This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.mft File: Onlu0L3QkojDdc19n4ZLreZ8LWc.mft (raw, json) Hash identifier: /ES9fQPJqXtbmQpfAYdXa+Dkhq1PnoWMTDaLnh+3XLI= Subject key identifier: D3:DE:70:E6:22:22:06:0C:93:03:74:98:86:68:D0:58:E9:6A:4C:AC Authority key identifier: 3A:79:6E:D0:BD:D0:92:88:C3:75:CD:7D:9F:86:4B:AD:E6:7C:2D:67 Certificate issuer: /CN=3a796ed0bdd09288c375cd7d9f864bade67c2d67 Certificate serial: 019C41D8A6654B64294910DCA3DBB5B9D3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onlu0L3QkojDdc19n4ZLreZ8LWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.mft Manifest number: 4B Signing time: Mon 09 Feb 2026 10:00:43 +0000 Manifest this update: Mon 09 Feb 2026 10:00:43 +0000 Manifest next update: Tue 10 Feb 2026 10:00:43 +0000 Files and hashes: 1: Onlu0L3QkojDdc19n4ZLreZ8LWc.crl (hash: 3URE1MOit65h709jSFyPWMcpm4eL5M9JBELD55EqpUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.mft rsync://rpki.ripe.net/repository/DEFAULT/Onlu0L3QkojDdc19n4ZLreZ8LWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a6:65:4b:64:29:49:10:dc:a3:db:b5:b9:d3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a796ed0bdd09288c375cd7d9f864bade67c2d67 Validity Not Before: Feb 9 10:00:43 2026 GMT Not After : Feb 10 10:00:43 2026 GMT Subject: CN=d3de70e62222060c930374988668d058e96a4cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:37:3b:73:d9:85:1b:91:f6:7b:f9:fc:28: 0e:88:1a:43:82:ec:d3:4a:1c:83:81:44:04:2f:5d: 3d:84:46:d0:66:fe:75:95:49:80:75:bd:82:3e:3f: 6c:b6:d2:ea:7a:3c:00:6a:00:65:75:81:c2:21:3f: 31:05:eb:0d:23:88:a8:20:7a:28:c2:dd:b7:58:88: fd:9e:6b:8e:8f:53:b9:31:d1:93:0f:b8:10:9b:fc: 0b:b0:92:08:49:f5:02:d7:f9:8b:75:69:65:e2:8c: 64:c9:6e:70:cf:58:8b:74:72:16:91:8e:09:31:75: 6f:75:a9:76:b7:3c:1a:36:31:11:8d:ff:fd:16:54: c9:95:09:9e:3e:b1:14:9e:7d:92:36:d9:01:28:5c: 91:9c:9c:ce:21:a9:3f:6f:f5:05:a5:6f:c1:60:a2: bf:50:6d:44:14:a2:1a:49:2d:79:02:51:b3:bc:36: 2d:3f:d6:90:8d:96:5b:da:a7:50:90:80:30:fe:55: 33:c9:66:e1:1b:94:d8:79:ca:48:74:fc:2c:97:a2: 45:a7:45:c5:22:14:9f:c3:bf:b6:58:7d:88:4e:7c: f5:ed:72:3e:fc:40:b1:4c:fd:c9:e8:cd:7e:e1:c4: df:d4:3f:00:c3:49:50:ec:49:d0:33:dd:b9:27:bd: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:70:E6:22:22:06:0C:93:03:74:98:86:68:D0:58:E9:6A:4C:AC X509v3 Authority Key Identifier: keyid:3A:79:6E:D0:BD:D0:92:88:C3:75:CD:7D:9F:86:4B:AD:E6:7C:2D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onlu0L3QkojDdc19n4ZLreZ8LWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b2d318-9f1a-4293-bb08-4c2fe731d80d/1/Onlu0L3QkojDdc19n4ZLreZ8LWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:95:82:3c:b6:e3:49:b9:77:fa:86:9c:3a:46:41:b8:f5:3e: 8a:23:98:1b:25:41:9d:f1:29:e6:9a:d6:78:44:6c:df:98:28: 8c:56:e6:41:7a:8e:2f:e7:11:60:ad:d2:56:70:9b:73:34:b2: 8c:86:63:5d:ee:8b:97:e6:8e:ed:5d:14:df:82:80:1a:fe:d9: 11:b9:bf:a8:20:40:a9:37:0f:5b:09:24:d1:fa:d4:4f:18:39: d1:de:73:ee:05:00:13:a0:86:5f:d2:a9:19:31:44:54:25:19: af:4f:74:a0:05:69:3f:4f:9c:bf:36:4d:39:30:07:dd:b5:7e: a6:5d:ee:ee:1d:85:24:b6:4d:1b:9a:18:72:2b:e1:4e:ce:40: 42:e9:9a:19:b1:78:ca:76:15:74:a1:bf:2c:ae:36:c5:ca:35: 77:2a:91:99:cd:bb:fc:9b:d2:85:81:23:6a:1b:07:d1:fd:47: 28:b8:1c:ac:11:d4:3c:a2:ae:fb:2c:7e:cd:0e:e6:aa:d3:4d: 24:0a:45:db:8b:64:91:40:06:64:20:d5:83:b6:3d:ee:31:c4: b0:8f:99:ab:a9:fd:ed:1d:56:98:92:41:e2:ef:31:f9:e1:da: bf:3b:e1:e7:b5:66:66:c9:ea:90:36:ca:02:ff:ed:90:92:24: 53:d0:b2:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KZlS2QpSRDco9u1udPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNzk2ZWQwYmRkMDkyODhjMzc1Y2Q3ZDlmODY0YmFkZTY3 YzJkNjcwHhcNMjYwMjA5MTAwMDQzWhcNMjYwMjEwMTAwMDQzWjAzMTEwLwYDVQQD EyhkM2RlNzBlNjIyMjIwNjBjOTMwMzc0OTg4NjY4ZDA1OGU5NmE0Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sk3O3PZhRuR9nv5/CgOiBpDguzT ShyDgUQEL109hEbQZv51lUmAdb2CPj9sttLqejwAagBldYHCIT8xBesNI4ioIHoo wt23WIj9nmuOj1O5MdGTD7gQm/wLsJIISfUC1/mLdWll4oxkyW5wz1iLdHIWkY4J MXVvdal2tzwaNjERjf/9FlTJlQmePrEUnn2SNtkBKFyRnJzOIak/b/UFpW/BYKK/ UG1EFKIaSS15AlGzvDYtP9aQjZZb2qdQkIAw/lUzyWbhG5TYecpIdPwsl6JFp0XF IhSfw7+2WH2ITnz17XI+/ECxTP3J6M1+4cTf1D8Aw0lQ7EnQM925J72QIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPecOYiIgYMkwN0mIZo0FjpakysMB8GA1UdIwQY MBaAFDp5btC90JKIw3XNfZ+GS63mfC1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT25sdTBMM1Frb2pEZGMxOW40WkxyZVo4TFdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMmQzMTgtOWYxYS00MjkzLWJiMDgt NGMyZmU3MzFkODBkLzEvT25sdTBMM1Frb2pEZGMxOW40WkxyZVo4TFdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMmQzMTgtOWYxYS00MjkzLWJiMDgtNGMyZmU3MzFkODBk LzEvT25sdTBMM1Frb2pEZGMxOW40WkxyZVo4TFdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJWCPLbj Sbl3+oacOkZBuPU+iiOYGyVBnfEp5prWeERs35gojFbmQXqOL+cRYK3SVnCbczSy jIZjXe6Ll+aO7V0U34KAGv7ZEbm/qCBAqTcPWwkk0frUTxg50d5z7gUAE6CGX9Kp GTFEVCUZr090oAVpP0+cvzZNOTAH3bV+pl3u7h2FJLZNG5oYcivhTs5AQumaGbF4 ynYVdKG/LK42xco1dyqRmc27/JvShYEjahsH0f1HKLgcrBHUPKKu+yx+zQ7mqtNN JApF24tkkUAGZCDVg7Y97jHEsI+Zq6n97R1WmJJB4u8x+eHavzvh57VmZsnqkDbK Av/tkJIkU9CyWg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:44 2026 by rpki-client