This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft File: oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft (raw, json) Hash identifier: Nnka2t/DwbSGBaCHdvwIJluo3uXBhsRLekdmfqT49bw= Subject key identifier: F1:83:77:EB:30:2E:5E:02:3F:49:14:50:4F:73:BA:85:CC:C0:CB:51 Authority key identifier: A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44 Certificate issuer: /CN=a21f99c3f4a96f6cb4134e9b9982a092f0600544 Certificate serial: 019C43220FEF87F6B178B034D78CB874865B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft Manifest number: 27 Signing time: Mon 09 Feb 2026 16:00:31 +0000 Manifest this update: Mon 09 Feb 2026 16:00:31 +0000 Manifest next update: Tue 10 Feb 2026 16:00:31 +0000 Files and hashes: 1: oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl (hash: aNbY7wtTgLDVFrBKirxXEk09RSGWoBvLg2OJjhFssm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0f:ef:87:f6:b1:78:b0:34:d7:8c:b8:74:86:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a21f99c3f4a96f6cb4134e9b9982a092f0600544 Validity Not Before: Feb 9 16:00:31 2026 GMT Not After : Feb 10 16:00:31 2026 GMT Subject: CN=f18377eb302e5e023f4914504f73ba85ccc0cb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:85:78:11:a9:5f:79:48:11:8f:2e:b7:a6: 02:44:1e:1a:62:96:8c:07:a3:14:43:ae:c1:24:1c: a1:a0:8d:4f:fd:41:77:1d:d3:b8:2c:0f:a0:71:3b: 6d:63:8a:df:56:39:40:a1:7f:c5:cb:ed:ab:af:48: ce:86:ed:d6:dd:43:a9:43:7d:bb:aa:a2:7e:ba:38: 13:ff:1f:12:81:20:e8:6e:cb:2e:35:30:60:27:b3: 41:80:57:15:02:0f:50:ec:21:e2:66:66:5a:e9:5d: ec:67:f7:39:53:4d:70:da:a7:3b:56:1b:5c:fe:31: 1a:65:36:02:e9:1c:bb:e7:1c:41:a7:5d:b6:64:4e: 9a:d0:a2:4e:a3:a1:f8:e6:3c:71:22:9d:5d:26:a0: 95:6c:73:11:af:98:97:d0:5d:6b:28:2a:53:72:84: e7:89:87:3b:a1:d9:bf:8e:b2:6d:c9:4c:7a:43:31: 09:98:4d:a4:c0:6d:81:fc:ad:3f:77:52:39:f6:a3: 5d:b9:b0:62:e8:97:82:46:ee:6f:b6:10:6a:a5:e8: 53:c4:fa:74:21:c1:77:32:35:dc:96:c5:e3:08:0e: 13:93:eb:52:38:28:d4:5f:3f:00:52:56:ae:f7:98: 89:a1:97:a0:ff:3c:ed:58:67:85:65:cb:e1:23:5c: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:77:EB:30:2E:5E:02:3F:49:14:50:4F:73:BA:85:CC:C0:CB:51 X509v3 Authority Key Identifier: keyid:A2:1F:99:C3:F4:A9:6F:6C:B4:13:4E:9B:99:82:A0:92:F0:60:05:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/68292e-4f04-4b68-8b0b-96b3c37a0fb6/1/oh-Zw_Spb2y0E06bmYKgkvBgBUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:95:30:61:78:ff:c9:03:c4:05:9d:eb:31:a9:ae:43:c9: b0:df:b0:b9:b8:c2:54:fd:7c:04:2c:61:eb:df:30:83:80:c8: c7:5c:60:1c:93:2d:87:94:64:0f:86:c1:2a:89:5f:98:73:bb: e5:bf:19:b0:d3:b9:64:29:b7:83:9e:62:ce:2d:22:5c:38:2f: 40:f6:64:13:ca:61:0d:e4:57:b9:ad:09:c6:42:6b:94:b0:b0: 02:6e:4f:65:ae:76:f5:58:57:7f:ac:ff:38:22:b9:2c:e0:26: ac:a5:e4:88:26:4d:2c:62:a5:f4:31:7a:10:4c:ca:4d:5a:d2: 92:c0:7c:e9:2d:34:25:bc:91:30:ec:e0:01:69:b0:6b:96:1f: 6a:be:6e:e7:98:c8:c8:d0:96:50:c2:8e:19:90:41:99:58:cd: 6e:92:e7:df:fd:1f:09:12:48:be:fc:ed:9c:b7:57:e0:b2:0d: e6:b0:37:af:6b:43:31:38:70:2d:03:3b:a2:a8:05:3b:50:09: c6:6c:3d:1d:56:6f:93:72:c1:df:13:4a:05:d4:41:2c:e2:b0: 7d:95:83:8a:39:b4:b1:74:f5:ef:10:e4:72:99:db:5f:69:1c: a7:9c:95:42:e5:4a:1c:dd:0b:cd:5a:ff:43:a6:2f:cd:72:0d: d3:9f:94:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIg/vh/axeLA014y4dIZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMWY5OWMzZjRhOTZmNmNiNDEzNGU5Yjk5ODJhMDkyZjA2 MDA1NDQwHhcNMjYwMjA5MTYwMDMxWhcNMjYwMjEwMTYwMDMxWjAzMTEwLwYDVQQD EyhmMTgzNzdlYjMwMmU1ZTAyM2Y0OTE0NTA0ZjczYmE4NWNjYzBjYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ+FeBGpX3lIEY8ut6YCRB4aYpaM B6MUQ67BJByhoI1P/UF3HdO4LA+gcTttY4rfVjlAoX/Fy+2rr0jOhu3W3UOpQ327 qqJ+ujgT/x8SgSDobssuNTBgJ7NBgFcVAg9Q7CHiZmZa6V3sZ/c5U01w2qc7Vhtc /jEaZTYC6Ry75xxBp122ZE6a0KJOo6H45jxxIp1dJqCVbHMRr5iX0F1rKCpTcoTn iYc7odm/jrJtyUx6QzEJmE2kwG2B/K0/d1I59qNdubBi6JeCRu5vthBqpehTxPp0 IcF3MjXclsXjCA4Tk+tSOCjUXz8AUlau95iJoZeg/zztWGeFZcvhI1zKRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGDd+swLl4CP0kUUE9zuoXMwMtRMB8GA1UdIwQY MBaAFKIfmcP0qW9stBNOm5mCoJLwYAVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2gtWndfU3BiMnkwRTA2Ym1ZS2drdkJnQlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82ODI5MmUtNGYwNC00YjY4LThiMGIt OTZiM2MzN2EwZmI2LzEvb2gtWndfU3BiMnkwRTA2Ym1ZS2drdkJnQlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82ODI5MmUtNGYwNC00YjY4LThiMGItOTZiM2MzN2EwZmI2 LzEvb2gtWndfU3BiMnkwRTA2Ym1ZS2drdkJnQlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvqVMGF4 /8kDxAWd6zGprkPJsN+wubjCVP18BCxh698wg4DIx1xgHJMth5RkD4bBKolfmHO7 5b8ZsNO5ZCm3g55izi0iXDgvQPZkE8phDeRXua0JxkJrlLCwAm5PZa529VhXf6z/ OCK5LOAmrKXkiCZNLGKl9DF6EEzKTVrSksB86S00JbyRMOzgAWmwa5Yfar5u55jI yNCWUMKOGZBBmVjNbpLn3/0fCRJIvvztnLdX4LIN5rA3r2tDMThwLQM7oqgFO1AJ xmw9HVZvk3LB3xNKBdRBLOKwfZWDijm0sXT17xDkcpnbX2kcp5yVQuVKHN0LzVr/ Q6YvzXIN05+UAw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:45 2026 by rpki-client