This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json) Hash identifier: pHbo7WimInr8J+4SXDadU/9YEePt0fn4gFkU4k4khpA= Subject key identifier: B9:4A:69:D0:27:38:2F:B9:31:15:4F:D4:51:59:4E:37:7A:07:74:54 Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Certificate serial: 019C427DA582C3ED3EDC4A7D428BA5EBC268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft Manifest number: 1092 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: bATRdqtqB1VVKhQaFyJvdXtFxpmXOsZ80TdKmLYT3+o=) 2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a5:82:c3:ed:3e:dc:4a:7d:42:8b:a5:eb:c2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=b94a69d027382fb931154fd451594e377a077454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:d1:0c:b2:51:ee:bf:a5:44:5a:97:b0:cc: 58:e6:75:61:a6:ca:d9:bd:3d:09:18:7f:09:f4:7b: 96:0c:97:b9:1e:8c:a2:32:66:6d:6d:1b:16:d7:a2: 1a:f3:2b:d8:c4:7e:da:c8:68:81:bf:89:28:a8:11: 03:ab:50:3b:ee:7a:12:f7:4c:8b:58:7b:8e:5d:1b: 14:15:47:df:8b:03:5c:fe:19:a4:d2:b0:95:63:fc: 0d:6a:76:a6:db:5b:a0:35:aa:95:33:fc:b7:f6:45: 04:c5:e1:4d:82:22:f8:53:13:20:cb:f6:f5:fd:43: 20:8f:5d:d9:9e:5c:93:d5:87:ce:1f:b4:9a:a1:b1: de:5c:d2:66:6b:72:29:12:c2:6b:10:4f:25:76:96: ea:e5:55:4d:ed:84:7d:2b:15:3e:45:69:4b:63:8d: 8b:34:eb:4e:c2:45:66:45:7b:4e:89:ec:16:df:3c: 5e:88:b3:44:d2:ce:dd:8a:4a:60:ac:0a:1d:7b:33: c4:c7:0b:f3:da:ec:a3:b7:73:c5:2f:ba:f1:83:5e: 28:33:d9:78:d8:5a:9e:47:3a:a1:aa:cc:b1:dd:1d: 5b:75:7c:07:78:f4:59:89:d4:c5:78:54:7a:a4:6d: 19:a4:db:0b:cf:0c:a8:cc:c0:8d:46:62:1a:5c:94: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:69:D0:27:38:2F:B9:31:15:4F:D4:51:59:4E:37:7A:07:74:54 X509v3 Authority Key Identifier: keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f7:9e:ec:a3:ee:fd:90:26:48:f7:4e:77:f6:cf:55:e6:3b: a9:3e:ca:0f:42:ac:45:28:3c:9c:69:95:13:2e:19:c2:80:a7: 9c:1a:76:95:36:33:47:aa:61:7e:b5:e8:04:66:04:60:27:c5: 8b:77:bc:86:3e:a1:b6:a1:ac:10:a4:92:a2:a0:53:74:a3:75: 29:c6:f5:c1:81:d7:40:76:91:79:d4:65:a6:99:03:a6:0f:eb: c2:a7:d1:dd:8f:c4:18:f6:2c:b1:d6:48:a1:a2:23:71:35:34: 9f:b1:d5:d8:04:1d:7c:2c:a6:89:5c:5d:0f:9b:b2:6a:e6:ae: 28:2a:df:d8:e4:12:8f:25:16:fc:5f:f2:fd:61:cd:a3:f1:ef: 38:b2:32:13:52:35:ef:41:3b:86:68:29:e7:00:39:ae:b0:16: 94:13:7b:ea:be:cb:27:86:c4:c4:0a:ef:75:b2:29:eb:b2:89: 50:8a:7b:c5:fe:11:a9:92:26:c7:d6:1c:fc:ee:82:38:fd:ce: 02:22:8c:af:35:e0:e3:df:10:9e:d1:4d:82:2b:bc:d0:e2:e7: 96:9e:dc:ca:3b:77:51:49:fd:e4:94:40:53:ab:ae:d2:c3:bb: 23:c3:87:bb:ba:d2:fa:b3:39:a6:0a:e9:f3:ba:39:b2:c9:3d: 06:56:30:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaWCw+0+3Ep9Qoul68JoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj Y2ZlNzUwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EyhiOTRhNjlkMDI3MzgyZmI5MzExNTRmZDQ1MTU5NGUzNzdhMDc3NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd/RDLJR7r+lRFqXsMxY5nVhpsrZ vT0JGH8J9HuWDJe5HoyiMmZtbRsW16Ia8yvYxH7ayGiBv4koqBEDq1A77noS90yL WHuOXRsUFUffiwNc/hmk0rCVY/wNanam21ugNaqVM/y39kUExeFNgiL4UxMgy/b1 /UMgj13ZnlyT1YfOH7SaobHeXNJma3IpEsJrEE8ldpbq5VVN7YR9KxU+RWlLY42L NOtOwkVmRXtOiewW3zxeiLNE0s7dikpgrAodezPExwvz2uyjt3PFL7rxg14oM9l4 2FqeRzqhqsyx3R1bdXwHePRZidTFeFR6pG0ZpNsLzwyozMCNRmIaXJSr7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlKadAnOC+5MRVP1FFZTjd6B3RUMB8GA1UdIwQY MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ee7KPu /ZAmSPdOd/bPVeY7qT7KD0KsRSg8nGmVEy4ZwoCnnBp2lTYzR6phfrXoBGYEYCfF i3e8hj6htqGsEKSSoqBTdKN1Kcb1wYHXQHaRedRlppkDpg/rwqfR3Y/EGPYssdZI oaIjcTU0n7HV2AQdfCymiVxdD5uyauauKCrf2OQSjyUW/F/y/WHNo/HvOLIyE1I1 70E7hmgp5wA5rrAWlBN76r7LJ4bExArvdbIp67KJUIp7xf4RqZImx9Yc/O6COP3O AiKMrzXg498QntFNgiu80OLnlp7cyjt3UUn95JRAU6uu0sO7I8OHu7rS+rM5pgrp 87o5ssk9BlYwNQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:01 2026 by rpki-client