This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json) Hash identifier: bRY/8BtGdStvTALW6gsZmaN4+o1H3PyQeN7m2XNIHpY= Subject key identifier: 5F:6C:4B:80:98:82:CD:57:A2:09:1B:0D:42:A1:75:6E:99:3D:C6:25 Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f Certificate serial: 019C424679BF84081CE8F7FDDB9EAD1CA494 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:40 +0000 Manifest this update: Mon 09 Feb 2026 12:00:40 +0000 Manifest next update: Tue 10 Feb 2026 12:00:40 +0000 Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: R9wgOllTe9V6uNfx1N8P+AY6t0wJMWbnZtqYDIggreI=) 2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:79:bf:84:08:1c:e8:f7:fd:db:9e:ad:1c:a4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f Validity Not Before: Feb 9 12:00:40 2026 GMT Not After : Feb 10 12:00:40 2026 GMT Subject: CN=5f6c4b809882cd57a2091b0d42a1756e993dc625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c8:48:e4:e3:35:1a:b2:d0:ce:1f:67:fc:b6: ca:2e:ae:57:d8:d6:9c:96:57:68:aa:9e:e5:ef:89: 80:13:93:2e:e5:cd:66:1b:8a:3e:f5:86:be:2c:03: f2:fb:e0:6e:ee:4d:d5:be:09:f6:2f:0c:2f:66:8d: 43:20:1f:29:7b:3d:df:93:41:41:65:17:7c:23:7a: 79:b2:9f:9f:c0:1a:6d:e9:fc:0e:71:3b:71:32:b5: e6:1b:48:50:c9:54:83:cf:79:ac:e1:77:93:b9:75: fa:28:53:b9:8a:d0:0e:f6:0b:57:06:d2:17:5a:40: 5a:e2:13:8c:1b:45:38:73:91:d9:5d:64:f0:e1:73: ef:6b:00:c1:f2:d0:0c:10:1a:4b:e9:9e:52:64:9e: 1d:fa:12:ac:f1:86:d8:e5:ce:ae:79:80:1e:95:29: 5c:b6:ba:c9:23:94:d4:f3:5e:d0:e2:aa:41:3c:b8: d8:b9:a0:ee:b2:a2:a5:a4:ec:19:36:fc:6b:b4:d6: c6:59:9a:e1:a5:74:21:51:3d:36:43:52:07:92:2f: 75:ef:e1:61:cf:90:04:6b:37:dc:97:92:86:b5:c2: 2a:06:41:4a:19:2f:71:e3:42:59:72:f7:41:44:f3: 0b:cd:d8:93:d3:71:64:a8:a6:ba:fa:96:f7:2e:d5: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6C:4B:80:98:82:CD:57:A2:09:1B:0D:42:A1:75:6E:99:3D:C6:25 X509v3 Authority Key Identifier: keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b3:1d:89:4f:75:f3:0a:4f:d1:d9:28:a0:84:b4:a6:68:77: c1:55:01:12:e4:2b:85:51:17:e6:86:1f:c9:b6:9b:3b:de:b2: ec:90:bd:02:e4:78:34:b8:f0:24:28:28:19:b1:2e:6f:73:17: ea:b6:09:b3:a3:df:7c:da:09:41:35:aa:01:f9:35:21:94:2a: 8e:e5:14:ba:70:ad:b5:66:d4:ae:fb:a6:a0:5b:23:85:fa:44: 77:07:96:13:c3:7c:d8:c6:7f:7d:d6:b1:e9:15:fb:3c:37:4e: 98:46:26:4f:9c:56:70:e2:7c:66:d2:83:9a:84:49:92:6d:44: e4:4d:3e:10:f7:1e:34:bc:4e:fa:fb:03:79:fb:0b:9d:69:9d: 0b:a7:1d:09:f5:f8:e3:91:54:c0:9e:e1:1a:98:43:51:ae:58: 68:21:19:44:d5:06:83:82:ec:ce:3a:9a:dc:a6:53:e6:13:67: 12:2a:ae:4b:d1:02:f2:3f:38:69:68:d4:df:63:68:51:7c:34: f0:46:d8:75:de:64:78:b3:1c:69:8e:0a:15:d8:af:22:47:37: 35:ca:77:47:30:af:6f:30:5b:1b:a1:4a:52:56:60:55:d2:f3: 50:6e:61:9d:df:75:60:c7:b0:74:59:45:73:1a:ed:80:4c:08: c7:36:90:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnm/hAgc6Pf9256tHKSUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NDg4NjljZTU0YjlkM2IyZjNlMzlhZWUyYzljOGViMTlj YjViMGYwHhcNMjYwMjA5MTIwMDQwWhcNMjYwMjEwMTIwMDQwWjAzMTEwLwYDVQQD Eyg1ZjZjNGI4MDk4ODJjZDU3YTIwOTFiMGQ0MmExNzU2ZTk5M2RjNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAushI5OM1GrLQzh9n/LbKLq5X2Nac lldoqp7l74mAE5Mu5c1mG4o+9Ya+LAPy++Bu7k3Vvgn2LwwvZo1DIB8pez3fk0FB ZRd8I3p5sp+fwBpt6fwOcTtxMrXmG0hQyVSDz3ms4XeTuXX6KFO5itAO9gtXBtIX WkBa4hOMG0U4c5HZXWTw4XPvawDB8tAMEBpL6Z5SZJ4d+hKs8YbY5c6ueYAelSlc trrJI5TU817Q4qpBPLjYuaDusqKlpOwZNvxrtNbGWZrhpXQhUT02Q1IHki917+Fh z5AEazfcl5KGtcIqBkFKGS9x40JZcvdBRPMLzdiT03FkqKa6+pb3LtWwmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9sS4CYgs1XogkbDUKhdW6ZPcYlMB8GA1UdIwQY MBaAFDlIhpzlS507Lz45ruLJyOsZy1sPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDct MjhiZGFiY2E3MGNiLzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kZDAxODktNzk2OS00ZmQ1LTk3NDctMjhiZGFiY2E3MGNi LzEvT1VpR25PVkxuVHN2UGptdTRzbkk2eG5MV3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbMdiU91 8wpP0dkooIS0pmh3wVUBEuQrhVEX5oYfybabO96y7JC9AuR4NLjwJCgoGbEub3MX 6rYJs6PffNoJQTWqAfk1IZQqjuUUunCttWbUrvumoFsjhfpEdweWE8N82MZ/fdax 6RX7PDdOmEYmT5xWcOJ8ZtKDmoRJkm1E5E0+EPceNLxO+vsDefsLnWmdC6cdCfX4 45FUwJ7hGphDUa5YaCEZRNUGg4Lszjqa3KZT5hNnEiquS9EC8j84aWjU32NoUXw0 8EbYdd5keLMcaY4KFdivIkc3Ncp3RzCvbzBbG6FKUlZgVdLzUG5hnd91YMewdFlF cxrtgEwIxzaQcA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:38 2026 by rpki-client