This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json) Hash identifier: EO1Y06Pw6/ZfaWyWEcgZ8+RiFkaCoUQ9xrFyhwWdV14= Subject key identifier: E2:32:28:76:97:0E:3A:2F:22:0F:49:D9:58:CF:78:33:2D:45:24:33 Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Certificate serial: 019C2962830A194308F64F9F99B05A28E3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft Manifest number: 0C84 Signing time: Wed 04 Feb 2026 16:00:47 +0000 Manifest this update: Wed 04 Feb 2026 16:00:47 +0000 Manifest next update: Thu 05 Feb 2026 16:00:47 +0000 Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: d9l1HY99i0kxhqKHmyNB9sdcbs7zqF2Z++HrH0hYJbY=) 2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:62:83:0a:19:43:08:f6:4f:9f:99:b0:5a:28:e3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691 Validity Not Before: Feb 4 16:00:47 2026 GMT Not After : Feb 5 16:00:47 2026 GMT Subject: CN=e2322876970e3a2f220f49d958cf78332d452433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:04:e2:09:6d:fa:97:4d:1d:ff:64:fd:61: b5:b6:3c:6f:af:34:fa:82:3d:1c:9c:f6:b3:cd:2c: fc:d7:90:7b:c9:91:28:07:21:e0:b2:81:be:20:45: 42:92:69:76:81:e6:02:4b:21:48:0f:ec:dd:25:aa: 9b:4e:b2:bb:0d:f3:de:51:e2:32:1a:81:89:22:a3: b4:31:1b:12:cb:74:2f:88:26:80:fd:d4:13:7a:0a: 69:47:4c:6f:7b:25:db:f4:c4:d8:73:f0:26:8f:bc: 28:34:59:0d:28:65:a9:78:c4:42:7e:11:ec:33:c1: a8:db:1d:a5:6d:f3:2f:68:13:bb:f6:39:68:5a:97: 26:4f:b2:ee:a8:e1:b2:97:e4:a2:52:77:b2:03:0b: 7b:e9:48:52:d4:a4:0e:9a:ba:cd:07:8e:71:94:22: 1c:c3:fd:d0:19:1c:34:53:a2:ae:8c:54:c2:1d:f0: b6:ac:ac:53:e7:77:71:9f:84:1b:c6:ad:e1:a4:36: d8:a9:05:c3:71:c9:7f:51:44:ef:cc:8d:fd:3d:7a: 1b:a9:89:ac:ae:a8:d8:30:f6:73:b7:a9:5b:4d:a3: ce:6e:57:ea:8a:93:6e:0e:99:4f:28:bc:c7:a9:7f: 75:2c:ce:22:1b:dd:77:4a:cf:bb:a5:a4:db:5b:e6: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:32:28:76:97:0E:3A:2F:22:0F:49:D9:58:CF:78:33:2D:45:24:33 X509v3 Authority Key Identifier: keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:55:04:7b:10:4e:f2:53:45:77:1f:19:ad:95:26:b1:68: 7e:9d:42:74:5f:3d:2c:b8:4d:02:88:e3:25:ee:04:07:3b:e3: 99:a8:18:db:b1:cb:bf:a7:69:98:b7:72:25:03:04:a1:55:51: a0:22:5f:e0:8b:5d:5e:56:55:fd:65:3e:0d:49:c0:f2:c0:91: 7f:5c:0a:82:ac:4b:10:66:73:fd:75:a5:42:30:61:01:05:5f: aa:45:20:1f:bd:49:32:d4:bc:80:f0:59:fd:3d:ed:5b:55:ba: f4:06:68:62:71:41:02:f5:b8:82:e9:0e:c6:6b:95:3f:47:a8: 2c:1f:79:34:f2:c5:6f:8a:ba:a1:6b:47:3a:c0:fb:11:55:c4: 4f:91:58:2c:91:c3:d2:7f:e3:3f:7d:fd:c9:1c:73:37:ca:16: e5:e6:49:a7:a4:97:be:11:c1:22:4c:f2:8a:c4:5a:56:0a:41: d2:8e:67:ae:2e:f6:de:ba:a3:a2:51:4f:ab:96:be:76:fc:da: 7e:63:7d:f2:8b:cb:91:4c:77:8f:a2:80:03:8e:58:18:61:11: 6e:0a:2d:59:89:9f:11:69:86:50:8d:e0:7a:21:f0:23:27:b8: 43:e6:75:f8:76:d0:b0:50:ec:42:fa:3e:b9:d3:de:06:9d:df: 32:a5:9b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwpYoMKGUMI9k+fmbBaKOP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTdkZTE3NTEyY2ZhOGJlYmMzZGY4MGIyN2I0NzYyNGVm NDE2OTEwHhcNMjYwMjA0MTYwMDQ3WhcNMjYwMjA1MTYwMDQ3WjAzMTEwLwYDVQQD EyhlMjMyMjg3Njk3MGUzYTJmMjIwZjQ5ZDk1OGNmNzgzMzJkNDUyNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuwE4glt+pdNHf9k/WG1tjxvrzT6 gj0cnPazzSz815B7yZEoByHgsoG+IEVCkml2geYCSyFID+zdJaqbTrK7DfPeUeIy GoGJIqO0MRsSy3QviCaA/dQTegppR0xveyXb9MTYc/Amj7woNFkNKGWpeMRCfhHs M8Go2x2lbfMvaBO79jloWpcmT7LuqOGyl+SiUneyAwt76UhS1KQOmrrNB45xlCIc w/3QGRw0U6KujFTCHfC2rKxT53dxn4Qbxq3hpDbYqQXDccl/UUTvzI39PXobqYms rqjYMPZzt6lbTaPOblfqipNuDplPKLzHqX91LM4iG913Ss+7paTbW+YDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIyKHaXDjovIg9J2VjPeDMtRSQzMB8GA1UdIwQY MBaAFDuX3hdRLPqL68PfgLJ7R2JO9BaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAt OTE1NTEzMmExNzlhLzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAtOTE1NTEzMmExNzlh LzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0tVBHsQ TvJTRXcfGa2VJrFofp1CdF89LLhNAojjJe4EBzvjmagY27HLv6dpmLdyJQMEoVVR oCJf4ItdXlZV/WU+DUnA8sCRf1wKgqxLEGZz/XWlQjBhAQVfqkUgH71JMtS8gPBZ /T3tW1W69AZoYnFBAvW4gukOxmuVP0eoLB95NPLFb4q6oWtHOsD7EVXET5FYLJHD 0n/jP339yRxzN8oW5eZJp6SXvhHBIkzyisRaVgpB0o5nri723rqjolFPq5a+dvza fmN98ovLkUx3j6KAA45YGGERbgotWYmfEWmGUI3geiHwIye4Q+Z1+HbQsFDsQvo+ udPeBp3fMqWbSg== -----END CERTIFICATE-----Generated at Thu Feb 5 02:58:47 2026 by rpki-client