This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json) Hash identifier: GLemKg89/nY6QPLbYFgV66Hu4frCkDIPiYWKcCjoPo0= Subject key identifier: C6:7E:BE:EF:B7:1F:AD:0C:9D:A5:E5:2D:41:F5:B5:EB:D1:0C:A5:20 Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05 Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05 Certificate serial: 019C416ABD06BF41A4B8F588159AA888621B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft Manifest number: 0A1B Signing time: Mon 09 Feb 2026 08:00:39 +0000 Manifest this update: Mon 09 Feb 2026 08:00:39 +0000 Manifest next update: Tue 10 Feb 2026 08:00:39 +0000 Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: Xi3oO+2kNDu3uWSCUUkcSU4xDdQBlcvw3HG14BMJ5Z0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:bd:06:bf:41:a4:b8:f5:88:15:9a:a8:88:62:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05 Validity Not Before: Feb 9 08:00:39 2026 GMT Not After : Feb 10 08:00:39 2026 GMT Subject: CN=c67ebeefb71fad0c9da5e52d41f5b5ebd10ca520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:83:ef:2a:97:2e:d3:c7:27:8d:a4:9a:9d: b8:b5:8d:5a:db:dd:b3:0b:ee:e3:1b:3f:ea:88:db: 0a:b7:4c:e8:94:5e:23:f9:c5:07:dc:64:62:a7:55: 28:9d:9b:51:38:0c:19:80:26:48:74:6d:64:32:7e: 3d:89:bf:04:7c:8b:4c:2f:7c:dc:e4:1a:36:57:82: 86:1d:f7:09:0a:2b:be:67:ea:f3:41:50:08:e6:57: 0f:27:3c:90:28:72:cc:30:c4:4b:9b:67:1d:17:36: 0e:6c:04:65:94:7f:59:a0:9d:e2:ee:06:d2:53:b8: 22:18:26:21:ad:03:20:ba:c0:dc:31:08:b4:5b:72: 64:63:df:1c:8e:dd:2e:1f:2a:fd:fc:43:f7:e3:08: a2:97:38:82:3f:35:31:75:65:40:6f:44:81:53:37: 11:4f:cd:d0:d8:79:08:95:1a:32:89:d5:fd:fa:cb: 42:69:6b:db:43:9f:76:cb:5d:62:59:7d:88:2e:52: 4d:f1:9f:6b:94:7e:be:db:4f:31:ac:09:66:e2:b5: 13:70:32:cf:77:9f:7e:ec:85:38:5f:a1:ea:0d:46: 67:54:10:eb:6d:f0:cb:a2:21:e3:ec:a0:6c:b5:88: c5:71:ea:cb:cd:34:7c:23:34:42:6c:83:3c:02:19: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7E:BE:EF:B7:1F:AD:0C:9D:A5:E5:2D:41:F5:B5:EB:D1:0C:A5:20 X509v3 Authority Key Identifier: keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:45:eb:4f:40:57:12:f2:ac:97:0e:fb:68:aa:36:40:15:de: 1c:10:c2:0c:0c:96:52:1d:37:52:1b:a0:e7:86:e4:e1:b2:44: 04:16:d4:8f:fe:23:21:35:04:d1:03:87:4c:46:23:82:7a:f7: a6:ef:e9:b4:69:a5:32:c4:89:16:67:10:f3:85:ae:8c:c4:cd: ad:9c:7e:23:6f:e4:e2:a7:b7:8d:be:4f:9c:86:c3:74:25:22: 03:f5:87:36:ec:89:be:87:55:67:33:3b:62:28:d9:5c:bc:f1: b1:5b:58:c6:a2:3b:5e:8b:49:81:88:59:79:4a:03:ec:30:6f: 1a:13:97:8a:d9:c6:e5:c6:e0:f0:82:10:22:ed:50:93:d7:28: f9:1c:07:e1:fc:85:78:76:f9:61:86:eb:31:75:54:ef:31:e1: dc:d9:2e:dd:1b:69:93:31:71:31:85:d8:55:cf:3b:e2:28:84: dd:bc:30:a9:c9:b1:7a:2d:31:e0:0a:eb:be:41:e4:08:a5:94: e4:27:9d:29:e2:bb:e9:dd:7b:a1:85:a6:64:3c:c4:f1:e1:8d: 40:c7:19:53:c8:6b:ee:1e:85:7d:4f:0a:cc:f6:de:70:a0:8d: b7:d3:b0:27:3f:1b:84:27:c7:ea:29:ad:96:4d:e8:6f:64:a3: fc:87:ae:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBar0Gv0GkuPWIFZqoiGIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTI1Njg1Yzk2ZTMyNmYyMGFlMzcyOWMwMzBmNDRmZDE0 OTliMDUwHhcNMjYwMjA5MDgwMDM5WhcNMjYwMjEwMDgwMDM5WjAzMTEwLwYDVQQD EyhjNjdlYmVlZmI3MWZhZDBjOWRhNWU1MmQ0MWY1YjVlYmQxMGNhNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zSD7yqXLtPHJ42kmp24tY1a292z C+7jGz/qiNsKt0zolF4j+cUH3GRip1UonZtROAwZgCZIdG1kMn49ib8EfItML3zc 5Bo2V4KGHfcJCiu+Z+rzQVAI5lcPJzyQKHLMMMRLm2cdFzYObARllH9ZoJ3i7gbS U7giGCYhrQMgusDcMQi0W3JkY98cjt0uHyr9/EP34wiilziCPzUxdWVAb0SBUzcR T83Q2HkIlRoyidX9+stCaWvbQ592y11iWX2ILlJN8Z9rlH6+208xrAlm4rUTcDLP d59+7IU4X6HqDUZnVBDrbfDLoiHj7KBstYjFcerLzTR8IzRCbIM8Ahlk0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ+vu+3H60MnaXlLUH1tevRDKUgMB8GA1UdIwQY MBaAFKFSVoXJbjJvIK43KcAw9E/RSZsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAt NDQzNzFiMWNjNzJmLzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAtNDQzNzFiMWNjNzJm LzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEXrT0BX EvKslw77aKo2QBXeHBDCDAyWUh03Uhug54bk4bJEBBbUj/4jITUE0QOHTEYjgnr3 pu/ptGmlMsSJFmcQ84WujMTNrZx+I2/k4qe3jb5PnIbDdCUiA/WHNuyJvodVZzM7 YijZXLzxsVtYxqI7XotJgYhZeUoD7DBvGhOXitnG5cbg8IIQIu1Qk9co+RwH4fyF eHb5YYbrMXVU7zHh3Nku3RtpkzFxMYXYVc874iiE3bwwqcmxei0x4ArrvkHkCKWU 5CedKeK76d17oYWmZDzE8eGNQMcZU8hr7h6FfU8KzPbecKCNt9OwJz8bhCfH6imt lk3ob2Sj/Ieuhw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:40 2026 by rpki-client