This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft File: otdUZcLL7I5qW-bRpIFLaCguV98.mft (raw, json) Hash identifier: bG1sQoIcc6h2URghNK9LKDf/uGfW5fBZBXNy+iLqAg8= Subject key identifier: 60:4F:FF:C8:D4:B6:51:6A:CC:0D:CB:9F:09:92:1C:BC:6E:5F:9F:16 Authority key identifier: A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF Certificate issuer: /CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df Certificate serial: 019C4359181975B6C588E7BC1388916953B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft Manifest number: 6E Signing time: Mon 09 Feb 2026 17:00:38 +0000 Manifest this update: Mon 09 Feb 2026 17:00:38 +0000 Manifest next update: Tue 10 Feb 2026 17:00:38 +0000 Files and hashes: 1: otdUZcLL7I5qW-bRpIFLaCguV98.crl (hash: /Y0E/nQBR+HlczC4NnNj/PBme1UbUmB2pVf7t8SeugA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:18:19:75:b6:c5:88:e7:bc:13:88:91:69:53:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d75465c2cbec8e6a5be6d1a4814b68282e57df Validity Not Before: Feb 9 17:00:38 2026 GMT Not After : Feb 10 17:00:38 2026 GMT Subject: CN=604fffc8d4b6516acc0dcb9f09921cbc6e5f9f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:af:5f:8c:25:d9:66:6f:06:6b:4d:c1:03: 53:95:c5:b4:e0:14:cb:aa:d9:75:cf:17:25:3d:72: b6:5b:2e:ce:7f:5b:80:55:c3:2d:0d:28:4f:b6:ac: ab:6e:73:b2:96:99:64:cd:04:82:69:76:bd:dc:c4: a2:e9:77:1c:8b:f0:14:66:99:5d:13:fd:26:04:71: 65:76:9b:4f:8f:16:88:e6:25:be:1a:76:2c:3c:03: 95:2c:fd:a1:3d:ca:d8:a8:fd:38:ac:c4:fc:31:ed: c3:46:63:62:1e:af:20:27:6d:24:7e:47:56:c9:00: 52:8e:bd:3b:77:1c:e1:62:61:de:7a:1b:85:8f:45: 19:15:7d:70:da:64:02:2c:a9:1b:2b:8b:8a:2c:b2: 76:f2:a4:03:f3:f4:8f:a4:d1:e6:7d:f6:b6:80:6b: 7b:52:3b:6e:6a:3b:24:e4:39:1a:6c:38:95:c6:e5: 04:28:b8:af:63:fb:f5:5d:2c:97:1a:7a:3f:fb:dd: b3:e2:5c:f6:06:74:05:4b:3e:37:da:a3:4c:26:fa: fe:e6:18:e5:5d:89:8c:06:dc:9a:2d:77:0a:48:e2: a2:67:9b:a2:a2:04:9f:83:5c:0c:55:2a:f5:56:bd: 43:fd:ec:1f:f7:fa:dd:db:74:94:fb:1f:d3:0d:00: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4F:FF:C8:D4:B6:51:6A:CC:0D:CB:9F:09:92:1C:BC:6E:5F:9F:16 X509v3 Authority Key Identifier: keyid:A2:D7:54:65:C2:CB:EC:8E:6A:5B:E6:D1:A4:81:4B:68:28:2E:57:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otdUZcLL7I5qW-bRpIFLaCguV98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6a721d-4ddd-48fc-9dcf-b57c7827f1d8/1/otdUZcLL7I5qW-bRpIFLaCguV98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:22:e3:88:8e:2a:0f:d2:9c:5a:d8:ea:d8:b6:79:83:22:45: 8c:1c:89:24:df:42:9c:bb:23:8a:5d:86:9c:82:65:6d:6c:96: 41:d4:94:54:3c:cd:10:1a:23:9c:8f:00:7a:69:15:ea:80:1b: d5:19:4a:36:ce:c0:78:1d:e5:1b:1a:f5:f7:52:d6:83:81:ab: 8d:18:d5:7f:3c:bd:21:82:60:fa:c3:19:ba:4a:28:b6:56:27: 5d:cc:b8:fc:22:94:ac:8b:b7:a1:9e:73:21:b8:ae:60:b3:ff: e4:f8:7a:b9:5d:cf:8c:92:ca:16:90:65:69:41:61:4c:4f:dd: c7:38:21:1a:eb:c7:e3:1d:50:85:bb:2b:0a:fc:1c:a6:db:31: 02:31:f1:2e:86:ed:25:42:ad:ca:80:73:06:7d:36:0c:c5:b6: 43:64:53:8d:e9:ee:be:56:96:16:68:7b:8a:52:64:c5:69:0b: 3b:fb:25:47:43:16:c9:90:9f:1d:a8:8c:8d:e6:77:8b:ba:4f: 27:42:bd:df:e7:d4:7b:54:cd:94:d6:46:89:98:0c:12:30:63: 89:2b:34:4f:c4:07:17:73:15:e9:00:b6:dd:aa:a1:64:c4:47: 89:13:6e:18:35:aa:34:4b:e7:0f:08:6a:0f:8a:52:eb:66:a6: 3f:3f:90:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRgZdbbFiOe8E4iRaVO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDc1NDY1YzJjYmVjOGU2YTViZTZkMWE0ODE0YjY4Mjgy ZTU3ZGYwHhcNMjYwMjA5MTcwMDM4WhcNMjYwMjEwMTcwMDM4WjAzMTEwLwYDVQQD Eyg2MDRmZmZjOGQ0YjY1MTZhY2MwZGNiOWYwOTkyMWNiYzZlNWY5ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9qvX4wl2WZvBmtNwQNTlcW04BTL qtl1zxclPXK2Wy7Of1uAVcMtDShPtqyrbnOylplkzQSCaXa93MSi6Xcci/AUZpld E/0mBHFldptPjxaI5iW+GnYsPAOVLP2hPcrYqP04rMT8Me3DRmNiHq8gJ20kfkdW yQBSjr07dxzhYmHeehuFj0UZFX1w2mQCLKkbK4uKLLJ28qQD8/SPpNHmffa2gGt7 Ujtuajsk5DkabDiVxuUEKLivY/v1XSyXGno/+92z4lz2BnQFSz432qNMJvr+5hjl XYmMBtyaLXcKSOKiZ5uiogSfg1wMVSr1Vr1D/ewf9/rd23SU+x/TDQAjhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBP/8jUtlFqzA3LnwmSHLxuX58WMB8GA1UdIwQY MBaAFKLXVGXCy+yOalvm0aSBS2goLlffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YTcyMWQtNGRkZC00OGZjLTlkY2Yt YjU3Yzc4MjdmMWQ4LzEvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82YTcyMWQtNGRkZC00OGZjLTlkY2YtYjU3Yzc4MjdmMWQ4 LzEvb3RkVVpjTEw3STVxVy1iUnBJRkxhQ2d1Vjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzyLjiI4q D9KcWtjq2LZ5gyJFjByJJN9CnLsjil2GnIJlbWyWQdSUVDzNEBojnI8AemkV6oAb 1RlKNs7AeB3lGxr191LWg4GrjRjVfzy9IYJg+sMZukootlYnXcy4/CKUrIu3oZ5z IbiuYLP/5Ph6uV3PjJLKFpBlaUFhTE/dxzghGuvH4x1QhbsrCvwcptsxAjHxLobt JUKtyoBzBn02DMW2Q2RTjenuvlaWFmh7ilJkxWkLO/slR0MWyZCfHaiMjeZ3i7pP J0K93+fUe1TNlNZGiZgMEjBjiSs0T8QHF3MV6QC23aqhZMRHiRNuGDWqNEvnDwhq D4pS62amPz+Qzw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:33 2026 by rpki-client