This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft File: OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft (raw, json) Hash identifier: LvvJcWoQuH538WhpX2B1+hMrnz3zfT6pTDZVTgr93ck= Subject key identifier: B2:93:DF:2A:7A:FB:B6:BF:94:D1:18:84:6D:83:EB:1B:A4:D0:10:72 Authority key identifier: 38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB Certificate issuer: /CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Certificate serial: 019C45B4F8CD30B5F454540F0E302D957272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft Manifest number: 1778 Signing time: Tue 10 Feb 2026 04:00:13 +0000 Manifest this update: Tue 10 Feb 2026 04:00:13 +0000 Manifest next update: Wed 11 Feb 2026 04:00:13 +0000 Files and hashes: 1: I5suLRJMCcD3Q-LkLgkHzGSULk4.roa (hash: lLdnBAzP++nZyrTcfhQAr6iSYGM9RrOFuFX70aI206Q=) 2: OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl (hash: UTFaperc+W0C2O7zhuKs2OHkJSBvmtQjsUvM08OngYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:b4:f8:cd:30:b5:f4:54:54:0f:0e:30:2d:95:72:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a0c8826c18bcd513aaa7e52081ff9fd37919fb Validity Not Before: Feb 10 04:00:13 2026 GMT Not After : Feb 11 04:00:13 2026 GMT Subject: CN=b293df2a7afbb6bf94d118846d83eb1ba4d01072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:b5:2b:cd:01:d2:6e:7a:69:2e:c3:cd:7f: 7f:71:b2:4d:f3:77:3b:9d:bf:67:b3:58:6f:ad:82: cf:ec:7f:f7:f8:ae:6a:02:d2:c2:3b:df:41:34:55: 32:f8:cb:1c:84:a6:d4:0a:69:9b:fd:4a:c2:df:2c: 03:69:a5:2b:52:aa:ec:fa:42:09:63:66:d3:05:e1: d3:e3:da:be:03:32:94:f4:72:48:fd:cc:b6:fb:e5: bc:cd:ef:e1:62:f3:3f:58:6f:b0:68:b5:98:7b:11: 1c:01:5d:7b:17:ea:5d:c9:10:f9:e8:a2:53:97:d2: 4d:fe:0d:d6:d2:8f:6f:9c:e6:e3:2d:ac:2d:54:a0: c2:a3:3c:09:84:d8:f7:7c:39:3b:7b:61:3f:55:1a: 73:93:ec:83:11:26:cc:ba:d5:d0:80:52:42:a2:b9: 41:b8:2e:4d:c4:ef:bf:05:a6:43:45:d4:75:0f:14: 47:71:1c:71:0a:04:4f:97:6c:69:7d:35:ab:7e:6b: 8d:32:f0:70:ae:b2:8a:91:b3:58:60:be:5f:81:db: 89:df:e0:85:92:87:66:80:b9:c9:fe:8a:10:16:f2: c1:3a:1d:f0:43:c8:38:2e:88:2f:10:24:6d:cc:0f: 24:82:b7:a0:35:52:3e:40:9f:83:00:54:6a:12:e7: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:93:DF:2A:7A:FB:B6:BF:94:D1:18:84:6D:83:EB:1B:A4:D0:10:72 X509v3 Authority Key Identifier: keyid:38:A0:C8:82:6C:18:BC:D5:13:AA:A7:E5:20:81:FF:9F:D3:79:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKDIgmwYvNUTqqflIIH_n9N5Gfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29638b-12ca-49ef-94e9-0502a6a54aab/1/OKDIgmwYvNUTqqflIIH_n9N5Gfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:65:81:f6:17:f8:b3:58:e8:12:48:c1:ba:82:a2:d9:cc:27: d1:6c:a1:42:3a:41:29:b1:a5:b6:f6:ef:2e:7d:7e:04:8e:4f: 76:62:2a:1a:07:64:c4:5a:b2:a0:02:ca:75:66:f6:a7:3d:e7: ed:f8:91:e3:4d:14:45:98:d3:4c:cd:6b:68:e5:66:17:18:5c: 2c:41:07:17:7b:48:a3:66:c1:26:ea:08:d0:9a:ed:d8:2e:2f: e0:f0:6e:67:97:c6:52:f3:4d:bf:ff:2e:f2:c4:3e:58:ca:a7: 99:dc:a5:d9:5a:53:99:97:06:18:2e:8f:e1:e0:4d:35:7c:ac: 2a:0a:c6:f0:f6:af:1d:4e:82:97:45:77:af:4a:df:5e:16:f9: a0:ad:df:6c:b3:43:49:4f:6b:22:d3:ae:d1:b3:51:95:15:c5: 56:20:f4:70:52:e4:a6:8d:36:0a:10:df:e3:f5:b5:1d:bf:8c: e8:26:65:10:0e:4d:c6:6a:af:6a:0a:d7:af:27:ce:cf:88:84: 53:fb:a6:6b:15:ad:88:1b:26:ab:02:ab:a9:4a:19:b2:f7:fc: 74:ad:28:8e:8c:fa:15:31:cb:9e:36:d8:4b:f8:94:84:f0:b9: 7e:a0:ab:61:79:5e:dc:33:48:44:0f:36:04:6a:cd:79:f2:1d: fe:ff:73:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFtPjNMLX0VFQPDjAtlXJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTBjODgyNmMxOGJjZDUxM2FhYTdlNTIwODFmZjlmZDM3 OTE5ZmIwHhcNMjYwMjEwMDQwMDEzWhcNMjYwMjExMDQwMDEzWjAzMTEwLwYDVQQD EyhiMjkzZGYyYTdhZmJiNmJmOTRkMTE4ODQ2ZDgzZWIxYmE0ZDAxMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+1K80B0m56aS7DzX9/cbJN83c7 nb9ns1hvrYLP7H/3+K5qAtLCO99BNFUy+MschKbUCmmb/UrC3ywDaaUrUqrs+kIJ Y2bTBeHT49q+AzKU9HJI/cy2++W8ze/hYvM/WG+waLWYexEcAV17F+pdyRD56KJT l9JN/g3W0o9vnObjLawtVKDCozwJhNj3fDk7e2E/VRpzk+yDESbMutXQgFJCorlB uC5NxO+/BaZDRdR1DxRHcRxxCgRPl2xpfTWrfmuNMvBwrrKKkbNYYL5fgduJ3+CF kodmgLnJ/ooQFvLBOh3wQ8g4LogvECRtzA8kgregNVI+QJ+DAFRqEuc5NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKT3yp6+7a/lNEYhG2D6xuk0BByMB8GA1UdIwQY MBaAFDigyIJsGLzVE6qn5SCB/5/TeRn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTkt MDUwMmE2YTU0YWFiLzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yOTYzOGItMTJjYS00OWVmLTk0ZTktMDUwMmE2YTU0YWFi LzEvT0tESWdtd1l2TlVUcXFmbElJSF9uOU41R2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2WB9hf4 s1joEkjBuoKi2cwn0WyhQjpBKbGltvbvLn1+BI5PdmIqGgdkxFqyoALKdWb2pz3n 7fiR400URZjTTM1raOVmFxhcLEEHF3tIo2bBJuoI0Jrt2C4v4PBuZ5fGUvNNv/8u 8sQ+WMqnmdyl2VpTmZcGGC6P4eBNNXysKgrG8PavHU6Cl0V3r0rfXhb5oK3fbLND SU9rItOu0bNRlRXFViD0cFLkpo02ChDf4/W1Hb+M6CZlEA5NxmqvagrXryfOz4iE U/umaxWtiBsmqwKrqUoZsvf8dK0ojoz6FTHLnjbYS/iUhPC5fqCrYXle3DNIRA82 BGrNefId/v9zrA== -----END CERTIFICATE-----Generated at Tue Feb 10 05:33:41 2026 by rpki-client