This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json) Hash identifier: 43+clGcfliwImAshjjokrjcyMhVLpdw/ZV3ue6Zalp0= Subject key identifier: 2B:9A:64:FA:80:FA:B7:3A:53:D0:72:4B:4C:7B:2E:E9:93:AD:45:6C Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de Certificate serial: 019C4659F5814776EDE358B3AD7317C25837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft Manifest number: 1140 Signing time: Tue 10 Feb 2026 07:00:26 +0000 Manifest this update: Tue 10 Feb 2026 07:00:26 +0000 Manifest next update: Wed 11 Feb 2026 07:00:26 +0000 Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=) 2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: 4o0PxM0iK0rnd+4WSPeSJfnRlrUxixEuBzU9ghRsjkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:59:f5:81:47:76:ed:e3:58:b3:ad:73:17:c2:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de Validity Not Before: Feb 10 07:00:26 2026 GMT Not After : Feb 11 07:00:26 2026 GMT Subject: CN=2b9a64fa80fab73a53d0724b4c7b2ee993ad456c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:03:39:5d:97:ac:62:0e:6f:ff:f6:d4:43: 35:71:38:8e:02:90:76:4c:d4:b1:38:ed:d6:53:82: 00:3b:4f:cf:74:67:61:a3:93:6a:b9:28:96:b3:a4: 37:e5:dc:24:cc:24:43:b9:04:9f:c7:d1:4d:9f:c1: d7:c9:dd:c6:8c:2c:f9:50:1e:83:6b:10:e7:93:a6: 4f:a0:35:02:91:de:d7:6b:6f:58:e6:b3:a3:21:55: 6a:94:eb:4a:b8:52:69:06:f4:be:65:55:e7:95:b1: 5f:60:2c:ba:3b:57:4a:d1:18:01:9c:ff:0d:b4:62: 31:1b:4e:c9:ac:85:89:fe:a3:9a:ef:55:d6:8d:08: cf:18:cc:fc:cb:cd:c7:86:1a:2a:6a:5c:fe:bb:53: 56:03:d7:70:5b:45:4a:66:80:e4:6c:a0:04:a2:48: 58:2c:d6:e3:74:be:7a:c9:56:1a:ce:5f:78:47:4d: 83:d5:9b:60:63:73:69:04:44:fc:93:05:b7:15:32: 92:b0:6e:bd:7f:1d:4c:a4:2f:6b:93:cb:05:69:f8: ed:ab:5d:ed:7d:ee:21:8a:0c:d6:71:a6:2b:72:e1: 2f:d3:ed:89:bd:31:06:c9:41:4c:27:bd:4e:99:49: 73:9b:8c:f3:fc:60:29:5e:90:21:1e:52:b4:7b:8b: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:64:FA:80:FA:B7:3A:53:D0:72:4B:4C:7B:2E:E9:93:AD:45:6C X509v3 Authority Key Identifier: keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:db:22:08:af:e9:e8:ed:e8:70:39:8b:50:ef:a0:1e:d3:fb: fb:d1:f8:ba:65:ba:95:7f:4e:f2:cb:fb:14:4d:16:db:db:b7: a3:a6:60:e4:35:d6:3d:57:1c:c4:a9:25:f1:c3:bb:91:6b:78: bf:11:cc:93:98:9b:28:84:13:60:de:c9:74:02:9b:54:7d:69: 3a:e2:76:72:b1:3c:a9:59:d8:c2:8f:ac:3e:cd:b9:ec:91:4d: 0d:e9:07:dd:b8:97:0c:00:ea:24:bc:7f:44:35:22:81:e7:cf: 02:9c:3d:84:c2:fd:e7:b7:4e:bb:c8:26:e0:92:3b:eb:88:ba: 04:b6:fb:98:ed:60:4f:0e:47:95:ef:c8:f6:21:d6:d4:a3:27: 45:3e:44:41:b1:b4:73:c7:0e:ce:7f:04:35:e2:68:cc:cb:df: 4a:ea:24:e6:1d:69:74:53:a9:e0:5c:25:eb:3d:1b:a1:26:e3: f1:49:c4:67:db:96:34:50:73:74:9d:f4:27:24:0e:b4:61:6f: e3:06:d7:ef:6d:e2:12:39:49:12:da:57:1d:60:36:e4:f5:c3: 87:d3:ce:e6:b8:c9:88:e3:e2:a8:b3:5f:de:5c:a7:cc:c0:3a: 2c:f7:11:96:df:b3:fd:db:8d:48:bf:09:99:52:65:1f:ed:8b: 35:f6:a8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxGWfWBR3bt41izrXMXwlg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh YWE0ZGUwHhcNMjYwMjEwMDcwMDI2WhcNMjYwMjExMDcwMDI2WjAzMTEwLwYDVQQD EygyYjlhNjRmYTgwZmFiNzNhNTNkMDcyNGI0YzdiMmVlOTkzYWQ0NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNIDOV2XrGIOb//21EM1cTiOApB2 TNSxOO3WU4IAO0/PdGdho5NquSiWs6Q35dwkzCRDuQSfx9FNn8HXyd3GjCz5UB6D axDnk6ZPoDUCkd7Xa29Y5rOjIVVqlOtKuFJpBvS+ZVXnlbFfYCy6O1dK0RgBnP8N tGIxG07JrIWJ/qOa71XWjQjPGMz8y83Hhhoqalz+u1NWA9dwW0VKZoDkbKAEokhY LNbjdL56yVYazl94R02D1ZtgY3NpBET8kwW3FTKSsG69fx1MpC9rk8sFafjtq13t fe4higzWcaYrcuEv0+2JvTEGyUFMJ71OmUlzm4zz/GApXpAhHlK0e4vSkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuaZPqA+rc6U9ByS0x7LumTrUVsMB8GA1UdIwQY MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtsiCK/p 6O3ocDmLUO+gHtP7+9H4umW6lX9O8sv7FE0W29u3o6Zg5DXWPVccxKkl8cO7kWt4 vxHMk5ibKIQTYN7JdAKbVH1pOuJ2crE8qVnYwo+sPs257JFNDekH3biXDADqJLx/ RDUigefPApw9hML957dOu8gm4JI764i6BLb7mO1gTw5Hle/I9iHW1KMnRT5EQbG0 c8cOzn8ENeJozMvfSuok5h1pdFOp4Fwl6z0boSbj8UnEZ9uWNFBzdJ30JyQOtGFv 4wbX723iEjlJEtpXHWA25PXDh9PO5rjJiOPiqLNf3lynzMA6LPcRlt+z/duNSL8J mVJlH+2LNfaobQ== -----END CERTIFICATE-----Generated at Tue Feb 10 13:07:56 2026 by rpki-client