This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft File: oLalsaFMhtTPtGxOhuzUBmgEzJA.mft (raw, json) Hash identifier: 5iKosy5CuDcrsySYhYbEtik8RGNAFxPaacMGCQvsxiI= Subject key identifier: 31:CD:8B:6C:FD:5C:CE:DA:AF:A7:83:31:25:2A:3E:39:16:2B:33:16 Authority key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 Certificate issuer: /CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Certificate serial: 019C416A7BB41B926236249F2DE99ACEB4B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft Manifest number: 082B Signing time: Mon 09 Feb 2026 08:00:23 +0000 Manifest this update: Mon 09 Feb 2026 08:00:23 +0000 Manifest next update: Tue 10 Feb 2026 08:00:23 +0000 Files and hashes: 1: 1znftmW7RAECqXpyi0tYxYNjW0g.roa (hash: cMxzeL9IIyA+85oK+rVdznnIuT95xFC0Kd6s6c1fiR8=) 2: oLalsaFMhtTPtGxOhuzUBmgEzJA.crl (hash: jIYECxmL7yE3UKLBC0iviy918RmuZS9kayxzQj2nxUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:7b:b4:1b:92:62:36:24:9f:2d:e9:9a:ce:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90 Validity Not Before: Feb 9 08:00:23 2026 GMT Not After : Feb 10 08:00:23 2026 GMT Subject: CN=31cd8b6cfd5ccedaafa78331252a3e39162b3316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:b5:3a:8d:af:ab:1c:4e:fa:d9:b8:01:11: 18:19:7c:de:f0:39:56:82:9e:9d:64:1b:72:43:72: 25:62:9c:a3:64:86:17:f4:5a:b2:ed:51:2d:95:db: 58:61:2c:9b:ba:b5:6c:f6:b8:25:4d:dd:fb:6f:1a: 0e:36:65:3c:63:d3:50:a8:fb:29:32:c4:92:d4:5a: 81:e3:91:b1:05:01:25:b0:3a:6a:e3:e4:fb:18:72: a0:21:06:7f:43:78:62:68:d6:6c:a8:97:f7:e9:60: a2:35:80:ed:72:9d:cc:2c:34:64:e8:57:e8:1b:0d: d8:95:3b:8c:4c:b1:94:3a:66:14:91:a0:47:44:51: ed:ec:7f:c6:e8:7e:f7:c5:92:fd:e5:68:f1:ff:b6: 57:82:c5:13:fc:7c:cd:70:1f:6c:8b:4d:01:aa:c5: 2a:ee:b2:b1:9b:a8:b5:c7:e4:c4:5f:5b:44:60:3e: 8f:b2:93:16:8c:fb:92:53:87:42:a7:e0:26:f4:4a: 4b:8b:75:9f:45:5b:7a:64:9f:a4:69:32:0e:f5:d1: da:85:31:a1:f9:53:70:a5:5f:83:db:59:d8:b1:70: ba:de:06:a6:eb:75:a5:6e:9c:00:64:06:41:c1:d7: 3f:a7:f4:01:0a:c6:da:fa:43:2b:75:36:ad:3f:dd: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:8B:6C:FD:5C:CE:DA:AF:A7:83:31:25:2A:3E:39:16:2B:33:16 X509v3 Authority Key Identifier: keyid:A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:24:29:f8:ed:1b:c3:e8:cb:0c:71:67:ab:cb:72:40:b3:0e: c4:68:a4:aa:e2:28:c6:d0:f8:d4:5e:35:29:96:ef:4d:ca:4d: 03:9a:e7:f7:ef:e1:74:e0:17:77:6e:a8:2f:3b:d9:f9:d9:07: 8c:13:62:ff:1f:64:83:cd:48:0f:b0:77:db:18:fd:dc:41:45: 53:d5:85:62:da:76:bf:5d:25:f8:e3:0d:7a:8d:f8:1b:76:f6: 84:59:52:ba:c8:55:b3:a2:07:f4:97:d2:43:1a:3f:94:ad:37: b1:06:f0:26:0f:7e:71:ce:04:0a:f8:8a:86:47:ca:11:77:64: 9c:b3:af:02:b8:c7:a4:a4:57:ab:8b:41:66:00:dc:c7:4a:9d: ce:4c:e1:a6:87:60:94:8c:49:b0:8b:d0:cf:db:25:b6:4c:7c: bf:9f:89:14:da:4b:29:b1:ff:65:d9:b3:31:51:42:d7:c3:a2: 63:61:5a:08:3f:be:0f:50:1f:cb:7d:49:52:12:ee:e0:51:44: 02:79:4f:87:04:57:cf:58:8e:57:87:4e:d0:a3:14:5a:4d:0d: 8f:29:06:60:bd:3a:ea:00:71:02:36:3f:c5:16:36:62:53:76: ba:c4:5d:bd:f8:3d:8d:ac:65:68:a0:bd:15:fc:84:8c:6d:00: e7:97:00:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBanu0G5JiNiSfLemazrSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYjZhNWIxYTE0Yzg2ZDRjZmI0NmM0ZTg2ZWNkNDA2Njgw NGNjOTAwHhcNMjYwMjA5MDgwMDIzWhcNMjYwMjEwMDgwMDIzWjAzMTEwLwYDVQQD EygzMWNkOGI2Y2ZkNWNjZWRhYWZhNzgzMzEyNTJhM2UzOTE2MmIzMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCG1Oo2vqxxO+tm4AREYGXze8DlW gp6dZBtyQ3IlYpyjZIYX9Fqy7VEtldtYYSyburVs9rglTd37bxoONmU8Y9NQqPsp MsSS1FqB45GxBQElsDpq4+T7GHKgIQZ/Q3hiaNZsqJf36WCiNYDtcp3MLDRk6Ffo Gw3YlTuMTLGUOmYUkaBHRFHt7H/G6H73xZL95Wjx/7ZXgsUT/HzNcB9si00BqsUq 7rKxm6i1x+TEX1tEYD6PspMWjPuSU4dCp+Am9EpLi3WfRVt6ZJ+kaTIO9dHahTGh +VNwpV+D21nYsXC63gam63WlbpwAZAZBwdc/p/QBCsba+kMrdTatP926oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHNi2z9XM7ar6eDMSUqPjkWKzMWMB8GA1UdIwQY MBaAFKC2pbGhTIbUz7RsTobs1AZoBMyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEt ODU4NGJlZjBiN2Q1LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9lMWZiNTItOTc5ZC00NDM2LWJlNTEtODU4NGJlZjBiN2Q1 LzEvb0xhbHNhRk1odFRQdEd4T2h1elVCbWdFekpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiQp+O0b w+jLDHFnq8tyQLMOxGikquIoxtD41F41KZbvTcpNA5rn9+/hdOAXd26oLzvZ+dkH jBNi/x9kg81ID7B32xj93EFFU9WFYtp2v10l+OMNeo34G3b2hFlSushVs6IH9JfS Qxo/lK03sQbwJg9+cc4ECviKhkfKEXdknLOvArjHpKRXq4tBZgDcx0qdzkzhpodg lIxJsIvQz9sltkx8v5+JFNpLKbH/ZdmzMVFC18OiY2FaCD++D1Afy31JUhLu4FFE AnlPhwRXz1iOV4dO0KMUWk0NjykGYL066gBxAjY/xRY2YlN2usRdvfg9jaxlaKC9 FfyEjG0A55cAmA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:31 2026 by rpki-client