This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft File: oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft (raw, json) Hash identifier: vHn2nRlW86Pfv0g4LETZY3qPLG8XO4iWNTq5Gqty/2Q= Subject key identifier: B5:C1:42:64:F2:52:D4:4E:9C:25:C5:0E:06:79:0C:25:CA:15:18:A2 Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Certificate serial: 019C42EB9812668B41D02D9546215FD3002F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft Manifest number: 120C Signing time: Mon 09 Feb 2026 15:01:02 +0000 Manifest this update: Mon 09 Feb 2026 15:01:02 +0000 Manifest next update: Tue 10 Feb 2026 15:01:02 +0000 Files and hashes: 1: MkHKmr1CCJc2BcOqw-KghmADjCc.roa (hash: mZUESDCQ7pThBi0ruZGxU2DBV/MKZ2Q9xt3I5e6sTr0=) 2: oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl (hash: 3cmE+wfxd1Gh6uEWX5UM8+bjxRpcIVmKq0M4wpUL+x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:98:12:66:8b:41:d0:2d:95:46:21:5f:d3:00:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b Validity Not Before: Feb 9 15:01:02 2026 GMT Not After : Feb 10 15:01:02 2026 GMT Subject: CN=b5c14264f252d44e9c25c50e06790c25ca1518a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:04:be:af:fd:64:48:c1:ed:19:ad:da:bc: 02:ce:51:42:c5:0f:d9:ac:e1:19:00:d3:93:9e:ab: db:7b:0b:6f:c0:9e:df:c1:9a:e0:57:97:d4:21:59: 05:ab:87:12:e7:8c:b6:fd:7b:79:b0:b2:f1:0d:45: e0:fc:26:a0:87:7d:2f:2b:a6:70:01:da:8e:32:46: 07:9e:0d:d4:aa:f9:16:f9:9e:32:9b:a6:66:68:03: c2:c6:93:75:16:12:34:ec:46:fe:b0:4c:33:db:77: 13:f5:8d:df:90:b6:cb:f6:ed:f0:a2:fc:7d:bd:c2: 44:ae:55:9d:42:01:41:a7:13:c5:26:3b:f5:75:c7: 10:c5:7c:43:f9:79:ea:96:63:bd:b4:aa:87:59:6c: 0c:78:ba:a2:f4:68:b4:ee:87:a4:54:e0:68:ee:c6: 68:b2:00:be:a4:52:dc:69:f5:28:28:38:07:98:d2: d2:7b:5c:33:61:f0:67:db:d8:2d:ca:7c:ca:88:c3: db:e3:05:c8:52:67:e6:93:53:32:35:cb:35:fc:c1: b1:e8:8e:66:af:6e:92:48:91:e2:e3:f3:9b:dc:84: bb:72:5b:61:ee:5b:1d:34:6c:2b:45:5c:d6:a8:15: 0b:e7:28:0c:dd:40:75:79:54:a3:f8:79:78:83:ff: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C1:42:64:F2:52:D4:4E:9C:25:C5:0E:06:79:0C:25:CA:15:18:A2 X509v3 Authority Key Identifier: keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:67:f1:a0:22:8b:59:fb:cd:55:60:27:2c:36:df:95:88:2e: 34:7d:00:6a:f1:6e:0b:8d:7e:13:03:df:b2:28:d0:57:44:4b: d4:f1:fe:de:92:d9:ee:49:e0:b7:11:b7:db:cd:9a:a4:ec:a5: ec:6c:e8:15:25:48:b8:7e:f1:68:2d:ad:3e:87:a3:7c:ef:b8: c4:ba:3a:6d:1d:b0:92:01:a0:a1:9b:d8:99:20:88:39:ff:1f: 51:2f:4a:cd:b2:9e:8d:4c:2f:17:71:af:1a:d5:ad:71:26:74: 17:3e:a1:da:3f:c1:94:29:2e:1b:0b:37:42:91:e9:61:fd:bb: de:17:99:0c:07:1d:49:cb:a8:fe:d7:9d:a3:78:61:79:fd:0d: ee:27:52:91:12:51:7b:57:de:84:dc:23:8e:59:a2:0b:78:3e: 6a:95:e6:39:37:97:c2:57:de:38:72:e1:af:93:64:53:75:c2: f0:ca:11:dd:75:ba:27:57:55:4e:2f:d3:d0:4f:38:a7:b7:87: ab:2b:7c:ef:c4:de:5d:46:8c:03:4b:19:0a:87:a4:99:c9:5f: 36:71:2f:85:ee:79:a3:0e:c2:c1:e1:a0:a0:7a:04:08:96:e4: 25:8d:e8:af:bc:38:b8:bd:a3:f1:41:74:a1:3a:05:17:21:be: 8c:1e:d4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65gSZotB0C2VRiFf0wAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzY4YTc0MWM3YWM2ODk2NWU5MGQ0ZTZjYjI2ODQ4ZWIz Yjk5MmIwHhcNMjYwMjA5MTUwMTAyWhcNMjYwMjEwMTUwMTAyWjAzMTEwLwYDVQQD EyhiNWMxNDI2NGYyNTJkNDRlOWMyNWM1MGUwNjc5MGMyNWNhMTUxOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVYEvq/9ZEjB7Rmt2rwCzlFCxQ/Z rOEZANOTnqvbewtvwJ7fwZrgV5fUIVkFq4cS54y2/Xt5sLLxDUXg/Cagh30vK6Zw AdqOMkYHng3UqvkW+Z4ym6ZmaAPCxpN1FhI07Eb+sEwz23cT9Y3fkLbL9u3wovx9 vcJErlWdQgFBpxPFJjv1dccQxXxD+XnqlmO9tKqHWWwMeLqi9Gi07oekVOBo7sZo sgC+pFLcafUoKDgHmNLSe1wzYfBn29gtynzKiMPb4wXIUmfmk1MyNcs1/MGx6I5m r26SSJHi4/Ob3IS7clth7lsdNGwrRVzWqBUL5ygM3UB1eVSj+Hl4g/88qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXBQmTyUtROnCXFDgZ5DCXKFRiiMB8GA1UdIwQY MBaAFKA2inQcesaJZekNTmyyaEjrO5krMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmIt NWUzMGI4NmZkMWFiLzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9hOWZlOTktYTUzNS00NGFiLWExYmItNWUzMGI4NmZkMWFi LzEvb0RhS2RCeDZ4b2xsNlExT2JMSm9TT3M3bVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2fxoCKL WfvNVWAnLDbflYguNH0AavFuC41+EwPfsijQV0RL1PH+3pLZ7kngtxG3282apOyl 7GzoFSVIuH7xaC2tPoejfO+4xLo6bR2wkgGgoZvYmSCIOf8fUS9KzbKejUwvF3Gv GtWtcSZ0Fz6h2j/BlCkuGws3QpHpYf273heZDAcdScuo/tedo3hhef0N7idSkRJR e1fehNwjjlmiC3g+apXmOTeXwlfeOHLhr5NkU3XC8MoR3XW6J1dVTi/T0E84p7eH qyt878TeXUaMA0sZCoekmclfNnEvhe55ow7CweGgoHoECJbkJY3or7w4uL2j8UF0 oToFFyG+jB7U7g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:48 2026 by rpki-client