This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft File: oybRlH-kQ2NloBOsZ_TzKx_bqck.mft (raw, json) Hash identifier: ysLFZdRQaqs471FgvqYTZpbVS6yVmVAJixKD4qqWKAw= Subject key identifier: B2:55:57:F1:41:3C:7C:0F:B4:81:31:A0:AB:B6:E3:40:93:2D:AA:BE Authority key identifier: A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9 Certificate issuer: /CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9 Certificate serial: 019C4322FBFDC062877C2AC6ED824A5F8B62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft Manifest number: 1509 Signing time: Mon 09 Feb 2026 16:01:32 +0000 Manifest this update: Mon 09 Feb 2026 16:01:32 +0000 Manifest next update: Tue 10 Feb 2026 16:01:32 +0000 Files and hashes: 1: oybRlH-kQ2NloBOsZ_TzKx_bqck.crl (hash: omN/sjFkxdyDV5P1t947lm+sRU2SYaacH3Xb9yQyHMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:fb:fd:c0:62:87:7c:2a:c6:ed:82:4a:5f:8b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9 Validity Not Before: Feb 9 16:01:32 2026 GMT Not After : Feb 10 16:01:32 2026 GMT Subject: CN=b25557f1413c7c0fb48131a0abb6e340932daabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:be:d5:06:3e:d5:59:fa:ce:4e:a7:14:66: 10:94:47:8b:b4:64:7a:28:7a:b2:6f:3a:e1:53:d4: 58:38:d2:1c:b7:78:76:5d:75:41:d0:51:f2:ff:8b: 47:91:03:61:5f:f0:1b:52:cf:ec:72:49:85:27:df: 49:5c:20:45:2e:f7:b6:d0:df:1c:a5:97:71:12:7c: f9:20:f3:87:6d:03:7f:5d:b2:3e:d2:2c:34:37:54: 50:26:86:31:bc:67:03:d1:98:33:51:1f:4c:41:12: 06:99:84:cd:60:bc:90:6a:e5:3c:b5:9e:b2:40:1b: d2:a9:d1:5e:e2:50:67:35:b8:b1:87:41:24:de:f6: 8c:3c:95:8b:03:81:c4:d5:df:59:70:83:bd:c1:cf: f9:f9:7d:71:13:f5:95:87:85:b9:ec:a5:a4:79:0d: 5a:72:78:ea:ea:60:5d:67:b5:75:ab:6f:fe:58:1a: 14:34:35:6f:fc:33:ae:39:05:09:a3:cb:7c:6e:df: eb:6b:fd:e2:a2:bc:d9:6c:2c:46:cf:fa:21:23:a6: a4:f8:16:3c:83:b1:4d:1d:27:8b:c8:34:a8:2d:0d: 3b:e5:c7:6b:05:23:91:b2:e2:0e:1a:26:dd:82:f7: cb:1a:76:a8:94:6f:18:49:15:3f:80:46:d7:a5:fe: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:55:57:F1:41:3C:7C:0F:B4:81:31:A0:AB:B6:E3:40:93:2D:AA:BE X509v3 Authority Key Identifier: keyid:A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ab:aa:5d:9b:fa:5f:09:05:45:13:01:c3:d7:b3:41:4b:dd: 4f:da:11:73:f6:7b:d1:a4:79:63:cb:ed:55:8d:03:6a:46:47: 2f:ba:9f:09:70:f4:63:61:13:81:f1:de:22:ec:33:4d:78:4a: 0c:ca:bf:ce:d1:ef:5e:89:7f:40:a3:bb:dd:53:54:e4:a7:81: 19:d7:fe:1c:24:41:2a:96:d9:b3:24:db:e3:0a:c2:eb:d9:33: 1c:c9:ed:a8:10:4f:f5:f5:d8:33:1d:51:cc:eb:18:6d:09:5b: e1:1b:f1:c6:d3:17:a5:b2:78:8b:ec:5d:86:94:b8:6a:8c:75: 40:5b:b4:54:ce:dc:46:73:a2:7f:02:91:66:d2:c0:36:fb:ba: bf:59:9f:84:16:f7:23:02:86:dc:eb:2e:3c:37:5f:ec:50:4c: 29:11:60:7c:a3:02:63:08:df:8e:66:bb:39:50:83:5b:c8:da: 39:e8:fa:be:dd:69:48:5d:21:50:8e:ba:a1:e7:ad:11:9c:3b: b3:cd:e1:c6:1f:2a:40:57:3d:23:33:37:6d:9f:f1:e2:2c:4e: 15:ab:9f:b2:97:4a:63:0e:44:f0:62:0c:8d:8d:c1:f7:1c:6b: 06:e9:a2:c2:ad:80:be:3d:1b:77:12:c3:8f:54:22:08:25:d7: 9d:42:40:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIvv9wGKHfCrG7YJKX4tiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjZkMTk0N2ZhNDQzNjM2NWEwMTNhYzY3ZjRmMzJiMWZk YmE5YzkwHhcNMjYwMjA5MTYwMTMyWhcNMjYwMjEwMTYwMTMyWjAzMTEwLwYDVQQD EyhiMjU1NTdmMTQxM2M3YzBmYjQ4MTMxYTBhYmI2ZTM0MDkzMmRhYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvm+1QY+1Vn6zk6nFGYQlEeLtGR6 KHqybzrhU9RYONIct3h2XXVB0FHy/4tHkQNhX/AbUs/sckmFJ99JXCBFLve20N8c pZdxEnz5IPOHbQN/XbI+0iw0N1RQJoYxvGcD0ZgzUR9MQRIGmYTNYLyQauU8tZ6y QBvSqdFe4lBnNbixh0Ek3vaMPJWLA4HE1d9ZcIO9wc/5+X1xE/WVh4W57KWkeQ1a cnjq6mBdZ7V1q2/+WBoUNDVv/DOuOQUJo8t8bt/ra/3iorzZbCxGz/ohI6ak+BY8 g7FNHSeLyDSoLQ075cdrBSORsuIOGibdgvfLGnaolG8YSRU/gEbXpf6z9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJVV/FBPHwPtIExoKu240CTLaq+MB8GA1UdIwQY MBaAFKMm0ZR/pENjZaATrGf08ysf26nJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3liUmxILWtRMk5sb0JPc1pfVHpLeF9icWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNTdmOWItYTAzYy00YmEzLTliN2Yt NTdkM2RmYTU2NDA3LzEvb3liUmxILWtRMk5sb0JPc1pfVHpLeF9icWNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wNTdmOWItYTAzYy00YmEzLTliN2YtNTdkM2RmYTU2NDA3 LzEvb3liUmxILWtRMk5sb0JPc1pfVHpLeF9icWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKuqXZv6 XwkFRRMBw9ezQUvdT9oRc/Z70aR5Y8vtVY0DakZHL7qfCXD0Y2ETgfHeIuwzTXhK DMq/ztHvXol/QKO73VNU5KeBGdf+HCRBKpbZsyTb4wrC69kzHMntqBBP9fXYMx1R zOsYbQlb4RvxxtMXpbJ4i+xdhpS4aox1QFu0VM7cRnOifwKRZtLANvu6v1mfhBb3 IwKG3OsuPDdf7FBMKRFgfKMCYwjfjma7OVCDW8jaOej6vt1pSF0hUI66oeetEZw7 s83hxh8qQFc9IzM3bZ/x4ixOFaufspdKYw5E8GIMjY3B9xxrBumiwq2Avj0bdxLD j1QiCCXXnUJAfQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:24 2026 by rpki-client