This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json) Hash identifier: qyfEa3C7N3LCiaQxTe2ThgVhQZ8DAm1C+D9Q9R5/NIc= Subject key identifier: E4:78:FB:B5:0E:40:3A:5A:CE:7D:27:F0:E2:6A:C2:E7:65:6A:FC:F0 Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51 Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251 Certificate serial: 019C41A22B97967795713F93469F4F7E41AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft Manifest number: 15FF Signing time: Mon 09 Feb 2026 09:01:12 +0000 Manifest this update: Mon 09 Feb 2026 09:01:12 +0000 Manifest next update: Tue 10 Feb 2026 09:01:12 +0000 Files and hashes: 1: YGNT5pqPZu181hM9KnN1W6l6JfA.roa (hash: /u8IipOD0TJq7/K9Iib+hkESBCEfhRJpznMeAkMobZQ=) 2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: xg43rjdSevINBIPAbFPs7Tkrnb7i6nS2iYHYALqi35k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:2b:97:96:77:95:71:3f:93:46:9f:4f:7e:41:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251 Validity Not Before: Feb 9 09:01:12 2026 GMT Not After : Feb 10 09:01:12 2026 GMT Subject: CN=e478fbb50e403a5ace7d27f0e26ac2e7656afcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:61:0d:03:3c:64:4e:34:55:86:d0:07:84: ca:1d:ca:f5:37:fa:68:30:08:83:72:4c:a1:71:47: b8:8d:9a:32:5a:88:e3:5d:45:61:ff:e4:96:d7:32: d2:d9:98:ce:1e:32:ff:83:f7:ca:c0:ee:ad:67:88: 44:76:13:6c:78:ef:9f:35:ab:18:cb:13:1c:d3:93: 9b:f3:a7:2e:d1:0b:dc:cb:40:5b:15:57:48:79:e9: ca:c4:47:d8:12:5f:f0:17:b9:98:2f:52:6c:8d:08: 04:87:af:b3:4c:70:21:a4:35:e1:ff:2d:48:fa:d0: 7a:f4:2d:91:fb:a2:3b:a7:30:7e:ed:31:cd:d6:7c: 68:71:c4:bf:42:65:4b:b2:9a:7f:11:98:3d:c4:67: d8:9d:31:91:53:3c:85:bc:7c:23:f3:1d:b4:b3:b2: de:33:83:1d:8c:1e:cf:d1:7e:48:9d:6d:68:48:93: 0c:b0:5c:bf:5e:f6:62:de:24:16:27:55:b8:c1:b6: 6c:ae:21:a7:eb:96:7f:e9:05:84:c3:85:30:b9:22: 01:a5:b9:51:8d:d0:24:a9:04:49:6c:67:a9:55:82: 64:df:d4:b4:e7:38:9b:ef:ee:54:a7:d0:72:37:bb: b0:13:9d:16:34:a7:88:26:63:a1:54:d9:82:d6:96: ed:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:78:FB:B5:0E:40:3A:5A:CE:7D:27:F0:E2:6A:C2:E7:65:6A:FC:F0 X509v3 Authority Key Identifier: keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:83:1a:21:9d:2b:b6:71:4b:40:14:27:dc:6a:05:79:0f:d5: 1f:0e:56:46:3b:ef:4f:34:44:ac:db:a1:79:ad:98:52:11:85: 99:6e:45:39:ce:6d:b2:ad:b9:4f:d0:50:ec:aa:31:9d:03:d2: b6:bf:2c:18:da:eb:b9:4f:9c:9f:44:49:62:c7:b3:f3:df:b3: dd:02:29:e0:f6:6b:34:79:3c:2f:ba:da:1d:bf:d9:2e:f3:bc: bd:f3:7c:9c:05:30:08:2b:ba:f3:9d:cc:88:1f:c6:20:85:c2: fd:29:af:fe:56:7c:32:31:84:06:6d:da:ca:50:31:e3:e4:cb: c7:0f:e2:31:25:fb:71:d4:fb:e1:7c:b3:4f:65:c6:1a:64:06: 70:04:b5:a5:f3:7c:c8:68:be:e7:d6:82:f0:1a:ce:0c:54:ac: 13:46:25:a6:66:2c:6d:ab:b6:ab:bc:db:1b:79:7e:16:4a:10: 43:ea:e9:f8:58:14:cc:ba:60:b2:33:d2:c1:c3:4f:38:da:e0: 6a:0a:7f:fb:57:20:28:d7:41:d2:e7:22:ed:e7:e4:f6:6e:6e: c6:68:8b:d0:9d:2f:32:7c:ff:5f:e1:12:f2:53:96:a3:c1:ad: bd:6e:27:f6:bc:40:79:27:5a:a6:f4:2d:21:ec:a7:0e:c2:29: 13:f9:82:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiuXlneVcT+TRp9PfkGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzNhOWEzYWQzMjBhOGZjNjFiNWY4Nzg5ZjUyNWQwN2U1 YmUyNTEwHhcNMjYwMjA5MDkwMTEyWhcNMjYwMjEwMDkwMTEyWjAzMTEwLwYDVQQD EyhlNDc4ZmJiNTBlNDAzYTVhY2U3ZDI3ZjBlMjZhYzJlNzY1NmFmY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLJhDQM8ZE40VYbQB4TKHcr1N/po MAiDckyhcUe4jZoyWojjXUVh/+SW1zLS2ZjOHjL/g/fKwO6tZ4hEdhNseO+fNasY yxMc05Ob86cu0Qvcy0BbFVdIeenKxEfYEl/wF7mYL1JsjQgEh6+zTHAhpDXh/y1I +tB69C2R+6I7pzB+7THN1nxoccS/QmVLspp/EZg9xGfYnTGRUzyFvHwj8x20s7Le M4MdjB7P0X5InW1oSJMMsFy/XvZi3iQWJ1W4wbZsriGn65Z/6QWEw4UwuSIBpblR jdAkqQRJbGepVYJk39S05zib7+5Up9ByN7uwE50WNKeIJmOhVNmC1pbtxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOR4+7UOQDpazn0n8OJqwudlavzwMB8GA1UdIwQY MBaAFHLDqaOtMgqPxhtfh4n1JdB+W+JRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQt ZDI5ZjQ1Zjc5M2M3LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQtZDI5ZjQ1Zjc5M2M3 LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIMaIZ0r tnFLQBQn3GoFeQ/VHw5WRjvvTzRErNuhea2YUhGFmW5FOc5tsq25T9BQ7KoxnQPS tr8sGNrruU+cn0RJYsez89+z3QIp4PZrNHk8L7raHb/ZLvO8vfN8nAUwCCu6853M iB/GIIXC/Smv/lZ8MjGEBm3aylAx4+TLxw/iMSX7cdT74XyzT2XGGmQGcAS1pfN8 yGi+59aC8BrODFSsE0YlpmYsbau2q7zbG3l+FkoQQ+rp+FgUzLpgsjPSwcNPONrg agp/+1cgKNdB0uci7efk9m5uxmiL0J0vMnz/X+ES8lOWo8GtvW4n9rxAeSdapvQt IeynDsIpE/mCww== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:50 2026 by rpki-client