCp4SLs++8/lFVwTwSdApjgG w/5AVhvS6p6eIpiR2l8UsxPqunlsGUe9ZeRiuAEnQNcCixomR4zH3ogcDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRbdrlINbYpO1rr7+Zm3ls9+PXyMB8GA1UdIwQY MBaAFDp3UImUyk0swYnTXzOCoqirV7hLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2It YTc5NjMwYjA2ZDkzLzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zYjRkOGUtMDZlOC00ZWEyLTkyN2ItYTc5NjMwYjA2ZDkz LzEvT25kUWlaVEtUU3pCaWROZk00S2lxS3RYdUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWuzVDAf qvR2w9+qRiT+N/+J6WBmLiG1pDT46tNr1jk1yhyqhd5bNoM1wCp4qi15ghSpj9TE l70iPFbsAfZvqPLNt1mEbRcFWt1H1dVRdayDgRo0jvXaZBjQFJuWW3SzAst8W79D 1Ta9eDuYU3/wFwGhRkgDNbWk3SQEhsxbKa4w2kbRNNCvkuJ6bJis1Wy0vUGMX3W8 U/nDiqRhG0fPzkIjizqHbhWhhkedPS4050JlB9m2TnlTRPllWYyeVRoz8AlyP018 3YQsSMEYQg4faphtsQooPBlp/Jjj8mfh2VOONWFbf2HAyJbTsezavlzTCN3+cdLo KWOs+/utNjMnog== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:11 2026 by rpki-client