This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft File: OXsxr3cA59mVkO39nVhKG1A46tc.mft (raw, json) Hash identifier: jD0/F/z5zoUJYJ4kwNJ25je3t3IhQqWvLBkpOZ+PGVU= Subject key identifier: FC:C1:95:07:DE:B5:0C:11:16:A6:17:FA:ED:B8:D6:1B:86:12:46:CB Authority key identifier: 39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7 Certificate issuer: /CN=397b31af7700e7d99590edfd9d584a1b5038ead7 Certificate serial: 019C4246519D08CD001902178E8015A82986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: OXsxr3cA59mVkO39nVhKG1A46tc.crl (hash: AAk12tyrri5jNWMcssljRuglzF+80PDZ3cCiyQzjx2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:51:9d:08:cd:00:19:02:17:8e:80:15:a8:29:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397b31af7700e7d99590edfd9d584a1b5038ead7 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=fcc19507deb50c1116a617faedb8d61b861246cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:09:c6:ce:3f:83:30:8f:ff:04:24:c7:8a: fb:1a:de:f5:8d:5f:19:3b:60:80:c5:76:07:50:f2: 81:c0:23:ea:af:80:86:58:37:48:c5:bc:1f:e8:28: a8:8f:66:a1:b5:da:1c:84:34:d8:d2:52:74:3b:c4: 36:d7:1f:4c:df:f2:f2:1a:e4:c0:1f:06:6c:5e:f8: 96:12:4b:01:10:00:ba:97:9c:10:5e:9d:31:bf:48: 62:71:38:a3:d1:1d:b9:02:53:21:8d:50:3e:d0:d3: 62:e8:61:ba:de:2d:3d:5b:be:a6:d5:25:dd:59:f7: d6:45:78:aa:a2:62:bf:60:66:75:7b:e8:88:90:a5: 5a:07:aa:e5:31:0e:06:0f:d8:41:32:16:73:ac:7c: d0:eb:16:b5:51:fe:06:47:64:78:87:6b:ba:75:58: 8f:d9:55:46:85:ae:be:3c:8e:92:b6:c3:ca:32:c5: 06:cb:a4:a5:2b:90:e3:71:4d:cd:fb:50:92:35:1b: 59:98:1e:7f:3d:fb:ce:ac:02:ef:25:cb:7e:59:39: b9:3b:cb:a9:57:d8:f8:bc:db:a8:23:4f:28:64:a2: 62:f9:72:b7:01:bc:fa:85:26:44:25:9b:08:6d:81: d6:8b:10:4e:e2:27:38:1c:cf:ce:28:74:88:53:27: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C1:95:07:DE:B5:0C:11:16:A6:17:FA:ED:B8:D6:1B:86:12:46:CB X509v3 Authority Key Identifier: keyid:39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7d:1a:8e:c1:76:03:d1:94:cb:2a:7c:68:aa:b5:5e:a4:f7: b1:78:e3:d3:27:93:cf:db:59:42:a3:5b:1c:86:a4:a3:b8:34: 3f:28:d3:a7:b2:8e:3c:12:29:85:8e:c9:61:65:8f:27:31:ac: 17:df:a4:c2:1f:3c:ee:0d:c6:c9:d1:47:6a:69:36:bf:95:de: 35:ab:44:3a:3f:2a:da:ca:04:c8:10:5a:5c:c0:0b:39:cf:96: d7:d9:05:8a:26:27:fa:94:25:46:d3:ee:35:d2:df:63:c6:19: 9b:9e:20:17:b1:af:65:ef:e6:e7:98:f9:99:c8:4d:9f:14:bf: 8b:60:fb:d8:fd:f2:00:5f:ea:c5:aa:2e:87:5c:31:94:b8:e2: 16:b8:bd:7b:90:96:92:13:5e:b1:d2:4b:53:a8:e2:3f:74:83: 85:8b:01:89:4f:51:76:e6:1c:f2:cf:fc:8b:08:2c:35:11:1f: cc:93:83:5b:74:43:39:3c:1d:5c:74:90:54:b5:5d:99:49:7d: 3f:45:1b:47:dc:38:a5:69:c0:ea:0d:18:cd:2a:4e:b5:25:77: a2:6b:e2:c6:6b:95:85:a8:5b:c0:6e:a9:9e:5b:c1:b3:9e:d9: 83:9e:56:53:38:8c:8c:c6:8d:2f:d3:82:2c:66:99:80:e5:f0: a1:da:d2:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlGdCM0AGQIXjoAVqCmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2IzMWFmNzcwMGU3ZDk5NTkwZWRmZDlkNTg0YTFiNTAz OGVhZDcwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD EyhmY2MxOTUwN2RlYjUwYzExMTZhNjE3ZmFlZGI4ZDYxYjg2MTI0NmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvkJxs4/gzCP/wQkx4r7Gt71jV8Z O2CAxXYHUPKBwCPqr4CGWDdIxbwf6Cioj2ahtdochDTY0lJ0O8Q21x9M3/LyGuTA HwZsXviWEksBEAC6l5wQXp0xv0hicTij0R25AlMhjVA+0NNi6GG63i09W76m1SXd WffWRXiqomK/YGZ1e+iIkKVaB6rlMQ4GD9hBMhZzrHzQ6xa1Uf4GR2R4h2u6dViP 2VVGha6+PI6StsPKMsUGy6SlK5DjcU3N+1CSNRtZmB5/PfvOrALvJct+WTm5O8up V9j4vNuoI08oZKJi+XK3Abz6hSZEJZsIbYHWixBO4ic4HM/OKHSIUyc5MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzBlQfetQwRFqYX+u241huGEkbLMB8GA1UdIwQY MBaAFDl7Ma93AOfZlZDt/Z1YShtQOOrXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8wZDlkM2ItZDc5MC00YWU4LWEyM2Qt YjIwMmUwNWFjODRhLzEvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8wZDlkM2ItZDc5MC00YWU4LWEyM2QtYjIwMmUwNWFjODRh LzEvT1hzeHIzY0E1OW1Wa08zOW5WaEtHMUE0NnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH0ajsF2 A9GUyyp8aKq1XqT3sXjj0yeTz9tZQqNbHIako7g0PyjTp7KOPBIphY7JYWWPJzGs F9+kwh887g3GydFHamk2v5XeNatEOj8q2soEyBBaXMALOc+W19kFiiYn+pQlRtPu NdLfY8YZm54gF7GvZe/m55j5mchNnxS/i2D72P3yAF/qxaouh1wxlLjiFri9e5CW khNesdJLU6jiP3SDhYsBiU9RduYc8s/8iwgsNREfzJODW3RDOTwdXHSQVLVdmUl9 P0UbR9w4pWnA6g0YzSpOtSV3omvixmuVhahbwG6pnlvBs57Zg55WUziMjMaNL9OC LGaZgOXwodrSiw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:19 2026 by rpki-client