This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json) Hash identifier: zcZwCL6wP1tazPTFBzZk6iLeNS1cSyPYI2X8Yo3l3C4= Subject key identifier: 8F:79:EB:35:00:D9:E2:5C:90:C9:1F:8F:EC:DC:4E:97:E2:29:5D:71 Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72 Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72 Certificate serial: 019C4321F32F201F164EC68A02F6252505BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft Manifest number: 138E Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: 5NE5rC8twValskb1npPly0C3qkQ4q+kPs1SFFQFzN+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f3:2f:20:1f:16:4e:c6:8a:02:f6:25:25:05:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72 Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=8f79eb3500d9e25c90c91f8fecdc4e97e2295d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:79:2e:51:49:3e:90:47:19:cb:40:b8:a7: f8:31:36:8a:c7:b5:ec:a6:28:f3:f5:7d:b0:38:89: b3:4b:99:0f:59:82:03:89:f1:ac:71:dd:0a:d4:28: e3:95:ee:43:81:df:18:c8:82:57:a3:01:80:b7:c6: e6:d8:6c:bb:e3:38:65:4a:57:2f:a0:ee:43:15:46: a7:87:ba:64:e0:55:e2:69:50:76:9a:81:65:aa:1b: 2f:a2:de:3a:00:52:67:4f:be:db:03:1d:b8:f1:50: 5c:bb:d3:64:66:42:82:b6:37:a3:f1:4c:3e:82:af: be:42:c3:fb:dd:60:4c:8d:c7:db:4c:fc:a9:26:ce: 0e:58:bc:ce:f0:32:de:ef:da:64:1d:8c:86:51:6f: eb:a5:70:db:7b:61:bd:01:10:7a:43:91:ab:65:62: 73:6f:0c:6f:86:95:c4:3d:ee:06:a8:7d:7b:f5:07: fd:89:80:02:45:64:b2:c5:ff:f1:b7:83:8f:31:73: 60:21:07:c9:9b:e6:ea:e6:6a:c3:26:c5:2a:77:32: 45:5b:c3:6d:9b:50:9d:f2:7b:45:ae:98:f0:eb:54: b1:de:a8:2e:4d:c7:f9:f2:b0:48:3d:e2:97:2d:fb: 50:b0:cf:07:4a:71:8c:40:9f:13:ae:ff:ba:93:83: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:79:EB:35:00:D9:E2:5C:90:C9:1F:8F:EC:DC:4E:97:E2:29:5D:71 X509v3 Authority Key Identifier: keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0c:16:66:9f:69:9c:cb:71:90:43:12:76:1e:de:71:3e:0c: c4:13:ce:a7:f9:70:8f:28:0a:c1:07:45:cd:59:f5:43:71:56: 97:7f:a7:42:95:4b:5c:a3:5b:d8:4c:e2:f1:48:cc:0a:96:da: c7:0f:12:fc:63:6d:16:46:cf:fc:cf:95:82:ef:e3:90:4e:27: 7d:6e:35:58:df:45:a0:81:7f:1b:d6:d9:d7:36:7d:74:a7:37: 33:f3:cf:9d:2f:79:53:6e:54:5e:c4:83:1b:f1:12:a8:e8:61: 56:07:99:ef:dd:ac:c0:8f:7b:75:9c:bb:ed:a4:23:05:2d:20: 3b:8b:11:99:9f:44:e9:9a:ff:4b:4d:a9:d3:ec:87:96:93:e9: 83:cf:eb:a3:c6:c8:87:37:d7:df:18:f6:87:72:15:35:f9:9e: 81:4b:fa:3b:2b:64:c0:a4:03:5c:e1:69:96:8a:3c:6e:c7:97: cf:d7:9d:6c:3d:f0:65:e4:4f:99:82:6d:6b:dd:76:07:33:60: e5:e0:f1:06:b5:40:86:78:f6:be:a1:96:56:f8:78:4d:23:0d: 2a:39:7f:b4:42:2d:c4:b8:57:e7:3e:49:5a:31:62:e0:9e:de: 26:fc:36:f2:1d:0c:7b:bc:3b:8f:63:22:47:41:4f:89:30:9d: 97:dc:b5:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfMvIB8WTsaKAvYlJQW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZDI4YjM1OGQ0MTdiMzdlY2M4YjI5MWJmOTljMTUxNWJj ZThmNzIwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD Eyg4Zjc5ZWIzNTAwZDllMjVjOTBjOTFmOGZlY2RjNGU5N2UyMjk1ZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0R5LlFJPpBHGctAuKf4MTaKx7Xs pijz9X2wOImzS5kPWYIDifGscd0K1Cjjle5Dgd8YyIJXowGAt8bm2Gy74zhlSlcv oO5DFUanh7pk4FXiaVB2moFlqhsvot46AFJnT77bAx248VBcu9NkZkKCtjej8Uw+ gq++QsP73WBMjcfbTPypJs4OWLzO8DLe79pkHYyGUW/rpXDbe2G9ARB6Q5GrZWJz bwxvhpXEPe4GqH179Qf9iYACRWSyxf/xt4OPMXNgIQfJm+bq5mrDJsUqdzJFW8Nt m1Cd8ntFrpjw61Sx3qguTcf58rBIPeKXLftQsM8HSnGMQJ8Trv+6k4PM7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI956zUA2eJckMkfj+zcTpfiKV1xMB8GA1UdIwQY MBaAFKPSizWNQXs37Miykb+ZwVFbzo9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYt ZGZlNDEwODhjYzAzLzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYtZGZlNDEwODhjYzAz LzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQwWZp9p nMtxkEMSdh7ecT4MxBPOp/lwjygKwQdFzVn1Q3FWl3+nQpVLXKNb2Ezi8UjMCpba xw8S/GNtFkbP/M+Vgu/jkE4nfW41WN9FoIF/G9bZ1zZ9dKc3M/PPnS95U25UXsSD G/ESqOhhVgeZ792swI97dZy77aQjBS0gO4sRmZ9E6Zr/S02p0+yHlpPpg8/ro8bI hzfX3xj2h3IVNfmegUv6OytkwKQDXOFploo8bseXz9edbD3wZeRPmYJta912BzNg 5eDxBrVAhnj2vqGWVvh4TSMNKjl/tEItxLhX5z5JWjFi4J7eJvw28h0Me7w7j2Mi R0FPiTCdl9y1ig== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:29 2026 by rpki-client