This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json) Hash identifier: Ls21ehj+cPJ1ohRsiI6cGOsSwjNSRJMOzBiHZsuBWA0= Subject key identifier: 7F:0A:15:E0:40:AA:1B:97:FB:6E:D4:F0:B1:B4:06:8D:82:64:98:CC Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a Certificate serial: 019C4321EE72A5DD55C42F34C870431D3F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft Manifest number: 0485 Signing time: Mon 09 Feb 2026 16:00:23 +0000 Manifest this update: Mon 09 Feb 2026 16:00:23 +0000 Manifest next update: Tue 10 Feb 2026 16:00:23 +0000 Files and hashes: 1: 4YEshEThhW-HfjiC_JXVyf4TwOE.roa (hash: oQgmj/P+AIYLaF+qIOfX7poYMGbO0DMzAyRYbtM7ju4=) 2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: zLgyNemP0RfkmdNp3TzTdwTnFMqtJXF0aBVGOHVGQ3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ee:72:a5:dd:55:c4:2f:34:c8:70:43:1d:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a Validity Not Before: Feb 9 16:00:23 2026 GMT Not After : Feb 10 16:00:23 2026 GMT Subject: CN=7f0a15e040aa1b97fb6ed4f0b1b4068d826498cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:76:3a:24:a5:0f:d9:77:38:15:19:f7:4f: 24:3e:2e:47:c5:04:0c:bd:e8:32:b0:12:d6:f2:8b: 4f:d3:5d:91:29:93:0b:9d:9a:a9:ba:e8:ab:c1:9f: 8a:64:9c:a0:dc:7b:48:7f:f9:75:a5:48:05:65:ca: de:4b:88:71:bf:cc:f8:d1:de:04:08:fc:dd:c4:0d: 3b:84:23:ff:b2:a2:4e:3b:8f:0c:c7:0b:b7:55:fb: 26:3a:23:08:8f:9b:21:36:34:50:51:22:f1:f1:f0: 24:95:eb:56:0f:3d:a5:67:77:5a:ab:bb:b6:68:29: 53:b3:c1:a3:bc:53:84:c0:04:14:01:c2:7f:d1:bd: 8f:f8:19:92:81:3d:4f:f8:48:00:c5:63:f5:f2:fc: 37:03:b9:95:52:b5:7a:9c:60:e6:68:8b:07:bc:b8: dc:7a:e8:93:f7:cf:f2:03:4c:ce:40:c8:e9:21:5b: cc:a6:ec:39:00:ae:fb:4b:db:e8:4e:74:1f:f3:ff: 67:57:d6:11:25:02:48:50:3d:76:10:44:db:d6:e7: 61:68:da:27:89:a7:1b:cd:85:f8:86:0e:29:ae:8f: d6:c0:77:ec:b8:dd:90:3d:99:85:d0:0f:b5:cc:88: 7e:2b:b0:91:50:8c:87:ca:df:1c:6b:b1:ae:0e:e7: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:15:E0:40:AA:1B:97:FB:6E:D4:F0:B1:B4:06:8D:82:64:98:CC X509v3 Authority Key Identifier: keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d9:aa:75:e7:89:dc:3f:52:7e:46:eb:b2:ff:9a:79:ba:0c: 18:2c:89:57:17:40:90:bd:c8:1c:63:05:b4:28:90:c8:35:7c: 55:ee:2e:73:f2:52:a0:6a:1a:32:21:10:9e:35:b9:e8:64:be: 56:a7:9d:50:66:94:1e:ba:4e:0e:f1:1b:28:99:3b:cf:dd:33: b6:fe:ac:dc:5e:2b:c6:92:1e:99:57:4d:d2:04:c4:3f:ee:10: 80:f8:24:57:91:f7:63:9b:fa:84:85:c3:be:bf:b1:f2:32:88: 43:67:38:bf:ec:3a:19:b8:72:42:c2:2e:78:28:e6:d1:9e:02: f6:2e:aa:3d:db:e3:93:4c:c7:42:11:16:64:f4:6e:e3:a9:29: 04:7b:0b:72:28:37:a8:c2:77:49:50:f8:bd:ad:5f:8f:3a:9f: ef:53:d0:f0:3a:c7:3c:69:c1:85:37:81:36:e7:b8:40:8c:80: d6:87:0f:91:69:e9:f7:e5:3e:ad:15:5d:08:b2:7e:25:e0:a1: 00:3a:c2:bb:8c:62:94:76:c9:6d:c6:ed:4c:95:98:9a:cb:6c: f0:95:e0:e1:c9:61:96:c5:c9:b7:29:21:f6:0c:96:8f:ec:be: 2a:22:b0:8e:77:c5:b9:2a:ab:84:df:e5:85:6b:2e:e6:77:f9: a1:a5:07:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIe5ypd1VxC80yHBDHT9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2I3NTYxZDk4ZGFjZmFiODYzMDU4YjNiOTgwN2FkODIz ZjE4NmEwHhcNMjYwMjA5MTYwMDIzWhcNMjYwMjEwMTYwMDIzWjAzMTEwLwYDVQQD Eyg3ZjBhMTVlMDQwYWExYjk3ZmI2ZWQ0ZjBiMWI0MDY4ZDgyNjQ5OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooZ2OiSlD9l3OBUZ908kPi5HxQQM vegysBLW8otP012RKZMLnZqpuuirwZ+KZJyg3HtIf/l1pUgFZcreS4hxv8z40d4E CPzdxA07hCP/sqJOO48Mxwu3VfsmOiMIj5shNjRQUSLx8fAkletWDz2lZ3daq7u2 aClTs8GjvFOEwAQUAcJ/0b2P+BmSgT1P+EgAxWP18vw3A7mVUrV6nGDmaIsHvLjc euiT98/yA0zOQMjpIVvMpuw5AK77S9voTnQf8/9nV9YRJQJIUD12EETb1udhaNon iacbzYX4hg4pro/WwHfsuN2QPZmF0A+1zIh+K7CRUIyHyt8ca7GuDucvGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8KFeBAqhuX+27U8LG0Bo2CZJjMMB8GA1UdIwQY MBaAFDh7dWHZjaz6uGMFizuYB62CPxhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEt MGFlY2RjNTE3NWZhLzEvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hMTQ2NGEtMjQxMS00Y2M4LWExMDEtMGFlY2RjNTE3NWZh LzEvT0h0MVlkbU5yUHE0WXdXTE81Z0hyWUlfR0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNmqdeeJ 3D9Sfkbrsv+aeboMGCyJVxdAkL3IHGMFtCiQyDV8Ve4uc/JSoGoaMiEQnjW56GS+ VqedUGaUHrpODvEbKJk7z90ztv6s3F4rxpIemVdN0gTEP+4QgPgkV5H3Y5v6hIXD vr+x8jKIQ2c4v+w6GbhyQsIueCjm0Z4C9i6qPdvjk0zHQhEWZPRu46kpBHsLcig3 qMJ3SVD4va1fjzqf71PQ8DrHPGnBhTeBNue4QIyA1ocPkWnp9+U+rRVdCLJ+JeCh ADrCu4xilHbJbcbtTJWYmsts8JXg4clhlsXJtykh9gyWj+y+KiKwjnfFuSqrhN/l hWsu5nf5oaUHsA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:26 2026 by rpki-client