This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json) Hash identifier: xx2fST53L7vtQG97fciNl9xkvVqJfGe1KdEWUO2o2aw= Subject key identifier: 93:A9:0E:1C:5C:09:A7:BA:2D:AD:74:1B:5D:C0:DD:A8:9E:BB:87:E1 Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Certificate serial: 019C4246536F7F58B1945563A821EE9CF4B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft Manifest number: 0CD0 Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: PqeeS/llKV2N3Pr9chcO4HoRMvj0twZgTF1WxIBOqk4=) 2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:53:6f:7f:58:b1:94:55:63:a8:21:ee:9c:f4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=93a90e1c5c09a7ba2dad741b5dc0dda89ebb87e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:d9:21:2e:e1:ef:f5:3b:55:e2:87:40:9c: 5d:a7:46:3a:73:ad:58:41:58:c6:fe:16:c7:85:b6: 5c:1d:9f:d5:c1:8d:6d:a5:04:40:e6:68:2a:1a:99: 49:56:28:21:4d:79:d5:b5:10:bd:6d:5d:43:2d:11: 1e:5a:7f:5a:42:9c:3d:69:77:b5:a6:d8:19:bd:f3: 09:03:e2:8e:ae:3d:bf:63:b9:55:e8:b4:23:e1:e4: 8c:3f:6d:06:8c:46:b5:15:43:03:55:e8:51:63:b8: 92:ea:09:5f:f5:84:0a:4f:9b:5c:50:34:9c:ae:aa: 89:62:b8:5c:b9:d1:bd:15:42:bc:60:52:b0:a4:db: 5c:01:15:8f:11:65:6b:c0:f7:48:ca:db:31:7e:fe: 93:c8:43:aa:31:a5:00:13:40:36:e0:12:ff:9f:a5: b2:ef:5f:5a:98:10:f3:89:a5:4b:6e:36:ff:56:8c: 08:56:29:15:11:a2:29:fc:a2:c1:1c:8d:5a:5a:a6: 04:86:03:44:fe:61:7b:32:9e:ad:d1:98:58:c7:0c: 8e:d3:4a:92:bf:af:07:47:bf:31:46:6a:86:5e:75: ac:e2:c1:f4:76:35:36:82:b5:75:7c:74:9f:ef:05: c4:da:4f:64:0c:08:1d:f7:11:90:3a:87:74:e8:2e: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A9:0E:1C:5C:09:A7:BA:2D:AD:74:1B:5D:C0:DD:A8:9E:BB:87:E1 X509v3 Authority Key Identifier: keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9c:1e:e6:12:fc:c7:98:64:4f:22:99:0d:81:1b:bd:11:47: 78:3b:95:5b:d5:04:20:3c:58:00:14:3c:1a:9f:bd:3f:cb:b2: a0:b7:7d:29:be:22:b3:ee:2d:5d:88:fb:75:da:40:47:3d:98: eb:9b:72:7c:82:6c:91:e6:32:52:3e:ec:12:ef:53:df:66:7d: c1:93:e8:98:5f:47:cc:8d:ae:8b:e5:cb:be:b2:52:d4:88:8f: 8b:93:33:8e:da:a1:f3:5d:ee:e3:21:b3:87:cc:9d:9f:42:32: 35:6f:1b:fa:83:2f:6e:8d:c1:58:44:14:31:a1:49:32:e4:0e: c9:f4:6d:1d:b1:38:3b:fa:54:66:e1:96:0a:56:39:13:4e:c4: ff:fd:69:6c:4d:4a:49:59:ef:26:ae:96:d1:3e:6e:58:88:ac: a0:b0:f3:24:9e:ac:02:ff:20:1c:93:b7:1a:b3:85:3b:99:30: 99:e5:49:9c:e5:51:f9:5b:e3:89:b2:43:c6:19:a6:5a:b1:df: 39:d0:35:11:49:1e:e4:7b:77:45:cf:bc:43:2c:1a:41:db:c6: 4f:e2:74:f2:d2:3f:b0:aa:f9:ba:8b:3f:6a:2a:d3:94:40:40: 58:8a:5c:f5:a8:7b:41:3a:44:80:41:5d:4b:4a:77:a4:ae:a3: 3b:85:a5:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlNvf1ixlFVjqCHunPS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3 NmNkODUwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD Eyg5M2E5MGUxYzVjMDlhN2JhMmRhZDc0MWI1ZGMwZGRhODllYmI4N2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll7ZIS7h7/U7VeKHQJxdp0Y6c61Y QVjG/hbHhbZcHZ/VwY1tpQRA5mgqGplJVighTXnVtRC9bV1DLREeWn9aQpw9aXe1 ptgZvfMJA+KOrj2/Y7lV6LQj4eSMP20GjEa1FUMDVehRY7iS6glf9YQKT5tcUDSc rqqJYrhcudG9FUK8YFKwpNtcARWPEWVrwPdIytsxfv6TyEOqMaUAE0A24BL/n6Wy 719amBDziaVLbjb/VowIVikVEaIp/KLBHI1aWqYEhgNE/mF7Mp6t0ZhYxwyO00qS v68HR78xRmqGXnWs4sH0djU2grV1fHSf7wXE2k9kDAgd9xGQOod06C7XEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOpDhxcCae6La10G13A3aieu4fhMB8GA1UdIwQY MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4 LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJwe5hL8 x5hkTyKZDYEbvRFHeDuVW9UEIDxYABQ8Gp+9P8uyoLd9Kb4is+4tXYj7ddpARz2Y 65tyfIJskeYyUj7sEu9T32Z9wZPomF9HzI2ui+XLvrJS1IiPi5Mzjtqh813u4yGz h8ydn0IyNW8b+oMvbo3BWEQUMaFJMuQOyfRtHbE4O/pUZuGWClY5E07E//1pbE1K SVnvJq6W0T5uWIisoLDzJJ6sAv8gHJO3GrOFO5kwmeVJnOVR+VvjibJDxhmmWrHf OdA1EUke5Ht3Rc+8QywaQdvGT+J08tI/sKr5uos/airTlEBAWIpc9ah7QTpEgEFd S0p3pK6jO4WlVg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:31 2026 by rpki-client