This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft File: OtyOotHlv55F8F2VQFb4yQR6NgU.mft (raw, json) Hash identifier: NZkyIdX0GE/hkj3bG9KX/bSzng96e15jhbvC6VXU8oc= Subject key identifier: EC:28:8A:1A:CF:81:BC:29:EA:C6:C0:18:33:7C:C3:32:4D:C4:50:ED Authority key identifier: 3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05 Certificate issuer: /CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605 Certificate serial: 019C41A1C9EC798CB0FBE38CBD43581E3A72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 09:00:47 +0000 Manifest this update: Mon 09 Feb 2026 09:00:47 +0000 Manifest next update: Tue 10 Feb 2026 09:00:47 +0000 Files and hashes: 1: OtyOotHlv55F8F2VQFb4yQR6NgU.crl (hash: eODnlRYX2aAFKxVrsV8zMHHYt6pqvtqSSRa2OAN8x8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:c9:ec:79:8c:b0:fb:e3:8c:bd:43:58:1e:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3adc8ea2d1e5bf9e45f05d954056f8c9047a3605 Validity Not Before: Feb 9 09:00:47 2026 GMT Not After : Feb 10 09:00:47 2026 GMT Subject: CN=ec288a1acf81bc29eac6c018337cc3324dc450ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:b7:3a:49:7f:64:3d:c0:c1:fe:dc:11:30: 73:8c:a8:41:47:4f:7f:90:83:a7:83:4d:cc:df:f2: dc:39:59:b7:84:d0:84:14:c1:d4:2d:c9:d2:94:7f: 34:2d:4f:1c:39:bc:d6:79:ef:5e:aa:20:0b:ad:b6: 29:13:90:56:d3:b8:e7:4d:ff:05:ca:8c:51:f4:a4: 8d:72:85:48:48:28:4e:e8:db:6f:2c:00:96:54:23: 47:3b:11:27:cd:19:3b:ae:cd:52:43:d4:a4:23:db: ca:30:f0:ae:19:c4:6a:fa:da:a0:1e:03:6a:b3:5f: 46:d3:9e:d8:3c:54:6c:61:e5:3a:e6:15:f9:85:53: 13:72:fa:e2:3d:e1:50:cd:c8:bb:f8:65:f9:ec:7a: 98:b0:e8:79:91:ee:ca:4a:98:10:6f:0f:97:41:d1: d7:6a:13:db:d5:5d:58:76:ea:af:a0:c8:84:16:4c: 59:67:57:cb:ac:dc:98:ef:ea:6f:15:35:c8:d0:c2: 37:ad:d9:b6:df:f1:07:a4:c8:fe:98:7c:47:e8:cd: 45:ca:af:49:da:b9:71:cb:24:47:dd:89:7d:2e:47: d4:02:a4:84:f5:0e:94:ab:39:a8:2a:79:8e:1b:8d: 82:95:44:83:b7:7c:aa:04:52:b8:1b:de:26:35:e2: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:8A:1A:CF:81:BC:29:EA:C6:C0:18:33:7C:C3:32:4D:C4:50:ED X509v3 Authority Key Identifier: keyid:3A:DC:8E:A2:D1:E5:BF:9E:45:F0:5D:95:40:56:F8:C9:04:7A:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtyOotHlv55F8F2VQFb4yQR6NgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/272d46-0821-4c93-a3d3-4adc0a679f84/1/OtyOotHlv55F8F2VQFb4yQR6NgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8c:90:c1:33:d7:45:b0:d9:a1:bd:13:a7:75:c8:32:7e:3e: 31:61:0f:94:14:86:fc:34:da:c7:ae:c1:41:48:87:d4:be:cb: ab:7a:53:2f:0d:81:85:77:9d:f8:0b:df:3f:b0:8c:d9:f3:c9: 4c:5b:30:9a:be:9c:f2:b8:b3:b2:1c:96:7c:4d:05:f4:8a:62: c4:86:c3:c5:94:50:63:3a:27:67:f8:e3:00:25:04:56:07:e5: 84:ae:2c:47:17:66:0b:41:5f:f1:68:f4:9a:96:e6:3c:cf:8d: 79:db:95:66:7a:ef:86:8a:6a:36:5e:56:c3:e0:c2:67:79:da: de:ec:0b:22:3c:5b:96:b8:d7:48:6c:04:f9:0f:ae:51:f5:8a: c0:dc:33:89:ae:0c:36:fd:66:a6:ed:37:09:e6:8f:a2:aa:7a: 35:53:f1:1a:33:14:8e:48:a9:fc:b3:0d:3f:d9:93:b1:43:f2: 18:52:16:eb:1c:3f:3e:04:78:0a:aa:14:39:39:aa:ab:b7:26: 00:c7:8e:fc:f5:a4:a7:26:43:96:6c:cf:f1:bf:eb:c3:86:14: 06:6b:5e:cf:7b:4f:fd:5c:49:4f:30:d6:b8:4a:bd:8c:f1:30: 2c:95:18:1e:23:26:bb:d3:00:33:48:2d:03:a1:6e:0c:91:b6: 95:c3:1a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBocnseYyw++OMvUNYHjpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZGM4ZWEyZDFlNWJmOWU0NWYwNWQ5NTQwNTZmOGM5MDQ3 YTM2MDUwHhcNMjYwMjA5MDkwMDQ3WhcNMjYwMjEwMDkwMDQ3WjAzMTEwLwYDVQQD EyhlYzI4OGExYWNmODFiYzI5ZWFjNmMwMTgzMzdjYzMzMjRkYzQ1MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvne3Okl/ZD3Awf7cETBzjKhBR09/ kIOng03M3/LcOVm3hNCEFMHULcnSlH80LU8cObzWee9eqiALrbYpE5BW07jnTf8F yoxR9KSNcoVISChO6NtvLACWVCNHOxEnzRk7rs1SQ9SkI9vKMPCuGcRq+tqgHgNq s19G057YPFRsYeU65hX5hVMTcvriPeFQzci7+GX57HqYsOh5ke7KSpgQbw+XQdHX ahPb1V1YduqvoMiEFkxZZ1fLrNyY7+pvFTXI0MI3rdm23/EHpMj+mHxH6M1Fyq9J 2rlxyyRH3Yl9LkfUAqSE9Q6UqzmoKnmOG42ClUSDt3yqBFK4G94mNeLEKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwoihrPgbwp6sbAGDN8wzJNxFDtMB8GA1UdIwQY MBaAFDrcjqLR5b+eRfBdlUBW+MkEejYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yNzJkNDYtMDgyMS00YzkzLWEzZDMt NGFkYzBhNjc5Zjg0LzEvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yNzJkNDYtMDgyMS00YzkzLWEzZDMtNGFkYzBhNjc5Zjg0 LzEvT3R5T290SGx2NTVGOEYyVlFGYjR5UVI2TmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIyQwTPX RbDZob0Tp3XIMn4+MWEPlBSG/DTax67BQUiH1L7Lq3pTLw2BhXed+AvfP7CM2fPJ TFswmr6c8rizshyWfE0F9IpixIbDxZRQYzonZ/jjACUEVgflhK4sRxdmC0Ff8Wj0 mpbmPM+NeduVZnrvhopqNl5Ww+DCZ3na3uwLIjxblrjXSGwE+Q+uUfWKwNwzia4M Nv1mpu03CeaPoqp6NVPxGjMUjkip/LMNP9mTsUPyGFIW6xw/PgR4CqoUOTmqq7cm AMeO/PWkpyZDlmzP8b/rw4YUBmtez3tP/VxJTzDWuEq9jPEwLJUYHiMmu9MAM0gt A6FuDJG2lcMakg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:11 2026 by rpki-client