This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json) Hash identifier: +0qJw/uX4dLfjHQpAGMWyIgWV57e+9i6Bp1F8kD+Ma8= Subject key identifier: B0:A0:EF:EB:27:CD:8A:1E:B7:6B:9F:BB:82:56:36:7C:64:AD:8E:FE Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Certificate serial: 019C2EC026090AA3867BE99D7C2C927A9179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft Manifest number: 0D5F Signing time: Thu 05 Feb 2026 17:01:10 +0000 Manifest this update: Thu 05 Feb 2026 17:01:10 +0000 Manifest next update: Fri 06 Feb 2026 17:01:10 +0000 Files and hashes: 1: fs8d2893qiZikthsq_-JlA6ljMA.roa (hash: ZrsMMWfWT5ZYVuIhEglHV6ViI9TadV+uTXWR+dIXLo4=) 2: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: oxm4findhG8z7jKd9OZuLChwY24NAXx7emKzrb0xnjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:c0:26:09:0a:a3:86:7b:e9:9d:7c:2c:92:7a:91:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43 Validity Not Before: Feb 5 17:01:10 2026 GMT Not After : Feb 6 17:01:10 2026 GMT Subject: CN=b0a0efeb27cd8a1eb76b9fbb8256367c64ad8efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:56:20:17:1e:ac:15:3a:0d:38:86:25:9f: cb:43:b5:7c:03:27:5a:a6:56:cf:bd:a8:cf:fc:0c: fc:bb:25:31:3c:34:d7:3a:9a:3c:77:76:b6:b5:b2: 99:87:c5:c2:22:a9:f4:78:6d:bf:7f:a1:cd:e6:25: a7:30:ef:8b:1b:a8:68:8c:9f:ac:39:32:98:84:7e: ea:1f:53:41:cb:1a:dc:ab:05:ef:0c:21:16:5e:5b: 1d:9b:df:2b:5b:e5:a2:15:75:f0:d7:8d:e3:97:4b: 37:f1:52:6c:4d:7f:61:4b:ed:ad:fc:10:d2:79:3b: d0:6f:3d:af:72:26:2c:13:7e:d6:de:ed:6a:c2:05: 50:fd:7e:ee:1b:bb:ac:e5:d6:b8:a9:b0:c2:7c:51: 7e:89:ee:6f:6b:e7:91:88:5f:f5:c7:44:86:e9:9f: 82:53:6f:05:04:8a:e0:71:2f:10:24:ed:d4:c2:df: c2:f1:f8:2f:7a:c9:57:cc:27:cf:06:6e:35:5d:fe: 46:0e:d3:e1:7a:a1:17:99:20:cd:04:fc:37:56:1a: fc:0b:79:52:9a:48:d2:15:59:83:08:05:95:b5:ca: 83:26:cb:af:43:a3:bc:31:32:ac:9a:97:1d:9c:dc: 2f:7d:6e:58:2a:e0:dd:21:8e:c9:44:92:e6:ff:eb: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:EF:EB:27:CD:8A:1E:B7:6B:9F:BB:82:56:36:7C:64:AD:8E:FE X509v3 Authority Key Identifier: keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:1d:d1:66:a3:63:f8:b5:ed:17:d2:40:a6:8a:2e:23:8d: f6:60:3c:d4:42:3e:84:96:83:4a:62:b5:eb:da:7b:84:aa:e3: 4e:20:cd:f6:39:e6:d1:76:71:12:68:b9:a9:e2:e6:df:de:33: 3b:69:d4:6e:ed:d2:8e:fc:a4:2a:d9:21:b8:c7:73:43:3b:21: db:ef:73:1b:7a:26:d8:17:04:a9:75:74:94:bf:9e:6c:80:4d: 31:99:f2:46:8f:44:59:09:47:01:9d:c6:08:28:f7:65:7a:87: 28:26:61:36:b8:bf:dc:55:95:61:2e:32:55:15:a6:d4:c4:56: 80:42:70:af:ab:f4:eb:e8:96:9a:3a:16:c8:62:35:c6:e8:a0: 39:25:7b:bd:d5:d1:7b:5d:b5:09:8d:8a:f2:00:b2:52:29:01: f1:97:a5:92:22:88:f0:7c:66:ff:f2:95:e5:22:d2:d7:21:3e: 96:b3:d9:fb:4e:e8:5d:c7:48:67:7d:92:9b:38:11:49:ad:b9: 04:94:17:ef:65:98:63:6b:03:01:60:e9:63:2d:28:53:5e:a2: 96:92:9b:09:72:6d:5c:5e:e1:d5:e4:70:12:e4:66:40:38:66: c8:69:3c:76:a4:19:69:84:f3:e2:d7:65:ea:81:b7:fd:a7:01: a9:80:ca:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuwCYJCqOGe+mdfCySepF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjUxNmJmNDIyMTQwODZkYjM5ODQ3ZjlmNTYzYjRjZjRh MGZmNDMwHhcNMjYwMjA1MTcwMTEwWhcNMjYwMjA2MTcwMTEwWjAzMTEwLwYDVQQD EyhiMGEwZWZlYjI3Y2Q4YTFlYjc2YjlmYmI4MjU2MzY3YzY0YWQ4ZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3xWIBcerBU6DTiGJZ/LQ7V8Ayda plbPvajP/Az8uyUxPDTXOpo8d3a2tbKZh8XCIqn0eG2/f6HN5iWnMO+LG6hojJ+s OTKYhH7qH1NByxrcqwXvDCEWXlsdm98rW+WiFXXw143jl0s38VJsTX9hS+2t/BDS eTvQbz2vciYsE37W3u1qwgVQ/X7uG7us5da4qbDCfFF+ie5va+eRiF/1x0SG6Z+C U28FBIrgcS8QJO3Uwt/C8fgveslXzCfPBm41Xf5GDtPheqEXmSDNBPw3Vhr8C3lS mkjSFVmDCAWVtcqDJsuvQ6O8MTKsmpcdnNwvfW5YKuDdIY7JRJLm/+tcXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCg7+snzYoet2ufu4JWNnxkrY7+MB8GA1UdIwQY MBaAFKL1Fr9CIUCG2zmEf59WO0z0oP9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQt NmUzZmE2MmNkMmRmLzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kMWRmZDYtY2NkZi00NjIxLWI0NTQtNmUzZmE2MmNkMmRm LzEvb3ZVV3YwSWhRSWJiT1lSX24xWTdUUFNnXzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdsd0Waj Y/i17RfSQKaKLiON9mA81EI+hJaDSmK169p7hKrjTiDN9jnm0XZxEmi5qeLm394z O2nUbu3SjvykKtkhuMdzQzsh2+9zG3om2BcEqXV0lL+ebIBNMZnyRo9EWQlHAZ3G CCj3ZXqHKCZhNri/3FWVYS4yVRWm1MRWgEJwr6v06+iWmjoWyGI1xuigOSV7vdXR e121CY2K8gCyUikB8ZelkiKI8Hxm//KV5SLS1yE+lrPZ+07oXcdIZ32SmzgRSa25 BJQX72WYY2sDAWDpYy0oU16ilpKbCXJtXF7h1eRwEuRmQDhmyGk8dqQZaYTz4tdl 6oG3/acBqYDKMg== -----END CERTIFICATE-----Generated at Thu Feb 5 21:13:09 2026 by rpki-client