This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json) Hash identifier: sz8jfqETQRtiVTiCcn6keevKDj5WQycp34KXq/wXYrs= Subject key identifier: 1B:FE:5D:73:08:34:A7:8B:FA:18:83:EA:12:39:20:EE:D0:E5:32:B4 Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Certificate serial: 019C41A2567DDAA609DD4F0A530C3326D0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft Manifest number: 0380 Signing time: Mon 09 Feb 2026 09:01:23 +0000 Manifest this update: Mon 09 Feb 2026 09:01:23 +0000 Manifest next update: Tue 10 Feb 2026 09:01:23 +0000 Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: wEyTKfIieskCryCdNMr6SOJhNf1QAG3rIl7TrQVwdRA=) 2: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (hash: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:56:7d:da:a6:09:dd:4f:0a:53:0c:33:26:d0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242 Validity Not Before: Feb 9 09:01:23 2026 GMT Not After : Feb 10 09:01:23 2026 GMT Subject: CN=1bfe5d730834a78bfa1883ea123920eed0e532b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:b0:81:9b:d1:39:9d:e6:18:bd:5c:1e:2e: 2e:fb:1b:70:3a:5a:53:3c:86:e4:5d:7f:32:1b:17: 9f:c6:a3:ef:1c:fa:34:f5:bf:b0:53:25:23:ab:56: 7b:54:92:dc:48:f3:cf:c8:82:3d:41:49:57:b3:c4: 36:de:1c:ae:4c:4a:ea:84:c0:dd:af:4a:1b:bf:a8: 8c:7c:c2:b5:77:da:b9:71:79:f6:36:0f:96:97:f6: 43:eb:34:eb:31:17:55:ee:89:88:c9:ac:b7:68:cc: 6b:a6:05:8d:56:bd:d1:47:39:4b:ca:f6:78:1c:fa: dc:1f:d7:ba:fb:97:e3:ff:45:a1:fc:f7:f1:8f:f8: 26:99:c1:b6:2a:c6:bb:3b:88:67:cd:53:72:b4:0d: e2:67:26:db:fe:67:50:d1:cc:49:d4:5a:52:56:8b: 1c:74:78:b0:e3:c9:1a:43:a8:96:48:66:fb:37:c9: 03:84:7f:01:23:86:d9:f6:30:4d:76:d6:34:dd:b1: 23:e0:6d:61:bb:1a:db:0c:ec:2c:26:36:cc:e0:49: d1:9f:9e:2e:34:d0:d5:18:e7:fe:60:e8:17:43:9b: 5b:77:d0:64:a2:0b:54:6d:51:88:52:9f:92:36:c5: 0e:c8:70:e4:36:66:65:77:77:7e:e1:b1:38:9c:9c: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:5D:73:08:34:A7:8B:FA:18:83:EA:12:39:20:EE:D0:E5:32:B4 X509v3 Authority Key Identifier: keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:28:86:af:a8:de:ff:07:93:97:98:ee:0e:14:42:86:cc: 27:34:f8:e5:e5:d8:90:70:6a:e0:99:a1:e8:c8:46:37:3e:19: d5:0b:c3:2b:63:41:ee:e1:83:74:32:83:e3:64:0b:0f:4e:0f: 8f:4d:50:ec:fa:54:da:6c:e5:2f:b4:59:3f:74:72:a1:a3:79: 9c:59:13:e2:d9:36:3a:87:42:5b:e9:9e:d8:a7:48:cc:62:9b: c0:9f:31:32:f3:df:15:ff:46:56:d3:68:7a:43:71:89:f1:3e: d9:f5:1e:63:bf:47:80:93:bd:ae:f9:08:10:b2:f8:3f:c5:a8: 1d:0d:76:db:97:9f:99:d6:56:bc:86:2d:a8:d1:d6:1d:e7:31: 23:0a:91:81:47:12:1e:c7:c5:f2:c1:bd:e4:d4:d4:99:b0:45: 68:a2:0e:ad:87:d1:b9:25:e8:86:f0:e0:66:c3:ce:21:de:3d: 42:e0:b7:2b:52:55:91:5b:c1:7b:f9:bc:15:e2:0f:e8:49:7b: c2:58:e6:20:f2:32:73:8f:d7:c1:9c:7b:8f:7f:1a:e0:28:d2: 2a:71:93:60:0a:56:97:7a:d6:43:ba:d5:9b:60:20:99:44:5d: ca:44:7f:2b:9c:1d:f4:96:fd:6f:b4:06:01:80:88:14:6e:5d: 8a:90:13:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBolZ92qYJ3U8KUwwzJtDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZjM4NmQ0YThkMmUxODgzMmNmMjNmYmYzNWY2MjQwZGI4 ZWEyNDIwHhcNMjYwMjA5MDkwMTIzWhcNMjYwMjEwMDkwMTIzWjAzMTEwLwYDVQQD EygxYmZlNWQ3MzA4MzRhNzhiZmExODgzZWExMjM5MjBlZWQwZTUzMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCSwgZvROZ3mGL1cHi4u+xtwOlpT PIbkXX8yGxefxqPvHPo09b+wUyUjq1Z7VJLcSPPPyII9QUlXs8Q23hyuTErqhMDd r0obv6iMfMK1d9q5cXn2Ng+Wl/ZD6zTrMRdV7omIyay3aMxrpgWNVr3RRzlLyvZ4 HPrcH9e6+5fj/0Wh/Pfxj/gmmcG2Ksa7O4hnzVNytA3iZybb/mdQ0cxJ1FpSVosc dHiw48kaQ6iWSGb7N8kDhH8BI4bZ9jBNdtY03bEj4G1huxrbDOwsJjbM4EnRn54u NNDVGOf+YOgXQ5tbd9BkogtUbVGIUp+SNsUOyHDkNmZld3d+4bE4nJytOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBv+XXMINKeL+hiD6hI5IO7Q5TK0MB8GA1UdIwQY MBaAFJvzhtSo0uGIMs8j+/NfYkDbjqJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEt MGEyZjI5YWVjZGIzLzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82NDhiY2MtMDkxMS00ZjY0LWI2ZDEtMGEyZjI5YWVjZGIz LzEvbV9PRzFLalM0WWd5enlQNzgxOWlRTnVPb2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFMohq+o 3v8Hk5eY7g4UQobMJzT45eXYkHBq4Jmh6MhGNz4Z1QvDK2NB7uGDdDKD42QLD04P j01Q7PpU2mzlL7RZP3RyoaN5nFkT4tk2OodCW+me2KdIzGKbwJ8xMvPfFf9GVtNo ekNxifE+2fUeY79HgJO9rvkIELL4P8WoHQ1225efmdZWvIYtqNHWHecxIwqRgUcS HsfF8sG95NTUmbBFaKIOrYfRuSXohvDgZsPOId49QuC3K1JVkVvBe/m8FeIP6El7 wljmIPIyc4/XwZx7j38a4CjSKnGTYApWl3rWQ7rVm2AgmURdykR/K5wd9Jb9b7QG AYCIFG5dipAT2w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:34 2026 by rpki-client