This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json) Hash identifier: pxZXrntY2Mr5iyeXU4MyRSz6iB7XW5Bdh/fvHNveRXU= Subject key identifier: FF:41:11:35:52:03:5A:37:05:1D:BB:BE:1D:71:E7:77:CD:1C:59:49 Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Certificate serial: 019C40FCF8C234E2EB19F2D0501017A54D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft Manifest number: 12AA Signing time: Mon 09 Feb 2026 06:00:46 +0000 Manifest this update: Mon 09 Feb 2026 06:00:46 +0000 Manifest next update: Tue 10 Feb 2026 06:00:46 +0000 Files and hashes: 1: GuQAjBCkP5OO4SvyIu8w9D6eC38.roa (hash: BhuS+EcAxQfxRsVLjCrzmOxsWrwhIEcqz2zMQpJPfMk=) 2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: GYinshyL83TDzPGi0g6b08U5F0t7Rlmn4NFzTnKQAO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:f8:c2:34:e2:eb:19:f2:d0:50:10:17:a5:4d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628 Validity Not Before: Feb 9 06:00:46 2026 GMT Not After : Feb 10 06:00:46 2026 GMT Subject: CN=ff41113552035a37051dbbbe1d71e777cd1c5949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:bc:b0:78:05:71:32:a1:f8:64:b8:18:67: 7b:d2:59:1e:9f:1a:48:94:20:a7:4f:32:09:d3:78: 5b:c7:4b:61:20:da:5e:5c:d3:15:6d:e9:c1:f7:9f: 9e:c7:5f:d3:25:ec:87:1e:c1:0f:20:0b:ed:8d:ff: b5:dd:b2:3b:ae:a8:21:b0:f8:2c:fe:77:2a:65:00: c2:3c:8b:e4:f8:48:39:68:49:c9:6f:6d:10:90:ad: 1f:60:54:fe:54:9e:23:64:13:cc:f2:33:a8:d3:13: 6e:29:f1:44:ab:61:d8:4a:1f:69:25:1f:6b:8f:d3: 7e:04:8a:b0:04:ce:8b:12:cf:1b:03:c1:ec:7b:13: 66:98:5c:86:63:2f:37:28:bb:76:fd:87:4e:f9:c7: e0:1c:ac:7d:05:39:e6:89:ee:cd:5f:9d:8b:cc:7d: df:44:a4:2c:fc:7c:95:28:7c:c1:3a:e2:9a:c3:e9: 95:dc:b7:62:02:51:ac:df:7d:9e:57:22:df:bf:2b: 14:4c:de:a1:64:8e:b1:b8:1f:a1:2e:70:ba:79:ec: 5a:d1:6e:f3:a5:60:7e:1f:0d:9b:3f:87:da:c2:47: 87:2d:ba:35:72:e6:e3:06:13:72:75:18:34:36:fa: f3:e5:01:2d:86:6c:27:54:da:99:28:e7:25:a9:4b: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:41:11:35:52:03:5A:37:05:1D:BB:BE:1D:71:E7:77:CD:1C:59:49 X509v3 Authority Key Identifier: keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:98:41:4f:aa:a0:0e:ae:ba:0f:8a:d5:0b:5b:58:ee:26: 28:44:07:de:17:7b:a5:f8:4e:78:91:f5:ae:3b:ba:07:12:75: a9:38:c3:e9:9f:3e:06:3d:98:36:69:d3:96:0c:bd:9a:e7:65: d2:c1:0e:0e:4e:57:74:63:12:f8:78:d5:d7:5a:d9:53:1e:c2: 10:8f:d3:f6:0f:ff:50:93:69:52:60:93:b6:b7:6b:c6:b6:46: 4f:d1:8b:42:cf:78:e6:3f:9a:38:ca:f6:2d:78:f9:44:f0:94: 3f:77:61:d0:75:d8:ec:de:6d:cf:c5:a7:4f:f1:69:83:9f:f9: b7:67:d5:fc:9e:be:b8:b8:49:46:75:f3:d1:a6:8b:c4:a2:b5: d8:cf:46:68:b0:0e:2b:6a:3a:c2:13:27:75:81:22:68:d3:e0: 74:9f:ef:cc:8a:46:e8:f3:e0:f0:f5:88:0d:c9:ed:25:22:33: 4b:d6:8f:85:f0:4a:3a:b2:87:f2:8f:7f:59:7f:f6:fb:6b:3a: bc:a0:11:0e:1c:e7:a1:a7:99:c9:ec:a2:67:94:42:ba:f8:65: 43:74:b6:37:31:73:e3:82:d0:02:ac:20:b8:71:96:84:14:a0: 07:98:3c:db:96:20:e4:41:d5:94:bb:5b:36:7d:18:1a:84:39: 44:0e:d5:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/PjCNOLrGfLQUBAXpU0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTJkMTVhOWQ4ZGZkZWNkZThmZTZiMGMxODA0ZDBhOWVl MmU2MjgwHhcNMjYwMjA5MDYwMDQ2WhcNMjYwMjEwMDYwMDQ2WjAzMTEwLwYDVQQD EyhmZjQxMTEzNTUyMDM1YTM3MDUxZGJiYmUxZDcxZTc3N2NkMWM1OTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5+8sHgFcTKh+GS4GGd70lkenxpI lCCnTzIJ03hbx0thINpeXNMVbenB95+ex1/TJeyHHsEPIAvtjf+13bI7rqghsPgs /ncqZQDCPIvk+Eg5aEnJb20QkK0fYFT+VJ4jZBPM8jOo0xNuKfFEq2HYSh9pJR9r j9N+BIqwBM6LEs8bA8HsexNmmFyGYy83KLt2/YdO+cfgHKx9BTnmie7NX52LzH3f RKQs/HyVKHzBOuKaw+mV3LdiAlGs332eVyLfvysUTN6hZI6xuB+hLnC6eexa0W7z pWB+Hw2bP4fawkeHLbo1cubjBhNydRg0Nvrz5QEthmwnVNqZKOclqUv6lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9BETVSA1o3BR27vh1x53fNHFlJMB8GA1UdIwQY MBaAFKGi0Vqdjf3s3o/msMGATQqe4uYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQt ODZkMTk0YWU4YTcxLzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iNjQwYTYtN2VjZC00MjBiLTg2ZWQtODZkMTk0YWU4YTcx LzEvb2FMUldwMk5fZXplai1hd3dZQk5DcDdpNWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAmYQU+q oA6uug+K1QtbWO4mKEQH3hd7pfhOeJH1rju6BxJ1qTjD6Z8+Bj2YNmnTlgy9mudl 0sEODk5XdGMS+HjV11rZUx7CEI/T9g//UJNpUmCTtrdrxrZGT9GLQs945j+aOMr2 LXj5RPCUP3dh0HXY7N5tz8WnT/Fpg5/5t2fV/J6+uLhJRnXz0aaLxKK12M9GaLAO K2o6whMndYEiaNPgdJ/vzIpG6PPg8PWIDcntJSIzS9aPhfBKOrKH8o9/WX/2+2s6 vKARDhznoaeZyeyiZ5RCuvhlQ3S2NzFz44LQAqwguHGWhBSgB5g825Yg5EHVlLtb Nn0YGoQ5RA7VbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:51 2026 by rpki-client