This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft File: OX2fPb_DZTMuKCvRdqaAdURtHRs.mft (raw, json) Hash identifier: xbMmma91q53AHfCxk/8KyYknmgIyu8t+Mgupyn+n54g= Subject key identifier: 69:E8:98:3A:44:C3:9C:E7:E5:55:25:4E:4B:EE:84:E3:52:BF:F2:62 Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b Certificate serial: 019C42464398B82BEF47DC1F854F2E6DA540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft Manifest number: 1234 Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: OX2fPb_DZTMuKCvRdqaAdURtHRs.crl (hash: TYdVyxpx1F9B0txo06QdcVElMiM9X1r3x3MwGPVLYW4=) 2: Wsump-ruMTHeCIUMQYq9YHizRHM.roa (hash: PRDR807Wy2QehMf95nyisTATR9YQb1obROcnB9juLnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:43:98:b8:2b:ef:47:dc:1f:85:4f:2e:6d:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=69e8983a44c39ce7e555254e4bee84e352bff262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:14:0d:a6:c3:2f:ea:53:19:76:04:7c:ef: bf:ee:15:27:f8:64:f8:53:44:b9:83:3e:55:6c:b1: 86:f9:2f:38:de:05:0c:47:14:9f:97:ea:e5:81:85: 3f:52:9b:26:0d:ae:20:f0:ac:e2:68:5e:3a:ed:7f: 9b:e1:3b:09:20:d2:91:2b:f1:cb:29:13:e3:03:f6: c6:32:a5:f8:94:36:54:cf:4c:d9:ed:85:6c:1d:46: 04:6d:45:cc:b9:4b:e3:9b:8d:e9:b9:1c:6b:56:5c: 7d:93:af:be:19:22:13:ac:21:ee:70:8f:bb:3f:bf: 39:2c:7f:c0:d2:0e:be:38:93:4f:29:95:92:66:0a: fc:15:b2:83:a8:a1:d5:e2:51:14:30:76:3e:62:3e: 34:5a:ae:84:1c:45:66:28:29:c2:83:4f:2e:5b:10: 99:02:39:43:c7:7a:30:fb:38:c7:1a:cb:23:84:3e: 0d:de:45:ee:c4:1f:40:f6:e1:a4:f7:d1:a8:c8:ac: b2:0a:99:4b:51:09:39:e2:c9:a0:b8:bd:56:da:c3: 96:a7:5c:7a:f0:fb:84:c5:93:51:a9:6f:82:46:5a: 6f:b6:3c:b1:45:f7:bd:2b:f2:ad:38:86:d6:1d:de: c7:0a:d1:8d:d7:41:38:3b:43:0e:29:54:20:23:22: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E8:98:3A:44:C3:9C:E7:E5:55:25:4E:4B:EE:84:E3:52:BF:F2:62 X509v3 Authority Key Identifier: keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ec:08:8f:ae:46:21:eb:6f:3d:25:1b:12:0f:8a:4a:a6:df: 27:00:0d:02:be:72:a5:71:17:b3:4b:db:0f:02:96:f5:1d:76: a6:5f:52:fe:84:c1:e4:2d:17:0a:04:5e:89:2b:0d:10:d8:64: 47:7c:ff:25:9b:90:d0:37:11:7f:86:4d:1b:94:3d:78:e7:2a: d5:6b:7a:50:f4:c4:35:b0:29:e5:7d:52:45:e5:a8:b4:67:97: b7:a7:29:d5:00:27:79:0e:f5:82:3f:82:40:2d:7d:36:bb:18: 4b:a6:3f:e4:c4:61:0c:1c:55:4a:8f:a0:41:54:3c:27:8b:f4: af:72:d3:a6:a6:9a:ad:77:63:21:aa:ba:4e:69:77:96:e5:11: f5:b0:37:62:4c:25:b8:86:13:c1:0c:0d:8d:bd:81:97:12:59: 42:89:ee:bf:ea:c5:80:0e:82:3c:bf:b0:3d:42:f1:71:ac:66: 2e:4f:52:d1:4b:95:e2:41:e8:04:96:c8:82:3c:87:44:80:10: 6b:88:c7:e4:09:83:4e:f9:fb:d7:a7:70:a8:8c:57:aa:4b:ed: c1:44:d4:e6:06:50:25:5f:7b:83:15:d2:9e:02:cb:1d:14:0b: 49:71:e8:a3:c8:ca:8a:7c:55:de:f2:c3:a8:9c:d3:67:f4:5f: c7:4a:f6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkOYuCvvR9wfhU8ubaVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2Q5ZjNkYmZjMzY1MzMyZTI4MmJkMTc2YTY4MDc1NDQ2 ZDFkMWIwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD Eyg2OWU4OTgzYTQ0YzM5Y2U3ZTU1NTI1NGU0YmVlODRlMzUyYmZmMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1goUDabDL+pTGXYEfO+/7hUn+GT4 U0S5gz5VbLGG+S843gUMRxSfl+rlgYU/UpsmDa4g8KziaF467X+b4TsJINKRK/HL KRPjA/bGMqX4lDZUz0zZ7YVsHUYEbUXMuUvjm43puRxrVlx9k6++GSITrCHucI+7 P785LH/A0g6+OJNPKZWSZgr8FbKDqKHV4lEUMHY+Yj40Wq6EHEVmKCnCg08uWxCZ AjlDx3ow+zjHGssjhD4N3kXuxB9A9uGk99GoyKyyCplLUQk54smguL1W2sOWp1x6 8PuExZNRqW+CRlpvtjyxRfe9K/KtOIbWHd7HCtGN10E4O0MOKVQgIyKxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnomDpEw5zn5VUlTkvuhONSv/JiMB8GA1UdIwQY MBaAFDl9nz2/w2UzLigr0XamgHVEbR0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMt ZDg2YWIyZmU3NjQ4LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZjJmOGYtMTIxMi00OTQzLWJkMGMtZDg2YWIyZmU3NjQ4 LzEvT1gyZlBiX0RaVE11S0N2UmRxYUFkVVJ0SFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgewIj65G IetvPSUbEg+KSqbfJwANAr5ypXEXs0vbDwKW9R12pl9S/oTB5C0XCgReiSsNENhk R3z/JZuQ0DcRf4ZNG5Q9eOcq1Wt6UPTENbAp5X1SReWotGeXt6cp1QAneQ71gj+C QC19NrsYS6Y/5MRhDBxVSo+gQVQ8J4v0r3LTpqaarXdjIaq6Tml3luUR9bA3Ykwl uIYTwQwNjb2BlxJZQonuv+rFgA6CPL+wPULxcaxmLk9S0UuV4kHoBJbIgjyHRIAQ a4jH5AmDTvn716dwqIxXqkvtwUTU5gZQJV97gxXSngLLHRQLSXHoo8jKinxV3vLD qJzTZ/Rfx0r29w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:57 2026 by rpki-client