This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json) Hash identifier: /2ytfJEXqcdltXmdVVmlYi1s47bwGEY/MeQsXsHoclU= Subject key identifier: 68:ED:98:D7:1A:A4:CC:D1:51:97:94:6C:26:D8:4F:24:07:2E:05:7B Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Certificate serial: 019C43592AC3BAD3C042F52725B88DE56C92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft Manifest number: 12A6 Signing time: Mon 09 Feb 2026 17:00:42 +0000 Manifest this update: Mon 09 Feb 2026 17:00:42 +0000 Manifest next update: Tue 10 Feb 2026 17:00:42 +0000 Files and hashes: 1: ckHYyGr3Mw8Qija2YP60OUa1ew0.roa (hash: ublouyar7OpXVPh6lwDgL3vowMyRYwZv2+erG4mp4zU=) 2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: rkEAQPGucQgrgpT0p3/SJa8u8x5erockquDjKtILKb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2a:c3:ba:d3:c0:42:f5:27:25:b8:8d:e5:6c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b Validity Not Before: Feb 9 17:00:42 2026 GMT Not After : Feb 10 17:00:42 2026 GMT Subject: CN=68ed98d71aa4ccd15197946c26d84f24072e057b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:68:ae:cf:88:36:24:fc:69:2d:46:3e:1f: 36:8d:07:b3:a2:29:a5:c3:0a:ad:e2:2b:d9:db:dd: b5:39:d2:5d:b8:70:fa:69:39:56:70:85:da:9a:50: b0:b7:b5:ae:4d:24:8a:bb:9e:9f:62:c2:b7:83:fb: 6c:0d:1f:f3:5a:a9:39:93:e6:79:b8:cc:93:7b:e3: 79:1a:2e:4b:a3:33:1d:b4:20:21:5a:74:a6:da:96: 76:d4:cb:3d:52:9c:ea:56:17:91:1e:66:b2:96:3f: 4e:c5:72:03:0f:50:e4:54:7d:4a:76:30:f7:d2:83: 9f:cb:c7:1d:b2:cf:91:6d:fa:1e:c5:ab:d6:02:b7: e8:16:9f:ab:8f:e3:eb:32:03:91:c7:6b:03:8c:d7: 4b:f3:a4:0b:65:6b:83:7e:da:35:62:c4:8c:3e:d9: 83:a2:26:e1:ee:05:ab:e8:e3:f1:38:3d:85:cd:9b: d9:dc:a8:a0:23:65:c4:98:93:85:9b:68:83:a6:c1: 8f:4d:a7:bf:7d:e2:aa:c7:d8:21:ff:8f:24:1a:8d: d7:ed:61:3b:25:f8:2d:99:1f:dd:55:a1:0c:84:f6: a0:99:ff:ae:40:f3:37:0c:55:24:7d:17:5d:bd:45: 8b:c0:02:44:9c:e2:78:43:33:83:4a:77:2c:23:a6: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:98:D7:1A:A4:CC:D1:51:97:94:6C:26:D8:4F:24:07:2E:05:7B X509v3 Authority Key Identifier: keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d9:b2:44:91:aa:88:74:ce:c7:bf:c2:d2:0a:88:1e:3b:a6: 00:e2:2b:f5:cc:45:a9:fe:9e:75:1e:82:d0:cf:a8:e3:94:b5: 43:78:62:30:a1:78:13:a4:fb:f6:03:d4:79:fa:a2:b1:09:e5: a5:04:8b:e7:7d:3b:98:66:0e:17:fe:18:bc:e5:c6:df:d0:05: f7:43:f1:32:4c:0e:8c:b2:01:23:a8:3c:a4:83:2c:55:5c:b3: 6a:ee:ad:d6:f2:bb:b2:41:ab:66:7e:36:5c:03:26:e6:f6:9b: 8b:5d:6c:bd:d2:94:4b:aa:03:b7:eb:82:66:be:2d:c3:72:f3: 9d:52:4d:88:03:62:b7:f4:aa:ca:4c:fa:14:ff:b9:95:32:75: b4:57:e7:f5:a9:7f:51:b4:83:96:e1:3f:e7:6f:02:17:7b:ed: 76:91:52:1a:56:b6:fb:ad:cc:71:6a:6d:b3:33:8d:01:b9:e0: 83:ff:26:13:2d:0a:29:8f:f1:5c:f0:7c:d6:f4:36:3f:f1:0c: 9c:e5:7e:47:f5:e8:8e:fd:fa:74:d4:3e:fc:fd:b8:49:26:84: 71:0f:57:90:6f:70:33:da:1d:04:a8:ab:06:4a:3e:ff:8d:64: d4:5f:d3:a8:a6:f0:01:34:0b:00:4a:21:92:9d:d9:c5:b6:b0: cb:d4:4d:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSrDutPAQvUnJbiN5WySMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjM5ZDgyNDQ3OWQ0ZGE3YjEyZjY1YzE1ZTVjNDI3MjVm NTI2MGIwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD Eyg2OGVkOThkNzFhYTRjY2QxNTE5Nzk0NmMyNmQ4NGYyNDA3MmUwNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DVors+INiT8aS1GPh82jQezoiml wwqt4ivZ2921OdJduHD6aTlWcIXamlCwt7WuTSSKu56fYsK3g/tsDR/zWqk5k+Z5 uMyTe+N5Gi5LozMdtCAhWnSm2pZ21Ms9UpzqVheRHmaylj9OxXIDD1DkVH1KdjD3 0oOfy8cdss+RbfoexavWArfoFp+rj+PrMgORx2sDjNdL86QLZWuDfto1YsSMPtmD oibh7gWr6OPxOD2FzZvZ3KigI2XEmJOFm2iDpsGPTae/feKqx9gh/48kGo3X7WE7 JfgtmR/dVaEMhPagmf+uQPM3DFUkfRddvUWLwAJEnOJ4QzODSncsI6bVRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjtmNcapMzRUZeUbCbYTyQHLgV7MB8GA1UdIwQY MBaAFKGznYJEedTaexL2XBXlxCcl9SYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEt MzFhOTY0ZjhhMzdmLzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xNzlmODAtODgzOC00ZDRjLWI4ZDEtMzFhOTY0ZjhhMzdm LzEvb2JPZGdrUjUxTnA3RXZaY0ZlWEVKeVgxSmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStmyRJGq iHTOx7/C0gqIHjumAOIr9cxFqf6edR6C0M+o45S1Q3hiMKF4E6T79gPUefqisQnl pQSL5307mGYOF/4YvOXG39AF90PxMkwOjLIBI6g8pIMsVVyzau6t1vK7skGrZn42 XAMm5vabi11svdKUS6oDt+uCZr4tw3LznVJNiANit/Sqykz6FP+5lTJ1tFfn9al/ UbSDluE/528CF3vtdpFSGla2+63McWptszONAbngg/8mEy0KKY/xXPB81vQ2P/EM nOV+R/Xojv36dNQ+/P24SSaEcQ9XkG9wM9odBKirBko+/41k1F/TqKbwATQLAEoh kp3Zxbawy9RNrA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:16 2026 by rpki-client