This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json) Hash identifier: 4Tb5Clz3RZC7gkEES/Ih/s9myhTH+TOf6kApoxTOt8I= Subject key identifier: 99:4A:BA:11:96:86:7B:FB:F1:47:ED:76:19:62:AB:9C:1F:BA:3C:CA Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Certificate serial: 019C413388EB24C0FB7E6C713D3BEC4844D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft Manifest number: 0BB4 Signing time: Mon 09 Feb 2026 07:00:22 +0000 Manifest this update: Mon 09 Feb 2026 07:00:22 +0000 Manifest next update: Tue 10 Feb 2026 07:00:22 +0000 Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: JMZTuSP6GH9JAQYyWiA5aWHYK+C4BD62BUQkOVg8KdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:88:eb:24:c0:fb:7e:6c:71:3d:3b:ec:48:44:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b Validity Not Before: Feb 9 07:00:22 2026 GMT Not After : Feb 10 07:00:22 2026 GMT Subject: CN=994aba1196867bfbf147ed761962ab9c1fba3cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:a7:d8:8b:0b:5e:93:fb:ab:a7:80:12:cd: 4e:3a:0d:9a:72:c7:ed:97:f5:73:a6:c5:54:1b:f4: e6:59:f6:88:30:06:5d:17:13:c9:e6:52:50:bf:36: 01:ce:77:d4:d1:f2:e8:81:f4:5f:86:33:06:85:be: de:65:3d:ae:ba:ef:79:66:07:c9:e0:1d:2f:90:e0: e6:b8:b3:bb:b0:09:48:b4:34:5d:4c:9a:71:cf:b0: 4b:f6:aa:bb:b5:6c:8a:91:d0:3a:79:dd:3f:26:7e: 39:7e:16:dd:a2:45:94:d5:c5:36:a6:ae:94:f2:d2: 55:52:92:a7:30:62:3b:d1:75:51:ba:d3:9a:6b:d7: 0c:17:89:42:4f:b7:e9:78:49:6b:16:2b:91:50:1f: da:82:bf:ab:fc:db:82:19:4a:ac:f7:e8:82:eb:e5: bb:e4:87:d1:19:b7:17:f4:2e:69:27:ca:18:06:c7: cf:1c:3c:dd:1b:f7:f4:f4:60:29:b3:07:9b:59:8e: b1:ac:48:4f:87:a7:ce:72:af:b1:6f:8a:ce:4a:27: 48:6b:f2:c2:cc:6b:85:0d:f2:2b:6e:f7:7d:f6:64: fd:00:f4:f7:41:e9:c2:6b:e5:14:3d:2b:e8:c7:f0: c3:e2:4e:e8:33:64:f7:33:06:75:47:f3:d8:6d:67: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4A:BA:11:96:86:7B:FB:F1:47:ED:76:19:62:AB:9C:1F:BA:3C:CA X509v3 Authority Key Identifier: keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:85:61:29:82:5c:e6:6e:a9:66:08:63:14:13:d4:0e:e1:f6: a4:a4:e3:63:fd:bb:69:f4:43:ea:8e:f0:7d:ef:60:1d:aa:b5: 0a:23:f2:0e:47:fe:56:71:6c:8f:ba:1b:ee:78:c8:5d:e4:b7: 7b:92:ae:37:f8:30:12:26:59:8f:b2:c2:5a:ea:47:df:19:25: aa:af:6e:55:88:2d:b6:c4:1e:dc:5f:9b:8f:b4:7b:8f:ea:70: b4:27:ec:6d:e8:50:2e:3c:fb:ab:86:60:01:3d:c5:89:36:df: 51:93:e4:8c:5f:78:b6:d8:72:05:82:d3:08:9f:94:ff:37:4f: cf:ac:cb:93:30:08:a3:f6:bf:9b:69:a3:be:73:26:bf:3c:0f: 10:83:54:53:37:d7:81:a2:59:d9:6e:52:db:c7:00:d1:f3:52: 75:0b:7c:97:1d:48:7d:39:ab:d2:38:92:b0:16:48:33:0c:d7: 86:55:0b:de:51:fa:08:3c:1b:94:19:9c:74:88:c1:a1:40:1d: 61:0e:1e:24:03:d8:94:f1:9c:1e:24:97:0f:f1:fc:a3:f1:f1: d1:82:69:cb:1d:a4:b1:34:f4:f4:b7:02:19:29:2e:6a:fd:40: 67:ba:2d:e5:7c:50:a1:99:a9:9c:6e:81:ed:69:b3:01:9f:06: 56:59:dc:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4jrJMD7fmxxPTvsSETTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzQwZmY2NjlhM2FkYzlkNjY5NjEzNWM4ZDcxZjZkZjVl YWMyN2IwHhcNMjYwMjA5MDcwMDIyWhcNMjYwMjEwMDcwMDIyWjAzMTEwLwYDVQQD Eyg5OTRhYmExMTk2ODY3YmZiZjE0N2VkNzYxOTYyYWI5YzFmYmEzY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNen2IsLXpP7q6eAEs1OOg2acsft l/VzpsVUG/TmWfaIMAZdFxPJ5lJQvzYBznfU0fLogfRfhjMGhb7eZT2uuu95ZgfJ 4B0vkODmuLO7sAlItDRdTJpxz7BL9qq7tWyKkdA6ed0/Jn45fhbdokWU1cU2pq6U 8tJVUpKnMGI70XVRutOaa9cMF4lCT7fpeElrFiuRUB/agr+r/NuCGUqs9+iC6+W7 5IfRGbcX9C5pJ8oYBsfPHDzdG/f09GApswebWY6xrEhPh6fOcq+xb4rOSidIa/LC zGuFDfIrbvd99mT9APT3QenCa+UUPSvox/DD4k7oM2T3MwZ1R/PYbWffywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlKuhGWhnv78Uftdhliq5wfujzKMB8GA1UdIwQY MBaAFDg0D/Zpo63J1mlhNcjXH2316sJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2Mt Mjg0NmVhYWRkZTY3LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNGNlODktOGExNi00YWY1LWI1N2MtMjg0NmVhYWRkZTY3 LzEvT0RRUDltbWpyY25XYVdFMXlOY2ZiZlhxd25zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIVhKYJc 5m6pZghjFBPUDuH2pKTjY/27afRD6o7wfe9gHaq1CiPyDkf+VnFsj7ob7njIXeS3 e5KuN/gwEiZZj7LCWupH3xklqq9uVYgttsQe3F+bj7R7j+pwtCfsbehQLjz7q4Zg AT3FiTbfUZPkjF94tthyBYLTCJ+U/zdPz6zLkzAIo/a/m2mjvnMmvzwPEINUUzfX gaJZ2W5S28cA0fNSdQt8lx1IfTmr0jiSsBZIMwzXhlUL3lH6CDwblBmcdIjBoUAd YQ4eJAPYlPGcHiSXD/H8o/Hx0YJpyx2ksTT09LcCGSkuav1AZ7ot5XxQoZmpnG6B 7WmzAZ8GVlncxg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:24 2026 by rpki-client