This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json) Hash identifier: GUQa6+LJYowD6oCe3byFM/sZ5Qpb7QAbcrWFMTNj7B0= Subject key identifier: A1:23:8D:CB:47:E2:E7:2A:28:D8:40:F5:D8:08:FF:CC:12:85:71:F1 Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191 Certificate serial: 019C41D8D34E049AA1B33363763397C07206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft Manifest number: 1765 Signing time: Mon 09 Feb 2026 10:00:54 +0000 Manifest this update: Mon 09 Feb 2026 10:00:54 +0000 Manifest next update: Tue 10 Feb 2026 10:00:54 +0000 Files and hashes: 1: 8wgUQ75Sqdb_feNT6FKCZdFZvpc.roa (hash: o68Cj0XHDjDdBxBAZozu7KF1vAsEnCHUT+BQL685gAA=) 2: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: 6ksjkY9ChJxjOyakp5AtbrTO6EIkrdTeDZtCEaCdm6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d3:4e:04:9a:a1:b3:33:63:76:33:97:c0:72:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191 Validity Not Before: Feb 9 10:00:54 2026 GMT Not After : Feb 10 10:00:54 2026 GMT Subject: CN=a1238dcb47e2e72a28d840f5d808ffcc128571f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:23:a1:ca:51:c2:a7:ba:6b:3f:c7:11:c0: c3:1a:18:3c:6d:42:42:d1:01:f6:a4:f3:09:08:a7: ac:bc:fe:95:f8:0e:4b:16:53:96:87:e2:77:11:ce: 10:e6:16:64:7e:6d:c1:11:65:76:97:10:3f:78:14: c3:cd:d4:fb:db:90:29:47:0f:d2:5b:b6:4f:aa:66: 6f:70:3f:01:62:d5:51:6a:d3:1e:c6:ab:53:b2:8e: b6:13:70:9b:f5:f3:1c:1d:01:73:fd:a3:08:63:f3: 61:86:f0:25:04:6f:d1:43:28:a4:d2:3d:b6:92:3b: ed:40:f0:47:12:a6:52:9e:f1:6e:c9:3e:2f:f2:e4: 44:f5:2c:ce:42:fc:13:24:b7:72:ea:10:43:93:79: 5b:41:7c:05:9c:3c:11:51:44:1c:61:d1:e5:2d:d9: e8:b7:2f:5b:9b:7a:5f:c7:6f:f6:07:e6:48:f3:03: 81:f2:80:61:cb:c9:03:43:25:b1:8a:f0:ba:28:18: cb:6a:43:bc:e0:73:09:f4:63:36:04:05:4e:34:f8: 8e:a9:8d:5b:3e:59:87:be:a2:67:fb:61:4f:75:f2: c8:73:14:bd:f8:3c:c6:69:05:4b:2b:42:7d:25:bf: b2:cf:a1:5f:32:01:f4:44:68:26:17:ad:cd:56:ff: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:23:8D:CB:47:E2:E7:2A:28:D8:40:F5:D8:08:FF:CC:12:85:71:F1 X509v3 Authority Key Identifier: keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e1:53:ff:3a:25:91:2b:b4:e9:4d:58:93:12:53:4d:12:a5: 9a:42:20:8e:9f:6d:47:73:2b:87:8d:37:56:c2:f8:5e:19:c8: f0:d7:b3:29:c2:ba:50:a9:99:f1:53:f8:82:dd:db:0c:90:3b: 2d:23:35:bf:33:f7:a5:71:39:51:59:03:7d:74:21:0b:ca:b1: a1:bb:b0:1c:1f:b0:08:04:7a:c2:61:77:8d:ef:69:54:de:47: 81:e9:9f:14:11:7e:60:53:f1:98:97:82:c8:a7:ea:bb:ee:03: f2:15:a7:1a:38:d9:90:e0:41:4d:ef:b9:b5:eb:c2:3d:27:43: c5:27:4b:51:8c:fa:35:c2:a2:36:ea:c0:59:c5:d5:cc:c1:00: ac:68:84:10:a3:74:ca:a8:e2:59:5f:11:e5:8a:33:60:07:63: d3:6d:7e:23:5b:97:2f:b0:2f:dd:24:c2:bf:7c:b9:5b:7e:57: 4a:69:98:62:6c:ec:a6:bb:c4:3f:5a:90:37:0b:55:8c:15:f7: b6:89:0b:0c:f2:6e:67:20:1e:71:e7:96:08:26:d9:b9:2b:cb: 11:20:6b:30:62:5d:a0:52:ba:2c:13:60:30:c9:91:d7:24:0d: fc:50:a5:91:c3:f7:b3:60:62:e2:b5:a8:41:a5:ab:f4:66:55: 72:07:2b:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NNOBJqhszNjdjOXwHIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx NzkxOTEwHhcNMjYwMjA5MTAwMDU0WhcNMjYwMjEwMTAwMDU0WjAzMTEwLwYDVQQD EyhhMTIzOGRjYjQ3ZTJlNzJhMjhkODQwZjVkODA4ZmZjYzEyODU3MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopYjocpRwqe6az/HEcDDGhg8bUJC 0QH2pPMJCKesvP6V+A5LFlOWh+J3Ec4Q5hZkfm3BEWV2lxA/eBTDzdT725ApRw/S W7ZPqmZvcD8BYtVRatMexqtTso62E3Cb9fMcHQFz/aMIY/NhhvAlBG/RQyik0j22 kjvtQPBHEqZSnvFuyT4v8uRE9SzOQvwTJLdy6hBDk3lbQXwFnDwRUUQcYdHlLdno ty9bm3pfx2/2B+ZI8wOB8oBhy8kDQyWxivC6KBjLakO84HMJ9GM2BAVONPiOqY1b PlmHvqJn+2FPdfLIcxS9+DzGaQVLK0J9Jb+yz6FfMgH0RGgmF63NVv+JNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEjjctH4ucqKNhA9dgI/8wShXHxMB8GA1UdIwQY MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt ODZlNWE5ZWY4NjJhLzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+FT/zol kSu06U1YkxJTTRKlmkIgjp9tR3Mrh403VsL4XhnI8NezKcK6UKmZ8VP4gt3bDJA7 LSM1vzP3pXE5UVkDfXQhC8qxobuwHB+wCAR6wmF3je9pVN5HgemfFBF+YFPxmJeC yKfqu+4D8hWnGjjZkOBBTe+5tevCPSdDxSdLUYz6NcKiNurAWcXVzMEArGiEEKN0 yqjiWV8R5YozYAdj021+I1uXL7Av3STCv3y5W35XSmmYYmzsprvEP1qQNwtVjBX3 tokLDPJuZyAeceeWCCbZuSvLESBrMGJdoFK6LBNgMMmR1yQN/FClkcP3s2Bi4rWo QaWr9GZVcgcrAA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:30 2026 by rpki-client