This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json) Hash identifier: w+IZ4O7gzELPZ+ogwH0UB3E64UBKLA2s05IxmWa1KKM= Subject key identifier: 77:D8:69:3D:EE:61:8E:85:00:DB:47:11:41:74:87:97:1A:0E:DF:EF Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Certificate serial: 019C42EB770E61DCD197C44F4FF29B1B2057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft Manifest number: 0F05 Signing time: Mon 09 Feb 2026 15:00:53 +0000 Manifest this update: Mon 09 Feb 2026 15:00:53 +0000 Manifest next update: Tue 10 Feb 2026 15:00:53 +0000 Files and hashes: 1: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (hash: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM=) 2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: QUXmC6FTejZCRbI9AfEKVhb50iLEWietGE0Ial07ug0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:77:0e:61:dc:d1:97:c4:4f:4f:f2:9b:1b:20:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9 Validity Not Before: Feb 9 15:00:53 2026 GMT Not After : Feb 10 15:00:53 2026 GMT Subject: CN=77d8693dee618e8500db4711417487971a0edfef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:8b:37:63:c1:8d:e1:3e:fe:9a:b9:10:b0: cb:0f:fd:af:0a:9a:73:d8:fc:70:b4:10:88:c3:78: e2:62:b5:4d:b3:bb:0f:cc:2a:0a:9c:76:95:35:26: c9:f7:98:c3:da:3d:5c:f2:fe:31:00:59:9a:fd:72: 5c:b1:30:14:e5:6d:a3:6e:0c:1a:a2:c2:40:61:60: 73:bf:54:aa:58:d6:ba:e2:dd:0e:95:65:48:41:16: 39:cf:49:24:ae:e0:eb:4f:35:c5:e8:7e:61:8a:87: 4b:fb:00:4e:20:d6:81:6d:05:fc:8c:63:10:06:c3: 26:c5:31:21:e1:d4:d4:11:b3:fd:d1:11:34:dd:b7: 9e:86:a7:40:6a:89:00:a7:c6:e4:9f:9c:c6:f0:e0: 98:57:69:d6:0f:97:78:42:b8:68:e9:af:e7:08:99: 72:b2:26:42:43:f6:60:6e:f5:b8:87:09:92:56:e9: a7:fb:11:c3:75:93:47:d6:2c:7a:50:4e:be:8f:bd: 56:3f:6f:48:52:d9:0d:62:94:b1:43:1e:fc:ee:4d: a3:a3:60:d0:32:be:38:03:9b:86:b2:5b:25:db:e5: 76:44:c8:2c:e6:cc:2b:31:07:9c:8b:41:bd:73:b6: 8e:9e:77:88:37:5e:06:b6:8c:e5:71:15:20:15:c0: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D8:69:3D:EE:61:8E:85:00:DB:47:11:41:74:87:97:1A:0E:DF:EF X509v3 Authority Key Identifier: keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:97:d3:ff:bc:81:3d:b2:a7:69:9e:e1:e6:f1:89:44:42: 24:55:90:80:35:35:bd:88:1f:3e:00:df:cc:a5:b1:25:0c:cf: ab:c2:a5:bf:06:91:e5:61:87:ca:0d:34:65:01:21:a2:94:98: 36:fa:b7:36:f4:c5:fd:f9:33:c7:29:7b:4a:bb:49:fe:a2:7b: 86:a1:f8:f6:f9:5a:68:52:f5:9f:4e:cb:fe:94:5a:12:6a:16: 2b:f7:32:9f:61:19:16:f4:e6:07:2d:d8:bb:3f:f7:1f:8c:46: 14:8f:0f:84:3c:8a:e8:f9:2b:59:cf:9e:ea:83:04:80:af:b8: cd:93:2a:93:a9:b9:e8:c1:6f:72:5e:e3:68:56:6c:cb:b2:2f: 19:31:a8:84:9f:12:24:2b:e7:02:58:51:e5:d7:16:20:24:18: 06:bb:c8:71:8b:a3:b0:18:13:b7:7e:a1:b6:4c:b2:d5:5c:7c: 82:9d:26:27:4d:7b:f0:58:5a:af:7a:9e:ce:3f:1b:03:8d:92: 96:38:4d:9f:1c:f3:eb:8d:11:7b:6f:2e:50:bb:4d:f2:3d:16: ec:5b:9a:5d:44:ba:ac:58:e1:5a:6e:88:48:78:95:74:3d:3f: dc:5c:7e:f4:3f:05:ba:2d:18:0f:e3:47:9c:03:95:24:38:57: 53:95:92:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63cOYdzRl8RPT/KbGyBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0 MzRkYTkwHhcNMjYwMjA5MTUwMDUzWhcNMjYwMjEwMTUwMDUzWjAzMTEwLwYDVQQD Eyg3N2Q4NjkzZGVlNjE4ZTg1MDBkYjQ3MTE0MTc0ODc5NzFhMGVkZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn86LN2PBjeE+/pq5ELDLD/2vCppz 2PxwtBCIw3jiYrVNs7sPzCoKnHaVNSbJ95jD2j1c8v4xAFma/XJcsTAU5W2jbgwa osJAYWBzv1SqWNa64t0OlWVIQRY5z0kkruDrTzXF6H5hiodL+wBOINaBbQX8jGMQ BsMmxTEh4dTUEbP90RE03beehqdAaokAp8bkn5zG8OCYV2nWD5d4Qrho6a/nCJly siZCQ/ZgbvW4hwmSVumn+xHDdZNH1ix6UE6+j71WP29IUtkNYpSxQx787k2jo2DQ Mr44A5uGslsl2+V2RMgs5swrMQeci0G9c7aOnneIN14GtozlcRUgFcDohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfYaT3uYY6FANtHEUF0h5caDt/vMB8GA1UdIwQY MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS2X0/+8 gT2yp2me4ebxiURCJFWQgDU1vYgfPgDfzKWxJQzPq8KlvwaR5WGHyg00ZQEhopSY Nvq3NvTF/fkzxyl7SrtJ/qJ7hqH49vlaaFL1n07L/pRaEmoWK/cyn2EZFvTmBy3Y uz/3H4xGFI8PhDyK6PkrWc+e6oMEgK+4zZMqk6m56MFvcl7jaFZsy7IvGTGohJ8S JCvnAlhR5dcWICQYBrvIcYujsBgTt36htkyy1Vx8gp0mJ0178Fhar3qezj8bA42S ljhNnxzz640Re28uULtN8j0W7FuaXUS6rFjhWm6ISHiVdD0/3Fx+9D8Fui0YD+NH nAOVJDhXU5WS6g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:28 2026 by rpki-client