This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft File: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft (raw, json) Hash identifier: 8WDmTJvVEYVcFpwjDvZLrE6boIz/tnulZbTMPqXNhnM= Subject key identifier: 7E:A9:7B:F7:F1:F7:40:59:3B:32:2F:BA:72:FE:1B:85:C8:AC:ED:BE Authority key identifier: 3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D Certificate issuer: /CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Certificate serial: 019C427D4D6BD0A074EACDA4F0BEBDFCBE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft Manifest number: 13B8 Signing time: Mon 09 Feb 2026 13:00:33 +0000 Manifest this update: Mon 09 Feb 2026 13:00:33 +0000 Manifest next update: Tue 10 Feb 2026 13:00:33 +0000 Files and hashes: 1: Bo58gylRbQlTZmOuABRX3XagLXc.roa (hash: aJoWe70kAi++zILuYJYv5N6he0X6TdzYHN+WF4rakhQ=) 2: Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl (hash: WfqMr8ZGdKR9LbwdIncK0I9Rsb054mLPf+rlE7iFDjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:4d:6b:d0:a0:74:ea:cd:a4:f0:be:bd:fc:be:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af9ea8bdc371b5a6604200c51717897d60c7d3d Validity Not Before: Feb 9 13:00:33 2026 GMT Not After : Feb 10 13:00:33 2026 GMT Subject: CN=7ea97bf7f1f740593b322fba72fe1b85c8acedbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:88:81:2b:b3:14:58:2c:c8:a1:6d:0c:76: e1:87:f5:64:13:f8:d6:ed:cd:96:e3:7c:52:06:98: 08:6e:3c:eb:57:9f:85:1f:66:2d:c1:c3:52:ee:56: 80:f7:2e:ae:23:9d:91:77:29:f0:bc:80:9e:6c:72: d8:b7:d0:87:c1:df:37:b9:1c:d4:f8:d1:71:a5:de: 9a:1d:df:2a:1d:80:8e:14:f0:ec:51:d9:41:2f:75: 96:4a:f8:86:83:8c:ad:66:89:4a:99:c6:30:d2:85: 28:3e:6c:30:24:90:70:27:2a:83:7a:5f:8e:a4:e7: c8:9d:a7:cf:b1:71:5a:61:76:4a:63:af:07:70:9b: 54:32:cc:fe:c9:91:54:38:6b:11:1d:07:9f:cd:80: e4:2c:30:63:07:28:24:1b:da:60:aa:cd:17:ca:92: 6c:bc:eb:02:6a:24:1f:65:b9:4e:3e:56:2e:9e:0a: 08:02:87:13:ab:84:2c:07:1a:fc:8f:61:da:01:81: 25:60:ef:f5:41:f5:3f:8c:19:33:05:ec:1f:32:f8: ea:2d:d2:e0:cb:4a:1e:a9:d7:9d:78:ba:57:9a:1f: d1:af:9e:cc:19:27:c5:99:56:5f:af:16:6b:82:48: a5:d0:17:56:2b:1b:2e:4b:44:21:45:09:0e:dc:6f: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A9:7B:F7:F1:F7:40:59:3B:32:2F:BA:72:FE:1B:85:C8:AC:ED:BE X509v3 Authority Key Identifier: keyid:3A:F9:EA:8B:DC:37:1B:5A:66:04:20:0C:51:71:78:97:D6:0C:7D:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/82c6fb-0931-442c-abe5-aa898138994c/1/Ovnqi9w3G1pmBCAMUXF4l9YMfT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:a5:16:ff:2f:ad:39:b0:b6:ca:1b:05:d8:2f:7b:dc:09: ec:5d:f0:ae:df:9a:1a:8e:b3:dd:3b:1e:a7:8d:46:2f:38:36: 7b:f4:6a:ea:94:fd:13:f6:69:e6:27:d8:3c:66:50:9b:96:3c: 00:b3:ca:7a:26:7f:e8:e0:ca:5c:2e:a2:8e:73:97:df:e9:4c: 98:e0:cf:46:c7:8a:58:ec:00:c2:97:c9:2a:f0:7d:24:87:2e: 1b:27:80:09:a3:98:61:fe:bb:76:ea:0c:06:a3:eb:67:81:dd: 79:8b:b3:df:de:80:32:d2:d0:8d:79:34:d2:65:80:e8:c6:36: 6c:f9:d5:f8:0d:d0:f7:0b:4f:ef:5e:ab:78:79:ca:c3:b9:0a: 8d:a7:c3:91:4c:db:58:7f:ed:38:29:f9:49:1f:0b:03:1b:c7: a1:02:97:1e:4b:7f:e9:16:ba:78:07:e0:54:f3:31:2d:e6:8e: 7d:8b:a6:b4:ed:b4:d1:b9:ad:74:5e:15:2a:1e:b1:7b:59:78: 17:fe:15:00:04:ae:93:95:c4:40:d2:f6:a5:17:ba:b3:10:12: 2f:80:48:fe:6e:ce:0e:85:c6:d0:6e:3f:d1:6d:58:b3:3f:34: fa:04:a3:3a:70:24:b2:cc:d3:9b:62:98:53:86:bf:f5:b8:c2: 4b:26:f1:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfU1r0KB06s2k8L69/L4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjllYThiZGMzNzFiNWE2NjA0MjAwYzUxNzE3ODk3ZDYw YzdkM2QwHhcNMjYwMjA5MTMwMDMzWhcNMjYwMjEwMTMwMDMzWjAzMTEwLwYDVQQD Eyg3ZWE5N2JmN2YxZjc0MDU5M2IzMjJmYmE3MmZlMWI4NWM4YWNlZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlSIgSuzFFgsyKFtDHbhh/VkE/jW 7c2W43xSBpgIbjzrV5+FH2YtwcNS7laA9y6uI52RdynwvICebHLYt9CHwd83uRzU +NFxpd6aHd8qHYCOFPDsUdlBL3WWSviGg4ytZolKmcYw0oUoPmwwJJBwJyqDel+O pOfInafPsXFaYXZKY68HcJtUMsz+yZFUOGsRHQefzYDkLDBjBygkG9pgqs0XypJs vOsCaiQfZblOPlYungoIAocTq4QsBxr8j2HaAYElYO/1QfU/jBkzBewfMvjqLdLg y0oeqdedeLpXmh/Rr57MGSfFmVZfrxZrgkil0BdWKxsuS0QhRQkO3G9EywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6pe/fx90BZOzIvunL+G4XIrO2+MB8GA1UdIwQY MBaAFDr56ovcNxtaZgQgDFFxeJfWDH09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUt YWE4OTgxMzg5OTRjLzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi84MmM2ZmItMDkzMS00NDJjLWFiZTUtYWE4OTgxMzg5OTRj LzEvT3ZucWk5dzNHMXBtQkNBTVVYRjRsOVlNZlQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3mlFv8v rTmwtsobBdgve9wJ7F3wrt+aGo6z3Tsep41GLzg2e/Rq6pT9E/Zp5ifYPGZQm5Y8 ALPKeiZ/6ODKXC6ijnOX3+lMmODPRseKWOwAwpfJKvB9JIcuGyeACaOYYf67duoM BqPrZ4HdeYuz396AMtLQjXk00mWA6MY2bPnV+A3Q9wtP716reHnKw7kKjafDkUzb WH/tOCn5SR8LAxvHoQKXHkt/6Ra6eAfgVPMxLeaOfYumtO200bmtdF4VKh6xe1l4 F/4VAASuk5XEQNL2pRe6sxASL4BI/m7ODoXG0G4/0W1Ysz80+gSjOnAksszTm2KY U4a/9bjCSybxfg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:20 2026 by rpki-client