This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft File: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft (raw, json) Hash identifier: a+EQrQfNo8p1sQUgQjulkPbMX7hMkfsUuhGx3qmDIc8= Subject key identifier: 50:4B:13:9A:11:70:CE:F7:AD:8D:60:07:14:44:0E:6F:C5:71:72:3E Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Certificate serial: 019C4322AE4BF1F1320D0BB3D8829AE50A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:12 +0000 Manifest this update: Mon 09 Feb 2026 16:01:12 +0000 Manifest next update: Tue 10 Feb 2026 16:01:12 +0000 Files and hashes: 1: Ih9S_kZcCOhq2N4y574bLA_RZG4.roa (hash: BK3QLHH47u/5bpJq4bbQNM29Xb79UfdHFqSx0wPQ9rw=) 2: Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl (hash: zu0Um5hB0QGhzyAM0s9ghLzY1WoCb6pS8onIrAlAsX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ae:4b:f1:f1:32:0d:0b:b3:d8:82:9a:e5:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Validity Not Before: Feb 9 16:01:12 2026 GMT Not After : Feb 10 16:01:12 2026 GMT Subject: CN=504b139a1170cef7ad8d600714440e6fc571723e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:bc:ef:eb:e6:51:f7:d9:1d:9f:83:04:82: 09:fd:1c:78:a7:ef:ad:2c:60:81:18:29:8a:f1:74: 62:fb:8d:28:b1:af:11:fc:cf:5c:ef:60:85:ab:4a: d1:d6:86:28:9b:3b:e2:1d:47:6d:67:1a:ab:8d:a6: a4:2e:2b:b5:ba:3e:62:ca:78:ef:31:02:fe:db:1a: 4c:0c:1c:f0:83:4d:ff:4b:b1:cb:b6:7e:45:30:14: 4a:45:6e:3a:e2:46:07:1e:8d:71:30:7e:c9:35:e3: 7e:99:a1:23:78:dc:a6:1c:8f:70:5c:f7:7e:ab:66: 21:6b:ac:71:5e:3f:e2:94:63:d8:34:7c:db:2e:2d: 57:ec:13:1c:8f:9a:aa:ae:a8:89:96:bc:dc:7d:d3: 1d:88:e1:ea:77:8a:a4:ab:d3:1f:17:2c:c0:00:1f: 14:d3:22:bb:22:ce:1d:08:47:da:50:72:a6:2a:c5: ee:09:01:6e:9a:b9:7f:98:9c:c3:53:66:1f:51:03: f8:bc:da:fa:ec:22:4b:97:59:36:bc:88:39:28:9a: 04:3a:c3:bb:6a:56:2f:a8:3d:13:52:b7:11:65:93: 9f:df:c8:32:d7:38:1f:a2:e5:47:e1:53:6e:06:2b: 8f:e4:d4:90:ce:21:c4:a4:b6:8e:1a:7b:1a:d2:f0: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4B:13:9A:11:70:CE:F7:AD:8D:60:07:14:44:0E:6F:C5:71:72:3E X509v3 Authority Key Identifier: keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:02:2d:d8:b6:41:bc:a5:27:e5:a5:4d:f2:09:e4:2d:20:bf: c2:06:86:15:3a:82:30:0f:a1:43:cc:10:66:2f:3d:7b:1a:0f: de:d3:16:cf:7d:76:50:f9:06:7b:b1:e0:e7:a8:ea:52:3a:d1: 78:07:34:db:b2:fd:e2:ed:e6:dd:bc:78:c2:de:53:aa:6d:f7: f0:bf:88:c0:68:06:1c:70:e8:05:8a:79:eb:00:66:df:48:3f: 44:a9:70:dc:ca:29:6c:64:ea:c1:eb:f5:2a:39:cb:83:b2:4e: 31:73:83:4e:4a:0c:2a:34:43:fc:40:28:3e:35:fb:ad:bd:73: ca:02:57:13:37:44:a9:a7:7e:81:91:b2:4c:d1:a5:c6:41:61: ca:15:f8:69:4b:7b:99:eb:b7:e5:bc:44:11:86:4c:20:a4:f0: 03:20:ae:60:f1:c8:e1:51:75:16:a8:d1:74:55:58:75:06:e6: d4:18:15:9c:48:f6:22:c5:c4:8a:39:76:14:86:2a:60:78:a1: 1a:97:d4:f6:c6:95:3d:6e:98:6d:1c:c6:02:b6:65:53:38:d9: 7f:5d:e4:15:1d:b3:c1:b5:e9:e3:a8:00:bd:3c:70:e0:ca:2c: ce:57:02:aa:7f:8e:87:1e:91:b3:9f:2a:ad:de:a9:4d:f7:f0: de:54:c8:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIq5L8fEyDQuz2IKa5QqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDc3ZmU2OGZhOWRhYjY0NGZkMGEzZGZiM2EwMjU2NmE4 MDk1OTAwHhcNMjYwMjA5MTYwMTEyWhcNMjYwMjEwMTYwMTEyWjAzMTEwLwYDVQQD Eyg1MDRiMTM5YTExNzBjZWY3YWQ4ZDYwMDcxNDQ0MGU2ZmM1NzE3MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcO87+vmUffZHZ+DBIIJ/Rx4p++t LGCBGCmK8XRi+40osa8R/M9c72CFq0rR1oYomzviHUdtZxqrjaakLiu1uj5iynjv MQL+2xpMDBzwg03/S7HLtn5FMBRKRW464kYHHo1xMH7JNeN+maEjeNymHI9wXPd+ q2Yha6xxXj/ilGPYNHzbLi1X7BMcj5qqrqiJlrzcfdMdiOHqd4qkq9MfFyzAAB8U 0yK7Is4dCEfaUHKmKsXuCQFumrl/mJzDU2YfUQP4vNr67CJLl1k2vIg5KJoEOsO7 alYvqD0TUrcRZZOf38gy1zgfouVH4VNuBiuP5NSQziHEpLaOGnsa0vA0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBLE5oRcM73rY1gBxREDm/FcXI+MB8GA1UdIwQY MBaAFDrXf+aPqdq2RP0KPfs6AlZqgJWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2Yt NjUzYTcwYmYwOTI1LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2YtNjUzYTcwYmYwOTI1 LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgIt2LZB vKUn5aVN8gnkLSC/wgaGFTqCMA+hQ8wQZi89exoP3tMWz312UPkGe7Hg56jqUjrR eAc027L94u3m3bx4wt5Tqm338L+IwGgGHHDoBYp56wBm30g/RKlw3MopbGTqwev1 KjnLg7JOMXODTkoMKjRD/EAoPjX7rb1zygJXEzdEqad+gZGyTNGlxkFhyhX4aUt7 meu35bxEEYZMIKTwAyCuYPHI4VF1FqjRdFVYdQbm1BgVnEj2IsXEijl2FIYqYHih GpfU9saVPW6YbRzGArZlUzjZf13kFR2zwbXp46gAvTxw4MoszlcCqn+Ohx6Rs58q rd6pTffw3lTIPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:23 2026 by rpki-client