This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json) Hash identifier: syPLERxy3I5drfZuvX/X0umUyhLxyuUx09vGCFewfBY= Subject key identifier: C3:9A:63:93:45:B7:85:65:AC:37:62:6B:70:DC:9A:C1:CA:E4:75:34 Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53 Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453 Certificate serial: 019C424615C53BB32894E8588035170AEE20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft Manifest number: 155F Signing time: Mon 09 Feb 2026 12:00:15 +0000 Manifest this update: Mon 09 Feb 2026 12:00:15 +0000 Manifest next update: Tue 10 Feb 2026 12:00:15 +0000 Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: R/jK4wbMj5nBopSSY2UJOmN7yfxs+Pfu5hVb2MNDlB8=) 2: Q3KsXzG_1owp4twp3h32beoBh9Q.roa (hash: 95YPdhWrEz7hBrK+p1i4JTgHUiXN7Vq6G7x0WIDZtrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:15:c5:3b:b3:28:94:e8:58:80:35:17:0a:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453 Validity Not Before: Feb 9 12:00:15 2026 GMT Not After : Feb 10 12:00:15 2026 GMT Subject: CN=c39a639345b78565ac37626b70dc9ac1cae47534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:1f:36:ae:a8:e7:49:19:e5:d0:51:db:40: 6f:a2:40:5b:e8:0c:c6:cb:a7:cf:88:ea:b3:31:b7: d4:dd:63:1e:4a:21:46:2c:12:31:4b:b0:12:05:a9: 3d:9f:e0:7b:98:fa:d8:f3:45:b0:61:7c:bc:b4:d9: b4:ea:b3:d8:97:dc:63:81:2d:1d:51:b6:bd:b3:dc: 24:d4:10:21:a3:c1:32:0c:c3:eb:18:93:b5:31:86: 0d:6a:6d:a4:0f:4d:41:24:f5:46:1c:a8:de:4e:43: 0e:2a:4a:55:77:77:64:21:2f:2b:dd:41:53:83:73: fb:31:96:00:62:fd:a5:9b:40:ff:fa:a1:25:26:e1: 74:1e:7e:4b:23:22:04:d6:67:8f:8d:d1:2e:9a:59: e7:63:00:9d:32:3b:71:b8:83:d1:25:12:26:2d:10: 93:50:f2:41:6c:28:79:0d:ed:3b:41:f7:6a:73:19: bf:c2:41:b5:41:09:15:4f:76:f4:4f:f1:c5:22:fb: cd:48:c6:93:e7:76:3a:69:ee:3d:88:e2:db:9b:0a: ee:26:f7:d6:79:ba:64:fb:23:37:02:4f:e4:3a:27: b8:e9:b1:db:bd:8f:3b:dd:b3:24:91:2e:00:dc:16: d7:e3:1c:21:8d:84:a3:5a:66:1d:02:a4:6a:18:38: 1d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9A:63:93:45:B7:85:65:AC:37:62:6B:70:DC:9A:C1:CA:E4:75:34 X509v3 Authority Key Identifier: keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:ee:19:ec:98:d3:f9:89:da:01:d3:3c:68:71:04:3f:92: 78:8e:7c:c3:90:90:cd:f9:d9:49:ce:c7:35:da:40:2f:4d:97: 52:95:30:e7:55:d2:3e:aa:56:27:5c:16:14:f0:6f:59:ba:f2: ca:ab:27:17:6c:31:f6:6b:d1:ca:0f:ef:bf:97:a0:0a:75:38: 37:e9:76:ba:5a:e7:26:85:8f:29:88:6e:08:59:00:b6:30:39: f1:5f:b8:ab:53:5a:f9:5f:6e:5b:2c:53:9f:9c:34:53:81:32: 32:0f:18:77:74:55:a0:8a:23:7b:ab:b1:5a:39:ec:44:d3:ec: a7:ef:e3:1e:e5:16:0e:de:c4:f2:30:79:c6:cd:75:a7:03:e2: 0d:fb:bd:3d:4d:b2:96:c4:a6:c1:ec:e3:19:c9:4e:fc:3f:4b: 8a:14:19:ba:27:a5:85:c2:46:23:e9:32:0c:96:77:31:02:8d: f5:7f:b3:e0:2d:9b:03:d3:87:26:7e:cf:88:2d:3a:8d:f0:1d: 1c:d2:7d:e7:78:c3:d7:01:10:99:e6:8a:fa:73:51:c6:f6:ca: 78:73:c4:36:8d:3d:12:10:ab:fd:f5:6a:7f:f3:f6:c6:80:b9: 2c:78:92:fd:04:96:fc:e4:ed:45:61:4e:0f:12:83:88:f4:8c: dc:12:3e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhXFO7MolOhYgDUXCu4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNWMyNDY3NTQ2ZjRiMDc4YTAyMjRkYTFjY2FjNWMyODdl OTM0NTMwHhcNMjYwMjA5MTIwMDE1WhcNMjYwMjEwMTIwMDE1WjAzMTEwLwYDVQQD EyhjMzlhNjM5MzQ1Yjc4NTY1YWMzNzYyNmI3MGRjOWFjMWNhZTQ3NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocAfNq6o50kZ5dBR20BvokBb6AzG y6fPiOqzMbfU3WMeSiFGLBIxS7ASBak9n+B7mPrY80WwYXy8tNm06rPYl9xjgS0d Uba9s9wk1BAho8EyDMPrGJO1MYYNam2kD01BJPVGHKjeTkMOKkpVd3dkIS8r3UFT g3P7MZYAYv2lm0D/+qElJuF0Hn5LIyIE1mePjdEumlnnYwCdMjtxuIPRJRImLRCT UPJBbCh5De07Qfdqcxm/wkG1QQkVT3b0T/HFIvvNSMaT53Y6ae49iOLbmwruJvfW ebpk+yM3Ak/kOie46bHbvY873bMkkS4A3BbX4xwhjYSjWmYdAqRqGDgdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOaY5NFt4VlrDdia3DcmsHK5HU0MB8GA1UdIwQY MBaAFDtcJGdUb0sHigIk2hzKxcKH6TRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNThkOTQtYjU2NC00ZDQ5LWE4ZmQt NWMwOTZhODdiYjA3LzEvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iNThkOTQtYjU2NC00ZDQ5LWE4ZmQtNWMwOTZhODdiYjA3 LzEvTzF3a1oxUnZTd2VLQWlUYUhNckZ3b2ZwTkZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYzuGeyY 0/mJ2gHTPGhxBD+SeI58w5CQzfnZSc7HNdpAL02XUpUw51XSPqpWJ1wWFPBvWbry yqsnF2wx9mvRyg/vv5egCnU4N+l2ulrnJoWPKYhuCFkAtjA58V+4q1Na+V9uWyxT n5w0U4EyMg8Yd3RVoIoje6uxWjnsRNPsp+/jHuUWDt7E8jB5xs11pwPiDfu9PU2y lsSmwezjGclO/D9LihQZuielhcJGI+kyDJZ3MQKN9X+z4C2bA9OHJn7PiC06jfAd HNJ953jD1wEQmeaK+nNRxvbKeHPENo09EhCr/fVqf/P2xoC5LHiS/QSW/OTtRWFO DxKDiPSM3BI+DA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:43 2026 by rpki-client