This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json) Hash identifier: 4VhFjzl2O+fm8CFYThseel7doVwwO9APmvi5qyj1vRk= Subject key identifier: 76:3A:0A:E0:28:E7:8D:36:42:4D:BF:42:5B:C7:89:C9:69:2D:D2:DA Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Certificate serial: 019C41D8D47EB085A204261B9DCE0911E33B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft Manifest number: 02D2 Signing time: Mon 09 Feb 2026 10:00:55 +0000 Manifest this update: Mon 09 Feb 2026 10:00:55 +0000 Manifest next update: Tue 10 Feb 2026 10:00:55 +0000 Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: H3Wi6q/X/6G/zkuIVvYLpgdthmcLa0uH0TH9gdugbKs=) 2: dXAskw5YKw-xbAInYF21THIeAbA.roa (hash: RYSyXnntwOeT7T1iISY+fkgo30onRr6CAjAd0C8Uvbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d4:7e:b0:85:a2:04:26:1b:9d:ce:09:11:e3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877 Validity Not Before: Feb 9 10:00:55 2026 GMT Not After : Feb 10 10:00:55 2026 GMT Subject: CN=763a0ae028e78d36424dbf425bc789c9692dd2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7f:96:8b:7c:7e:c0:b3:64:05:5d:1e:dc:52: 8c:6f:19:7a:a8:57:ad:af:82:76:42:14:45:28:61: de:78:c5:92:c7:19:39:1a:19:a8:6d:a0:6d:ea:a3: ae:db:20:98:46:23:31:08:13:55:9d:6a:b4:6d:10: 27:7f:fb:17:da:f5:e1:da:b1:7c:fd:62:4f:b2:40: 43:5c:73:0d:b8:80:02:7d:f6:9d:7e:c4:94:b2:76: b6:2d:e6:ae:08:d7:f8:b6:e2:61:7a:73:30:b8:26: 5a:4e:cf:e2:fb:5d:5d:6f:b0:c9:cb:a3:f5:b9:64: 64:db:7c:e9:91:19:9d:f3:44:cc:b4:8f:ba:d5:b6: 89:cc:89:db:e7:0d:fe:ae:af:81:21:00:48:dd:d8: ef:79:f5:d5:9c:ca:c8:c5:72:e1:f3:20:3f:a1:18: 30:38:26:1b:73:dd:bc:3e:1f:d6:9d:1b:6c:a3:de: a2:68:fd:5f:9e:b3:e9:ae:21:8b:0d:44:aa:c5:40: 33:80:c3:14:50:d9:04:14:ba:bf:dc:ba:89:59:d9: 87:c7:70:e7:8d:77:35:ea:d3:f6:c6:5c:d4:f0:bf: 34:71:a5:1c:f6:d8:14:d8:72:4f:4e:d0:b2:90:61: e4:8b:3a:66:28:66:23:1e:c6:d1:5a:d2:59:78:bd: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3A:0A:E0:28:E7:8D:36:42:4D:BF:42:5B:C7:89:C9:69:2D:D2:DA X509v3 Authority Key Identifier: keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cb:3d:eb:7c:63:99:8b:b7:88:a0:ac:1d:5a:72:7b:f7:fc: 0a:07:89:b1:96:e5:08:1c:0e:a6:c8:dc:a3:91:e7:da:a5:3d: af:1e:6d:78:f5:e2:a3:24:08:7e:1e:f5:6a:1c:34:f6:d6:4d: df:f2:b3:22:37:f8:79:f5:43:01:49:2d:a7:1d:1a:f5:96:f8: 55:90:cd:30:62:1f:1b:72:94:23:7a:c1:36:a2:a6:68:4d:34: 4e:ca:5c:5a:64:c3:26:06:c0:0b:66:61:e2:6c:e5:d5:56:3d: 20:99:f9:c3:29:f0:8c:d4:1d:e6:68:94:3c:2a:39:e0:7f:13: 4f:7a:86:43:cc:92:06:85:b9:c6:25:82:a3:14:b1:2a:cb:3e: c4:19:73:2f:4e:01:32:53:94:b3:2d:0c:34:62:2e:e1:bd:b7: fe:7b:c0:8a:69:3e:8c:ee:7f:cd:f3:9f:3e:d3:23:a1:73:ed: 1a:30:52:98:0c:ea:35:3f:dd:86:5d:0b:b7:91:5d:5d:02:56: a6:79:fd:84:f9:71:53:28:77:eb:c5:a1:57:89:a2:cf:f8:7d: 24:6e:9f:37:0b:e7:f0:06:3b:be:0c:40:50:1d:8b:67:00:00: 87:0f:0a:5d:5d:93:bc:41:c5:e6:2f:e3:9c:c3:04:8e:c6:22: 9c:f2:84:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NR+sIWiBCYbnc4JEeM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGYwZTBhOGUwMGYxYTZkOGMxYzI2NmUzZjQzNmQ0NmU3 MWU4NzcwHhcNMjYwMjA5MTAwMDU1WhcNMjYwMjEwMTAwMDU1WjAzMTEwLwYDVQQD Eyg3NjNhMGFlMDI4ZTc4ZDM2NDI0ZGJmNDI1YmM3ODljOTY5MmRkMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX+Wi3x+wLNkBV0e3FKMbxl6qFet r4J2QhRFKGHeeMWSxxk5GhmobaBt6qOu2yCYRiMxCBNVnWq0bRAnf/sX2vXh2rF8 /WJPskBDXHMNuIACffadfsSUsna2LeauCNf4tuJhenMwuCZaTs/i+11db7DJy6P1 uWRk23zpkRmd80TMtI+61baJzInb5w3+rq+BIQBI3djvefXVnMrIxXLh8yA/oRgw OCYbc928Ph/WnRtso96iaP1fnrPpriGLDUSqxUAzgMMUUNkEFLq/3LqJWdmHx3Dn jXc16tP2xlzU8L80caUc9tgU2HJPTtCykGHkizpmKGYjHsbRWtJZeL0XZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY6CuAo5402Qk2/QlvHiclpLdLaMB8GA1UdIwQY MBaAFNAPDgqOAPGm2MHCZuP0NtRuceh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAt NjVhYjBkMzUxZjI3LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zZDRiNDAtY2E3ZS00NDcyLWI3NDAtNjVhYjBkMzUxZjI3 LzEvMEE4T0NvNEE4YWJZd2NKbTRfUTIxRzV4NkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMs963xj mYu3iKCsHVpye/f8CgeJsZblCBwOpsjco5Hn2qU9rx5tePXioyQIfh71ahw09tZN 3/KzIjf4efVDAUktpx0a9Zb4VZDNMGIfG3KUI3rBNqKmaE00TspcWmTDJgbAC2Zh 4mzl1VY9IJn5wynwjNQd5miUPCo54H8TT3qGQ8ySBoW5xiWCoxSxKss+xBlzL04B MlOUsy0MNGIu4b23/nvAimk+jO5/zfOfPtMjoXPtGjBSmAzqNT/dhl0Lt5FdXQJW pnn9hPlxUyh368WhV4miz/h9JG6fNwvn8AY7vgxAUB2LZwAAhw8KXV2TvEHF5i/j nMMEjsYinPKE0A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:32 2026 by rpki-client