This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json) Hash identifier: LRWlmo9/fV2IDoPtysZT/9VNNrT0j67UJZXu8kL/Voc= Subject key identifier: 58:15:83:D7:B8:85:97:6F:D5:A2:FD:CA:DB:43:33:E6:A5:4F:B9:CF Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4 Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4 Certificate serial: 019C41D862BED12C81904123D4CE92DE5A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft Manifest number: 0F85 Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: odqmtQizHKptA73wOkD/3TX3R8I2lxNETo+/EBwWJbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:62:be:d1:2c:81:90:41:23:d4:ce:92:de:5a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4 Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=581583d7b885976fd5a2fdcadb4333e6a54fb9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:f8:49:ea:c6:a5:7a:58:1c:bb:0d:a0:65: 02:60:ad:31:1c:ef:29:85:86:0f:ff:ef:d6:90:2e: 54:ce:30:aa:c8:03:f4:8b:3a:69:d8:aa:a2:03:32: 1b:95:35:05:38:a1:6f:3b:40:df:f3:e7:47:88:7c: 17:ef:9d:de:7c:26:9f:c5:b5:3b:69:c0:9a:af:dc: eb:e1:2b:f2:29:95:67:75:1e:6f:2b:09:e8:13:f1: 9c:92:5a:95:20:ae:8f:59:34:c3:19:92:b5:72:ca: 78:10:71:eb:45:57:96:32:16:3a:63:08:31:e4:69: 72:a5:fe:2a:73:20:3c:55:3c:70:f7:98:90:36:d3: 73:26:89:e6:a4:fa:57:7e:54:79:81:3f:38:16:ab: 8d:0b:74:da:07:41:25:7a:e3:c9:62:41:45:9d:f0: 5f:02:2a:c6:4e:2b:82:de:1c:86:18:76:07:61:d5: 1b:85:83:48:61:29:2b:33:a2:26:d2:41:a5:cc:0b: 96:c2:36:5a:a4:f3:14:2f:6d:a3:84:cc:d8:eb:ca: ee:2f:8a:18:a9:70:b8:de:4b:c4:00:24:6e:e7:3b: b1:d3:bf:60:84:a9:e1:97:d3:f3:c3:83:a7:7d:8a: fb:29:70:26:7b:a9:1b:53:16:44:e6:47:5f:58:a7: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:83:D7:B8:85:97:6F:D5:A2:FD:CA:DB:43:33:E6:A5:4F:B9:CF X509v3 Authority Key Identifier: keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d4:ce:2f:bd:d4:c8:68:64:d7:f5:ec:b9:ec:97:83:62:01: aa:05:0a:a2:8e:3b:a2:d4:87:f0:68:3c:ae:f1:aa:8e:aa:e4: 40:2a:a2:82:2a:e5:99:45:44:4a:48:ce:50:c4:e8:20:32:5f: 2b:43:aa:1d:92:ef:c7:10:fa:6d:0f:c8:9c:6b:42:c5:10:3e: e2:c6:f9:9c:d8:10:71:cb:21:d7:21:17:64:a6:a8:da:05:31: a9:08:df:da:f0:d1:c4:77:ce:ba:36:7a:70:a6:2a:bf:f4:b6: 0b:a9:3c:d4:59:ac:d8:ca:d4:5d:88:51:c4:ba:5a:8a:01:ff: e2:e8:6c:2d:f6:3e:09:36:e4:dc:d5:5b:0a:b1:c7:9d:8c:61: bc:58:30:ee:40:6d:ca:8d:3c:f7:83:d5:7d:52:94:35:45:c2: 0a:47:0a:1e:41:a2:ba:32:4e:b7:7d:de:ba:d7:f7:b9:0a:e3: ce:84:bf:dd:b7:89:a1:55:2d:6e:64:5d:56:dc:ba:42:96:ec: 82:fa:5b:11:9f:d8:dc:7e:27:0c:22:9f:c3:ed:d6:7b:30:76: 95:ea:7c:c2:93:11:34:8c:e9:45:06:72:b4:98:6f:10:bb:69: 07:f2:f3:f0:e7:f7:9b:12:d6:86:69:e2:3f:57:d4:b3:c1:aa: 3f:69:00:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GK+0SyBkEEj1M6S3lo0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWExZDQ0NjI5MzgzY2FkZmM3NTE3ZGVmN2RlMjkyOTVh ZTM5YjQwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD Eyg1ODE1ODNkN2I4ODU5NzZmZDVhMmZkY2FkYjQzMzNlNmE1NGZiOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwr4SerGpXpYHLsNoGUCYK0xHO8p hYYP/+/WkC5UzjCqyAP0izpp2KqiAzIblTUFOKFvO0Df8+dHiHwX753efCafxbU7 acCar9zr4SvyKZVndR5vKwnoE/GcklqVIK6PWTTDGZK1csp4EHHrRVeWMhY6Ywgx 5Glypf4qcyA8VTxw95iQNtNzJonmpPpXflR5gT84FquNC3TaB0EleuPJYkFFnfBf AirGTiuC3hyGGHYHYdUbhYNIYSkrM6Im0kGlzAuWwjZapPMUL22jhMzY68ruL4oY qXC43kvEACRu5zux079ghKnhl9Pzw4OnfYr7KXAme6kbUxZE5kdfWKfY0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgVg9e4hZdv1aL9yttDM+alT7nPMB8GA1UdIwQY MBaAFKKqHURik4PK38dRfe994pKVrjm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUt NzQ5MTc1YjE3OGYxLzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8zMTc4MjQtZjhmNS00Yjc4LTliNWUtNzQ5MTc1YjE3OGYx LzEvb3FvZFJHS1RnOHJmeDFGOTczM2lrcFd1T2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdTOL73U yGhk1/XsueyXg2IBqgUKoo47otSH8Gg8rvGqjqrkQCqigirlmUVESkjOUMToIDJf K0OqHZLvxxD6bQ/InGtCxRA+4sb5nNgQccsh1yEXZKao2gUxqQjf2vDRxHfOujZ6 cKYqv/S2C6k81Fms2MrUXYhRxLpaigH/4uhsLfY+CTbk3NVbCrHHnYxhvFgw7kBt yo0894PVfVKUNUXCCkcKHkGiujJOt33eutf3uQrjzoS/3beJoVUtbmRdVty6Qpbs gvpbEZ/Y3H4nDCKfw+3WezB2lep8wpMRNIzpRQZytJhvELtpB/Lz8Of3mxLWhmni P1fUs8GqP2kALg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:19 2026 by rpki-client