This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json) Hash identifier: GrxJIUkXKOhZqqcC1SnMA5gZ8DXPhGWFckV9CzQjl2U= Subject key identifier: 0D:64:0B:16:2A:C1:BF:AC:0F:EB:D6:60:B2:0B:83:BD:25:00:88:FC Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64 Certificate serial: 019C427D48CAB90C8A17F2B1B717290CD899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft Manifest number: 10E7 Signing time: Mon 09 Feb 2026 13:00:32 +0000 Manifest this update: Mon 09 Feb 2026 13:00:32 +0000 Manifest next update: Tue 10 Feb 2026 13:00:32 +0000 Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: R0EpblZzVpgCjNrjM3ZwzUW0b/l2NNQTGrjSrtMN1dA=) 2: bv7crWXlDlytvYkySG7c5NmMUkA.roa (hash: hgMG06MlwTq9Qr8spukEtgFAVFOnQKq96lFNbYV3uWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:48:ca:b9:0c:8a:17:f2:b1:b7:17:29:0c:d8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64 Validity Not Before: Feb 9 13:00:32 2026 GMT Not After : Feb 10 13:00:32 2026 GMT Subject: CN=0d640b162ac1bfac0febd660b20b83bd250088fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:c6:3f:17:65:72:fa:54:d2:a2:51:65:d8: 2e:b3:61:36:6f:1a:1f:07:ec:52:6c:ba:d9:14:70: 2b:c5:7d:59:8b:3a:a1:ee:a2:c4:3b:94:8e:d4:cf: 3c:ef:6d:14:ea:41:2e:ec:de:82:8d:67:f2:8e:2f: a5:34:d6:34:05:07:87:f5:50:83:5c:0d:ae:1c:64: 52:10:0f:e4:26:57:f5:9c:2a:a7:01:7b:6e:7a:88: 04:3c:78:21:a0:cc:ed:bc:18:11:8f:c6:0a:ed:45: b2:21:16:fa:e1:9f:49:34:10:ae:83:9d:49:66:5f: 66:3c:17:77:6b:08:25:fb:b3:b7:b6:e2:7d:4c:8c: 75:55:c9:95:fb:33:a3:21:ea:fa:89:b1:ec:9b:b8: b1:e1:03:00:e4:cb:b1:e4:b3:ec:a7:be:32:69:e7: 03:2a:7a:dc:48:0d:ce:92:2e:2b:b6:ce:0f:54:6a: ac:aa:26:cc:de:85:b1:8d:1a:a1:c0:7e:55:72:26: 4e:10:ec:0f:4f:c8:62:2e:cc:79:b0:dc:99:c2:ca: f8:81:f2:fe:86:4f:e3:f2:ef:ab:97:48:d4:8c:a4: 74:d5:f3:6e:2b:ed:c5:69:f0:ad:2a:a5:37:41:58: cd:fc:a7:b5:b6:b0:4e:8c:49:42:93:ea:37:9f:48: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:0B:16:2A:C1:BF:AC:0F:EB:D6:60:B2:0B:83:BD:25:00:88:FC X509v3 Authority Key Identifier: keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b8:3f:8a:7e:da:51:2b:73:8e:92:91:fb:c5:06:29:23:32: 42:d9:1c:bb:80:fa:fe:6f:5d:cb:11:1e:9d:44:5a:f9:10:5e: df:fe:7f:73:9c:5e:c1:3a:48:4b:96:71:0d:3f:b6:c2:45:80: d8:9c:54:aa:3f:fa:d6:3d:c2:22:d7:ba:c0:c8:0b:9e:4d:94: 39:7b:3f:ab:bd:cd:b4:ab:e1:ab:b4:35:28:2c:06:5a:82:0e: 33:12:5b:85:8c:8b:2f:20:09:4e:b9:b9:35:65:d7:92:5f:66: 46:d8:10:b7:5e:58:3e:25:26:2e:d0:9b:bb:5e:4f:29:32:7d: 96:4a:4f:bf:30:9f:ac:4c:57:3f:1f:4a:d0:99:e1:10:dd:aa: 1b:07:f2:42:dd:cf:02:3f:09:b8:31:b1:a6:31:00:d6:7a:83: 81:73:bc:ee:39:54:b1:da:ab:97:80:d4:4e:b6:f0:99:45:1d: 32:3d:25:61:cd:17:ce:a9:f0:6c:02:bb:ad:cd:8f:c5:90:7a: 55:be:b1:6a:01:e7:03:5c:62:93:bb:b0:f6:f4:80:f6:21:78: 19:4d:6e:53:b1:b4:ac:e6:d5:b2:de:4a:0e:21:53:db:a0:aa: ee:01:e9:43:1c:d4:9d:e6:c1:42:77:ad:bf:54:c2:bc:bb:b1: 44:7b:58:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUjKuQyKF/KxtxcpDNiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw MGNiNjQwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD EygwZDY0MGIxNjJhYzFiZmFjMGZlYmQ2NjBiMjBiODNiZDI1MDA4OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAHGPxdlcvpU0qJRZdgus2E2bxof B+xSbLrZFHArxX1Zizqh7qLEO5SO1M88720U6kEu7N6CjWfyji+lNNY0BQeH9VCD XA2uHGRSEA/kJlf1nCqnAXtueogEPHghoMztvBgRj8YK7UWyIRb64Z9JNBCug51J Zl9mPBd3awgl+7O3tuJ9TIx1VcmV+zOjIer6ibHsm7ix4QMA5Mux5LPsp74yaecD KnrcSA3Oki4rts4PVGqsqibM3oWxjRqhwH5VciZOEOwPT8hiLsx5sNyZwsr4gfL+ hk/j8u+rl0jUjKR01fNuK+3FafCtKqU3QVjN/Ke1trBOjElCk+o3n0gTJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1kCxYqwb+sD+vWYLILg70lAIj8MB8GA1UdIwQY MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt Y2EzMzUwZTc2MGNiLzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbg/in7a UStzjpKR+8UGKSMyQtkcu4D6/m9dyxEenURa+RBe3/5/c5xewTpIS5ZxDT+2wkWA 2JxUqj/61j3CIte6wMgLnk2UOXs/q73NtKvhq7Q1KCwGWoIOMxJbhYyLLyAJTrm5 NWXXkl9mRtgQt15YPiUmLtCbu15PKTJ9lkpPvzCfrExXPx9K0JnhEN2qGwfyQt3P Aj8JuDGxpjEA1nqDgXO87jlUsdqrl4DUTrbwmUUdMj0lYc0XzqnwbAK7rc2PxZB6 Vb6xagHnA1xik7uw9vSA9iF4GU1uU7G0rObVst5KDiFT26Cq7gHpQxzUnebBQnet v1TCvLuxRHtY0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:46 2026 by rpki-client