This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json) Hash identifier: YWawyeYmzWtIHQ3NujQEfu8Vr89GCZ+KJ/DQ48Ndi70= Subject key identifier: A1:B6:A3:CF:00:13:85:E5:44:06:53:C4:A8:A8:6E:44:32:D2:90:61 Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334 Certificate serial: 019C43C6FABE0BED5A604764F75830891B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft Manifest number: 0CA0 Signing time: Mon 09 Feb 2026 19:00:39 +0000 Manifest this update: Mon 09 Feb 2026 19:00:39 +0000 Manifest next update: Tue 10 Feb 2026 19:00:39 +0000 Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=) 2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: KW7aBK8mfMfjs3n8Qc+p6HoWv8j6S3pI+ta7ycQaQXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:fa:be:0b:ed:5a:60:47:64:f7:58:30:89:1b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334 Validity Not Before: Feb 9 19:00:39 2026 GMT Not After : Feb 10 19:00:39 2026 GMT Subject: CN=a1b6a3cf001385e5440653c4a8a86e4432d29061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:66:09:ab:7b:84:26:32:f3:bc:63:0a:a0: 0f:5c:b3:bd:7d:10:ad:bd:92:91:c5:6d:a2:37:38: f7:4e:c3:50:e8:eb:58:86:be:ea:69:73:43:d3:38: e1:9f:5a:1b:ff:f3:6b:28:93:79:fb:0f:19:8a:51: a3:1c:bd:f9:b3:03:8b:47:94:bd:34:5f:93:61:0f: ec:11:5d:99:76:6c:69:6b:60:4d:a4:79:5f:bd:5d: 73:da:54:3c:6a:69:f9:08:48:6d:99:0c:93:b0:fb: ac:38:55:4d:64:56:c5:a2:c2:85:a0:2b:0a:df:05: 3f:a6:0d:0a:36:70:bb:6b:05:33:0e:78:a9:27:28: 5b:a2:b5:27:79:c3:18:4d:1c:4e:70:3b:b0:38:30: 84:b4:7e:68:df:04:86:9a:0b:99:94:81:a4:86:5b: a3:ed:ab:3f:71:10:50:8d:0a:0f:90:7a:28:ef:6d: a8:ec:2c:0d:bf:37:7d:1d:34:10:9b:07:cf:7f:f9: cb:c2:4f:53:64:6c:78:92:e2:0f:52:4e:c4:6a:a9: ad:8d:8e:11:43:1c:dd:05:15:7f:81:fc:39:45:0e: 4a:89:62:ec:8d:5e:0a:6a:9f:a0:b2:0d:f3:c5:e2: d3:70:07:54:94:02:c7:3f:e4:e5:42:ce:86:c0:e6: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B6:A3:CF:00:13:85:E5:44:06:53:C4:A8:A8:6E:44:32:D2:90:61 X509v3 Authority Key Identifier: keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:24:ce:c3:d3:6d:b7:59:ca:ca:85:d5:e6:67:fc:e5:5e:44: 0c:87:86:13:36:5e:91:bb:af:4a:48:56:82:5a:62:1f:25:f6: 99:a6:bc:a2:31:a9:d6:23:70:38:31:ae:ff:63:17:32:66:04: b4:2b:a5:f4:07:f2:01:9b:5e:9b:bf:ff:3b:31:e5:62:d4:57: 61:e6:49:f2:c0:67:51:83:25:48:02:61:96:cb:7d:2b:96:d9: b9:7b:a4:a6:34:f0:b1:bc:95:e2:c1:79:8e:78:74:0a:79:34: 8f:96:8e:03:2c:ba:75:da:13:d2:e2:ad:a6:b7:b5:ab:c6:5e: d4:87:3a:7a:97:6b:e9:41:4c:47:76:2a:ae:6b:68:0e:c5:67: 92:7a:d0:6c:ed:12:e6:f6:2a:a2:ce:d4:75:ff:df:31:57:8a: 9b:0d:af:25:0f:13:5c:8b:1e:a0:af:44:56:51:f7:11:68:99: e9:92:47:3b:28:c8:ce:63:97:77:0c:46:9d:c2:19:20:42:f8: a3:b1:84:2e:c5:dc:86:11:40:a9:4d:b1:7a:b0:cd:d1:ca:62: 31:87:74:0e:cd:f6:ae:f7:58:a3:af:df:48:dc:d5:8f:1d:0f: 45:15:f9:f8:be:10:3a:8c:ce:8d:65:5f:20:c4:b1:90:b1:58: a6:33:be:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvq+C+1aYEdk91gwiRtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiODBlZGQ0MjUwNTA4NjVlYWZiYTgwODlkYjlkYTNmMzUx OWIzMzQwHhcNMjYwMjA5MTkwMDM5WhcNMjYwMjEwMTkwMDM5WjAzMTEwLwYDVQQD EyhhMWI2YTNjZjAwMTM4NWU1NDQwNjUzYzRhOGE4NmU0NDMyZDI5MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDhmCat7hCYy87xjCqAPXLO9fRCt vZKRxW2iNzj3TsNQ6OtYhr7qaXND0zjhn1ob//NrKJN5+w8ZilGjHL35swOLR5S9 NF+TYQ/sEV2Zdmxpa2BNpHlfvV1z2lQ8amn5CEhtmQyTsPusOFVNZFbFosKFoCsK 3wU/pg0KNnC7awUzDnipJyhborUnecMYTRxOcDuwODCEtH5o3wSGmguZlIGkhluj 7as/cRBQjQoPkHoo722o7CwNvzd9HTQQmwfPf/nLwk9TZGx4kuIPUk7EaqmtjY4R QxzdBRV/gfw5RQ5KiWLsjV4Kap+gsg3zxeLTcAdUlALHP+TlQs6GwObTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG2o88AE4XlRAZTxKiobkQy0pBhMB8GA1UdIwQY MBaAFDuA7dQlBQhl6vuoCJ252j81GbM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMt YzcxNjFkYzVjMDg3LzEvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83ZjEzYTktNzI4OS00ZTFlLWJiNDMtYzcxNjFkYzVjMDg3 LzEvTzREdDFDVUZDR1hxLTZnSW5ibmFQelVac3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSTOw9Nt t1nKyoXV5mf85V5EDIeGEzZekbuvSkhWglpiHyX2maa8ojGp1iNwODGu/2MXMmYE tCul9AfyAZtem7//OzHlYtRXYeZJ8sBnUYMlSAJhlst9K5bZuXukpjTwsbyV4sF5 jnh0Cnk0j5aOAyy6ddoT0uKtpre1q8Ze1Ic6epdr6UFMR3YqrmtoDsVnknrQbO0S 5vYqos7Udf/fMVeKmw2vJQ8TXIseoK9EVlH3EWiZ6ZJHOyjIzmOXdwxGncIZIEL4 o7GELsXchhFAqU2xerDN0cpiMYd0Ds32rvdYo6/fSNzVjx0PRRX5+L4QOozOjWVf IMSxkLFYpjO+Gg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:09 2026 by rpki-client