This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json) Hash identifier: bzLoRcUgZyZxJ11XT/OBnTcAw73y313czlpE0tZy0PA= Subject key identifier: FF:6A:1F:C8:22:EC:1C:73:BA:D3:B4:99:A3:A2:FF:22:D4:EE:74:CE Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d Certificate serial: 019C43FDB2D5B840E073B8D84945EDBA7ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft Manifest number: 03FF Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: 7lgvftt3YplOqtGKAXFKXfxxBQE.roa (hash: UMQdS0dx3gIMuyKJd19IDX0DWYOOtAEHJUPWP0Uspm8=) 2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: 64GY28oZWqDfQYxeoF+yD0b1DZrBgmRE9q4/P1g1MqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b2:d5:b8:40:e0:73:b8:d8:49:45:ed:ba:7e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=ff6a1fc822ec1c73bad3b499a3a2ff22d4ee74ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:fb:3e:20:e3:2a:77:ef:ca:05:ff:ee:36: e8:d1:09:cd:d7:5d:8c:22:e5:13:c1:38:a7:f3:7c: cd:ea:77:05:42:50:f4:4f:71:dd:b1:9e:06:50:6e: 65:bd:95:f8:2f:d4:27:a7:00:29:15:bd:b5:ad:3b: b8:47:b7:5d:60:56:e2:a1:b5:a3:06:11:e4:78:5b: 8c:bc:da:49:4c:a9:d2:ea:fa:17:20:b8:25:04:57: 7b:6e:a5:ce:9a:7f:ce:e6:46:4a:2e:70:7f:5a:e3: 4d:19:82:31:04:06:b6:e6:f6:c9:0f:46:54:0e:b4: 01:5f:1e:33:4c:06:68:6b:0c:05:83:af:9b:7e:50: b9:99:82:fb:a4:e3:94:03:bc:1f:b8:a4:26:77:91: d2:16:2e:b4:a2:93:69:90:f6:b2:09:84:b2:a4:c6: 40:d0:b7:6c:fe:43:31:e1:e9:b8:e9:74:14:b6:77: c7:3b:cb:c2:92:ff:73:2b:b9:a5:62:09:65:ff:3a: 32:af:7b:72:5d:94:32:9c:bd:fe:dc:bf:41:fc:c6: 7c:86:ed:e2:d7:28:61:3a:87:9c:eb:2a:f7:5c:29: 6c:bb:1a:7f:11:4e:e0:bd:f6:2b:65:42:4a:89:24: 35:5c:69:58:20:b8:b3:43:8c:80:87:25:76:07:7c: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:1F:C8:22:EC:1C:73:BA:D3:B4:99:A3:A2:FF:22:D4:EE:74:CE X509v3 Authority Key Identifier: keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c1:b3:25:aa:9b:79:6b:31:17:61:4d:db:cf:ae:98:51:41: 77:67:81:11:08:30:d8:21:15:98:52:84:e9:5b:66:79:5d:a4: ec:18:62:ba:17:76:ab:95:61:f2:0b:17:bc:38:fa:19:94:a0: cd:ed:6f:a8:55:7d:44:22:8e:88:4e:19:e5:fd:79:39:11:cd: b6:af:c0:7f:dd:33:57:50:32:b5:af:d7:de:a5:bc:5c:1e:f3: 5d:8b:5e:2c:0d:06:bb:2b:aa:2f:66:3b:a0:7c:81:8c:da:04: 87:43:ea:90:ca:27:db:5f:12:64:63:5f:23:b8:6e:ee:00:29: aa:47:1d:d0:27:14:be:3d:ab:d2:80:26:0d:7f:b5:a4:48:65: 8c:69:fd:2c:df:0b:e1:62:e2:4d:52:85:d2:6f:99:05:ea:06: 1b:69:d0:5f:50:c8:1c:da:d6:b5:43:3f:ec:5c:b0:70:7e:c5: f7:0f:a6:3c:f2:5b:f3:35:c2:36:c1:de:4f:ec:78:54:d7:67: 85:09:fb:be:70:77:be:d7:ea:65:d5:fb:45:bf:71:58:2a:c4: a7:41:64:ca:39:ea:a5:9c:95:79:10:cb:ab:3b:09:45:04:8d: 5a:22:60:89:6f:86:e0:52:90:e7:94:4e:d4:f7:e4:0b:4e:a3: 9b:9e:ea:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bLVuEDgc7jYSUXtun7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTQ2MDNiMjQ1YjFkMjA4NDlkZjg4ZjE2ZWUzNzBjYzBi NDM5MGQwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD EyhmZjZhMWZjODIyZWMxYzczYmFkM2I0OTlhM2EyZmYyMmQ0ZWU3NGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXr7PiDjKnfvygX/7jbo0QnN112M IuUTwTin83zN6ncFQlD0T3HdsZ4GUG5lvZX4L9QnpwApFb21rTu4R7ddYFbiobWj BhHkeFuMvNpJTKnS6voXILglBFd7bqXOmn/O5kZKLnB/WuNNGYIxBAa25vbJD0ZU DrQBXx4zTAZoawwFg6+bflC5mYL7pOOUA7wfuKQmd5HSFi60opNpkPayCYSypMZA 0Lds/kMx4em46XQUtnfHO8vCkv9zK7mlYgll/zoyr3tyXZQynL3+3L9B/MZ8hu3i 1yhhOoec6yr3XClsuxp/EU7gvfYrZUJKiSQ1XGlYILizQ4yAhyV2B3z1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9qH8gi7BxzutO0maOi/yLU7nTOMB8GA1UdIwQY MBaAFDmkYDskWx0ghJ34jxbuNwzAtDkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEt ZmNmMTA1ZmQyMDRjLzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZTE3N2YtNWY1Zi00MjE0LWE4MTEtZmNmMTA1ZmQyMDRj LzEvT2FSZ095UmJIU0NFbmZpUEZ1NDNETUMwT1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasGzJaqb eWsxF2FN28+umFFBd2eBEQgw2CEVmFKE6VtmeV2k7Bhiuhd2q5Vh8gsXvDj6GZSg ze1vqFV9RCKOiE4Z5f15ORHNtq/Af90zV1Ayta/X3qW8XB7zXYteLA0GuyuqL2Y7 oHyBjNoEh0PqkMon218SZGNfI7hu7gApqkcd0CcUvj2r0oAmDX+1pEhljGn9LN8L 4WLiTVKF0m+ZBeoGG2nQX1DIHNrWtUM/7FywcH7F9w+mPPJb8zXCNsHeT+x4VNdn hQn7vnB3vtfqZdX7Rb9xWCrEp0FkyjnqpZyVeRDLqzsJRQSNWiJgiW+G4FKQ55RO 1PfkC06jm57qSg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:19 2026 by rpki-client