This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft File: OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft (raw, json) Hash identifier: ofvaLbx3oXoTQ9SZ9tZR9knJjRGG7hXdmYByrygCFxI= Subject key identifier: 22:BF:BD:C6:DE:12:3D:34:88:84:29:94:67:29:7E:C5:DE:23:5A:D9 Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98 Certificate serial: 019C424627FBACC7632F49190A1122CFAB9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft Manifest number: 14A4 Signing time: Mon 09 Feb 2026 12:00:19 +0000 Manifest this update: Mon 09 Feb 2026 12:00:19 +0000 Manifest next update: Tue 10 Feb 2026 12:00:19 +0000 Files and hashes: 1: 4l0Qm7hiBf49LBhzNTcelNcpnnQ.roa (hash: fwyySipc+KRVGtJdEtG/OeuQDdMJxdBVXvf+3AzPh0w=) 2: OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl (hash: GDTqj5XG2U6ivcfOhGaZLlcU5NAhqpSXP+GYqRGt/D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:27:fb:ac:c7:63:2f:49:19:0a:11:22:cf:ab:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39abeb591716e908345d329fffd3700352315b98 Validity Not Before: Feb 9 12:00:19 2026 GMT Not After : Feb 10 12:00:19 2026 GMT Subject: CN=22bfbdc6de123d348884299467297ec5de235ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:b5:ca:de:72:88:26:f7:04:e4:8f:69:84: 72:74:74:15:dd:50:a0:ef:b6:db:02:f6:e6:e3:6b: 0e:9c:1d:b1:9f:ba:0d:fd:a9:76:b1:9e:84:91:1e: 61:6f:1d:95:dd:87:a7:ef:a4:29:ac:ee:fb:79:05: 0d:f7:97:21:ae:d8:2b:cd:6f:73:ad:b5:8e:57:85: eb:af:a0:28:cd:79:5c:11:77:f2:7d:62:c9:1e:eb: ee:bc:8e:24:6f:6e:a2:2c:94:4d:8f:ea:dc:31:46: 88:b8:ca:ea:89:05:05:f7:b1:b5:47:16:5f:7c:cd: 4c:93:0b:b2:b6:9b:f4:56:a5:4d:b3:84:61:5b:41: 15:df:80:73:c2:75:b1:87:ab:4f:67:1b:7e:b5:4e: cc:dc:e5:aa:a4:93:72:66:38:1c:a7:d4:cd:c1:46: f7:3f:a8:76:dc:d2:72:d5:fb:09:a7:d9:bd:bb:d6: 70:f9:33:3f:b1:d1:59:fa:f8:1c:ef:9f:76:7c:86: 1e:df:b0:24:be:e9:3b:e3:a2:ac:fe:11:95:96:50: d8:7a:c0:b1:f9:95:84:15:0e:c3:1e:50:09:43:c7: 6a:f1:16:fb:2e:a4:36:8a:29:76:cd:b7:f3:66:02: 54:82:f7:f3:ab:3b:ec:03:c0:c1:07:f5:a1:8b:82: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BF:BD:C6:DE:12:3D:34:88:84:29:94:67:29:7E:C5:DE:23:5A:D9 X509v3 Authority Key Identifier: keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:27:3d:6d:04:1e:05:34:a7:7f:0a:4c:16:0e:84:27:f6:cb: e5:46:40:ed:ce:e1:df:46:79:b1:7b:fe:5b:0c:be:f5:a1:1c: 63:95:dd:26:94:4a:4e:2a:38:75:5c:fa:49:53:db:4a:c6:50: c3:1c:93:4e:73:4c:b8:66:4f:e2:9f:f3:00:bc:70:30:8b:34: 27:5e:19:3c:de:cf:71:77:13:3c:61:81:8f:2a:f9:39:25:75: 56:7f:38:5f:01:57:84:39:7c:c0:aa:bb:ac:ad:d5:9c:31:0a: 01:0d:3c:75:8a:ac:97:b0:3f:01:b3:6e:94:fc:59:ab:41:88: 59:c8:c3:ad:55:a4:05:2e:09:4d:23:24:e6:ff:33:c8:94:f6: 1d:6c:cf:09:f5:f5:a3:3d:ad:cf:c4:1a:9e:21:26:b2:a0:a6: ed:d4:da:c3:8c:aa:17:51:25:9c:2e:45:b8:fa:68:0d:e4:e1: 5a:76:88:b5:2d:89:56:57:90:ec:c5:5b:2c:37:30:39:96:3b: 11:76:fe:a0:e0:39:43:65:0b:00:45:08:ac:bb:d7:6e:f9:d8: b3:5c:c3:0d:79:66:f8:d9:4e:66:65:ad:2b:75:39:24:e2:ab: dc:b3:12:d7:7b:72:73:f0:9f:09:2a:eb:20:be:d3:61:59:d0: 31:e7:3d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRif7rMdjL0kZChEiz6udMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz MTViOTgwHhcNMjYwMjA5MTIwMDE5WhcNMjYwMjEwMTIwMDE5WjAzMTEwLwYDVQQD EygyMmJmYmRjNmRlMTIzZDM0ODg4NDI5OTQ2NzI5N2VjNWRlMjM1YWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+q1yt5yiCb3BOSPaYRydHQV3VCg 77bbAvbm42sOnB2xn7oN/al2sZ6EkR5hbx2V3Yen76QprO77eQUN95chrtgrzW9z rbWOV4Xrr6AozXlcEXfyfWLJHuvuvI4kb26iLJRNj+rcMUaIuMrqiQUF97G1RxZf fM1Mkwuytpv0VqVNs4RhW0EV34BzwnWxh6tPZxt+tU7M3OWqpJNyZjgcp9TNwUb3 P6h23NJy1fsJp9m9u9Zw+TM/sdFZ+vgc7592fIYe37Akvuk746Ks/hGVllDYesCx +ZWEFQ7DHlAJQ8dq8Rb7LqQ2iil2zbfzZgJUgvfzqzvsA8DBB/Whi4IOOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK/vcbeEj00iIQplGcpfsXeI1rZMB8GA1UdIwQY MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt YjdjZDQ0OTBhOTgzLzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyc9bQQe BTSnfwpMFg6EJ/bL5UZA7c7h30Z5sXv+Wwy+9aEcY5XdJpRKTio4dVz6SVPbSsZQ wxyTTnNMuGZP4p/zALxwMIs0J14ZPN7PcXcTPGGBjyr5OSV1Vn84XwFXhDl8wKq7 rK3VnDEKAQ08dYqsl7A/AbNulPxZq0GIWcjDrVWkBS4JTSMk5v8zyJT2HWzPCfX1 oz2tz8QaniEmsqCm7dTaw4yqF1ElnC5FuPpoDeThWnaItS2JVleQ7MVbLDcwOZY7 EXb+oOA5Q2ULAEUIrLvXbvnYs1zDDXlm+NlOZmWtK3U5JOKr3LMS13tyc/CfCSrr IL7TYVnQMec9iQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:27 2026 by rpki-client