This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json) Hash identifier: uSrNJLpowMpuYL2asxgKOQsYVrkqOPD4cMMABqiRgJ0= Subject key identifier: 38:99:BD:45:E9:93:B9:67:CA:31:5A:23:67:A1:5D:34:92:AA:78:C6 Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02 Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602 Certificate serial: 019C43C6C4DF0BE0C99B93E42695060F9617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft Manifest number: 0681 Signing time: Mon 09 Feb 2026 19:00:25 +0000 Manifest this update: Mon 09 Feb 2026 19:00:25 +0000 Manifest next update: Tue 10 Feb 2026 19:00:25 +0000 Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: pU+kE4YdTZ+flqBY7BjRHqILmIKa1I5rU4rzw3taGjU=) 2: DH-5sSwuRvodM7Z6KuRoN90i2rs.roa (hash: g63y+hwao+5OKsLdeZNJXMMzjYw/tq7j+X3KOUV7RA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c4:df:0b:e0:c9:9b:93:e4:26:95:06:0f:96:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602 Validity Not Before: Feb 9 19:00:25 2026 GMT Not After : Feb 10 19:00:25 2026 GMT Subject: CN=3899bd45e993b967ca315a2367a15d3492aa78c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:6a:8d:e4:90:eb:6c:fd:f3:75:56:f5:60: 7a:70:46:c2:20:d6:f4:9d:2f:0b:3e:b6:5e:6c:cb: 12:fa:4e:45:c9:21:f4:08:af:81:81:a6:48:6a:cc: 90:18:e0:85:c3:d6:c8:73:c3:c8:2d:34:95:49:1c: 1c:01:54:83:38:e0:2f:06:db:08:87:ee:44:f2:b2: 56:2d:2f:f5:07:cf:dc:f2:b5:e8:3d:e6:80:8c:23: 31:67:f4:e4:e5:95:a3:5a:6e:99:76:aa:76:c4:5b: b1:c2:e2:4b:6f:26:0b:c6:25:50:32:90:c8:cd:88: 72:88:22:7d:72:8f:30:f3:a2:74:11:52:ad:51:70: 7c:97:64:7d:78:fe:62:a9:48:f1:5e:61:57:57:b4: 2b:bc:f0:18:ca:ca:f5:03:97:50:fe:d3:f3:9e:b5: 93:ec:74:31:8a:f2:22:84:79:91:b9:b7:97:10:1f: 95:c1:99:9d:98:bc:da:b8:1c:8d:b2:b0:71:82:27: 82:21:aa:26:fd:d1:52:51:e4:6a:a7:49:5f:d0:ed: 3b:c1:9a:9c:b9:23:42:50:8d:4c:43:4a:2f:99:66: 07:f4:40:80:08:fc:a0:b0:66:3a:95:83:e8:2a:0d: 93:c9:ee:30:83:59:ba:16:cc:9b:28:8b:4b:8b:0b: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:99:BD:45:E9:93:B9:67:CA:31:5A:23:67:A1:5D:34:92:AA:78:C6 X509v3 Authority Key Identifier: keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:23:be:7d:2d:9a:93:dd:3c:15:73:85:41:82:eb:d3:4b:a5: 5a:ef:25:7c:50:b1:5d:45:eb:eb:36:7c:a6:a7:75:52:6a:51: 7b:f8:7a:f4:da:c9:6c:1b:f1:01:50:ea:de:9c:ad:95:09:45: 6e:35:ca:43:87:34:29:4f:8c:1c:26:8c:30:c4:d7:11:c1:23: 29:08:ee:16:7e:26:60:4f:f6:f3:6b:37:4b:ec:f0:52:7d:c9: 06:02:93:7e:0d:b2:fe:e1:2e:e5:41:b4:03:54:9f:e2:e3:85: 5e:3d:0b:dc:ac:72:a3:f3:72:c5:fa:e7:dc:9c:e6:48:b4:e5: 63:86:79:41:d9:b2:3e:64:09:f0:72:90:e5:9c:5f:f4:5c:fd: 46:cd:3a:eb:cc:54:19:fa:2c:dd:ae:63:50:16:b6:34:5a:d8: 01:70:d4:48:4c:e9:d3:3a:3e:08:37:3b:60:be:ce:8c:dc:ab: 61:a4:21:f2:c1:f0:70:6e:41:f9:29:57:fb:42:86:ad:3f:e7: 7f:bb:a5:8e:37:53:d5:36:08:cf:1e:7c:a3:41:e0:f3:0e:90: 08:41:cf:95:19:97:d8:49:20:77:e4:03:6b:f9:6f:64:93:86: 20:03:d9:bb:d6:e6:61:fa:8e:56:22:dc:c2:bd:9c:58:f4:04: 61:23:79:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsTfC+DJm5PkJpUGD5YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0 ZGE2MDIwHhcNMjYwMjA5MTkwMDI1WhcNMjYwMjEwMTkwMDI1WjAzMTEwLwYDVQQD EygzODk5YmQ0NWU5OTNiOTY3Y2EzMTVhMjM2N2ExNWQzNDkyYWE3OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmJqjeSQ62z983VW9WB6cEbCINb0 nS8LPrZebMsS+k5FySH0CK+BgaZIasyQGOCFw9bIc8PILTSVSRwcAVSDOOAvBtsI h+5E8rJWLS/1B8/c8rXoPeaAjCMxZ/Tk5ZWjWm6Zdqp2xFuxwuJLbyYLxiVQMpDI zYhyiCJ9co8w86J0EVKtUXB8l2R9eP5iqUjxXmFXV7QrvPAYysr1A5dQ/tPznrWT 7HQxivIihHmRubeXEB+VwZmdmLzauByNsrBxgieCIaom/dFSUeRqp0lf0O07wZqc uSNCUI1MQ0ovmWYH9ECACPygsGY6lYPoKg2Tye4wg1m6FsybKItLiwuXVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiZvUXpk7lnyjFaI2ehXTSSqnjGMB8GA1UdIwQY MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiO+fS2a k908FXOFQYLr00ulWu8lfFCxXUXr6zZ8pqd1UmpRe/h69NrJbBvxAVDq3pytlQlF bjXKQ4c0KU+MHCaMMMTXEcEjKQjuFn4mYE/282s3S+zwUn3JBgKTfg2y/uEu5UG0 A1Sf4uOFXj0L3Kxyo/Nyxfrn3JzmSLTlY4Z5QdmyPmQJ8HKQ5Zxf9Fz9Rs0668xU Gfos3a5jUBa2NFrYAXDUSEzp0zo+CDc7YL7OjNyrYaQh8sHwcG5B+SlX+0KGrT/n f7uljjdT1TYIzx58o0Hg8w6QCEHPlRmX2Ekgd+QDa/lvZJOGIAPZu9bmYfqOViLc wr2cWPQEYSN58A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:20 2026 by rpki-client