This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json) Hash identifier: Ohud26mKcYshaaEop1mErqzgaZ3/c/xLH6sGWXfReM4= Subject key identifier: CC:A5:D6:76:0F:F2:0F:3E:70:F9:64:E3:73:D3:8D:C6:4A:35:F4:BC Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019C41D860645DC6CC0FA298C90DE2AC378E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft Manifest number: 107C Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: BApu1Iv6+y+fQCrFTXDRTpvBlEfdV42CqzcD5pELkS0=) 2: PPgnUS1OTeT8xtOKOgFCmjzijW0.roa (hash: hTERt+3AhxQ4QtapOxXoNon5AhhXXrDspSgS4orn0+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:60:64:5d:c6:cc:0f:a2:98:c9:0d:e2:ac:37:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=cca5d6760ff20f3e70f964e373d38dc64a35f4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:92:5a:c5:ec:e0:5f:47:28:90:2c:a1:31: 5c:37:ca:19:bd:cb:53:49:ef:a5:aa:a3:4e:50:4a: ad:2e:9c:bd:14:ad:e8:53:23:16:4c:51:08:70:eb: 08:54:0a:11:8e:c3:b5:de:d4:c6:31:76:9d:57:4f: bd:a4:bd:37:b6:6a:3e:52:04:5f:87:03:d9:a1:ec: 94:0e:bf:18:9e:88:fd:62:88:27:e6:1d:1f:53:83: 31:56:1a:24:bc:7b:4f:a2:50:60:b1:d4:c7:6a:2c: 73:c1:02:9b:31:7d:a1:da:4f:83:fa:f4:ed:cb:db: 3a:4e:40:72:f9:54:93:26:59:05:5d:51:a6:89:6a: 33:78:06:79:ac:32:f6:fc:63:a4:4c:e9:50:49:9e: b5:a4:d8:5f:07:a6:4b:ac:08:b9:94:2a:4b:ef:da: 76:0c:62:6a:3b:04:5c:8e:66:a6:a1:77:78:4a:4e: c0:e6:8d:75:ea:4c:d5:71:8b:0f:3e:89:82:ef:75: a9:1b:0b:a7:5f:d8:38:b8:32:a9:7f:9b:8d:56:77: 95:f8:c1:db:5f:b5:ec:56:d0:84:c9:86:fa:8c:a1: 96:66:06:fe:11:b9:76:48:dc:58:76:f5:fd:32:34: 77:33:03:de:88:0c:d0:f9:66:0a:8f:25:26:5e:da: 25:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A5:D6:76:0F:F2:0F:3E:70:F9:64:E3:73:D3:8D:C6:4A:35:F4:BC X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e3:2d:7f:6e:37:e7:7c:e8:87:42:73:77:e2:a4:e7:e0:2d: 47:72:a4:bc:58:33:0c:df:64:1e:48:97:98:37:43:0b:8a:1c: 79:a5:6a:fb:f8:93:d2:2c:79:30:af:b7:a0:dd:6f:b1:ed:79: 64:3c:d9:94:6b:0a:4a:2d:41:23:c8:43:6b:70:e8:74:d6:fc: e6:a0:9f:51:89:ba:c2:d9:7c:1e:bd:5a:25:09:7d:97:66:2a: 48:da:f9:22:50:23:ab:1a:79:c9:f5:1f:8a:54:a7:dc:4e:e8: d9:46:5b:47:0e:dd:50:d8:ee:35:d4:c3:07:0a:92:81:9f:b0: d9:1c:df:5e:70:16:91:7d:9a:11:cc:2e:49:97:04:23:23:67: 5d:51:ee:83:d6:89:5a:07:9f:5d:24:a4:c1:38:0d:34:2d:0c: 71:c8:7d:17:a7:8d:52:da:26:22:67:ae:87:37:2d:45:99:34: 55:b7:08:16:01:e4:2f:70:bf:ac:81:24:d9:68:1f:e4:9c:50: 77:dd:69:af:19:94:fe:54:39:6e:bd:5c:3c:ce:33:dc:2f:71: 29:7c:64:04:12:e5:92:22:b4:50:d2:55:4c:0f:3f:52:fe:b1: 77:77:53:d2:69:bf:ae:97:3e:dc:77:cb:4a:7f:98:f8:5d:27: 81:4f:05:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GBkXcbMD6KYyQ3irDeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD EyhjY2E1ZDY3NjBmZjIwZjNlNzBmOTY0ZTM3M2QzOGRjNjRhMzVmNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0eSWsXs4F9HKJAsoTFcN8oZvctT Se+lqqNOUEqtLpy9FK3oUyMWTFEIcOsIVAoRjsO13tTGMXadV0+9pL03tmo+UgRf hwPZoeyUDr8Ynoj9Yogn5h0fU4MxVhokvHtPolBgsdTHaixzwQKbMX2h2k+D+vTt y9s6TkBy+VSTJlkFXVGmiWozeAZ5rDL2/GOkTOlQSZ61pNhfB6ZLrAi5lCpL79p2 DGJqOwRcjmamoXd4Sk7A5o116kzVcYsPPomC73WpGwunX9g4uDKpf5uNVneV+MHb X7XsVtCEyYb6jKGWZgb+Ebl2SNxYdvX9MjR3MwPeiAzQ+WYKjyUmXtol1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyl1nYP8g8+cPlk43PTjcZKNfS8MB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOMtf243 53zoh0Jzd+Kk5+AtR3KkvFgzDN9kHkiXmDdDC4oceaVq+/iT0ix5MK+3oN1vse15 ZDzZlGsKSi1BI8hDa3DodNb85qCfUYm6wtl8Hr1aJQl9l2YqSNr5IlAjqxp5yfUf ilSn3E7o2UZbRw7dUNjuNdTDBwqSgZ+w2RzfXnAWkX2aEcwuSZcEIyNnXVHug9aJ WgefXSSkwTgNNC0Mcch9F6eNUtomImeuhzctRZk0VbcIFgHkL3C/rIEk2Wgf5JxQ d91prxmU/lQ5br1cPM4z3C9xKXxkBBLlkiK0UNJVTA8/Uv6xd3dT0mm/rpc+3HfL Sn+Y+F0ngU8FXA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:55 2026 by rpki-client