This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft File: ORvm1CiPvt6_hkKmoeOXeupfHzU.mft (raw, json) Hash identifier: PlcQJh78TYGpiH9uvCbp7NjdOo9ZXUbtlfJn/DKLXJw= Subject key identifier: BD:F2:53:18:8D:09:15:0F:01:63:19:87:25:05:94:D6:82:32:32:18 Authority key identifier: 39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35 Certificate issuer: /CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35 Certificate serial: 019C427DE19B3A8C5F9822D0C58FD0C40790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft Manifest number: 0F8B Signing time: Mon 09 Feb 2026 13:01:11 +0000 Manifest this update: Mon 09 Feb 2026 13:01:11 +0000 Manifest next update: Tue 10 Feb 2026 13:01:11 +0000 Files and hashes: 1: ORvm1CiPvt6_hkKmoeOXeupfHzU.crl (hash: bLjQO7Ff90vcaOwdjyW0Bwz+7mGNahrdf0OU+sSvric=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e1:9b:3a:8c:5f:98:22:d0:c5:8f:d0:c4:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391be6d4288fbedebf8642a6a1e3977aea5f1f35 Validity Not Before: Feb 9 13:01:11 2026 GMT Not After : Feb 10 13:01:11 2026 GMT Subject: CN=bdf253188d09150f01631987250594d682323218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:d4:69:68:e2:eb:f7:15:4a:fc:70:af:f9: f2:a5:9c:e5:a5:11:fe:e5:5e:15:89:42:68:60:25: cb:be:55:a1:99:a6:5e:4c:88:4d:c4:7b:ed:bb:bb: cf:28:83:38:97:57:de:3e:b2:7d:42:37:3a:d2:72: 22:8e:75:75:2b:5c:a9:45:95:f4:94:5a:1f:88:7a: 97:6e:71:46:b3:e9:18:33:f7:f2:49:cc:0f:20:3a: 44:89:45:c4:a2:89:34:98:db:4f:b1:8c:e3:34:36: 0d:ad:ec:d2:a5:66:37:b6:69:9b:94:57:5b:eb:b9: 1b:0f:e3:9b:b3:06:cd:de:90:c3:f2:93:40:e3:6e: 55:80:22:65:bf:e2:67:3a:7d:c3:24:bd:a5:fc:06: f4:c4:b0:dc:0f:cd:b5:ad:03:ae:0b:78:85:f2:09: fc:93:de:31:21:3e:19:38:d3:3a:a4:d8:dd:4c:e8: 2b:c1:ac:43:c2:ef:51:93:9d:9a:de:ff:e2:7a:58: 3c:32:7f:d9:83:66:82:64:99:c2:8b:1e:43:4b:e4: d8:2e:26:d0:6b:ca:e5:dc:1d:3d:9c:97:21:5d:24: f9:fe:d0:5f:f3:09:0c:8f:df:fd:e5:85:91:0f:81: a4:fb:6d:bd:e3:ba:fd:ac:88:58:bb:7a:82:2a:4f: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:53:18:8D:09:15:0F:01:63:19:87:25:05:94:D6:82:32:32:18 X509v3 Authority Key Identifier: keyid:39:1B:E6:D4:28:8F:BE:DE:BF:86:42:A6:A1:E3:97:7A:EA:5F:1F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORvm1CiPvt6_hkKmoeOXeupfHzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5cdeb4-ea79-4a66-90bf-e5fb4ac110db/1/ORvm1CiPvt6_hkKmoeOXeupfHzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a6:b6:a7:76:46:64:2a:fd:1d:8f:ea:f3:c0:c3:b8:99:ad: a9:e0:d7:d5:ee:b0:7f:f2:38:b0:e8:8f:af:76:37:c0:38:51: 22:68:5c:f1:11:60:9f:4f:0c:26:94:34:6a:d3:8b:7d:60:f0: ed:25:4a:1c:3b:0b:0b:98:bc:5c:b3:61:af:30:8e:fe:82:96: 6f:a5:f1:bc:33:63:9c:37:02:01:95:c6:6d:7c:11:f3:9c:d9: 16:62:34:75:6f:a6:d8:e2:28:25:60:1a:80:c4:8e:c2:31:67: f0:3b:28:5d:81:7d:04:06:16:54:f0:02:93:fe:fb:2d:81:a9: cf:36:fb:45:84:f0:13:27:14:02:6a:fc:09:01:3f:57:e4:7b: 93:51:12:51:45:d9:c9:76:fd:26:a1:02:1e:e8:44:07:b5:56: 11:d2:8f:c5:ca:32:c8:25:01:04:21:8d:00:a5:32:0b:f0:0e: b3:68:5c:13:a6:3c:fa:c0:74:57:e9:75:20:c6:d0:47:9d:b5: d4:67:f9:c2:3f:e7:63:da:bd:6a:12:e7:f1:93:89:e4:07:78: d2:4a:2b:d8:fb:4d:17:f5:ac:63:78:97:f3:7c:c8:70:54:dc: 9c:18:3f:11:e8:54:5c:74:44:ec:e2:27:c0:5b:53:79:eb:33: b0:b2:28:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeGbOoxfmCLQxY/QxAeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWJlNmQ0Mjg4ZmJlZGViZjg2NDJhNmExZTM5NzdhZWE1 ZjFmMzUwHhcNMjYwMjA5MTMwMTExWhcNMjYwMjEwMTMwMTExWjAzMTEwLwYDVQQD EyhiZGYyNTMxODhkMDkxNTBmMDE2MzE5ODcyNTA1OTRkNjgyMzIzMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZnUaWji6/cVSvxwr/nypZzlpRH+ 5V4ViUJoYCXLvlWhmaZeTIhNxHvtu7vPKIM4l1fePrJ9Qjc60nIijnV1K1ypRZX0 lFofiHqXbnFGs+kYM/fyScwPIDpEiUXEook0mNtPsYzjNDYNrezSpWY3tmmblFdb 67kbD+ObswbN3pDD8pNA425VgCJlv+JnOn3DJL2l/Ab0xLDcD821rQOuC3iF8gn8 k94xIT4ZONM6pNjdTOgrwaxDwu9Rk52a3v/ielg8Mn/Zg2aCZJnCix5DS+TYLibQ a8rl3B09nJchXST5/tBf8wkMj9/95YWRD4Gk+22947r9rIhYu3qCKk+uBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3yUxiNCRUPAWMZhyUFlNaCMjIYMB8GA1UdIwQY MBaAFDkb5tQoj77ev4ZCpqHjl3rqXx81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYt ZTVmYjRhYzExMGRiLzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81Y2RlYjQtZWE3OS00YTY2LTkwYmYtZTVmYjRhYzExMGRi LzEvT1J2bTFDaVB2dDZfaGtLbW9lT1hldXBmSHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaa2p3ZG ZCr9HY/q88DDuJmtqeDX1e6wf/I4sOiPr3Y3wDhRImhc8RFgn08MJpQ0atOLfWDw 7SVKHDsLC5i8XLNhrzCO/oKWb6XxvDNjnDcCAZXGbXwR85zZFmI0dW+m2OIoJWAa gMSOwjFn8DsoXYF9BAYWVPACk/77LYGpzzb7RYTwEycUAmr8CQE/V+R7k1ESUUXZ yXb9JqECHuhEB7VWEdKPxcoyyCUBBCGNAKUyC/AOs2hcE6Y8+sB0V+l1IMbQR521 1Gf5wj/nY9q9ahLn8ZOJ5Ad40kor2PtNF/WsY3iX83zIcFTcnBg/EehUXHRE7OIn wFtTeeszsLIo1A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:29 2026 by rpki-client