This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json) Hash identifier: a+pe+kJw0lBkHB8Ici9aF66sU0rCWUHQEuzpbO4wUQ4= Subject key identifier: EC:02:3C:FD:6A:84:88:46:20:E3:7A:D1:55:6D:09:3E:4B:9B:75:F6 Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589 Certificate serial: 019C4358D49FFAA0BCC55551AC0AF76AE837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:20 +0000 Manifest this update: Mon 09 Feb 2026 17:00:20 +0000 Manifest next update: Tue 10 Feb 2026 17:00:20 +0000 Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: nSNyY5G3AvHwvvShQYm+AB31ArQTFOJgQ0szQT5miuQ=) 2: ihgnIXHoUMYh-WaWeIPaPydWbUk.roa (hash: iBsCj7b0mjUZuRLfwoBEpzWhtX6/cZQAGCmkWVKeq/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:d4:9f:fa:a0:bc:c5:55:51:ac:0a:f7:6a:e8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be9593d290e0250278a73b313550329327bd589 Validity Not Before: Feb 9 17:00:20 2026 GMT Not After : Feb 10 17:00:20 2026 GMT Subject: CN=ec023cfd6a84884620e37ad1556d093e4b9b75f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:31:a5:13:6a:35:69:7f:4b:21:a9:81:49: a3:b3:ce:d3:da:c8:15:14:07:e6:9c:cb:2b:65:af: 5b:fd:00:90:63:dd:98:be:50:b7:3e:27:47:6d:bc: b2:71:5f:ce:cd:a9:a5:fb:18:4e:c3:bc:e5:b6:0c: a3:56:18:49:5f:f0:41:d3:ee:b0:60:b3:cc:72:c9: 1e:78:45:09:77:8f:3d:da:4f:14:19:43:43:8a:40: e5:f6:18:da:18:5b:ff:b0:f2:a4:2b:9c:a7:49:d6: 83:23:b2:67:2a:99:a4:0c:17:d0:ee:ea:43:cf:b5: b8:6b:e6:1a:f5:61:2d:09:48:b1:c4:e3:3e:d7:04: de:36:c1:20:f5:01:e2:5b:32:d7:61:41:98:47:f5: a3:50:0d:7b:28:9c:8a:27:c5:c6:7d:5a:5a:cf:09: ae:7e:a8:b3:54:7a:f5:b9:34:d5:64:11:2d:ea:65: b1:ef:85:0a:24:3c:99:b1:c2:ab:45:0b:87:29:b6: a0:fe:93:4e:3d:0b:7a:75:4d:3c:ac:69:f0:b4:08: 35:2d:f0:96:1b:ba:6a:49:49:f7:9a:9c:a7:59:b8: 9f:2e:eb:ab:46:6d:50:00:a7:9f:68:bc:81:e7:16: c5:ca:c1:93:e9:d6:ed:c4:3a:12:e3:1a:a9:e6:47: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:02:3C:FD:6A:84:88:46:20:E3:7A:D1:55:6D:09:3E:4B:9B:75:F6 X509v3 Authority Key Identifier: keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:60:21:f4:33:63:68:77:f3:60:57:69:c9:cf:24:0a:ac: 0e:ef:b3:c7:7e:cb:2b:db:dd:da:e3:d3:ee:83:9c:4b:44:4a: a9:3d:79:e0:47:a7:b8:ba:39:1c:37:c3:0e:b4:c7:a0:ed:7d: f1:c5:2b:0a:53:f5:b8:53:d0:10:27:be:4f:93:1b:cf:6d:4a: f4:20:56:88:ea:b0:7b:6b:15:e8:49:97:7f:55:ee:ef:c5:68: df:6f:fb:3f:fe:d6:59:b1:da:b0:79:64:59:ad:b3:65:e6:f9: ad:b7:0d:17:10:f3:12:a0:d3:d2:57:b5:f3:bf:6f:c6:50:f3: d0:07:09:7a:99:85:b5:3a:73:30:78:18:97:b4:31:c2:02:5d: e5:ac:5e:6b:91:9f:be:da:80:5f:46:cf:88:6b:9f:43:07:1d: e7:52:7d:3d:38:04:d9:aa:69:22:4e:f3:f3:72:7c:e4:07:bc: ad:23:e7:f5:a0:5f:d9:a1:11:a3:29:94:27:3f:5f:ac:57:d8: 78:07:3f:d7:fe:27:90:4f:d4:d0:61:18:81:e4:40:78:aa:31: fa:13:94:76:69:39:5c:d6:8a:0a:19:2e:37:61:99:d5:6d:42: 4d:f0:92:88:f6:dc:ef:b0:01:d4:31:2f:67:b6:14:63:e3:d0: fc:19:69:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNSf+qC8xVVRrAr3aug3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTk1OTNkMjkwZTAyNTAyNzhhNzNiMzEzNTUwMzI5MzI3 YmQ1ODkwHhcNMjYwMjA5MTcwMDIwWhcNMjYwMjEwMTcwMDIwWjAzMTEwLwYDVQQD EyhlYzAyM2NmZDZhODQ4ODQ2MjBlMzdhZDE1NTZkMDkzZTRiOWI3NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+IxpRNqNWl/SyGpgUmjs87T2sgV FAfmnMsrZa9b/QCQY92YvlC3PidHbbyycV/Ozaml+xhOw7zltgyjVhhJX/BB0+6w YLPMcskeeEUJd4892k8UGUNDikDl9hjaGFv/sPKkK5ynSdaDI7JnKpmkDBfQ7upD z7W4a+Ya9WEtCUixxOM+1wTeNsEg9QHiWzLXYUGYR/WjUA17KJyKJ8XGfVpazwmu fqizVHr1uTTVZBEt6mWx74UKJDyZscKrRQuHKbag/pNOPQt6dU08rGnwtAg1LfCW G7pqSUn3mpynWbifLuurRm1QAKefaLyB5xbFysGT6dbtxDoS4xqp5kdrswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwCPP1qhIhGION60VVtCT5Lm3X2MB8GA1UdIwQY MBaAFDvpWT0pDgJQJ4pzsxNVAykye9WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUt NGVhYjA2MGYxNWZhLzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUtNGVhYjA2MGYxNWZh LzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0pgIfQz Y2h382BXacnPJAqsDu+zx37LK9vd2uPT7oOcS0RKqT154EenuLo5HDfDDrTHoO19 8cUrClP1uFPQECe+T5Mbz21K9CBWiOqwe2sV6EmXf1Xu78Vo32/7P/7WWbHasHlk Wa2zZeb5rbcNFxDzEqDT0le1879vxlDz0AcJepmFtTpzMHgYl7QxwgJd5axea5Gf vtqAX0bPiGufQwcd51J9PTgE2appIk7z83J85Ae8rSPn9aBf2aERoymUJz9frFfY eAc/1/4nkE/U0GEYgeRAeKox+hOUdmk5XNaKChkuN2GZ1W1CTfCSiPbc77AB1DEv Z7YUY+PQ/Blpyg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:48 2026 by rpki-client