This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft File: OdAejKCv5BTBV-H7-1OUhnzlHts.mft (raw, json) Hash identifier: 0wWnH/JZoWnrL8OgtnfcKcdoGs0rT69lgKj1yE2kg9k= Subject key identifier: 67:B3:F7:6C:E9:E9:28:99:52:05:77:68:D3:FC:93:D6:AE:20:76:64 Authority key identifier: 39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB Certificate issuer: /CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Certificate serial: 019C42B4258CD63F4B96321754213C2D17DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft Manifest number: D9 Signing time: Mon 09 Feb 2026 14:00:28 +0000 Manifest this update: Mon 09 Feb 2026 14:00:28 +0000 Manifest next update: Tue 10 Feb 2026 14:00:28 +0000 Files and hashes: 1: OdAejKCv5BTBV-H7-1OUhnzlHts.crl (hash: OhhOnxvsG4wy9xN11KIQR6+myP1IDjQiiLiwvPIdnkU=) 2: QcsUaaoKRPUBylV1-Fbk0DFfN80.roa (hash: gVbE2LpxkXM42NWeJiCGY1tC1aB+7n0+0yKW+mHCt6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:25:8c:d6:3f:4b:96:32:17:54:21:3c:2d:17:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39d01e8ca0afe414c157e1fbfb5394867ce51edb Validity Not Before: Feb 9 14:00:28 2026 GMT Not After : Feb 10 14:00:28 2026 GMT Subject: CN=67b3f76ce9e9289952057768d3fc93d6ae207664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b6:fd:81:91:ea:cb:d3:be:23:04:6c:b5:67: f9:6b:88:58:be:e7:36:06:c0:a8:ea:fe:1e:0c:ff: f0:6e:58:08:26:f9:61:0e:9f:cf:ee:66:76:4d:55: eb:1d:6a:1d:3c:45:09:2a:22:81:a1:9e:73:66:c5: 18:0a:4a:0d:c6:d9:1e:56:b5:7e:31:3d:a9:28:bf: b1:b4:bb:d1:01:74:bf:c1:32:6e:fe:9b:38:3f:0c: 74:7e:1e:61:54:e5:11:11:0c:bc:8a:91:09:53:95: b1:9e:4f:34:84:66:99:92:b9:f0:da:ac:4c:5b:49: 56:ff:08:41:bc:58:17:ff:a3:a9:fe:24:8e:ba:16: ec:4f:24:5d:e8:de:38:3b:e4:21:ba:09:01:22:71: f1:1f:0b:61:09:41:9d:49:34:01:60:6e:7d:fb:60: 12:22:1b:e0:52:e1:d8:0c:8b:1c:63:82:2c:f2:e5: f9:4d:f5:3c:80:d6:fe:1d:47:95:26:96:29:f7:24: ef:4b:81:de:b2:88:93:fa:9f:90:93:d5:bd:68:83: 16:54:84:a3:09:f1:38:c2:c3:de:20:cd:81:f4:2a: a5:bb:dc:c9:f6:6a:2c:e1:0c:5d:53:5a:a6:e1:0e: 87:68:fd:5c:18:a0:f1:89:9b:cc:13:ea:b5:2c:65: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:F7:6C:E9:E9:28:99:52:05:77:68:D3:FC:93:D6:AE:20:76:64 X509v3 Authority Key Identifier: keyid:39:D0:1E:8C:A0:AF:E4:14:C1:57:E1:FB:FB:53:94:86:7C:E5:1E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdAejKCv5BTBV-H7-1OUhnzlHts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a97c7d-bcc7-4fb5-86e2-2e6246c219f7/1/OdAejKCv5BTBV-H7-1OUhnzlHts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:74:42:89:2e:7b:8c:52:85:36:11:a4:ce:84:b1:cd:fb:03: 94:27:59:f2:45:73:a9:24:44:9f:80:44:3e:56:5d:fe:19:22: 77:10:00:c6:03:25:0c:d7:bc:c2:94:d9:77:c9:40:47:99:1e: b4:48:c8:4b:ff:75:eb:3e:36:66:ba:fc:60:70:23:82:1c:ec: 6d:56:62:2b:1b:b6:e0:18:09:26:2b:54:a9:93:75:cd:ea:80: 09:43:da:37:4d:68:cf:6b:44:8e:2e:69:fd:c2:8f:76:53:78: b3:60:21:39:f0:b7:fe:ad:ed:11:c3:62:4c:00:7a:9f:de:da: b0:0a:22:ae:f2:01:46:05:56:0d:4e:86:e5:b5:e2:0f:4f:fb: ae:65:00:91:6e:63:cc:e5:44:a6:71:32:b1:74:4d:f5:48:4f: f3:75:32:29:3f:ec:c5:60:49:56:46:63:2f:67:71:22:ca:7e: 5f:eb:13:37:89:41:52:51:49:cb:3c:90:78:95:20:17:cd:4f: 71:6e:67:b0:30:ac:e7:9b:91:0f:66:1a:d5:83:89:63:20:72: 36:3f:fd:f9:64:de:21:f1:06:f3:3a:55:f4:90:59:88:e4:8a: 2d:82:d7:a1:b3:0f:3b:be:53:f0:0a:62:60:5a:83:e6:62:17: e6:62:e5:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCWM1j9LljIXVCE8LRfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZDAxZThjYTBhZmU0MTRjMTU3ZTFmYmZiNTM5NDg2N2Nl NTFlZGIwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD Eyg2N2IzZjc2Y2U5ZTkyODk5NTIwNTc3NjhkM2ZjOTNkNmFlMjA3NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7b9gZHqy9O+IwRstWf5a4hYvuc2 BsCo6v4eDP/wblgIJvlhDp/P7mZ2TVXrHWodPEUJKiKBoZ5zZsUYCkoNxtkeVrV+ MT2pKL+xtLvRAXS/wTJu/ps4Pwx0fh5hVOUREQy8ipEJU5Wxnk80hGaZkrnw2qxM W0lW/whBvFgX/6Op/iSOuhbsTyRd6N44O+QhugkBInHxHwthCUGdSTQBYG59+2AS IhvgUuHYDIscY4Is8uX5TfU8gNb+HUeVJpYp9yTvS4HesoiT+p+Qk9W9aIMWVISj CfE4wsPeIM2B9Cqlu9zJ9mos4QxdU1qm4Q6HaP1cGKDxiZvME+q1LGXDFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGez92zp6SiZUgV3aNP8k9auIHZkMB8GA1UdIwQY MBaAFDnQHoygr+QUwVfh+/tTlIZ85R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTIt MmU2MjQ2YzIxOWY3LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hOTdjN2QtYmNjNy00ZmI1LTg2ZTItMmU2MjQ2YzIxOWY3 LzEvT2RBZWpLQ3Y1QlRCVi1INy0xT1VobnpsSHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenRCiS57 jFKFNhGkzoSxzfsDlCdZ8kVzqSREn4BEPlZd/hkidxAAxgMlDNe8wpTZd8lAR5ke tEjIS/916z42Zrr8YHAjghzsbVZiKxu24BgJJitUqZN1zeqACUPaN01oz2tEji5p /cKPdlN4s2AhOfC3/q3tEcNiTAB6n97asAoirvIBRgVWDU6G5bXiD0/7rmUAkW5j zOVEpnEysXRN9UhP83UyKT/sxWBJVkZjL2dxIsp+X+sTN4lBUlFJyzyQeJUgF81P cW5nsDCs55uRD2Ya1YOJYyByNj/9+WTeIfEG8zpV9JBZiOSKLYLXobMPO75T8Api YFqD5mIX5mLl0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:34 2026 by rpki-client