This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft File: OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft (raw, json) Hash identifier: /5ryhhNAGbCbQZoNVGiKvq1vt4gFbfjfKnDVswsNW88= Subject key identifier: 4D:B1:0A:ED:7C:EB:9D:C7:59:84:B8:C3:BF:EE:5C:25:08:D7:38:3A Authority key identifier: 3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 Certificate issuer: /CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Certificate serial: 019C435907B64A5483409F064F836C8A5BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft Manifest number: 0652 Signing time: Mon 09 Feb 2026 17:00:33 +0000 Manifest this update: Mon 09 Feb 2026 17:00:33 +0000 Manifest next update: Tue 10 Feb 2026 17:00:33 +0000 Files and hashes: 1: OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl (hash: p2lhoRaZSUoep/DQek0wsB6IkQlo6h4v3sZVSvflSvI=) 2: esJRIVKiV99xgmszXdUIvBUcR4c.roa (hash: oiCTzvqGfHuD5NTI//w9jSaRVTcBCrOg8Oov3qUBvS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:07:b6:4a:54:83:40:9f:06:4f:83:6c:8a:5b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad5d7c7be912650d71423cd3c2516da9409edb6 Validity Not Before: Feb 9 17:00:33 2026 GMT Not After : Feb 10 17:00:33 2026 GMT Subject: CN=4db10aed7ceb9dc75984b8c3bfee5c2508d7383a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:54:91:ac:d4:04:51:c7:e7:ec:0f:ea:ef: 68:2f:4c:17:6c:32:7c:b3:95:6b:37:97:4f:87:cf: d7:45:7d:76:76:4d:35:90:c7:a1:29:0a:6b:52:df: 49:cb:c2:dd:a9:b2:9d:dc:8a:fc:44:b4:a9:ab:70: 0b:6c:49:99:96:d4:06:a2:12:c4:6f:4c:da:c8:77: de:d5:6a:7d:3f:3a:41:5f:76:31:9a:2c:4b:40:af: ec:ef:91:da:58:0a:06:ce:69:6d:59:7f:6a:d8:96: e1:19:f6:45:91:b7:69:8a:c7:25:98:76:c1:99:9b: bd:ae:42:58:54:42:ad:ae:4a:88:58:8b:20:64:e2: 65:d1:34:a5:b5:f9:43:92:4a:0f:ad:bb:92:f7:a0: 84:d7:2f:1d:2e:40:18:36:bd:31:90:34:06:8b:62: 52:60:58:ad:d6:11:fd:2d:53:90:7d:d2:48:7c:0d: 90:63:67:59:b5:4a:fb:cf:23:a1:b7:0c:6a:8a:c7: b9:62:ff:2e:d0:4e:d4:a1:5c:e6:94:89:69:a1:9a: e7:f7:0c:7f:b2:ed:cb:76:9c:f0:58:bb:44:8a:d1: fd:3c:c2:6f:57:a7:ce:e7:f0:c2:88:a4:44:f8:ff: b1:84:1d:45:32:c6:5b:96:6e:d8:9e:04:c5:44:92: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:0A:ED:7C:EB:9D:C7:59:84:B8:C3:BF:EE:5C:25:08:D7:38:3A X509v3 Authority Key Identifier: keyid:3A:D5:D7:C7:BE:91:26:50:D7:14:23:CD:3C:25:16:DA:94:09:ED:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtXXx76RJlDXFCPNPCUW2pQJ7bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e684f6-24ef-4099-bf96-1c63dacabde9/1/OtXXx76RJlDXFCPNPCUW2pQJ7bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:53:2b:04:c2:90:79:5f:d2:97:79:42:2c:4d:ed:b6:76:93: e0:03:8e:1d:b2:72:f2:05:94:7e:76:a8:0f:82:d1:a3:8a:50: 67:53:80:43:ac:2c:ca:a1:d3:f3:e2:1f:1c:d4:33:bc:9b:58: bf:f9:9d:04:49:37:1d:22:f0:4a:6f:fc:32:26:f4:96:2a:45: d6:46:b8:00:d6:bc:9f:20:79:be:34:e9:31:7e:64:02:2b:16: 9b:cf:da:7b:cb:6b:c5:5d:ac:f9:d1:81:df:b8:4b:7b:0b:fd: 9c:59:4b:94:57:0f:37:ae:79:55:f3:5a:c9:e8:a7:e5:e5:33: 0f:eb:46:17:35:6f:80:0c:33:93:a3:07:88:bc:b7:7d:90:ee: ad:ec:ff:ed:21:4e:4e:85:6a:52:e8:9a:d8:5d:bc:26:b7:7f: 13:0a:f0:ea:5c:b0:e2:31:f6:31:c1:c4:c5:b9:9a:68:10:a0: 30:47:f7:b9:c3:57:89:a4:b9:5d:51:8f:46:1d:d5:d2:15:d9: cc:be:4a:c5:b9:7e:34:5c:a8:b4:4a:8c:72:46:7f:ec:1a:91: 40:a3:c9:ea:ce:b7:18:15:54:f0:a4:7a:ff:f7:b6:65:50:e1: 5b:46:25:4f:92:ca:b8:76:a1:6f:12:45:6b:9f:78:c3:1e:33: c0:3b:e9:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWQe2SlSDQJ8GT4NsilvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDVkN2M3YmU5MTI2NTBkNzE0MjNjZDNjMjUxNmRhOTQw OWVkYjYwHhcNMjYwMjA5MTcwMDMzWhcNMjYwMjEwMTcwMDMzWjAzMTEwLwYDVQQD Eyg0ZGIxMGFlZDdjZWI5ZGM3NTk4NGI4YzNiZmVlNWMyNTA4ZDczODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kxUkazUBFHH5+wP6u9oL0wXbDJ8 s5VrN5dPh8/XRX12dk01kMehKQprUt9Jy8LdqbKd3Ir8RLSpq3ALbEmZltQGohLE b0zayHfe1Wp9PzpBX3YxmixLQK/s75HaWAoGzmltWX9q2JbhGfZFkbdpisclmHbB mZu9rkJYVEKtrkqIWIsgZOJl0TSltflDkkoPrbuS96CE1y8dLkAYNr0xkDQGi2JS YFit1hH9LVOQfdJIfA2QY2dZtUr7zyOhtwxqise5Yv8u0E7UoVzmlIlpoZrn9wx/ su3LdpzwWLtEitH9PMJvV6fO5/DCiKRE+P+xhB1FMsZblm7YngTFRJIdCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2xCu18653HWYS4w7/uXCUI1zg6MB8GA1UdIwQY MBaAFDrV18e+kSZQ1xQjzTwlFtqUCe22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYt MWM2M2RhY2FiZGU5LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9lNjg0ZjYtMjRlZi00MDk5LWJmOTYtMWM2M2RhY2FiZGU5 LzEvT3RYWHg3NlJKbERYRkNQTlBDVVcycFFKN2JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVMrBMKQ eV/Sl3lCLE3ttnaT4AOOHbJy8gWUfnaoD4LRo4pQZ1OAQ6wsyqHT8+IfHNQzvJtY v/mdBEk3HSLwSm/8Mib0lipF1ka4ANa8nyB5vjTpMX5kAisWm8/ae8trxV2s+dGB 37hLewv9nFlLlFcPN655VfNayein5eUzD+tGFzVvgAwzk6MHiLy3fZDurez/7SFO ToVqUuia2F28Jrd/Ewrw6lyw4jH2McHExbmaaBCgMEf3ucNXiaS5XVGPRh3V0hXZ zL5Kxbl+NFyotEqMckZ/7BqRQKPJ6s63GBVU8KR6//e2ZVDhW0YlT5LKuHahbxJF a594wx4zwDvpXg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:35 2026 by rpki-client