This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json) Hash identifier: 6kguKKwChP4Hu/JR835Z88Rijv3adTrcsuLlibWVa94= Subject key identifier: 8F:2B:4B:C9:38:9D:CC:11:FA:08:88:37:86:B0:A4:86:3B:13:F2:C9 Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f Certificate serial: 019C439046DF4BC674B737E288502855F0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:00:54 +0000 Manifest this update: Mon 09 Feb 2026 18:00:54 +0000 Manifest next update: Tue 10 Feb 2026 18:00:54 +0000 Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: 8WFxV7uSOD1sF/bdHqubNaAMhUsCw3XXxqhffI5ukY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:46:df:4b:c6:74:b7:37:e2:88:50:28:55:f0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f Validity Not Before: Feb 9 18:00:54 2026 GMT Not After : Feb 10 18:00:54 2026 GMT Subject: CN=8f2b4bc9389dcc11fa08883786b0a4863b13f2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:4c:2b:34:e1:2b:83:f5:c8:fe:33:3b:5f: fc:e6:05:85:5e:d0:78:e3:7d:02:a0:98:4a:27:21: e7:93:b7:56:f0:7c:89:9c:6b:cf:2e:b2:08:26:b2: 7e:d7:ab:d4:62:14:10:88:d9:cf:3d:4c:eb:8a:17: 57:22:92:72:41:7d:cc:aa:66:a3:dd:25:4b:ac:80: 06:ab:ec:94:c2:98:8f:ff:16:2f:4f:67:4f:41:5c: 7f:13:31:3e:0b:cf:e3:d6:64:ed:66:fa:14:f1:96: 7f:b1:2f:47:bc:92:19:d6:b4:53:f4:81:99:26:23: 9a:42:ea:da:46:a0:5c:1d:1a:1b:8d:07:a9:2e:99: 6a:e6:93:52:15:bf:91:4c:1f:b3:da:32:9b:75:c8: 08:fe:d5:e3:86:3d:8d:a5:bc:6f:a5:03:b1:bf:bb: 44:d1:39:cf:e5:93:a2:bc:97:f1:2b:fc:96:53:55: 4c:f7:99:84:7c:f5:ad:ca:b5:06:62:3a:1b:a8:93: d4:8b:46:34:35:e9:1d:f1:29:fd:82:6a:73:3a:13: e8:da:09:5a:66:e1:0c:46:a8:f4:3e:dc:05:f5:44: 42:a9:c5:2d:0e:51:34:e7:16:25:f6:78:ff:6e:86: b5:6c:47:fd:ac:a7:fa:c8:84:44:c4:dd:85:44:40: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:4B:C9:38:9D:CC:11:FA:08:88:37:86:B0:A4:86:3B:13:F2:C9 X509v3 Authority Key Identifier: keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:05:a6:7b:31:8b:91:73:c8:35:1e:4c:e9:6d:b1:0d:f8: 2c:8c:0f:ad:11:58:21:06:de:28:45:c5:96:d7:ac:59:d6:1f: b5:27:90:f1:3e:c7:40:2e:dc:18:f3:a3:f9:cd:36:4a:0b:ca: 16:4a:32:56:12:47:3d:3b:42:65:1d:91:69:0b:5e:c2:da:0b: c5:51:90:a2:6f:ed:b4:18:de:3c:ee:ee:66:c6:49:2f:8a:c1: 62:e4:6e:8d:fb:15:c5:06:75:e8:e9:48:c8:32:9c:62:8b:2f: 96:31:b5:ed:0f:c5:4f:46:3f:df:25:3e:ea:44:da:fd:3d:79: 64:2e:38:29:6a:b5:bc:15:ee:8c:ab:b9:d6:68:39:5d:d9:bc: 4a:67:23:63:e7:a9:f5:6b:ef:8e:f7:39:ca:75:d2:b2:02:a4: 1c:7f:7f:00:4e:4f:98:cd:b8:1f:db:63:25:a1:49:35:d5:8e: e7:20:2a:7c:3b:03:74:08:94:82:06:d2:2f:56:21:c4:8f:94: d6:c1:5d:ff:36:fd:10:c3:93:49:0b:7f:37:d1:18:d2:12:f8: 3d:cf:f8:f9:87:31:28:5d:a9:fa:ba:4d:92:39:99:96:ef:fd: fb:5b:0a:38:da:e1:0c:b7:37:cd:b3:db:eb:8d:ea:3b:82:f2: 05:13:95:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEbfS8Z0tzfiiFAoVfDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmEyYzNlZWRiNzk3NmQ5Y2UzMDQ1ODFmMjM1MzJmZWNi NDZlN2YwHhcNMjYwMjA5MTgwMDU0WhcNMjYwMjEwMTgwMDU0WjAzMTEwLwYDVQQD Eyg4ZjJiNGJjOTM4OWRjYzExZmEwODg4Mzc4NmIwYTQ4NjNiMTNmMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiNMKzThK4P1yP4zO1/85gWFXtB4 430CoJhKJyHnk7dW8HyJnGvPLrIIJrJ+16vUYhQQiNnPPUzrihdXIpJyQX3Mqmaj 3SVLrIAGq+yUwpiP/xYvT2dPQVx/EzE+C8/j1mTtZvoU8ZZ/sS9HvJIZ1rRT9IGZ JiOaQuraRqBcHRobjQepLplq5pNSFb+RTB+z2jKbdcgI/tXjhj2NpbxvpQOxv7tE 0TnP5ZOivJfxK/yWU1VM95mEfPWtyrUGYjobqJPUi0Y0Nekd8Sn9gmpzOhPo2gla ZuEMRqj0PtwF9URCqcUtDlE05xYl9nj/boa1bEf9rKf6yIRExN2FRED/RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8rS8k4ncwR+giIN4awpIY7E/LJMB8GA1UdIwQY MBaAFKNqLD7tt5dtnOMEWB8jUy/stG5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGIt ZGRlMTkyM2JhNzI0LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85MTg1ZTItYjkyOS00MjM2LWE5OGItZGRlMTkyM2JhNzI0 LzEvbzJvc1B1MjNsMjJjNHdSWUh5TlRMLXkwYm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv4Fpnsx i5FzyDUeTOltsQ34LIwPrRFYIQbeKEXFltesWdYftSeQ8T7HQC7cGPOj+c02SgvK FkoyVhJHPTtCZR2RaQtewtoLxVGQom/ttBjePO7uZsZJL4rBYuRujfsVxQZ16OlI yDKcYosvljG17Q/FT0Y/3yU+6kTa/T15ZC44KWq1vBXujKu51mg5Xdm8SmcjY+ep 9Wvvjvc5ynXSsgKkHH9/AE5PmM24H9tjJaFJNdWO5yAqfDsDdAiUggbSL1YhxI+U 1sFd/zb9EMOTSQt/N9EY0hL4Pc/4+YcxKF2p+rpNkjmZlu/9+1sKONrhDLc3zbPb 643qO4LyBROVvA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:29 2026 by rpki-client