This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json) Hash identifier: PfhpT3iIYToqf/y/2sA1FzAifjbWNCZ8EVaqb4rRIbU= Subject key identifier: AE:C1:F9:F7:55:20:DC:28:D9:9C:1D:5D:3C:3C:86:EE:D6:C6:9D:AB Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Certificate serial: 019C44A28F5B6598282FB4C2A2562795F18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft Manifest number: 041C Signing time: Mon 09 Feb 2026 23:00:30 +0000 Manifest this update: Mon 09 Feb 2026 23:00:30 +0000 Manifest next update: Tue 10 Feb 2026 23:00:30 +0000 Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: Wc3cI5GpzL1FgE9WfHrTTMPKLWAKCGof7NTqVYEBnVw=) 2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:8f:5b:65:98:28:2f:b4:c2:a2:56:27:95:f1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96 Validity Not Before: Feb 9 23:00:30 2026 GMT Not After : Feb 10 23:00:30 2026 GMT Subject: CN=aec1f9f75520dc28d99c1d5d3c3c86eed6c69dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c5:73:b7:e5:1e:fb:ee:19:b7:8b:f0:33:83: 09:e4:9f:cb:88:73:91:f3:b2:48:8f:70:c5:1d:7f: 9c:8e:33:e7:7b:42:b8:e7:f4:4d:7c:dd:c0:73:3f: 47:3b:aa:62:17:30:ba:59:72:d3:f3:50:89:57:8d: 4c:df:f4:e7:02:73:60:57:b9:fe:03:37:64:7d:39: fd:ab:f3:f5:92:ce:46:4b:4c:97:55:73:3f:96:6e: 1f:94:ea:00:56:03:b9:4b:37:7b:34:61:38:24:2d: cb:bf:56:82:fc:6f:b0:bc:f2:d6:79:07:7e:14:aa: 40:c1:5a:da:c3:ea:99:d3:cd:a3:3c:8f:0b:d6:3f: 5b:8c:f3:c5:f7:81:99:59:16:29:26:e9:cd:76:33: 8d:f7:01:4a:d3:47:0d:ef:ef:ac:50:34:b9:59:91: 80:52:83:d7:07:09:56:8b:b9:ea:47:33:17:af:81: b3:7c:3a:3e:86:69:fe:82:4e:da:bd:c9:96:2f:67: a9:66:57:70:7c:dc:c6:e3:9a:a8:b9:12:4c:95:4c: 45:59:3b:cf:6f:15:f4:2f:f1:c7:3c:8f:c7:79:ed: 3b:84:b3:0c:1a:1b:ca:3e:30:a8:07:12:9e:c8:8d: 61:f6:cc:20:53:d7:98:97:22:2d:c5:9d:ce:4c:d3: aa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C1:F9:F7:55:20:DC:28:D9:9C:1D:5D:3C:3C:86:EE:D6:C6:9D:AB X509v3 Authority Key Identifier: keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e9:61:99:bf:1b:d2:de:92:52:6f:91:da:00:78:67:3d:08: ff:29:3d:f4:91:df:ab:7a:9e:55:60:ab:bd:bc:13:7e:51:db: 4b:97:f7:2b:61:d4:28:d0:91:76:5c:c9:f0:e9:7f:3f:07:4c: 23:98:c4:d1:01:0d:f5:4b:10:4c:4d:09:88:5a:1e:f7:9a:78: 38:3a:d1:08:72:99:8a:ee:60:94:0e:02:73:41:bf:ba:63:6b: d6:a7:2c:a0:19:4a:28:03:0d:47:0f:88:9d:06:fa:6f:84:5f: c1:7e:ee:17:8d:be:60:f7:97:3d:19:b9:c8:d2:dc:82:10:4a: 01:9b:0c:2c:a4:28:68:67:32:0e:b2:08:ff:43:bc:d9:7b:c5: d3:db:9e:6a:a4:d4:c1:97:72:cb:b9:6d:28:28:e9:0f:0f:0e: a1:21:69:9c:01:1b:7b:ab:5a:98:5b:5b:ea:f1:30:d6:f8:6a: ba:47:b3:0c:3c:7a:13:46:eb:8b:3e:41:b8:a0:66:8a:79:45: d6:04:a9:dc:94:ff:48:87:b5:6f:c0:d2:60:ca:d0:76:f9:e0: 0c:f1:47:0c:d4:9a:1e:01:87:3a:23:12:79:3d:b4:84:c1:4c: 90:16:53:95:ab:36:a6:71:bb:50:51:1c:43:72:18:c6:7b:61: 54:1b:cd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEoo9bZZgoL7TColYnlfGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNThlYjU4YjVjNjFhMjNkMGYyNDY2YzVjZDczY2U5ZWM5 NjViOTYwHhcNMjYwMjA5MjMwMDMwWhcNMjYwMjEwMjMwMDMwWjAzMTEwLwYDVQQD EyhhZWMxZjlmNzU1MjBkYzI4ZDk5YzFkNWQzYzNjODZlZWQ2YzY5ZGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcVzt+Ue++4Zt4vwM4MJ5J/LiHOR 87JIj3DFHX+cjjPne0K45/RNfN3Acz9HO6piFzC6WXLT81CJV41M3/TnAnNgV7n+ AzdkfTn9q/P1ks5GS0yXVXM/lm4flOoAVgO5Szd7NGE4JC3Lv1aC/G+wvPLWeQd+ FKpAwVraw+qZ082jPI8L1j9bjPPF94GZWRYpJunNdjON9wFK00cN7++sUDS5WZGA UoPXBwlWi7nqRzMXr4GzfDo+hmn+gk7avcmWL2epZldwfNzG45qouRJMlUxFWTvP bxX0L/HHPI/Hee07hLMMGhvKPjCoBxKeyI1h9swgU9eYlyItxZ3OTNOqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7B+fdVINwo2ZwdXTw8hu7Wxp2rMB8GA1UdIwQY MBaAFDtY61i1xhoj0PJGbFzXPOnslluWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2Qt NzJhYzc5ZDdiYjA5LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9mMmUxNTAtM2U5ZS00ZjE4LWE1M2QtNzJhYzc5ZDdiYjA5 LzEvTzFqcldMWEdHaVBROGtac1hOYzg2ZXlXVzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMulhmb8b 0t6SUm+R2gB4Zz0I/yk99JHfq3qeVWCrvbwTflHbS5f3K2HUKNCRdlzJ8Ol/PwdM I5jE0QEN9UsQTE0JiFoe95p4ODrRCHKZiu5glA4Cc0G/umNr1qcsoBlKKAMNRw+I nQb6b4RfwX7uF42+YPeXPRm5yNLcghBKAZsMLKQoaGcyDrII/0O82XvF09ueaqTU wZdyy7ltKCjpDw8OoSFpnAEbe6tamFtb6vEw1vhqukezDDx6E0briz5BuKBminlF 1gSp3JT/SIe1b8DSYMrQdvngDPFHDNSaHgGHOiMSeT20hMFMkBZTlas2pnG7UFEc Q3IYxnthVBvNLA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:42 2026 by rpki-client