This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json) Hash identifier: 4NhlmMTCCVzApCW6IrPiDVkMnEXPxRRHy0Qj/v/fJrY= Subject key identifier: 6D:1A:D4:1B:CA:9D:83:3E:9D:85:96:5D:87:9B:FD:BD:3E:6A:40:B1 Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62 Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62 Certificate serial: 019C427E0ABC14EC3BAE4F7D64F27CFE758E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: May8Pjs+LOOFCokov+gf45IEt0dXkcXYG1djgWfU9xE=) 2: Z4v6ZlvI7omARbhcez6_NDTJQb8.roa (hash: UHj01S+GeMVO8OMw4/2M24W4FzNlf+cf+5/o/Mm/j6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0a:bc:14:ec:3b:ae:4f:7d:64:f2:7c:fe:75:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62 Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=6d1ad41bca9d833e9d85965d879bfdbd3e6a40b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ae:c7:78:16:d8:bc:75:1b:20:ca:18:44:d6: 4c:c0:a5:97:12:d9:22:cc:04:23:a6:59:e2:b0:a2: 48:b3:4a:3c:d0:02:14:28:fc:d0:f3:56:c6:e0:55: eb:92:5c:43:10:f3:70:92:33:5b:46:fe:62:42:f2: ef:b5:16:0d:f2:0d:ac:f0:69:00:12:3d:96:2a:f1: 15:67:7b:80:3d:16:df:23:4f:ad:97:79:43:ac:32: da:c2:c7:4c:43:8b:da:85:01:fd:fd:5a:ec:c0:d9: 98:26:0b:15:6e:f4:4c:5c:d3:86:3b:e4:e0:7e:d0: 2c:7f:90:90:d7:a7:07:fb:16:ad:ca:ab:a9:94:d4: 4f:b0:c3:f3:ac:17:43:2a:74:95:a8:7c:70:7b:f9: 48:84:f0:a1:8c:be:97:d8:57:3e:42:79:b5:6b:a1: 6a:91:1e:41:3f:77:1a:08:68:5c:f0:a3:ef:78:ab: 38:e9:72:a5:6c:d0:ba:50:52:0c:3f:4d:1b:ad:10: 41:07:e8:d3:47:c5:56:e2:a4:5b:7f:7a:bb:b5:91: a4:26:22:e0:0a:2b:ae:a8:d9:a3:56:cc:0d:0a:b0: 1a:d1:ff:7b:ab:94:8b:f5:5f:d2:9f:97:a7:6a:19: e6:00:03:66:2d:2b:30:d7:09:0d:3d:d4:b2:79:b0: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:D4:1B:CA:9D:83:3E:9D:85:96:5D:87:9B:FD:BD:3E:6A:40:B1 X509v3 Authority Key Identifier: keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:a4:b4:16:74:0a:f7:83:3a:9a:62:d7:b7:08:14:a4:72:db: f7:82:43:19:ba:cf:86:c8:b3:8c:3a:1f:7d:fe:54:30:0e:8b: e0:77:e5:e6:79:24:6f:ba:93:f1:6f:0b:36:87:94:d7:d8:2d: 84:e5:dc:61:aa:69:91:fb:a6:9d:82:fa:3e:c4:50:7d:01:63: e3:1b:0f:93:da:83:df:77:9c:68:47:ea:ad:ee:35:e2:63:43: f5:23:22:bc:f8:5b:96:45:dd:7e:0b:06:64:9c:38:97:b7:d2: 63:19:6d:46:6e:f8:ad:e3:3d:62:03:14:98:07:e3:74:3c:24: be:c9:68:fa:c0:f5:09:0d:7f:0f:cc:0d:9d:aa:b3:dd:3b:6f: 63:75:ce:d6:63:f9:86:2c:07:b9:5d:4b:7d:37:72:24:f5:0a: 6b:d4:35:ea:2f:09:37:c8:1e:6c:00:fc:f6:ff:cd:d2:7b:85: 11:ed:72:54:34:3f:bf:26:ab:fa:e7:18:5b:c5:88:35:b6:b9: f7:fa:1d:83:cb:7a:6f:62:65:c2:21:12:f9:a5:e6:35:8d:9b: fb:53:f5:c7:84:20:d6:db:7a:26:a3:3c:08:c6:c8:8e:90:a0: 93:2e:a8:ff:5f:b5:03:ea:f2:b7:bb:22:a4:3e:00:bc:a5:55: 3d:b0:75:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgq8FOw7rk99ZPJ8/nWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MDViN2VjMWNiOGU4OTVhMjViZDRhYzY3YmMzMTY2NjE1 ZDhiNjIwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD Eyg2ZDFhZDQxYmNhOWQ4MzNlOWQ4NTk2NWQ4NzliZmRiZDNlNmE0MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K7HeBbYvHUbIMoYRNZMwKWXEtki zAQjplnisKJIs0o80AIUKPzQ81bG4FXrklxDEPNwkjNbRv5iQvLvtRYN8g2s8GkA Ej2WKvEVZ3uAPRbfI0+tl3lDrDLawsdMQ4vahQH9/VrswNmYJgsVbvRMXNOGO+Tg ftAsf5CQ16cH+xatyquplNRPsMPzrBdDKnSVqHxwe/lIhPChjL6X2Fc+Qnm1a6Fq kR5BP3caCGhc8KPveKs46XKlbNC6UFIMP00brRBBB+jTR8VW4qRbf3q7tZGkJiLg CiuuqNmjVswNCrAa0f97q5SL9V/Sn5enahnmAANmLSsw1wkNPdSyebCuhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0a1BvKnYM+nYWWXYeb/b0+akCxMB8GA1UdIwQY MBaAFDkFt+wcuOiVolvUrGe8MWZhXYtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQt ZDlhZWJlNDNlZjQyLzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80ZTZiNDMtMTNkNy00ZDNiLTkyZWQtZDlhZWJlNDNlZjQy LzEvT1FXMzdCeTQ2SldpVzlTc1o3d3habUZkaTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6S0FnQK 94M6mmLXtwgUpHLb94JDGbrPhsizjDofff5UMA6L4Hfl5nkkb7qT8W8LNoeU19gt hOXcYappkfumnYL6PsRQfQFj4xsPk9qD33ecaEfqre414mND9SMivPhblkXdfgsG ZJw4l7fSYxltRm74reM9YgMUmAfjdDwkvslo+sD1CQ1/D8wNnaqz3TtvY3XO1mP5 hiwHuV1LfTdyJPUKa9Q16i8JN8gebAD89v/N0nuFEe1yVDQ/vyar+ucYW8WINba5 9/odg8t6b2JlwiES+aXmNY2b+1P1x4Qg1tt6JqM8CMbIjpCgky6o/1+1A+ryt7si pD4AvKVVPbB1YQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:55 2026 by rpki-client