This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json) Hash identifier: HYdqNgg79qEF/hzTTG/K7qvBYu8PX04tunQuxsnc2VM= Subject key identifier: 4D:D9:29:07:6E:79:38:34:77:4F:75:14:B6:1C:E6:99:BD:23:01:73 Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019C42B4052F5BE70FA9370684F1F0E083A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft Manifest number: 0B67 Signing time: Mon 09 Feb 2026 14:00:19 +0000 Manifest this update: Mon 09 Feb 2026 14:00:19 +0000 Manifest next update: Tue 10 Feb 2026 14:00:19 +0000 Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: DUoOnXvAsrEBbGJOtpFqlD3//KLyajXXBKPwCLSFUbE=) 2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:05:2f:5b:e7:0f:a9:37:06:84:f1:f0:e0:83:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Feb 9 14:00:19 2026 GMT Not After : Feb 10 14:00:19 2026 GMT Subject: CN=4dd929076e793834774f7514b61ce699bd230173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:f1:47:19:15:3e:cb:06:07:63:08:28:83: 9b:f7:65:b1:cd:d3:64:91:f7:83:22:1c:73:37:09: 3f:4c:c4:78:69:17:89:4e:2a:3a:a6:10:b6:34:c0: 72:af:df:1f:68:06:4f:fe:57:53:39:e1:f2:5d:f7: a7:4b:46:63:a1:e7:e0:7c:3b:8e:84:38:71:9a:8c: b1:7f:4d:84:b9:38:e1:57:b7:de:d1:20:3d:ef:73: 9e:c9:b7:4f:02:dc:78:f1:06:4c:f0:05:cb:33:80: 7c:04:d7:1c:02:91:df:31:88:27:62:00:27:29:1f: b0:e0:33:49:b2:c9:72:57:63:80:a2:0b:ff:39:7c: 09:5e:90:5a:bf:df:bb:32:77:ad:b3:92:02:9e:6b: a7:2d:bd:89:7e:4a:48:cf:a9:81:a8:12:a4:db:19: d8:2e:84:4d:30:8e:06:f8:43:17:f6:bb:fd:3d:ad: 10:ef:c1:84:56:a7:cc:81:4d:6b:63:53:e9:07:26: d8:91:df:68:3b:13:eb:c7:f8:ed:74:d1:16:22:5c: a0:2e:a7:23:5a:b2:32:c9:99:e2:78:5b:b2:46:11: 7a:59:f8:e1:e3:3b:49:d0:2c:32:22:07:26:9e:19: bf:c8:41:25:57:17:f7:a6:81:fc:f2:fe:5e:3d:93: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D9:29:07:6E:79:38:34:77:4F:75:14:B6:1C:E6:99:BD:23:01:73 X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fc:bc:a8:52:49:19:d2:81:08:77:ea:e8:c7:2e:56:41:cb: 12:36:a0:bc:e5:35:42:e3:48:cb:66:a6:0e:3e:81:2d:85:d4: 65:b9:67:aa:4a:a6:a0:96:77:3c:a2:b5:c0:18:bb:e4:76:07: 33:4a:14:e7:87:ab:76:1c:2a:45:bd:b0:ee:9c:ab:2a:c6:2e: 14:3c:6e:0e:56:5b:48:0a:b2:fe:74:d1:a4:b3:95:b3:bf:2f: c5:48:b6:50:00:59:a3:a1:f0:f1:aa:c2:55:0a:e0:b3:37:a4: fb:6b:4a:ad:01:89:da:2b:62:43:dd:34:f9:2d:f0:c0:ec:1d: 46:26:e1:38:df:fd:57:5a:c9:1a:f7:8c:e3:7a:bf:96:60:0f: 14:20:60:7c:ac:77:7b:bc:81:5a:0d:16:12:c5:68:8d:2a:8a: f0:a1:99:44:a1:c5:eb:9f:ac:18:8c:46:c9:80:13:76:ce:d0: a8:8f:77:2e:c0:ff:27:e3:c7:77:af:0c:12:5f:4d:83:d6:db: d8:6c:36:46:37:c8:14:ce:78:26:e4:0b:ea:5e:4e:36:18:13: be:38:29:22:25:06:38:a7:88:08:b9:69:2a:eb:05:28:f1:dc: 81:7a:eb:d3:c1:7c:d9:24:ea:af:cd:ac:71:07:4a:5d:84:cb: cf:79:68:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAUvW+cPqTcGhPHw4IOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD Eyg0ZGQ5MjkwNzZlNzkzODM0Nzc0Zjc1MTRiNjFjZTY5OWJkMjMwMTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu83xRxkVPssGB2MIKIOb92WxzdNk kfeDIhxzNwk/TMR4aReJTio6phC2NMByr98faAZP/ldTOeHyXfenS0ZjoefgfDuO hDhxmoyxf02EuTjhV7fe0SA973OeybdPAtx48QZM8AXLM4B8BNccApHfMYgnYgAn KR+w4DNJsslyV2OAogv/OXwJXpBav9+7Mnets5ICnmunLb2JfkpIz6mBqBKk2xnY LoRNMI4G+EMX9rv9Pa0Q78GEVqfMgU1rY1PpBybYkd9oOxPrx/jtdNEWIlygLqcj WrIyyZnieFuyRhF6Wfjh4ztJ0CwyIgcmnhm/yEElVxf3poH88v5ePZNfXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3ZKQdueTg0d091FLYc5pm9IwFzMB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/y8qFJJ GdKBCHfq6McuVkHLEjagvOU1QuNIy2amDj6BLYXUZblnqkqmoJZ3PKK1wBi75HYH M0oU54erdhwqRb2w7pyrKsYuFDxuDlZbSAqy/nTRpLOVs78vxUi2UABZo6Hw8arC VQrgszek+2tKrQGJ2itiQ900+S3wwOwdRibhON/9V1rJGveM43q/lmAPFCBgfKx3 e7yBWg0WEsVojSqK8KGZRKHF65+sGIxGyYATds7QqI93LsD/J+PHd68MEl9Ng9bb 2Gw2RjfIFM54JuQL6l5ONhgTvjgpIiUGOKeICLlpKusFKPHcgXrr08F82STqr82s cQdKXYTLz3loNw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:50 2026 by rpki-client