This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json) Hash identifier: m1xHBGL4IQsK2jEd7q5rXoZpt4P8aSoOGPm1FWJK01U= Subject key identifier: 06:6A:0A:45:80:C8:EB:49:DD:58:C0:3E:93:5C:2B:53:10:4F:A4:0C Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1 Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1 Certificate serial: 019C43C6F468179BB967152043857F0AAB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 19:00:37 +0000 Manifest this update: Mon 09 Feb 2026 19:00:37 +0000 Manifest next update: Tue 10 Feb 2026 19:00:37 +0000 Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: xGkS89Q47yACFZnv8OwG1xAOSWjlR4jm9FCG+4f6uFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:f4:68:17:9b:b9:67:15:20:43:85:7f:0a:ab:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1 Validity Not Before: Feb 9 19:00:37 2026 GMT Not After : Feb 10 19:00:37 2026 GMT Subject: CN=066a0a4580c8eb49dd58c03e935c2b53104fa40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:f5:cd:8c:21:28:af:ba:84:be:30:d0:9a: 85:d3:fc:63:4f:3e:3f:e2:42:5f:ff:29:a9:ce:92: 3d:4e:34:70:e9:a3:53:01:c1:30:17:ee:80:b9:87: dc:a2:eb:32:6f:95:fc:c3:2c:f1:e7:3e:51:23:cb: f6:c6:49:15:b0:65:6c:55:bf:94:06:52:94:b8:a8: 05:85:9e:ab:c9:e2:a9:5a:af:f5:f2:35:53:30:3b: 7b:c4:04:8f:4d:aa:3c:b8:ca:43:56:2d:0a:82:35: 28:84:11:b8:55:59:70:ce:ad:a0:be:1c:9d:c1:7e: 23:f7:c6:67:5e:a3:ae:af:2f:93:61:23:68:40:8c: 1f:3b:da:50:d2:3b:ce:52:5e:5d:e1:d5:f3:15:4c: 97:50:47:4f:d7:07:e2:ed:cc:d7:1e:39:56:f9:a8: 13:5e:c8:9c:a6:45:05:ba:90:bf:e9:7f:fe:ee:42: 43:85:4e:bb:b0:d5:70:2e:ac:d1:f0:22:65:27:5f: bb:35:b0:01:f1:6f:d5:02:7a:72:84:12:f8:98:76: 6f:5a:79:cb:9a:c6:53:5b:e0:99:f8:0c:97:fc:4e: b3:b3:1c:8d:5a:b7:41:37:81:7a:bd:1c:c8:e6:8a: 90:f9:90:3e:42:a8:2e:61:a4:48:8b:67:16:9d:62: ef:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6A:0A:45:80:C8:EB:49:DD:58:C0:3E:93:5C:2B:53:10:4F:A4:0C X509v3 Authority Key Identifier: keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:aa:8a:e8:79:a4:70:32:b2:c6:89:4e:89:f4:ca:74:ff:9e: 18:44:e1:ac:e8:5f:da:4f:55:55:86:99:b5:0c:59:e5:a3:2c: 82:ba:41:4a:e7:90:ed:64:96:9c:fa:31:33:0c:66:aa:3e:0f: 53:34:db:26:ec:19:fb:3e:4e:4f:3b:5b:8b:1d:f3:25:e4:ca: 79:42:e0:13:d4:0a:7e:26:bc:64:68:85:60:ae:e5:86:b6:c1: d5:c6:b4:61:a5:5f:cb:f5:b1:ca:fc:6b:a0:45:ee:a4:e7:6e: c1:9e:6f:7a:5b:2f:2a:04:f0:7d:d3:52:d0:fe:3a:7b:c5:f9: a5:06:8a:9a:35:af:25:85:06:43:8a:7f:c3:fc:7f:51:6e:d1: 49:4e:a9:bf:fd:56:19:4f:4d:2c:bf:3f:ca:67:ba:45:f3:d7: 7c:5f:15:41:88:32:67:b9:4c:c0:47:83:85:69:a1:b7:77:0a: 60:4c:f9:71:f1:df:0d:68:b3:2b:00:8c:a0:f3:f3:0c:39:b9: ec:0b:8a:69:e4:45:13:de:ec:b4:7a:b9:5d:d3:66:b6:e4:9f: 64:d1:07:5b:33:51:e6:61:b5:e3:b0:11:b8:99:a3:ae:4b:05: 71:de:c7:22:5f:75:b0:d7:06:f0:c7:37:c7:0f:56:da:b5:84: 78:4b:0c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvRoF5u5ZxUgQ4V/CqttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTczNmFhMjRjZGExODkzYWM1YzVkZDBlZmZkNmVjYWZk OTRmZTEwHhcNMjYwMjA5MTkwMDM3WhcNMjYwMjEwMTkwMDM3WjAzMTEwLwYDVQQD EygwNjZhMGE0NTgwYzhlYjQ5ZGQ1OGMwM2U5MzVjMmI1MzEwNGZhNDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLf1zYwhKK+6hL4w0JqF0/xjTz4/ 4kJf/ympzpI9TjRw6aNTAcEwF+6AuYfcousyb5X8wyzx5z5RI8v2xkkVsGVsVb+U BlKUuKgFhZ6ryeKpWq/18jVTMDt7xASPTao8uMpDVi0KgjUohBG4VVlwzq2gvhyd wX4j98ZnXqOury+TYSNoQIwfO9pQ0jvOUl5d4dXzFUyXUEdP1wfi7czXHjlW+agT XsicpkUFupC/6X/+7kJDhU67sNVwLqzR8CJlJ1+7NbAB8W/VAnpyhBL4mHZvWnnL msZTW+CZ+AyX/E6zsxyNWrdBN4F6vRzI5oqQ+ZA+QqguYaRIi2cWnWLv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZqCkWAyOtJ3VjAPpNcK1MQT6QMMB8GA1UdIwQY MBaAFDuXNqokzaGJOsXF3Q7/1uyv2U/hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNWUzYTItODAwYS00MGRlLWFkYWMt NWIzZjBhMDE1OWNkLzEvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNWUzYTItODAwYS00MGRlLWFkYWMtNWIzZjBhMDE1OWNk LzEvTzVjMnFpVE5vWWs2eGNYZER2X1c3S19aVC1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKqK6Hmk cDKyxolOifTKdP+eGEThrOhf2k9VVYaZtQxZ5aMsgrpBSueQ7WSWnPoxMwxmqj4P UzTbJuwZ+z5OTztbix3zJeTKeULgE9QKfia8ZGiFYK7lhrbB1ca0YaVfy/Wxyvxr oEXupOduwZ5velsvKgTwfdNS0P46e8X5pQaKmjWvJYUGQ4p/w/x/UW7RSU6pv/1W GU9NLL8/yme6RfPXfF8VQYgyZ7lMwEeDhWmht3cKYEz5cfHfDWizKwCMoPPzDDm5 7AuKaeRFE97stHq5XdNmtuSfZNEHWzNR5mG147ARuJmjrksFcd7HIl91sNcG8Mc3 xw9W2rWEeEsMXw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:21 2026 by rpki-client