This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json) Hash identifier: IurG/YtwixKhV9tSEkjXjuk4/jdRYC0GH+bJ9tonahY= Subject key identifier: 4D:B1:A5:27:54:C5:78:4A:75:D9:7D:3C:39:95:2D:44:B7:18:FE:DA Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535 Certificate serial: 019C42B413A5399018C0330D83E9FBC33F79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft Manifest number: 1002 Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=) 2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: 6MdXPBmzEbX3x5c7nL+CSAgQ58ttnaTINtbAJC/RfXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:13:a5:39:90:18:c0:33:0d:83:e9:fb:c3:3f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535 Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=4db1a52754c5784a75d97d3c39952d44b718feda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:94:44:0a:ff:a4:d7:b3:3b:26:48:09:8d: ef:ea:be:d6:87:d6:f8:64:c3:90:59:64:a4:2d:51: 49:61:7c:7d:ca:48:fa:73:71:67:b0:03:eb:89:49: e5:fd:d2:2f:82:d3:62:21:b8:c1:a5:5e:7d:77:87: 83:d4:d2:3b:5d:be:14:b0:8d:40:e2:b2:30:d4:49: f8:76:e0:d9:40:74:29:76:ff:ae:71:af:10:79:9e: a0:00:cd:18:5e:ee:15:7c:15:25:ba:41:ba:bf:b4: 75:9a:ee:d7:b6:bf:2a:4c:81:b0:db:c6:71:9d:70: f3:ab:8a:e7:d2:66:78:0c:07:41:99:02:02:6c:d5: 26:61:f2:2f:d3:37:c2:20:6c:34:b8:64:bb:6d:3c: 6a:85:d1:1d:b6:00:f8:f1:5b:83:a9:e4:b6:4c:f0: 08:21:fb:1b:86:15:51:a4:ee:75:d7:36:a6:56:aa: 77:89:7e:37:e4:73:f7:38:08:cd:68:d9:84:8f:4d: cb:11:b3:da:47:6a:b1:6f:22:e1:93:8e:06:a6:56: 32:3c:d7:4a:4b:ce:95:ec:7b:7e:07:48:e8:d9:6f: 8b:1a:27:69:d1:a3:59:0b:7f:2e:20:44:78:da:46: 2a:77:85:25:3c:67:b3:93:0b:2d:c0:f0:b1:9e:4b: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:A5:27:54:C5:78:4A:75:D9:7D:3C:39:95:2D:44:B7:18:FE:DA X509v3 Authority Key Identifier: keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:11:8c:2a:e3:4a:4b:42:31:7d:1c:c7:ac:d3:69:b4:55: 57:5d:6a:0e:c4:05:6c:3d:8d:38:65:4b:8f:d2:fa:5a:92:1f: 25:28:59:bf:d2:fb:0b:7a:b9:be:fa:02:ae:73:96:91:5d:b8: 60:58:e9:c8:d4:d8:fc:0e:99:c3:b6:a2:92:e1:20:d2:c9:e6: 2a:d3:85:78:18:b3:44:ee:a2:6a:13:96:6a:59:24:8c:ee:df: d9:f0:73:6c:bd:96:a9:62:8c:ff:9b:3d:f7:fa:be:ab:18:5c: e7:cc:51:90:42:f9:d1:05:86:a3:99:98:4d:de:cb:50:48:9a: 9d:df:53:b1:ac:08:2a:b7:d7:66:c9:b8:bf:27:85:e5:4f:7c: 05:ee:ea:b3:88:9c:2c:2a:04:02:a6:2c:26:4f:99:a3:f3:5b: 85:1a:a3:72:77:0b:01:77:6c:3c:be:74:b0:a4:d9:c0:b2:ae: c8:bc:05:29:22:d9:99:3a:57:5e:b5:ea:d9:cd:71:e9:33:9d: a2:4c:52:b3:4a:f9:f5:06:a5:80:eb:9c:d7:19:20:de:9d:69: 4c:5b:cc:f2:8e:02:c0:46:64:33:9b:e8:57:a3:f1:87:08:99: 01:aa:ce:21:66:a7:bf:6e:c5:d6:b8:e6:2c:df:b0:f1:bd:6f: 43:84:86:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBOlOZAYwDMNg+n7wz95MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYzU2NDQxZDgzZGY5NGJiZDBlNjAxNDRhNTU0NjM5ZTQw ZTA1MzUwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD Eyg0ZGIxYTUyNzU0YzU3ODRhNzVkOTdkM2MzOTk1MmQ0NGI3MThmZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NyURAr/pNezOyZICY3v6r7Wh9b4 ZMOQWWSkLVFJYXx9ykj6c3FnsAPriUnl/dIvgtNiIbjBpV59d4eD1NI7Xb4UsI1A 4rIw1En4duDZQHQpdv+uca8QeZ6gAM0YXu4VfBUlukG6v7R1mu7Xtr8qTIGw28Zx nXDzq4rn0mZ4DAdBmQICbNUmYfIv0zfCIGw0uGS7bTxqhdEdtgD48VuDqeS2TPAI IfsbhhVRpO511zamVqp3iX435HP3OAjNaNmEj03LEbPaR2qxbyLhk44GplYyPNdK S86V7Ht+B0jo2W+LGidp0aNZC38uIER42kYqd4UlPGezkwstwPCxnkuUsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2xpSdUxXhKddl9PDmVLUS3GP7aMB8GA1UdIwQY MBaAFKLFZEHYPflLvQ5gFEpVRjnkDgU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAt ZjY1ZGRkZmEwZTFkLzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAtZjY1ZGRkZmEwZTFk LzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETgRjCrj SktCMX0cx6zTabRVV11qDsQFbD2NOGVLj9L6WpIfJShZv9L7C3q5vvoCrnOWkV24 YFjpyNTY/A6Zw7aikuEg0snmKtOFeBizRO6iahOWalkkjO7f2fBzbL2WqWKM/5s9 9/q+qxhc58xRkEL50QWGo5mYTd7LUEiand9TsawIKrfXZsm4vyeF5U98Be7qs4ic LCoEAqYsJk+Zo/NbhRqjcncLAXdsPL50sKTZwLKuyLwFKSLZmTpXXrXq2c1x6TOd okxSs0r59QalgOuc1xkg3p1pTFvM8o4CwEZkM5voV6PxhwiZAarOIWanv27F1rjm LN+w8b1vQ4SGCw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:10 2026 by rpki-client