This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json) Hash identifier: mq/2rx4hX2NChwjd2P7M94JehNp7ijOunl9j+2kM2WM= Subject key identifier: A8:D2:39:36:05:E6:A3:E4:E6:14:50:A9:32:5E:52:ED:00:82:4E:A7 Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Certificate serial: 019C42B490B02F55C02265B8721BE099ADE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft Manifest number: 0C5C Signing time: Mon 09 Feb 2026 14:00:55 +0000 Manifest this update: Mon 09 Feb 2026 14:00:55 +0000 Manifest next update: Tue 10 Feb 2026 14:00:55 +0000 Files and hashes: 1: YSMWuDqk-bjhkPi8WnOACn6bd88.roa (hash: yo88cm9+7+sB1BFSP6snooV47AtjlChRf2YYkKtTUBE=) 2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: U/NE+BCbYaoEAC7lPrIH+aDdNsYuDM+QSgng/YzLRRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:90:b0:2f:55:c0:22:65:b8:72:1b:e0:99:ad:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2 Validity Not Before: Feb 9 14:00:55 2026 GMT Not After : Feb 10 14:00:55 2026 GMT Subject: CN=a8d2393605e6a3e4e61450a9325e52ed00824ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fc:00:e2:6c:37:6a:10:7f:93:67:31:50:65: 42:3c:4f:21:a8:7a:c2:43:28:37:59:d0:56:d1:e6: 81:b8:6a:b0:a5:46:e0:9e:e8:a4:34:14:b1:c5:54: 49:36:24:c2:29:3d:6c:d4:c1:0e:22:2a:5a:57:e0: 29:1a:24:3f:66:4d:a5:f7:c5:7b:f6:3e:4b:cf:08: 0f:45:ad:66:da:71:33:bc:89:75:a4:fd:1d:66:3a: 29:f1:35:ab:a2:3a:b9:a7:ca:8f:a1:ca:94:4f:50: c2:3a:79:69:57:5b:8d:f0:a2:2e:84:96:ea:e4:5b: 8f:a1:fd:d9:cf:3d:b7:d0:61:a7:1a:1c:1c:ed:1e: c1:3e:1d:25:01:2b:91:3e:a1:e2:2e:f6:d8:46:2f: 63:0b:d7:96:0c:55:ca:75:4e:63:6f:0e:63:e8:83: 19:d7:eb:28:ca:3c:b4:3c:95:bd:51:fa:e9:0c:b7: f1:1a:0b:5d:8e:df:a1:d1:c5:a4:f4:67:e8:59:a7: ed:50:17:8a:2f:20:82:b7:7c:59:44:7a:ec:b2:c9: a3:27:79:75:52:5b:35:75:43:5b:4c:3c:10:15:75: c8:6e:b4:d7:84:4e:5b:62:59:aa:41:05:01:6f:43: 91:1d:a1:ef:f8:39:dd:f2:67:59:b6:61:34:2b:dd: 9e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D2:39:36:05:E6:A3:E4:E6:14:50:A9:32:5E:52:ED:00:82:4E:A7 X509v3 Authority Key Identifier: keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cb:44:1a:31:32:f7:45:be:72:a4:ec:66:de:79:6d:0d:53: f7:95:eb:1b:32:d5:b7:ad:e5:e1:3e:37:46:a7:a5:0f:ac:54: a9:9d:af:7b:27:fb:5b:4a:d9:2e:fd:94:4b:78:d8:fd:95:08: 1c:70:fe:0a:27:ab:68:0a:08:5d:0b:d2:90:4f:6d:e6:4c:46: 98:ec:f1:ff:07:4d:1f:c0:7b:56:48:82:6f:c1:d0:4c:11:f0: db:e8:b1:41:24:5d:c2:11:fc:69:e3:e5:4b:46:8f:4e:bd:1f: f0:2a:8f:9c:98:e7:a5:11:2d:70:66:fe:0a:dc:17:a1:b3:3b: 1a:e8:c9:fe:57:b6:eb:99:5c:0a:13:49:42:87:a9:0b:66:a5: cb:e2:5c:fc:a1:b8:fc:e9:53:42:7f:34:76:e1:89:63:1e:9e: b7:fa:78:4e:c1:d0:bb:78:37:32:9f:6a:6b:ae:71:8b:c7:fd: 5d:3f:ae:b7:07:83:4e:50:d7:7f:7d:a1:28:cd:81:82:34:f5: a3:39:df:cd:db:5a:9a:fb:c5:b5:7b:a9:c0:4a:4d:74:b7:43: cd:51:c6:11:c6:c4:74:a0:f2:17:bf:3a:38:8b:32:ba:53:d0: f0:85:c0:2a:a4:d7:73:81:3a:c3:d1:f3:4e:67:8a:41:37:d1: 64:c9:ad:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJCwL1XAImW4chvgma3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm Y2M1ZTIwHhcNMjYwMjA5MTQwMDU1WhcNMjYwMjEwMTQwMDU1WjAzMTEwLwYDVQQD EyhhOGQyMzkzNjA1ZTZhM2U0ZTYxNDUwYTkzMjVlNTJlZDAwODI0ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/wA4mw3ahB/k2cxUGVCPE8hqHrC Qyg3WdBW0eaBuGqwpUbgnuikNBSxxVRJNiTCKT1s1MEOIipaV+ApGiQ/Zk2l98V7 9j5LzwgPRa1m2nEzvIl1pP0dZjop8TWrojq5p8qPocqUT1DCOnlpV1uN8KIuhJbq 5FuPof3Zzz230GGnGhwc7R7BPh0lASuRPqHiLvbYRi9jC9eWDFXKdU5jbw5j6IMZ 1+soyjy0PJW9UfrpDLfxGgtdjt+h0cWk9GfoWaftUBeKLyCCt3xZRHrsssmjJ3l1 Uls1dUNbTDwQFXXIbrTXhE5bYlmqQQUBb0ORHaHv+Dnd8mdZtmE0K92etwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjSOTYF5qPk5hRQqTJeUu0Agk6nMB8GA1UdIwQY MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMtEGjEy 90W+cqTsZt55bQ1T95XrGzLVt63l4T43RqelD6xUqZ2veyf7W0rZLv2US3jY/ZUI HHD+CieraAoIXQvSkE9t5kxGmOzx/wdNH8B7VkiCb8HQTBHw2+ixQSRdwhH8aePl S0aPTr0f8CqPnJjnpREtcGb+CtwXobM7GujJ/le265lcChNJQoepC2aly+Jc/KG4 /OlTQn80duGJYx6et/p4TsHQu3g3Mp9qa65xi8f9XT+utweDTlDXf32hKM2BgjT1 oznfzdtamvvFtXupwEpNdLdDzVHGEcbEdKDyF786OIsyulPQ8IXAKqTXc4E6w9Hz TmeKQTfRZMmtwA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:11 2026 by rpki-client