This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json) Hash identifier: EXo4WFeiGteXD3E7jion9J88hOCRkQxfmWBAb5uJ9Pc= Subject key identifier: 15:31:DC:FA:7E:2D:93:F3:B0:9D:9E:CD:A3:3F:4C:C1:0C:7F:E5:D6 Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722 Certificate serial: 019C427D670F3C91319D57672DD984B262DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft Manifest number: 0B3B Signing time: Mon 09 Feb 2026 13:00:40 +0000 Manifest this update: Mon 09 Feb 2026 13:00:40 +0000 Manifest next update: Tue 10 Feb 2026 13:00:40 +0000 Files and hashes: 1: RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa (hash: v10XXGdmUOPRJJS1MaufQ22rkW2n2zH/GaaX/HJobRg=) 2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: udcIK8Jdk2dhxeAN6EVf4NfFZHIu7H4EWAFd3PQ5rco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:67:0f:3c:91:31:9d:57:67:2d:d9:84:b2:62:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722 Validity Not Before: Feb 9 13:00:40 2026 GMT Not After : Feb 10 13:00:40 2026 GMT Subject: CN=1531dcfa7e2d93f3b09d9ecda33f4cc10c7fe5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:22:2c:6a:12:ba:98:66:b2:8d:1b:1b:5b: 7f:b5:cc:76:cd:e4:81:40:9c:c3:d0:54:59:09:2e: 2b:98:a6:30:b0:5a:28:32:a9:79:2d:6f:28:f8:4b: 5e:c4:5a:95:0d:3e:14:4b:3e:ff:bf:cc:8e:37:43: ae:0a:c5:43:47:74:e4:cd:77:f0:74:53:e1:4d:0a: 23:d9:4b:5c:c6:86:e1:bd:22:36:c4:81:21:5a:54: ae:26:7e:49:82:1c:ac:d1:7f:b1:db:64:a0:17:b7: 54:41:a6:27:1e:93:52:3e:21:46:fa:1c:04:81:b3: f6:e2:11:ac:64:15:47:3b:70:72:f8:60:0e:a7:c1: 20:8c:0f:45:3e:73:aa:d9:5f:9a:45:3d:50:02:f5: d1:6d:f6:bd:e0:6c:b0:dd:7c:07:c7:f3:0b:ef:c7: 90:3b:58:6d:b5:62:96:74:3f:be:d0:3c:0c:33:c0: 58:93:62:d4:fe:5d:7b:4f:ed:13:f3:d6:23:e8:58: a0:4d:07:49:ed:06:0b:ff:a2:df:d6:89:54:3e:77: 1f:d2:72:e5:24:89:f8:42:73:b5:01:79:61:3d:eb: c1:d9:a6:f5:2e:e8:bf:04:8d:db:09:f1:5b:cb:de: 43:88:80:d9:0b:62:18:73:59:37:46:ab:24:99:d0: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:DC:FA:7E:2D:93:F3:B0:9D:9E:CD:A3:3F:4C:C1:0C:7F:E5:D6 X509v3 Authority Key Identifier: keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:46:c8:1b:58:75:df:8a:a3:d2:b2:63:cd:9a:da:78:2c:64: ff:6b:1a:15:a1:c6:63:43:87:24:f0:61:26:2e:2e:88:46:bf: f5:f2:88:5e:fe:cf:d3:2f:a5:1a:f5:9e:41:3e:6a:6f:1c:fc: d3:bf:e9:56:31:72:83:2e:72:c0:ce:e9:49:cc:f1:de:cb:8d: 7b:de:1e:3b:52:c0:9b:e1:57:c0:7d:da:95:4d:ab:ed:aa:7d: a2:d2:53:02:c1:1a:8f:01:f8:1d:f5:fa:96:01:70:03:b8:72: 75:0f:6f:d7:42:9b:52:93:7b:e7:f5:99:18:1b:e5:7d:01:d7: 5e:9b:64:a7:85:5b:9d:8b:b3:3b:77:05:e2:e6:f4:ca:31:91: 00:0d:6a:a3:31:00:2d:26:43:0c:52:11:19:c2:39:c6:4c:40: 8f:ef:b0:eb:aa:e8:06:e1:2b:2f:d7:8f:40:4d:2e:d0:b5:d4: 1a:5d:60:5e:e0:83:a3:01:22:c6:cc:69:51:a4:5d:08:bf:b9: 98:3e:bb:17:09:b5:bd:86:ff:37:a1:11:c5:2a:a7:ab:22:cc: a7:7f:0f:37:18:ff:c0:d6:0b:41:66:75:ae:87:d2:a0:6c:0e: d3:f6:b1:0b:25:de:ea:c3:50:0e:52:d5:c8:06:ef:95:99:ed: 57:b1:e3:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWcPPJExnVdnLdmEsmLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNzI0NDM0OGU3MWVjMWJlNWY1MDA3YzhkNWVmZTcxMjU5 MjA3MjIwHhcNMjYwMjA5MTMwMDQwWhcNMjYwMjEwMTMwMDQwWjAzMTEwLwYDVQQD EygxNTMxZGNmYTdlMmQ5M2YzYjA5ZDllY2RhMzNmNGNjMTBjN2ZlNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+MiLGoSuphmso0bG1t/tcx2zeSB QJzD0FRZCS4rmKYwsFooMql5LW8o+EtexFqVDT4USz7/v8yON0OuCsVDR3TkzXfw dFPhTQoj2UtcxobhvSI2xIEhWlSuJn5Jghys0X+x22SgF7dUQaYnHpNSPiFG+hwE gbP24hGsZBVHO3By+GAOp8EgjA9FPnOq2V+aRT1QAvXRbfa94Gyw3XwHx/ML78eQ O1httWKWdD++0DwMM8BYk2LU/l17T+0T89Yj6FigTQdJ7QYL/6Lf1olUPncf0nLl JIn4QnO1AXlhPevB2ab1Lui/BI3bCfFby95DiIDZC2IYc1k3RqskmdD1pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUx3Pp+LZPzsJ2ezaM/TMEMf+XWMB8GA1UdIwQY MBaAFKNyRDSOcewb5fUAfI1e/nElkgciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzct ODg1MmE1MzJhZDQ1LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9iNGFkODUtMTZhOC00ODdhLThhNzctODg1MmE1MzJhZDQ1 LzEvbzNKRU5JNXg3QnZsOVFCOGpWNy1jU1dTQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkbIG1h1 34qj0rJjzZraeCxk/2saFaHGY0OHJPBhJi4uiEa/9fKIXv7P0y+lGvWeQT5qbxz8 07/pVjFygy5ywM7pSczx3suNe94eO1LAm+FXwH3alU2r7ap9otJTAsEajwH4HfX6 lgFwA7hydQ9v10KbUpN75/WZGBvlfQHXXptkp4VbnYuzO3cF4ub0yjGRAA1qozEA LSZDDFIRGcI5xkxAj++w66roBuErL9ePQE0u0LXUGl1gXuCDowEixsxpUaRdCL+5 mD67Fwm1vYb/N6ERxSqnqyLMp38PNxj/wNYLQWZ1rofSoGwO0/axCyXe6sNQDlLV yAbvlZntV7HjeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:56 2026 by rpki-client