This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json) Hash identifier: Kb4kn2rVdFB9rD7P+1tjdvfrQr24USjg38WuYtEUMzA= Subject key identifier: 22:9D:40:64:BE:F8:AC:E6:A5:01:45:19:9A:32:BA:85:CA:FB:37:D7 Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Certificate serial: 019C424699DF4C6B3949A1FCAC825C72A94C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft Manifest number: 10CE Signing time: Mon 09 Feb 2026 12:00:48 +0000 Manifest this update: Mon 09 Feb 2026 12:00:48 +0000 Manifest next update: Tue 10 Feb 2026 12:00:48 +0000 Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: 9leoEoWieJQmOfwr1tGpc450eT1xpBHFeMr2xDgQsGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:99:df:4c:6b:39:49:a1:fc:ac:82:5c:72:a9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69 Validity Not Before: Feb 9 12:00:48 2026 GMT Not After : Feb 10 12:00:48 2026 GMT Subject: CN=229d4064bef8ace6a50145199a32ba85cafb37d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:30:89:02:e9:27:ad:cf:2c:46:f3:27:3c: 6d:3a:84:e1:78:bf:f8:fb:23:33:a4:34:d5:94:2a: 70:b9:bb:f2:95:5b:c7:77:ec:da:45:75:80:02:d7: 45:32:12:e7:50:c4:b5:06:35:10:53:c5:11:9c:ba: 1d:40:02:2b:14:69:04:84:95:84:3f:24:7e:43:dd: 5e:d9:93:5b:d5:47:84:33:71:e2:c0:6b:71:fc:3e: a9:34:65:a8:be:71:8d:e8:25:84:2d:8a:43:ce:79: 73:b2:4d:ea:bf:a2:da:d1:34:20:d3:6c:d4:6a:46: 25:1c:8f:70:a5:c2:c7:f6:31:5f:06:8b:96:6c:69: 0f:f6:7b:f1:1f:b9:31:34:5d:dd:a9:23:ed:be:85: 26:42:bb:0d:4c:ba:77:43:88:0c:2c:77:e8:e6:0a: 7a:b1:4d:29:97:de:63:3b:f3:31:57:4d:34:98:5e: 0f:2a:46:8b:6e:5a:69:2a:cf:da:09:e8:6a:9b:6f: d2:fa:7f:85:84:54:9e:a1:72:4b:47:12:7a:ab:85: 9c:2a:0e:66:25:8d:ae:93:d5:40:d5:a9:e4:f6:37: f8:04:fc:2d:c7:f9:7b:b7:5a:a5:b6:57:3c:35:0a: 5e:ea:5d:2a:d7:69:3f:dd:57:24:77:b2:de:81:23: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9D:40:64:BE:F8:AC:E6:A5:01:45:19:9A:32:BA:85:CA:FB:37:D7 X509v3 Authority Key Identifier: keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:85:7a:ba:14:5a:4d:13:82:e8:ee:d1:a2:6f:19:8f:3f:e1: ea:11:3e:1a:56:4d:ab:8c:31:8e:dd:e9:6c:f9:2e:90:b3:03: 2c:1d:e9:29:77:d4:8e:0d:25:d1:96:73:ba:ee:45:97:50:ac: a2:dd:58:e5:5e:31:a5:d0:6b:a2:56:d4:d2:77:13:15:7e:9e: 94:a2:a0:97:6c:d1:79:e5:aa:be:5f:c5:35:14:fd:5e:d8:c1: 90:ec:c3:88:27:41:a4:af:85:22:a6:ad:6a:80:ff:fd:11:ff: 2c:59:f6:ac:2d:11:d9:70:e2:25:87:a1:f9:4c:d5:77:15:25: a8:f7:a3:5e:c7:9f:8c:12:73:72:8e:91:ab:a2:61:c2:f4:d2: e7:2d:f7:dd:e2:d2:25:0d:65:63:4e:98:5f:ac:ff:41:5a:7f: 2c:f9:64:a8:18:ff:57:01:86:c4:c2:9e:f5:c3:be:c4:eb:1d: dc:7e:5f:a8:e9:62:36:51:0f:ef:b8:46:02:8c:d9:fb:de:d8: 29:d9:65:a4:99:62:20:58:e7:26:50:fc:28:f5:10:5a:45:6a: a8:89:44:2b:7b:77:6d:b7:ef:df:7d:90:4c:b1:96:6d:ed:da: a3:80:9e:f3:42:1c:6f:63:b7:58:7b:3a:67:e9:4f:e6:74:1c: f2:89:4d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpnfTGs5SaH8rIJccqlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0 MzFiNjkwHhcNMjYwMjA5MTIwMDQ4WhcNMjYwMjEwMTIwMDQ4WjAzMTEwLwYDVQQD EygyMjlkNDA2NGJlZjhhY2U2YTUwMTQ1MTk5YTMyYmE4NWNhZmIzN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E4wiQLpJ63PLEbzJzxtOoTheL/4 +yMzpDTVlCpwubvylVvHd+zaRXWAAtdFMhLnUMS1BjUQU8URnLodQAIrFGkEhJWE PyR+Q91e2ZNb1UeEM3HiwGtx/D6pNGWovnGN6CWELYpDznlzsk3qv6La0TQg02zU akYlHI9wpcLH9jFfBouWbGkP9nvxH7kxNF3dqSPtvoUmQrsNTLp3Q4gMLHfo5gp6 sU0pl95jO/MxV000mF4PKkaLblppKs/aCehqm2/S+n+FhFSeoXJLRxJ6q4WcKg5m JY2uk9VA1ank9jf4BPwtx/l7t1qltlc8NQpe6l0q12k/3Vckd7LegSO10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKdQGS++KzmpQFFGZoyuoXK+zfXMB8GA1UdIwQY MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYV6uhRa TROC6O7Rom8Zjz/h6hE+GlZNq4wxjt3pbPkukLMDLB3pKXfUjg0l0ZZzuu5Fl1Cs ot1Y5V4xpdBrolbU0ncTFX6elKKgl2zReeWqvl/FNRT9XtjBkOzDiCdBpK+FIqat aoD//RH/LFn2rC0R2XDiJYeh+UzVdxUlqPejXsefjBJzco6Rq6JhwvTS5y333eLS JQ1lY06YX6z/QVp/LPlkqBj/VwGGxMKe9cO+xOsd3H5fqOliNlEP77hGAozZ+97Y KdllpJliIFjnJlD8KPUQWkVqqIlEK3t3bbfv332QTLGWbe3ao4Ce80Icb2O3WHs6 Z+lP5nQc8olNPw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:53 2026 by rpki-client