This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json) Hash identifier: j0G118Et05U6IWaIqFwSrQRovZGJSVlRRqZY1HmUgUE= Subject key identifier: 78:6C:E4:57:63:B6:9F:C3:0A:68:56:90:DC:36:39:8A:B6:D2:60:51 Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Certificate serial: 019C438FB769C967535FEA2FA6AAAB3BED18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft Manifest number: 0C49 Signing time: Mon 09 Feb 2026 18:00:17 +0000 Manifest this update: Mon 09 Feb 2026 18:00:17 +0000 Manifest next update: Tue 10 Feb 2026 18:00:17 +0000 Files and hashes: 1: 6OqYpjTrIpJEFTsBWA83LbKcJQ4.roa (hash: XXKKzvXUqSOAEvvL2Pf15G7qc8hgGL7KY3Js1JGQrFI=) 2: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: XxzAbogmBP7Z/v2eTNCNsm7js4aoJJC2B4X9tjMm3Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b7:69:c9:67:53:5f:ea:2f:a6:aa:ab:3b:ed:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6 Validity Not Before: Feb 9 18:00:17 2026 GMT Not After : Feb 10 18:00:17 2026 GMT Subject: CN=786ce45763b69fc30a685690dc36398ab6d26051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:42:d5:28:a4:f9:de:e7:97:ed:1a:b2:23: fe:5f:c1:e9:47:ca:48:db:c3:9a:62:dc:55:ba:b4: 08:96:7f:46:a2:e7:03:95:4e:ef:bf:c0:4a:20:b0: 0a:db:7e:e1:8a:e2:4a:b0:77:e5:6b:dd:e8:7a:d7: a2:99:58:d2:61:01:0a:d5:5f:b0:ca:24:62:63:ff: a1:17:e1:f2:19:aa:08:39:c3:d0:12:33:c5:ba:85: 11:06:86:f0:ad:0e:89:42:81:05:0c:a3:80:df:89: 6a:ac:d9:62:1b:08:a7:9b:44:da:e4:a8:2f:fc:e7: 63:72:1f:82:a4:11:32:d2:3c:6c:54:53:d8:9c:0b: a7:8b:47:05:de:a1:1a:c5:e7:fc:e9:71:e9:97:e8: bb:37:f2:01:4a:26:a7:64:71:5b:a5:37:d6:1f:57: a4:0d:e7:38:6e:d6:91:c1:43:64:ec:80:bf:0d:de: 8c:e1:f5:45:39:08:a4:72:36:e5:3b:c8:71:c6:72: 5a:75:4f:56:91:36:05:9d:e7:54:b8:64:1e:15:0c: 1d:64:f0:bb:f2:a6:6c:ab:1e:1e:94:23:fb:f3:31: e1:96:7a:dc:2f:7e:11:fe:35:98:33:ef:6d:1f:9f: 06:97:cc:4a:22:30:4e:18:bb:b8:74:3f:2d:60:c7: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6C:E4:57:63:B6:9F:C3:0A:68:56:90:DC:36:39:8A:B6:D2:60:51 X509v3 Authority Key Identifier: keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:3c:53:6f:c9:ab:7f:dc:42:38:72:f9:ef:29:41:68:94:73: 48:97:b7:13:e7:02:a5:b7:d2:68:72:80:22:aa:1c:4f:13:52: 35:ca:6a:66:45:f8:95:3f:19:90:41:75:23:56:95:60:29:73: e4:37:d8:d9:9b:10:97:ab:85:2a:f2:97:67:a3:c3:24:48:a6: e6:72:a0:79:89:ee:69:e8:1b:fa:ae:67:93:5b:50:47:3d:c3: 39:c6:1e:15:ce:5e:3d:e4:e3:c0:e0:d3:3e:82:f8:25:24:cd: 0e:24:ad:c6:60:41:a1:c1:cc:c6:8a:4d:cd:aa:59:0f:df:01: 81:81:1b:c9:3f:f5:c7:3e:1c:27:56:d6:95:b4:34:55:11:db: 46:8e:d8:ea:2d:4b:d8:e0:99:af:f2:b2:f3:c7:c1:ed:b1:2d: 92:8c:d6:d0:fa:7f:6f:96:39:a1:3e:92:79:4b:b6:2d:29:eb: 67:5c:f6:4a:0a:bc:df:7b:0e:7e:74:0e:e9:5f:32:5d:9f:cb: 25:02:58:0c:97:6e:bd:d9:6a:57:84:b1:ec:79:35:91:2e:52: 99:7b:e1:78:d2:48:8d:39:6f:7d:75:a2:c5:c2:89:b7:28:0e: 56:87:1a:ff:40:51:48:66:75:af:4a:cf:94:7d:b8:ec:7f:20: 0c:45:55:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7dpyWdTX+ovpqqrO+0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj OTgxYjYwHhcNMjYwMjA5MTgwMDE3WhcNMjYwMjEwMTgwMDE3WjAzMTEwLwYDVQQD Eyg3ODZjZTQ1NzYzYjY5ZmMzMGE2ODU2OTBkYzM2Mzk4YWI2ZDI2MDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+5C1Sik+d7nl+0asiP+X8HpR8pI 28OaYtxVurQIln9GoucDlU7vv8BKILAK237hiuJKsHfla93oeteimVjSYQEK1V+w yiRiY/+hF+HyGaoIOcPQEjPFuoURBobwrQ6JQoEFDKOA34lqrNliGwinm0Ta5Kgv /Odjch+CpBEy0jxsVFPYnAuni0cF3qEaxef86XHpl+i7N/IBSianZHFbpTfWH1ek Dec4btaRwUNk7IC/Dd6M4fVFOQikcjblO8hxxnJadU9WkTYFnedUuGQeFQwdZPC7 8qZsqx4elCP78zHhlnrcL34R/jWYM+9tH58Gl8xKIjBOGLu4dD8tYMeW4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhs5Fdjtp/DCmhWkNw2OYq20mBRMB8GA1UdIwQY MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjxTb8mr f9xCOHL57ylBaJRzSJe3E+cCpbfSaHKAIqocTxNSNcpqZkX4lT8ZkEF1I1aVYClz 5DfY2ZsQl6uFKvKXZ6PDJEim5nKgeYnuaegb+q5nk1tQRz3DOcYeFc5ePeTjwODT PoL4JSTNDiStxmBBocHMxopNzapZD98BgYEbyT/1xz4cJ1bWlbQ0VRHbRo7Y6i1L 2OCZr/Ky88fB7bEtkozW0Pp/b5Y5oT6SeUu2LSnrZ1z2Sgq833sOfnQO6V8yXZ/L JQJYDJduvdlqV4Sx7Hk1kS5SmXvheNJIjTlvfXWixcKJtygOVoca/0BRSGZ1r0rP lH247H8gDEVV7g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:48 2026 by rpki-client