This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft File: 2OtznG09xxpiBsjzcSQm_1MqCv4.mft (raw, json) Hash identifier: XzpXoL+QlhVPY6U9WN7RswSyw+5SLEsGrpraAmdR+Xc= Subject key identifier: C2:1A:31:78:09:5D:A6:72:77:AF:19:A0:F5:FE:90:09:3B:BB:3C:89 Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE Certificate issuer: /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe Certificate serial: 019C44D9D6D49A5DC2B1DD5F840964EB5327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft Manifest number: 0181 Signing time: Tue 10 Feb 2026 00:00:52 +0000 Manifest this update: Tue 10 Feb 2026 00:00:52 +0000 Manifest next update: Wed 11 Feb 2026 00:00:52 +0000 Files and hashes: 1: 2OtznG09xxpiBsjzcSQm_1MqCv4.crl (hash: dIcOWLMn0F7Z0D4gr8KUV9xg+Z/DWcRi2FyQbCYu/rU=) 2: R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (hash: 4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:d6:d4:9a:5d:c2:b1:dd:5f:84:09:64:eb:53:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe Validity Not Before: Feb 10 00:00:52 2026 GMT Not After : Feb 11 00:00:52 2026 GMT Subject: CN=c21a3178095da67277af19a0f5fe90093bbb3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:85:9d:70:82:2e:7f:58:a2:31:db:6b:37:16: 40:dc:c5:12:bc:87:72:c2:4a:39:42:16:31:25:44: 11:80:1b:c0:a7:da:ab:ec:52:11:0c:5b:b0:38:35: 66:12:2e:38:c0:3e:3a:c4:ae:98:b0:e4:b4:6a:bd: 95:96:9a:8f:7f:e8:53:2e:04:ea:6f:d5:67:ec:c4: 0b:83:a6:1f:24:32:cd:ba:9e:ac:91:94:18:ac:02: 09:97:73:30:98:62:e3:7b:15:b4:35:1f:17:f7:e8: 8e:dd:2c:bf:90:ab:8c:1b:f4:7b:b9:72:e8:6b:76: 8b:0c:b2:59:c9:cb:3f:16:50:8d:5c:96:52:fb:87: 44:24:9c:48:0a:30:f1:ae:85:5e:ef:5e:53:67:b9: dd:16:44:6a:c7:23:72:26:f7:a8:0d:79:10:25:f7: 79:47:6f:8e:58:85:70:aa:16:3b:7d:e2:94:f4:9a: b9:35:be:6a:d3:25:c2:53:91:aa:3b:20:e1:c7:43: a3:d6:e3:b3:3f:ef:86:f7:ac:b9:87:7b:8b:b9:38: d9:ee:53:05:a2:71:99:3f:e2:1f:31:f2:75:38:f9: 25:b6:45:8b:2b:09:97:a0:59:f5:29:80:64:44:fe: 20:e3:45:d8:cb:7d:c4:a8:58:67:05:22:59:52:74: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1A:31:78:09:5D:A6:72:77:AF:19:A0:F5:FE:90:09:3B:BB:3C:89 X509v3 Authority Key Identifier: keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:88:48:c8:3d:a2:ff:d8:6c:92:3c:14:0b:db:2a:2d:cc:44: dc:2d:de:f5:e9:21:19:64:53:3e:c0:1a:2a:7a:f7:d6:10:d4: 30:b8:d8:3a:39:c6:5f:4b:2f:6a:1f:5a:ea:92:df:9f:26:46: 6d:39:ae:c0:28:e9:8a:c6:30:aa:a5:c1:b5:66:31:5e:86:53: ac:5f:5d:f6:4d:02:ec:27:08:a1:e0:cc:87:6f:4e:d3:cc:c7: 1f:ba:d7:4c:a8:f0:e0:40:03:39:e4:d2:2c:3f:46:87:b7:19: 38:0e:88:fc:2b:5e:39:57:1f:bc:ca:46:2c:08:9c:21:a9:76: cf:67:6a:51:fa:10:8a:6c:ba:67:53:23:7b:fe:d5:39:58:71: 5c:77:cf:57:f3:c5:80:75:68:f5:61:b8:c3:a0:4a:ae:44:db: bc:b6:b2:5c:7d:53:c4:46:8a:dc:bd:14:ee:69:74:38:1d:e2: ca:6b:0d:65:bd:85:55:f1:7e:b7:61:19:e1:64:f5:77:be:1e: 2e:15:92:75:d7:71:f0:61:ea:4e:f9:17:09:96:60:be:de:0d: c4:a9:d7:ff:91:15:e0:92:b7:fd:27:6d:5e:ce:32:6b:16:ae: 0f:3f:ba:05:f3:1f:16:d1:55:e6:9b:65:44:ee:1d:d8:26:0b: 41:35:39:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2dbUml3Csd1fhAlk61MnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZWI3MzljNmQzZGM3MWE2MjA2YzhmMzcxMjQyNmZmNTMy YTBhZmUwHhcNMjYwMjEwMDAwMDUyWhcNMjYwMjExMDAwMDUyWjAzMTEwLwYDVQQD EyhjMjFhMzE3ODA5NWRhNjcyNzdhZjE5YTBmNWZlOTAwOTNiYmIzYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4WdcIIuf1iiMdtrNxZA3MUSvIdy wko5QhYxJUQRgBvAp9qr7FIRDFuwODVmEi44wD46xK6YsOS0ar2VlpqPf+hTLgTq b9Vn7MQLg6YfJDLNup6skZQYrAIJl3MwmGLjexW0NR8X9+iO3Sy/kKuMG/R7uXLo a3aLDLJZycs/FlCNXJZS+4dEJJxICjDxroVe715TZ7ndFkRqxyNyJveoDXkQJfd5 R2+OWIVwqhY7feKU9Jq5Nb5q0yXCU5GqOyDhx0Oj1uOzP++G96y5h3uLuTjZ7lMF onGZP+IfMfJ1OPkltkWLKwmXoFn1KYBkRP4g40XYy33EqFhnBSJZUnSgJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIaMXgJXaZyd68ZoPX+kAk7uzyJMB8GA1UdIwQY MBaAFNjrc5xtPccaYgbI83EkJv9TKgr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzIt MzMzYjZkNGVhNDViLzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8wMTgxZjgtNGZhNC00Njk3LWEyNzItMzMzYjZkNGVhNDVi LzEvMk90em5HMDl4eHBpQnNqemNTUW1fMU1xQ3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIhIyD2i /9hskjwUC9sqLcxE3C3e9ekhGWRTPsAaKnr31hDUMLjYOjnGX0svah9a6pLfnyZG bTmuwCjpisYwqqXBtWYxXoZTrF9d9k0C7CcIoeDMh29O08zHH7rXTKjw4EADOeTS LD9Gh7cZOA6I/CteOVcfvMpGLAicIal2z2dqUfoQimy6Z1Mje/7VOVhxXHfPV/PF gHVo9WG4w6BKrkTbvLayXH1TxEaK3L0U7ml0OB3iymsNZb2FVfF+t2EZ4WT1d74e LhWSdddx8GHqTvkXCZZgvt4NxKnX/5EV4JK3/SdtXs4yaxauDz+6BfMfFtFV5ptl RO4d2CYLQTU5uQ== -----END CERTIFICATE-----Generated at Tue Feb 10 05:32:44 2026 by rpki-client