This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json) Hash identifier: JS1/qPoAkuIa17K9K5k/PAO+L/y/o9CpvoezsZXhlHY= Subject key identifier: BB:55:92:70:04:2B:9D:81:F6:15:9F:79:40:33:85:25:25:16:D3:95 Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6 Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6 Certificate serial: 019C41D87D87433E7CE037ABEBB77A257D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft Manifest number: 04F5 Signing time: Mon 09 Feb 2026 10:00:32 +0000 Manifest this update: Mon 09 Feb 2026 10:00:32 +0000 Manifest next update: Tue 10 Feb 2026 10:00:32 +0000 Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: 7Yy3GB/U0h6pe24yDqAXJk6bQPImEUZwT11HTFsgL2s=) 2: Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa (hash: hXNMo0ooe3x7ylZ3iHUiRzE6Xm2lDI4+UmM5cDjZux0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:7d:87:43:3e:7c:e0:37:ab:eb:b7:7a:25:7d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6 Validity Not Before: Feb 9 10:00:32 2026 GMT Not After : Feb 10 10:00:32 2026 GMT Subject: CN=bb559270042b9d81f6159f79403385252516d395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:79:a0:6c:cd:00:e7:63:2d:e2:3d:80:13:4d: ae:7b:04:84:ad:62:89:3b:e6:7d:bb:f0:35:69:69: 88:da:45:76:8d:b7:23:4e:94:73:df:a8:65:1f:52: 33:f9:96:a7:c2:ea:f2:35:01:b4:a5:72:cc:00:05: 9c:5d:46:6d:59:88:77:8c:e0:78:bb:fb:05:cd:c6: f9:18:71:98:ef:7c:38:22:1f:86:d8:3a:5d:39:4b: 6d:31:0f:a9:b1:37:3d:43:9c:7a:71:a0:65:b7:db: 4d:98:11:5c:70:26:e1:a7:ff:15:f5:b9:b2:fc:ca: b2:58:71:0b:82:cb:a8:ae:9b:6b:f3:67:cd:f4:1b: 7c:54:3e:d3:dc:5b:3c:a4:67:d8:ea:70:13:fd:f7: f6:a6:da:e3:d3:18:85:69:ef:70:42:9d:2c:13:51: 3c:87:5e:bf:f6:57:ff:1a:c7:8d:25:6a:56:e6:99: 6c:65:51:1d:84:f0:44:3f:3f:64:49:e4:37:58:86: af:81:a8:e6:64:ec:cf:e2:be:e6:c6:cb:c0:16:bb: 9c:51:0c:b1:c4:3f:17:57:4b:67:08:d3:d0:90:e7: ce:fc:8a:e3:16:8d:e1:f0:f3:09:3b:a9:98:ab:2f: 66:e4:35:2b:75:f5:af:bb:f5:ce:93:cb:b2:eb:d8: b2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:55:92:70:04:2B:9D:81:F6:15:9F:79:40:33:85:25:25:16:D3:95 X509v3 Authority Key Identifier: keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e3:c3:92:0e:be:18:5a:0a:94:e7:35:30:c4:ae:fc:bb:d0: bc:b7:67:55:86:b6:61:85:01:1d:e4:b8:99:69:b2:8d:c3:97: e1:91:70:47:c0:9c:c6:39:f0:00:20:49:3f:26:62:72:75:ce: 79:1d:89:8a:ce:13:b2:55:8e:aa:79:35:b3:2b:63:84:93:52: b3:ff:71:35:28:61:32:ed:9f:74:c8:b4:39:ce:08:89:8c:51: df:68:40:22:1f:43:39:92:b0:3b:74:ba:87:c6:3b:05:27:23: 8b:38:2d:e8:15:a1:84:29:14:8b:7d:ee:08:8e:c2:39:a5:40: 02:64:9a:42:3f:0c:e6:fe:e9:d5:16:3b:56:32:83:23:48:dd: fa:4c:b9:22:86:72:d8:f4:d4:9b:f0:4e:a8:86:2f:ac:45:9f: 41:47:38:49:e5:dc:d2:62:19:12:dd:bb:04:43:e8:12:44:fd: e0:77:56:6a:33:e7:0f:cb:f8:2c:d3:9f:43:b4:c0:a3:73:82: 32:c3:85:34:9c:66:94:3c:03:70:99:a2:6e:8f:db:45:ae:fb: e5:b2:ce:31:6f:b2:26:41:07:31:be:31:ea:4b:84:f4:9c:31: 9f:f5:94:06:12:5b:93:5e:12:47:89:a0:bc:fc:a9:94:61:7d: 23:2b:55:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2H2HQz584Der67d6JX1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGY5MzViY2QwNDg2MjVlNzAxNTVjZjJjYzI4MjllMmMy MDcyYTYwHhcNMjYwMjA5MTAwMDMyWhcNMjYwMjEwMTAwMDMyWjAzMTEwLwYDVQQD EyhiYjU1OTI3MDA0MmI5ZDgxZjYxNTlmNzk0MDMzODUyNTI1MTZkMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HmgbM0A52Mt4j2AE02uewSErWKJ O+Z9u/A1aWmI2kV2jbcjTpRz36hlH1Iz+ZanwuryNQG0pXLMAAWcXUZtWYh3jOB4 u/sFzcb5GHGY73w4Ih+G2DpdOUttMQ+psTc9Q5x6caBlt9tNmBFccCbhp/8V9bmy /MqyWHELgsuorptr82fN9Bt8VD7T3Fs8pGfY6nAT/ff2ptrj0xiFae9wQp0sE1E8 h16/9lf/GseNJWpW5plsZVEdhPBEPz9kSeQ3WIavgajmZOzP4r7mxsvAFrucUQyx xD8XV0tnCNPQkOfO/IrjFo3h8PMJO6mYqy9m5DUrdfWvu/XOk8uy69iyrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtVknAEK52B9hWfeUAzhSUlFtOVMB8GA1UdIwQY MBaAFDgPk1vNBIYl5wFVzyzCgp4sIHKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2Mt NmMwNzcxZjI1Mzk2LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yMjc0NGEtODU4OC00MjkwLWIyM2MtNmMwNzcxZjI1Mzk2 LzEvT0EtVFc4MEVoaVhuQVZYUExNS0NuaXdnY3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOPDkg6+ GFoKlOc1MMSu/LvQvLdnVYa2YYUBHeS4mWmyjcOX4ZFwR8CcxjnwACBJPyZicnXO eR2Jis4TslWOqnk1sytjhJNSs/9xNShhMu2fdMi0Oc4IiYxR32hAIh9DOZKwO3S6 h8Y7BScjizgt6BWhhCkUi33uCI7COaVAAmSaQj8M5v7p1RY7VjKDI0jd+ky5IoZy 2PTUm/BOqIYvrEWfQUc4SeXc0mIZEt27BEPoEkT94HdWajPnD8v4LNOfQ7TAo3OC MsOFNJxmlDwDcJmibo/bRa775bLOMW+yJkEHMb4x6kuE9Jwxn/WUBhJbk14SR4mg vPyplGF9IytVTg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:13 2026 by rpki-client