This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json) Hash identifier: Yks1XU0ogon07rlr9I5pvsrfvONgslzOCEFmkqzwgiI= Subject key identifier: E4:44:43:B5:D8:20:F6:73:14:7D:03:45:EC:D4:F7:BB:31:EF:A5:5B Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580 Certificate serial: 019C41A1EE2AF2DBF4DBF37E81215ADA71FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft Manifest number: 0FBA Signing time: Mon 09 Feb 2026 09:00:57 +0000 Manifest this update: Mon 09 Feb 2026 09:00:57 +0000 Manifest next update: Tue 10 Feb 2026 09:00:57 +0000 Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: 9VknDSVSahDHwQ6b9kwOZhP6lgdBXkMe1meR3MXyY1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ee:2a:f2:db:f4:db:f3:7e:81:21:5a:da:71:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580 Validity Not Before: Feb 9 09:00:57 2026 GMT Not After : Feb 10 09:00:57 2026 GMT Subject: CN=e44443b5d820f673147d0345ecd4f7bb31efa55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:0f:e0:4e:45:76:95:6f:11:56:80:d8:2a: 9a:b4:55:ba:33:24:98:49:30:ee:b9:b3:0d:f2:59: 24:87:51:de:34:30:c5:54:59:79:87:95:10:01:94: f9:5e:51:88:c9:46:01:9e:51:51:d8:22:15:bb:90: 8a:94:85:2e:87:99:ff:70:39:cb:b8:f3:73:34:18: 03:f9:ac:c5:56:f8:2c:7b:60:00:1f:bb:30:8b:46: f8:e8:3e:d4:87:e6:70:da:3b:52:24:58:00:d8:a3: c4:7f:05:c5:e4:d7:27:f0:96:10:c4:c5:91:4a:67: bb:0d:37:91:7b:54:19:c1:8c:e3:31:de:b6:f3:d9: aa:00:1c:7c:b2:19:3e:c3:e7:f0:ca:e1:a8:76:07: ab:8e:58:9a:b9:25:ed:9f:13:1c:e2:86:d6:d2:c6: df:75:08:a8:54:a6:48:c4:62:b0:03:08:9b:19:f4: b4:3c:0f:fb:64:c6:21:61:3d:8c:33:50:ea:c9:72: 1d:56:b4:7b:74:93:e7:46:05:4a:45:70:96:c9:d8: 03:70:0a:f6:6c:1e:8b:07:39:b5:dd:4e:ac:d6:8f: cd:14:6a:03:6a:39:d6:cc:f8:6b:07:37:b6:cc:26: 62:b1:6b:3b:dd:31:6a:88:7b:e4:82:46:b4:d7:8b: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:44:43:B5:D8:20:F6:73:14:7D:03:45:EC:D4:F7:BB:31:EF:A5:5B X509v3 Authority Key Identifier: keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1f:6c:8c:01:63:68:78:d9:5a:59:f4:da:9c:09:95:bd:13: 74:84:c5:1f:3b:81:82:dc:46:bc:36:5e:ad:7e:e9:b6:96:f3: 95:ea:33:7e:91:b9:73:43:ad:54:3a:5e:cd:12:5f:01:a1:d5: 59:18:b7:0b:af:20:ac:09:a8:3b:1b:b6:57:f8:ae:24:cd:ba: f3:bd:f6:a0:3e:ab:72:54:60:c5:f1:e7:14:bf:4c:55:29:63: a5:62:a3:c9:8a:57:87:73:9f:69:11:a5:bd:80:8f:5b:73:36: a7:69:d9:61:9e:3a:f6:a2:5f:d3:69:84:e3:49:9b:07:47:0c: 84:1c:bb:aa:ab:0e:d2:85:ae:53:29:52:3c:c3:e5:ad:31:85: 64:44:7a:93:fc:d8:a2:9c:27:13:96:f1:d0:a6:0d:01:23:8a: ed:f8:e3:e2:b9:b8:03:5a:cf:46:f7:fb:a6:e4:c0:5d:c0:11: 01:7c:68:6a:2d:56:c6:ba:65:96:7e:78:65:44:e5:fc:fd:de: 95:31:98:d2:a6:35:8b:b3:73:8b:c1:75:5d:86:a6:55:b1:df: be:9c:f1:17:62:41:9f:6e:df:f3:3a:8c:e0:29:07:ed:ac:f4: d2:d0:cd:09:e9:c4:20:0b:38:34:00:a8:f7:43:d7:b7:8e:29: 64:51:7d:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoe4q8tv02/N+gSFa2nH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYWRlYjFmMzhlMjUxYTlkOGQ2MTRmMzJkMzZmMjZhZGY0 ZmQ1ODAwHhcNMjYwMjA5MDkwMDU3WhcNMjYwMjEwMDkwMDU3WjAzMTEwLwYDVQQD EyhlNDQ0NDNiNWQ4MjBmNjczMTQ3ZDAzNDVlY2Q0ZjdiYjMxZWZhNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMoP4E5FdpVvEVaA2CqatFW6MySY STDuubMN8lkkh1HeNDDFVFl5h5UQAZT5XlGIyUYBnlFR2CIVu5CKlIUuh5n/cDnL uPNzNBgD+azFVvgse2AAH7swi0b46D7Uh+Zw2jtSJFgA2KPEfwXF5Ncn8JYQxMWR Sme7DTeRe1QZwYzjMd6289mqABx8shk+w+fwyuGodgerjliauSXtnxMc4obW0sbf dQioVKZIxGKwAwibGfS0PA/7ZMYhYT2MM1DqyXIdVrR7dJPnRgVKRXCWydgDcAr2 bB6LBzm13U6s1o/NFGoDajnWzPhrBze2zCZisWs73TFqiHvkgka014ufvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOREQ7XYIPZzFH0DRezU97sx76VbMB8GA1UdIwQY MBaAFDut6x844lGp2NYU8y028mrfT9WAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUt NGM4N2ZlNWZkYWRjLzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmJhMGYtZDU2ZC00ZDdmLWE4YjUtNGM4N2ZlNWZkYWRj LzEvTzYzckh6amlVYW5ZMWhUekxUYnlhdDlQMVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAox9sjAFj aHjZWln02pwJlb0TdITFHzuBgtxGvDZerX7ptpbzleozfpG5c0OtVDpezRJfAaHV WRi3C68grAmoOxu2V/iuJM268732oD6rclRgxfHnFL9MVSljpWKjyYpXh3OfaRGl vYCPW3M2p2nZYZ469qJf02mE40mbB0cMhBy7qqsO0oWuUylSPMPlrTGFZER6k/zY opwnE5bx0KYNASOK7fjj4rm4A1rPRvf7puTAXcARAXxoai1Wxrplln54ZUTl/P3e lTGY0qY1i7Nzi8F1XYamVbHfvpzxF2JBn27f8zqM4CkH7az00tDNCenEIAs4NACo 90PXt44pZFF9Pw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:38 2026 by rpki-client