This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json) Hash identifier: fmv94znWEt5L4XPoeZZGwrlHskeeKtxr+YnwtRHBKgw= Subject key identifier: 7B:B1:80:27:57:FA:1E:5E:4C:E4:CA:1D:7A:76:26:0B:AD:6E:9B:2A Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Certificate serial: 019C43595E5E947EAB5289D754E881567607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:56 +0000 Manifest this update: Mon 09 Feb 2026 17:00:56 +0000 Manifest next update: Tue 10 Feb 2026 17:00:56 +0000 Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=) 2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: PuxzYOqnrtU7Zd0+sqdMvXlFgkdRW8yOOCY8puOC9os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:5e:5e:94:7e:ab:52:89:d7:54:e8:81:56:76:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Validity Not Before: Feb 9 17:00:56 2026 GMT Not After : Feb 10 17:00:56 2026 GMT Subject: CN=7bb1802757fa1e5e4ce4ca1d7a76260bad6e9b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:94:28:40:86:d3:e7:5c:70:3e:d6:cb:f8: 45:05:f4:2e:1a:af:c7:1d:fd:44:15:75:d9:38:7b: 63:26:f2:44:c9:e8:cd:39:47:fd:89:fa:42:85:2d: e8:5f:26:d8:23:6a:50:40:f7:08:fe:41:a4:fe:3b: e4:a3:3e:2b:b9:0d:e2:02:af:2b:27:16:4e:7e:7f: f0:5c:f9:8c:4d:74:2a:7b:16:e0:86:23:1d:a0:0b: 1f:d6:f2:b3:a4:8d:c0:bb:6b:f5:13:a8:03:11:f2: d5:21:91:89:80:a9:09:de:c7:f3:3a:7a:96:b9:33: 16:33:33:34:b0:7a:48:8a:be:b3:32:ba:0b:a6:13: 14:42:14:d5:f0:ca:ad:f4:6c:d0:29:2c:5c:7d:ac: f4:62:62:b7:5c:45:3b:43:c5:88:d2:9f:b6:c4:2d: 93:60:f5:00:19:d7:26:b4:c7:f2:10:c4:c0:49:bf: 96:b8:22:50:c6:3d:1d:39:18:1c:da:fc:f7:cd:0b: 07:08:92:e1:85:5a:e0:51:9d:d5:3c:aa:cc:49:bc: 7e:55:33:82:3d:87:3a:bc:f5:9b:f7:88:c3:6c:a6: 07:69:49:f5:02:4c:cb:e9:dc:4f:7f:9e:4b:2f:ae: 7d:c4:cc:76:3d:b3:a3:4f:32:81:18:ae:28:e4:d7: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:80:27:57:FA:1E:5E:4C:E4:CA:1D:7A:76:26:0B:AD:6E:9B:2A X509v3 Authority Key Identifier: keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:01:df:7d:82:3b:58:b9:cc:9c:a4:15:12:06:20:00:ae:d2: 17:22:d3:ac:0d:cf:91:e2:54:53:1e:2d:df:8f:76:c1:f7:64: a7:62:ce:60:b1:2c:48:58:cf:ae:14:02:47:f1:19:c2:b7:bb: 35:65:67:a5:fc:48:fd:01:f4:63:4b:1e:b0:0b:50:c4:63:63: ef:84:91:23:80:cb:b3:0a:ac:68:bf:13:ea:58:67:5a:1a:89: 12:8b:9b:fb:55:20:53:3a:d7:66:0c:f2:13:02:18:9d:2c:4d: 49:38:36:49:b4:67:42:a6:55:a4:8a:32:3e:39:a7:63:f5:09: 04:19:6b:da:3b:50:46:1d:d9:a9:4f:94:45:48:bf:70:e8:ab: 2b:38:95:6f:8d:88:45:ce:21:7e:1c:67:e0:05:69:6a:87:75: ca:f6:4d:be:c0:94:94:ba:8e:0a:05:40:4a:63:48:fc:84:0d: 93:e9:3d:12:85:71:5e:87:90:34:a8:62:e0:f4:15:72:98:5c: d8:0f:3d:f8:b2:49:b6:15:5c:6f:eb:26:88:33:36:c6:34:e2: af:08:f0:9b:69:9d:6e:52:92:b7:3f:98:3a:1c:11:4b:79:9c: c7:3a:cb:69:f8:52:81:45:0a:c2:3d:5d:2c:7e:15:49:a0:a5: eb:de:7a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWV5elH6rUonXVOiBVnYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl MDZmYzEwHhcNMjYwMjA5MTcwMDU2WhcNMjYwMjEwMTcwMDU2WjAzMTEwLwYDVQQD Eyg3YmIxODAyNzU3ZmExZTVlNGNlNGNhMWQ3YTc2MjYwYmFkNmU5YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCyUKECG0+dccD7Wy/hFBfQuGq/H Hf1EFXXZOHtjJvJEyejNOUf9ifpChS3oXybYI2pQQPcI/kGk/jvkoz4ruQ3iAq8r JxZOfn/wXPmMTXQqexbghiMdoAsf1vKzpI3Au2v1E6gDEfLVIZGJgKkJ3sfzOnqW uTMWMzM0sHpIir6zMroLphMUQhTV8Mqt9GzQKSxcfaz0YmK3XEU7Q8WI0p+2xC2T YPUAGdcmtMfyEMTASb+WuCJQxj0dORgc2vz3zQsHCJLhhVrgUZ3VPKrMSbx+VTOC PYc6vPWb94jDbKYHaUn1AkzL6dxPf55LL659xMx2PbOjTzKBGK4o5Nc+FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuxgCdX+h5eTOTKHXp2JgutbpsqMB8GA1UdIwQY MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQHffYI7 WLnMnKQVEgYgAK7SFyLTrA3PkeJUUx4t3492wfdkp2LOYLEsSFjPrhQCR/EZwre7 NWVnpfxI/QH0Y0sesAtQxGNj74SRI4DLswqsaL8T6lhnWhqJEoub+1UgUzrXZgzy EwIYnSxNSTg2SbRnQqZVpIoyPjmnY/UJBBlr2jtQRh3ZqU+URUi/cOirKziVb42I Rc4hfhxn4AVpaod1yvZNvsCUlLqOCgVASmNI/IQNk+k9EoVxXoeQNKhi4PQVcphc 2A89+LJJthVcb+smiDM2xjTirwjwm2mdblKStz+YOhwRS3mcxzrLafhSgUUKwj1d LH4VSaCl69564g== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:27 2026 by rpki-client