This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json) Hash identifier: AZSoG5+sFf5gLruYSEkgR6mvcKm09+OrJAFDec7lfrQ= Subject key identifier: 55:B0:A7:EF:78:43:18:64:E7:39:6E:B5:EE:FE:94:24:F1:59:BE:70 Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Certificate serial: 019C42EB35B078D79583AB8417037B52A07E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft Manifest number: 04F7 Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: PwrlOtm2P7bSTHPu4qJvSXidoSw.roa (hash: H6VRRV9xRJe9egiq6XVsdHUwEnyAitSMRcYsekBGIfk=) 2: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: kwweP/fe0iVJNxQg3t8yVSBPnUDqh3fEG1Cke1RcTBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:35:b0:78:d7:95:83:ab:84:17:03:7b:52:a0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287 Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=55b0a7ef78431864e7396eb5eefe9424f159be70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a7:e6:ba:05:d8:34:e5:25:f4:c9:88:c4:63: 1d:91:69:f1:c4:67:d3:77:23:91:75:9c:e3:ed:93: 91:e8:84:ee:63:78:05:af:45:5f:d1:11:d0:f8:0a: 75:41:63:4e:51:56:ca:d1:bb:dd:5b:ac:40:b1:b7: 9d:f8:b7:30:23:7c:c3:10:7f:13:41:19:4b:cd:3a: 19:ca:ff:e5:36:5d:07:63:bf:72:b0:11:fc:af:c0: a4:75:0f:57:a1:01:45:f7:bf:18:70:95:02:a4:e2: 34:dc:70:a8:42:ff:a4:94:b6:1a:9e:5a:48:44:78: 0a:1d:34:f6:d8:ed:c4:4e:fc:40:55:18:a5:05:cd: 5a:80:8e:3a:d6:90:4f:46:cf:04:86:0d:83:b8:2c: de:22:25:bb:f5:d6:83:8c:4e:75:03:fd:9c:8a:e0: ef:c4:29:de:86:e6:06:3f:4b:2a:99:e7:1b:6e:33: c4:3d:75:8a:b3:c0:21:51:6e:5e:24:4b:d1:40:d5: d1:6c:62:0c:ae:2a:1f:2d:35:70:f4:df:d4:0f:4d: 59:e9:92:95:d9:d9:84:ac:84:b2:03:9d:a9:a5:43: 61:99:1e:01:5b:b5:3a:03:39:8b:68:a8:a9:b7:db: 3a:f5:58:34:b1:d6:8e:29:2b:18:4f:4a:7a:01:c0: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:A7:EF:78:43:18:64:E7:39:6E:B5:EE:FE:94:24:F1:59:BE:70 X509v3 Authority Key Identifier: keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:11:f4:d7:2f:37:ef:f6:b1:52:0c:d7:66:5d:76:9c:ed:a2: 3c:79:7d:3b:b0:ff:39:97:8c:8e:d1:37:e0:62:5b:2e:b4:0e: cc:06:9a:0d:30:2c:56:ab:94:2d:27:1c:2f:96:eb:36:ce:0d: 8f:7e:28:7b:85:14:2e:e1:8a:48:fc:42:4b:fb:fb:ac:9f:35: c9:c6:d6:a6:70:9a:92:dc:48:d1:40:29:9c:62:0d:ca:76:c5: 3c:6c:08:bb:2b:d3:d4:27:05:5a:6f:54:65:6f:7c:8c:db:56: b3:29:b4:74:41:d4:72:05:fe:a4:20:3e:8f:33:0a:38:8e:0a: ee:e0:de:4b:c7:51:47:22:9d:3f:c8:b1:f9:75:1d:1b:32:f0: 36:42:77:05:05:f5:07:93:98:bb:78:c0:56:b3:fd:7a:02:59: ff:da:e3:18:48:1b:4c:a5:14:19:64:be:0b:46:99:e5:c2:dc: 39:4d:b2:e2:db:80:17:d7:8d:41:f8:7f:15:ae:b4:1d:20:03: 10:51:c1:4e:5a:9c:cb:0f:b6:0e:37:ae:91:95:8c:8c:1e:7e: 49:5b:7f:76:11:a7:4a:21:b5:8b:a2:21:45:d8:10:23:c2:d6: 57:a3:a2:a1:d0:24:3b:33:b2:a5:6d:fc:0f:26:9e:6d:07:ad: eb:47:e1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zWweNeVg6uEFwN7UqB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZDNlZDU3OTUzNDhhMDRlN2VjZDE3MmQ3NjQyZmE5NjIw OTcyODcwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD Eyg1NWIwYTdlZjc4NDMxODY0ZTczOTZlYjVlZWZlOTQyNGYxNTliZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqfmugXYNOUl9MmIxGMdkWnxxGfT dyORdZzj7ZOR6ITuY3gFr0Vf0RHQ+Ap1QWNOUVbK0bvdW6xAsbed+LcwI3zDEH8T QRlLzToZyv/lNl0HY79ysBH8r8CkdQ9XoQFF978YcJUCpOI03HCoQv+klLYanlpI RHgKHTT22O3ETvxAVRilBc1agI461pBPRs8Ehg2DuCzeIiW79daDjE51A/2ciuDv xCnehuYGP0sqmecbbjPEPXWKs8AhUW5eJEvRQNXRbGIMriofLTVw9N/UD01Z6ZKV 2dmErISyA52ppUNhmR4BW7U6AzmLaKipt9s69Vg0sdaOKSsYT0p6AcAMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWwp+94Qxhk5zlute7+lCTxWb5wMB8GA1UdIwQY MBaAFKDT7VeVNIoE5+zRctdkL6liCXKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUt NzkwYmM5MWE1OWU2LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hM2IxMWUtNTkwOS00OWZlLWJiNzUtNzkwYmM5MWE1OWU2 LzEvb05QdFY1VTBpZ1RuN05GeTEyUXZxV0lKY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRH01y83 7/axUgzXZl12nO2iPHl9O7D/OZeMjtE34GJbLrQOzAaaDTAsVquULSccL5brNs4N j34oe4UULuGKSPxCS/v7rJ81ycbWpnCaktxI0UApnGINynbFPGwIuyvT1CcFWm9U ZW98jNtWsym0dEHUcgX+pCA+jzMKOI4K7uDeS8dRRyKdP8ix+XUdGzLwNkJ3BQX1 B5OYu3jAVrP9egJZ/9rjGEgbTKUUGWS+C0aZ5cLcOU2y4tuAF9eNQfh/Fa60HSAD EFHBTlqcyw+2DjeukZWMjB5+SVt/dhGnSiG1i6IhRdgQI8LWV6OiodAkOzOypW38 DyaebQet60fh1A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:51 2026 by rpki-client