This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json) Hash identifier: o0KRyrf06znB/RqQg4Gez8eTYkBXivCbRFESadvBC8k= Subject key identifier: C5:9E:62:06:C9:99:70:45:C2:80:09:04:21:91:21:EF:77:F4:B3:ED Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019C1E71C2AC545CF2B4F7E1E73AD91362C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft Manifest number: 1807 Signing time: Mon 02 Feb 2026 13:01:37 +0000 Manifest this update: Mon 02 Feb 2026 13:01:37 +0000 Manifest next update: Tue 03 Feb 2026 13:01:37 +0000 Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=) 2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=) 3: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=) 4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: wsQoTgqk/uIEEv66TNJjEvC9DE2ZX9kpludOOQ0e89s=) 5: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=) 6: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (hash: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY=) 7: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:71:c2:ac:54:5c:f2:b4:f7:e1:e7:3a:d9:13:62:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Feb 2 13:01:37 2026 GMT Not After : Feb 3 13:01:37 2026 GMT Subject: CN=c59e6206c9997045c2800904219121ef77f4b3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:84:ec:03:af:d6:8b:c5:97:70:af:04:82:e0: 27:0a:a8:d0:ea:04:fd:10:89:5c:d2:03:a8:90:12: f0:da:61:a6:29:65:37:c9:91:07:e4:ac:40:24:11: 39:26:f4:f6:ef:a8:e4:86:bf:79:48:08:5e:f2:04: d3:04:fc:81:ea:33:46:68:71:51:1a:9e:e1:94:47: 19:8c:29:03:99:62:fa:7e:e8:3a:4b:25:e8:e1:e6: 03:58:80:81:d0:46:db:0d:26:39:6c:d0:e3:68:7b: b9:5e:b5:d4:7c:13:6a:3e:f3:d3:f8:61:d5:d4:c4: ca:91:fd:61:5e:fa:92:1e:79:db:68:66:30:f3:ee: ec:20:a0:47:aa:15:48:72:9f:e0:55:71:37:68:3c: 9e:0b:07:ec:30:95:4b:3c:a8:ec:b5:44:2a:40:18: 16:eb:42:28:a7:1d:38:c8:f3:bd:0c:fa:13:0a:ec: b1:25:7f:2f:73:5b:9e:2d:83:28:37:47:f3:bb:ed: 6a:11:3b:30:6e:13:7e:c8:bf:3a:55:c0:d4:2a:fc: 73:2a:34:a1:c3:74:67:ee:62:74:fb:a9:19:fd:9e: 65:ab:80:24:d9:1f:c5:31:8b:de:d1:f3:c4:ff:d2: 5b:c2:09:af:27:d8:63:79:31:8a:f8:5e:10:0b:3a: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9E:62:06:C9:99:70:45:C2:80:09:04:21:91:21:EF:77:F4:B3:ED X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4e:8b:30:79:62:5a:38:f2:01:ad:f2:23:6b:4e:65:ca:54: 93:aa:a7:eb:00:6f:db:fe:1a:44:be:84:16:2d:46:0e:99:db: 59:6e:9b:e7:36:e6:5e:b2:af:68:a1:3c:ce:7b:92:e5:29:2c: be:ad:41:11:9d:f2:44:0d:5b:8a:9d:df:52:26:e3:51:95:09: d2:51:8f:88:55:8a:a0:6d:6f:b1:f8:81:1e:df:fe:cb:ac:38: c4:d0:12:46:5b:27:3d:92:43:d8:1e:b2:3e:52:72:c4:d6:3e: 22:aa:06:9b:a3:0d:26:16:55:46:6f:db:a3:7b:f7:8b:75:e5: aa:30:b6:72:bd:b6:ab:cd:c2:34:0f:0d:7a:00:bd:09:b9:8d: 6a:e6:8f:29:5f:6c:c9:c1:a6:86:47:09:71:1a:52:c6:56:e5: 93:e2:53:12:7e:81:ec:34:95:78:c8:63:42:ca:b4:5a:75:08: 78:c9:35:e1:93:df:92:10:a3:ba:52:4d:4b:a7:0f:c6:3b:e6: ee:c5:87:6f:af:21:79:17:9c:fd:01:70:7f:c7:ca:99:34:58: e4:95:e6:c6:b6:50:4d:75:c4:ec:d3:95:a4:96:62:39:47:56: dc:7d:8a:76:6a:4b:ea:eb:b4:df:af:0f:dd:cb:bc:b1:81:9d: 09:b6:dd:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweccKsVFzytPfh5zrZE2LFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjYwMjAyMTMwMTM3WhcNMjYwMjAzMTMwMTM3WjAzMTEwLwYDVQQD EyhjNTllNjIwNmM5OTk3MDQ1YzI4MDA5MDQyMTkxMjFlZjc3ZjRiM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYTsA6/Wi8WXcK8EguAnCqjQ6gT9 EIlc0gOokBLw2mGmKWU3yZEH5KxAJBE5JvT276jkhr95SAhe8gTTBPyB6jNGaHFR Gp7hlEcZjCkDmWL6fug6SyXo4eYDWICB0EbbDSY5bNDjaHu5XrXUfBNqPvPT+GHV 1MTKkf1hXvqSHnnbaGYw8+7sIKBHqhVIcp/gVXE3aDyeCwfsMJVLPKjstUQqQBgW 60Iopx04yPO9DPoTCuyxJX8vc1ueLYMoN0fzu+1qETswbhN+yL86VcDUKvxzKjSh w3Rn7mJ0+6kZ/Z5lq4Ak2R/FMYve0fPE/9JbwgmvJ9hjeTGK+F4QCzoG4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWeYgbJmXBFwoAJBCGRIe939LPtMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOk6LMHli WjjyAa3yI2tOZcpUk6qn6wBv2/4aRL6EFi1GDpnbWW6b5zbmXrKvaKE8znuS5Sks vq1BEZ3yRA1bip3fUibjUZUJ0lGPiFWKoG1vsfiBHt/+y6w4xNASRlsnPZJD2B6y PlJyxNY+IqoGm6MNJhZVRm/bo3v3i3XlqjC2cr22q83CNA8NegC9CbmNauaPKV9s ycGmhkcJcRpSxlblk+JTEn6B7DSVeMhjQsq0WnUIeMk14ZPfkhCjulJNS6cPxjvm 7sWHb68heRec/QFwf8fKmTRY5JXmxrZQTXXE7NOVpJZiOUdW3H2KdmpL6uu0368P 3cu8sYGdCbbd0g== -----END CERTIFICATE-----Generated at Mon Feb 2 15:59:14 2026 by rpki-client