This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft File: 1olx6h0itezaGpdZ8FwmyMVqRow.mft (raw, json) Hash identifier: A2aP7DH33oRxVvjsbP0AgvoVHtcTZfJNPDaDmx0qXEw= Subject key identifier: 0B:B3:7E:30:2E:0F:27:91:2A:5A:7C:C5:AD:B4:73:F8:F8:AE:9A:7B Authority key identifier: D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C Certificate issuer: /CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c Certificate serial: 019C4434FD27F8470BB3684316ED6622EDA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft Manifest number: 1000 Signing time: Mon 09 Feb 2026 21:00:49 +0000 Manifest this update: Mon 09 Feb 2026 21:00:49 +0000 Manifest next update: Tue 10 Feb 2026 21:00:49 +0000 Files and hashes: 1: 1olx6h0itezaGpdZ8FwmyMVqRow.crl (hash: 66bjpRJzORL6qMnTKNq5+fSzknq7BqAy6A8vAq26eos=) 2: lN4-DHRIzePvaAlUx-G8m9WU1Yc.roa (hash: 0H44nitsqtD09E43wUKTwpu5uxvURYIo4SfJ0gjjYAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:fd:27:f8:47:0b:b3:68:43:16:ed:66:22:ed:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68971ea1d22b5ecda1a9759f05c26c8c56a468c Validity Not Before: Feb 9 21:00:49 2026 GMT Not After : Feb 10 21:00:49 2026 GMT Subject: CN=0bb37e302e0f27912a5a7cc5adb473f8f8ae9a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:0a:0b:81:34:79:40:e7:a8:d5:2b:7a:cd: ff:11:ed:08:da:b6:47:a1:92:f4:ff:d7:12:97:47: e3:37:f4:b1:f3:9a:f5:77:81:e8:6d:f0:fd:6d:c0: c8:d1:49:e3:a3:a0:72:64:a8:be:27:66:4a:8a:34: 04:d4:97:c2:03:fb:5f:44:60:53:85:a7:ec:73:de: 52:e3:18:09:a0:4d:4f:48:40:9e:53:b3:26:f2:b5: e2:88:fb:a6:8e:17:9b:fa:8b:7d:7a:3b:c0:0c:4b: 18:20:e7:65:4a:97:a8:1a:80:16:f9:0a:56:c6:63: 1d:e0:18:28:01:7e:28:a8:ca:a2:cf:6d:13:61:1a: f8:ff:8b:a9:b9:da:8b:0b:f7:45:2a:cc:6b:15:d7: 11:28:09:2b:d2:93:13:05:d7:9e:c1:3f:88:13:eb: ca:17:ec:79:79:b1:1a:e8:b4:78:19:42:38:f8:b7: c6:3e:93:ac:42:8b:b2:bc:4e:78:c8:f1:07:f9:c5: 54:d4:25:e1:e7:b3:dd:0c:b2:ea:15:58:b0:ae:00: 18:b3:8e:2e:18:3e:a2:6d:d7:8e:5e:79:25:7a:42: 06:72:4a:80:e3:2f:09:84:20:c9:fe:3c:15:7a:9b: df:b4:18:82:b6:a2:d6:de:31:f8:77:1b:6f:f1:71: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:7E:30:2E:0F:27:91:2A:5A:7C:C5:AD:B4:73:F8:F8:AE:9A:7B X509v3 Authority Key Identifier: keyid:D6:89:71:EA:1D:22:B5:EC:DA:1A:97:59:F0:5C:26:C8:C5:6A:46:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1olx6h0itezaGpdZ8FwmyMVqRow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/42c355-585a-48bb-9e4a-a47540fed4b9/1/1olx6h0itezaGpdZ8FwmyMVqRow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2c:fd:49:74:b7:7f:0b:dd:8b:3d:fb:43:06:26:11:b4:82: bb:23:ea:aa:6d:13:0d:b1:a8:f3:b6:b7:e6:3a:c0:2b:37:61: fc:1e:4e:23:73:a1:73:97:ba:33:0d:91:60:f8:36:cd:a9:dd: da:fe:2c:8f:45:6c:aa:5c:c4:80:26:52:80:2f:4f:4e:a5:4d: a0:1e:b4:d9:e1:e1:c6:f7:ac:04:ed:b8:25:9b:a6:93:c1:5c: 16:2b:2d:1b:7c:33:c5:34:21:7e:74:5e:4e:6b:5c:97:e7:b5: cb:6c:93:dc:44:f9:ee:fe:6b:81:6d:d3:dc:b3:8b:54:11:27: d1:27:b0:37:03:e0:98:28:4c:2d:f0:38:ab:ad:70:ce:57:50: 23:b6:33:ea:7e:fd:bf:13:78:6b:e7:09:f7:ea:e3:5a:f0:3b: 1c:c1:4a:5e:23:91:6b:01:6c:0f:69:3e:e8:23:4a:ee:5b:dc: c6:16:a6:31:17:01:75:50:c7:63:99:d1:af:91:46:99:99:a5: 0c:c2:11:8b:2f:35:9e:b7:a9:de:f3:2a:ef:a7:c8:90:86:28: 31:cc:1a:67:37:77:af:d4:95:78:c8:ee:c2:52:6f:13:5c:9c: b3:a6:c3:b1:77:db:f3:dc:1c:ed:72:f0:6a:a3:73:27:0a:5f: f1:69:69:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENP0n+EcLs2hDFu1mIu2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ODk3MWVhMWQyMmI1ZWNkYTFhOTc1OWYwNWMyNmM4YzU2 YTQ2OGMwHhcNMjYwMjA5MjEwMDQ5WhcNMjYwMjEwMjEwMDQ5WjAzMTEwLwYDVQQD EygwYmIzN2UzMDJlMGYyNzkxMmE1YTdjYzVhZGI0NzNmOGY4YWU5YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt84KC4E0eUDnqNUres3/Ee0I2rZH oZL0/9cSl0fjN/Sx85r1d4HobfD9bcDI0Unjo6ByZKi+J2ZKijQE1JfCA/tfRGBT hafsc95S4xgJoE1PSECeU7Mm8rXiiPumjheb+ot9ejvADEsYIOdlSpeoGoAW+QpW xmMd4BgoAX4oqMqiz20TYRr4/4upudqLC/dFKsxrFdcRKAkr0pMTBdeewT+IE+vK F+x5ebEa6LR4GUI4+LfGPpOsQouyvE54yPEH+cVU1CXh57PdDLLqFViwrgAYs44u GD6ibdeOXnklekIGckqA4y8JhCDJ/jwVepvftBiCtqLW3jH4dxtv8XHZuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuzfjAuDyeRKlp8xa20c/j4rpp7MB8GA1UdIwQY MBaAFNaJceodIrXs2hqXWfBcJsjFakaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEt YTQ3NTQwZmVkNGI5LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My80MmMzNTUtNTg1YS00OGJiLTllNGEtYTQ3NTQwZmVkNGI5 LzEvMW9seDZoMGl0ZXphR3BkWjhGd215TVZxUm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiz9SXS3 fwvdiz37QwYmEbSCuyPqqm0TDbGo87a35jrAKzdh/B5OI3Ohc5e6Mw2RYPg2zand 2v4sj0VsqlzEgCZSgC9PTqVNoB602eHhxvesBO24JZumk8FcFistG3wzxTQhfnRe Tmtcl+e1y2yT3ET57v5rgW3T3LOLVBEn0SewNwPgmChMLfA4q61wzldQI7Yz6n79 vxN4a+cJ9+rjWvA7HMFKXiORawFsD2k+6CNK7lvcxhamMRcBdVDHY5nRr5FGmZml DMIRiy81nrep3vMq76fIkIYoMcwaZzd3r9SVeMjuwlJvE1ycs6bDsXfb89wc7XLw aqNzJwpf8Wlp0g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:10 2026 by rpki-client