This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft File: pOAhVPJf6O9wNihteq6arnOg1yA.mft (raw, json) Hash identifier: GjXyZwb9+mNgwUzlMuR3WL1tCFytVV/AWuloOLi5UJk= Subject key identifier: 66:7E:60:62:DA:14:84:7F:9D:03:A2:70:01:5C:D2:CF:05:0F:D4:07 Authority key identifier: A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20 Certificate issuer: /CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720 Certificate serial: 019C424652A0E66ADEF2E4DD461F822F1549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft Manifest number: 39 Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: pOAhVPJf6O9wNihteq6arnOg1yA.crl (hash: gRo4EKxsscSfSwOdCcXowNOmw2kU4gUHRc1QQk6LOX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:52:a0:e6:6a:de:f2:e4:dd:46:1f:82:2f:15:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e02154f25fe8ef7036286d7aae9aae73a0d720 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=667e6062da14847f9d03a270015cd2cf050fd407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:c0:20:aa:37:bc:be:e1:68:00:8b:4d:f8: 1a:bf:46:ba:e3:9d:71:6d:7c:cc:4c:e5:f2:96:b3: 5f:18:98:66:f6:70:2b:a1:9b:45:f4:50:67:18:23: 84:d1:39:70:eb:0f:c3:d3:ee:ca:15:5d:93:ce:f8: 4e:16:a4:ec:9d:40:65:4c:28:e7:52:ad:ec:c4:09: 5d:61:29:de:5d:2d:37:31:53:74:8d:0b:00:c0:e3: 6a:c5:d3:7e:0b:f2:31:35:96:a1:9a:3f:70:29:b2: 3a:cf:d5:93:44:c2:ab:3e:e8:4b:d8:a3:ee:f5:bc: 39:a0:f0:9d:c0:91:51:25:12:84:78:f1:78:40:7b: 51:74:76:5e:a1:2f:a2:86:73:cc:d7:56:70:df:3a: 3f:b3:63:fc:9b:f0:fb:83:72:04:fb:4f:01:cb:00: f0:e4:66:a2:31:89:1d:eb:6b:83:8f:97:5a:d3:32: b8:a4:8e:16:1d:b9:aa:52:13:1a:3f:a1:29:27:f4: f7:6a:73:d9:5f:b9:91:9a:ba:1c:25:b7:e4:51:38: ba:ba:2b:c8:8d:2d:3b:91:8b:40:6b:08:a3:5d:88: b7:31:76:40:9d:f5:fb:71:f8:44:55:c9:40:5c:12: dc:0a:fe:85:c7:66:7a:76:65:49:16:b7:fb:67:5c: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7E:60:62:DA:14:84:7F:9D:03:A2:70:01:5C:D2:CF:05:0F:D4:07 X509v3 Authority Key Identifier: keyid:A4:E0:21:54:F2:5F:E8:EF:70:36:28:6D:7A:AE:9A:AE:73:A0:D7:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOAhVPJf6O9wNihteq6arnOg1yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b51ec4-0be7-40ff-96a5-632e826ddfc6/1/pOAhVPJf6O9wNihteq6arnOg1yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:f0:80:5f:bd:d3:d0:01:11:4c:f2:8d:0d:8f:ec:cb:2c: 8c:ea:43:90:b5:e3:43:ba:88:3d:a8:de:fa:9a:7e:b3:95:23: 70:0e:88:16:3f:d2:c0:5e:0d:86:5c:fe:10:40:a4:05:22:0d: 28:f8:0c:0b:23:c2:f3:74:5e:85:aa:78:8b:5b:5c:85:eb:e6: d5:4d:90:63:d3:e5:e2:c6:30:09:b5:56:80:8e:2a:c7:0c:5d: 36:73:96:09:e3:d2:79:b0:d2:b3:c0:ea:50:87:74:37:eb:40: 6e:89:7a:df:ef:f7:27:37:07:99:f5:be:de:3a:96:86:db:53: c5:e4:bd:17:60:e2:3b:c9:92:b3:50:25:ff:4d:bb:83:fd:f9: d8:43:86:7a:b6:35:7e:73:a2:92:90:94:3c:05:9b:de:39:42: 48:8a:b7:43:63:91:3a:3b:37:09:f8:c6:0c:01:32:30:89:76: 72:a4:1a:e6:67:90:bc:be:aa:4a:09:83:cd:14:9b:d9:d8:c1: f0:ec:f0:0f:b7:47:8b:0a:68:91:8c:59:f8:15:44:16:3b:63: ff:4a:b8:8a:c5:10:29:39:51:99:ca:e9:52:90:f4:a8:fb:c1: de:8a:61:05:eb:65:17:06:53:af:60:ec:af:ed:e7:0e:11:4b: 55:24:77:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlKg5mre8uTdRh+CLxVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTAyMTU0ZjI1ZmU4ZWY3MDM2Mjg2ZDdhYWU5YWFlNzNh MGQ3MjAwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD Eyg2NjdlNjA2MmRhMTQ4NDdmOWQwM2EyNzAwMTVjZDJjZjA1MGZkNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHAIKo3vL7haACLTfgav0a6451x bXzMTOXylrNfGJhm9nAroZtF9FBnGCOE0Tlw6w/D0+7KFV2TzvhOFqTsnUBlTCjn Uq3sxAldYSneXS03MVN0jQsAwONqxdN+C/IxNZahmj9wKbI6z9WTRMKrPuhL2KPu 9bw5oPCdwJFRJRKEePF4QHtRdHZeoS+ihnPM11Zw3zo/s2P8m/D7g3IE+08BywDw 5GaiMYkd62uDj5da0zK4pI4WHbmqUhMaP6EpJ/T3anPZX7mRmrocJbfkUTi6uivI jS07kYtAawijXYi3MXZAnfX7cfhEVclAXBLcCv6Fx2Z6dmVJFrf7Z1y8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ+YGLaFIR/nQOicAFc0s8FD9QHMB8GA1UdIwQY MBaAFKTgIVTyX+jvcDYobXqumq5zoNcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iNTFlYzQtMGJlNy00MGZmLTk2YTUt NjMyZTgyNmRkZmM2LzEvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iNTFlYzQtMGJlNy00MGZmLTk2YTUtNjMyZTgyNmRkZmM2 LzEvcE9BaFZQSmY2Tzl3TmlodGVxNmFybk9nMXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyTwgF+9 09ABEUzyjQ2P7MssjOpDkLXjQ7qIPaje+pp+s5UjcA6IFj/SwF4Nhlz+EECkBSIN KPgMCyPC83Rehap4i1tchevm1U2QY9Pl4sYwCbVWgI4qxwxdNnOWCePSebDSs8Dq UId0N+tAbol63+/3JzcHmfW+3jqWhttTxeS9F2DiO8mSs1Al/027g/352EOGerY1 fnOikpCUPAWb3jlCSIq3Q2OROjs3CfjGDAEyMIl2cqQa5meQvL6qSgmDzRSb2djB 8OzwD7dHiwpokYxZ+BVEFjtj/0q4isUQKTlRmcrpUpD0qPvB3ophBetlFwZTr2Ds r+3nDhFLVSR3bw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:08 2026 by rpki-client