This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json) Hash identifier: pZTtdRcqFd6OfE7qsjGQ2BFLqPc/kTgWaVxgccG7B8k= Subject key identifier: 2C:0E:B9:BC:BF:8C:0F:AF:C7:2A:24:39:67:D0:EA:15:92:B3:37:A2 Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4 Certificate serial: 019C4321FB4E2F568979155C21FC0BBA655F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft Manifest number: 08D3 Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: 4yP3WwU1ktq8_0e1Hi61Tn4PWPg.roa (hash: n+qnuFeSxpGyizkAO7C0ETLCpnUHGbgFWmdL3r1mtxY=) 2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: aR9B1ee/y4lg5QO4ewrQYRArJnju051KBAa5t6MUUko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fb:4e:2f:56:89:79:15:5c:21:fc:0b:ba:65:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=2c0eb9bcbf8c0fafc72a243967d0ea1592b337a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:56:e6:be:62:8f:b9:9b:ac:07:e9:99:eb: 9f:f0:e7:59:1d:e0:9b:d6:f9:92:22:9d:3f:7e:6d: e7:63:ae:9b:ab:d1:62:bf:1d:c1:22:b8:48:a2:cb: 38:ad:2c:28:7b:d6:ac:20:cb:d1:05:32:71:12:bb: b0:8f:e7:9b:af:1a:f4:16:e0:a1:76:76:b8:5c:f6: 1c:e7:e1:56:06:9d:d1:16:2a:ad:84:15:95:d8:9f: ce:c4:1b:d3:9b:f0:d8:36:92:03:dd:56:10:27:87: 17:ec:ed:d4:93:a4:05:68:0b:d3:19:e9:d9:6f:84: 41:a6:86:ed:05:de:50:ec:bf:e9:9d:b3:94:d6:82: 66:42:32:d1:fa:b1:8b:44:16:98:fb:21:d0:51:93: 62:d8:5f:4e:03:c3:a6:57:1c:af:45:15:c7:5f:54: d8:31:dc:88:d6:11:d4:b0:64:37:51:9e:91:cb:a0: 9f:90:60:5d:e3:93:9a:e5:e9:7c:88:d6:a6:5e:cf: c0:af:a5:c4:3a:ba:8c:7b:92:f0:89:fc:25:c6:8f: 32:b3:43:2e:8a:be:ab:66:12:cf:50:9d:f0:52:4f: 50:c4:3f:ce:c9:cb:a4:58:27:d1:68:23:92:ab:b8: ee:84:0b:11:5f:a4:9d:f0:68:ad:08:56:67:76:b2: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0E:B9:BC:BF:8C:0F:AF:C7:2A:24:39:67:D0:EA:15:92:B3:37:A2 X509v3 Authority Key Identifier: keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:45:3d:51:d6:f3:fa:52:72:27:fd:81:7a:82:ab:10:ca:f6: d8:06:2a:f7:4d:4f:c6:dd:27:34:13:73:b7:12:27:ec:61:60: 1a:cb:71:8a:08:31:33:85:0d:5b:45:ac:ac:ef:df:b8:eb:f9: b1:9c:17:d9:e7:70:42:e0:b7:de:35:57:87:cb:5c:58:a6:56: 23:37:9c:6c:19:9c:a1:2f:fb:4d:68:f5:09:ca:b9:04:66:66: e6:6e:f2:7e:95:80:c1:fb:30:68:ac:1f:7c:c1:62:82:30:fa: c4:bc:7b:93:ed:61:ec:48:e9:04:23:ae:79:47:71:55:93:95: 32:ee:6d:15:aa:64:c2:80:02:b5:46:32:3c:65:fc:a0:0b:42: 17:19:7a:11:2c:42:ba:42:64:dc:a1:56:8f:a0:0d:4b:5a:51: af:42:83:95:36:15:89:75:a9:65:71:06:c2:53:c5:37:7b:0a: 8f:03:75:df:d5:9f:bf:dc:79:ca:8f:84:19:39:61:39:36:c8: b2:be:61:ef:f9:24:a2:dd:17:c2:b0:dd:f4:6e:63:98:c2:61: 7c:d7:f6:92:77:5b:3e:6d:5a:77:2c:48:c2:ca:f7:17:d8:b5: cc:60:81:90:03:53:3d:fa:41:5e:e6:d1:dd:54:5f:b0:6f:9e: 79:3f:ad:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIftOL1aJeRVcIfwLumVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1 ZjkwZTQwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD EygyYzBlYjliY2JmOGMwZmFmYzcyYTI0Mzk2N2QwZWExNTkyYjMzN2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvNW5r5ij7mbrAfpmeuf8OdZHeCb 1vmSIp0/fm3nY66bq9Fivx3BIrhIoss4rSwoe9asIMvRBTJxEruwj+ebrxr0FuCh dna4XPYc5+FWBp3RFiqthBWV2J/OxBvTm/DYNpID3VYQJ4cX7O3Uk6QFaAvTGenZ b4RBpobtBd5Q7L/pnbOU1oJmQjLR+rGLRBaY+yHQUZNi2F9OA8OmVxyvRRXHX1TY MdyI1hHUsGQ3UZ6Ry6CfkGBd45Oa5el8iNamXs/Ar6XEOrqMe5Lwifwlxo8ys0Mu ir6rZhLPUJ3wUk9QxD/OycukWCfRaCOSq7juhAsRX6Sd8GitCFZndrIZVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwOuby/jA+vxyokOWfQ6hWSszeiMB8GA1UdIwQY MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0U9Udbz +lJyJ/2BeoKrEMr22AYq901Pxt0nNBNztxIn7GFgGstxiggxM4UNW0WsrO/fuOv5 sZwX2edwQuC33jVXh8tcWKZWIzecbBmcoS/7TWj1Ccq5BGZm5m7yfpWAwfswaKwf fMFigjD6xLx7k+1h7EjpBCOueUdxVZOVMu5tFapkwoACtUYyPGX8oAtCFxl6ESxC ukJk3KFWj6ANS1pRr0KDlTYViXWpZXEGwlPFN3sKjwN139Wfv9x5yo+EGTlhOTbI sr5h7/kkot0XwrDd9G5jmMJhfNf2kndbPm1adyxIwsr3F9i1zGCBkANTPfpBXubR 3VRfsG+eeT+tFw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:50 2026 by rpki-client