This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json) Hash identifier: 6d/V8+IHGmb5K+0Xpzad61IvdwKJacmxvN0mx0aD0YM= Subject key identifier: 21:64:E9:97:03:74:62:E4:61:FB:BB:1E:7A:0E:E6:A5:A5:23:6B:F8 Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032 Certificate serial: 019C4322918A4DFBF77F0AA6EAA738490688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft Manifest number: 138A Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: o8YxfNTRd6OkaxEvxjQs4LipTDDfIcFWRwYcyvn8utk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:91:8a:4d:fb:f7:7f:0a:a6:ea:a7:38:49:06:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032 Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=2164e997037462e461fbbb1e7a0ee6a5a5236bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:44:83:3b:b0:76:3a:31:89:a5:c6:82:64: 24:da:c5:78:64:1d:27:33:23:7a:47:59:f9:62:fa: 09:1f:7c:ef:19:31:f0:a7:0b:28:f5:64:70:9c:93: 48:2a:ba:cd:a1:ec:74:4d:30:77:de:9d:eb:8f:22: 26:96:69:5c:f0:e9:9e:ab:ee:bd:4e:47:fe:3c:40: bc:8c:00:65:4d:92:40:73:1f:2b:98:f7:1b:dc:40: 35:ce:2c:59:e0:8a:91:ac:d3:fa:b0:34:02:b9:b9: e4:7e:e4:82:61:0b:0b:46:1b:c7:61:50:6f:de:63: fc:df:ca:84:fd:90:63:7c:1b:af:d4:7f:b2:14:14: 41:06:46:fe:07:e3:d9:43:5c:10:9c:32:42:c1:8b: c2:90:16:cb:11:d2:79:24:ac:b1:89:19:59:54:6e: 07:56:01:2d:57:f2:e4:42:c3:d5:95:89:01:3c:1d: fe:d0:e9:fe:a5:b2:88:ce:55:fe:af:db:de:e1:4c: 9c:65:82:54:e7:ab:6d:96:dc:14:32:58:2e:ca:d3: d6:c9:eb:d8:84:b8:07:5e:c8:60:d1:02:89:1c:e8: e8:98:28:e7:39:71:e7:7b:15:ec:08:ed:ce:88:41: c3:c8:0b:4c:ae:af:b0:6a:41:c3:0a:57:0c:5e:5e: 10:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:E9:97:03:74:62:E4:61:FB:BB:1E:7A:0E:E6:A5:A5:23:6B:F8 X509v3 Authority Key Identifier: keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:24:07:78:43:06:8a:3d:af:76:75:49:b9:87:8f:bc:76:96: a8:72:38:84:5c:23:4f:99:07:0c:91:c1:61:a8:47:2a:df:b0: 36:58:1f:65:76:c0:22:b0:2d:9e:12:65:16:2e:95:07:f4:65: 06:e1:64:5e:cd:fd:65:da:b5:f5:e0:f6:aa:f7:d8:e7:3b:e4: aa:18:04:f0:16:a4:5a:ef:54:50:11:7f:ff:3a:f1:d6:f3:60: f7:24:c0:d5:a9:4c:35:6a:4e:c9:36:e8:b2:5d:72:d9:9a:10: 1f:e3:84:c2:35:b0:15:4b:ed:0a:10:6d:b6:99:6e:1a:b4:6f: 38:55:e8:02:b3:18:3d:aa:0e:13:70:f0:b3:49:33:d6:02:34: 7f:0e:16:be:31:88:73:c7:78:d6:1f:04:59:bb:7b:e0:81:c8: 83:7b:12:40:68:e1:61:4a:31:d4:98:19:ed:79:d6:95:34:fd: 96:4f:99:30:38:7b:e6:d6:a4:5e:38:c8:88:7f:4a:cf:8c:ba: 5f:bf:c2:90:25:11:d6:fb:70:03:13:96:ae:db:d1:bf:ca:2c: 46:22:74:fa:89:f0:84:a9:a6:b7:5c:cc:f3:0c:58:30:55:c1: 31:56:31:60:77:67:d9:b6:ca:f4:93:3b:35:3c:54:79:d2:10: 68:e4:5d:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpGKTfv3fwqm6qc4SQaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZTU1YzYwNzI1NGQxZTJiMDUxMWE4NTZlNzAwMzlmZmFm NDMwMzIwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EygyMTY0ZTk5NzAzNzQ2MmU0NjFmYmJiMWU3YTBlZTZhNWE1MjM2YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswxEgzuwdjoxiaXGgmQk2sV4ZB0n MyN6R1n5YvoJH3zvGTHwpwso9WRwnJNIKrrNoex0TTB33p3rjyImlmlc8Omeq+69 Tkf+PEC8jABlTZJAcx8rmPcb3EA1zixZ4IqRrNP6sDQCubnkfuSCYQsLRhvHYVBv 3mP838qE/ZBjfBuv1H+yFBRBBkb+B+PZQ1wQnDJCwYvCkBbLEdJ5JKyxiRlZVG4H VgEtV/LkQsPVlYkBPB3+0On+pbKIzlX+r9ve4UycZYJU56ttltwUMlguytPWyevY hLgHXshg0QKJHOjomCjnOXHnexXsCO3OiEHDyAtMrq+wakHDClcMXl4QoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFk6ZcDdGLkYfu7HnoO5qWlI2v4MB8GA1UdIwQY MBaAFKPlXGByVNHisFEahW5wA5/69DAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEt MmQzNjFlNGYzNDVjLzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEtMmQzNjFlNGYzNDVj LzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiQHeEMG ij2vdnVJuYePvHaWqHI4hFwjT5kHDJHBYahHKt+wNlgfZXbAIrAtnhJlFi6VB/Rl BuFkXs39Zdq19eD2qvfY5zvkqhgE8BakWu9UUBF//zrx1vNg9yTA1alMNWpOyTbo sl1y2ZoQH+OEwjWwFUvtChBttpluGrRvOFXoArMYPaoOE3Dws0kz1gI0fw4WvjGI c8d41h8EWbt74IHIg3sSQGjhYUox1JgZ7XnWlTT9lk+ZMDh75takXjjIiH9Kz4y6 X7/CkCUR1vtwAxOWrtvRv8osRiJ0+onwhKmmt1zM8wxYMFXBMVYxYHdn2bbK9JM7 NTxUedIQaORdJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:17 2026 by rpki-client