This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json) Hash identifier: 0PjJVV/jFyK1WzyESnz/6GTzfW7t50u/OLxzEdZPbaw= Subject key identifier: 30:42:83:CB:A3:18:CB:D1:73:72:AB:01:57:A7:CE:50:04:73:55:24 Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Certificate serial: 019C4246A61D64E6B2C3686B8D283F0BB49C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: h9ZEFQ_M3eqG9SpeL-9Vf7khClE.roa (hash: F0ol1/t/MHG3rheVuTMinY7d1uEEc3ChRKFw6MqUlUk=) 2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: N0pLja73taP/dHqZS7m3mI01By3IeUlvRtb41n7cjIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a6:1d:64:e6:b2:c3:68:6b:8d:28:3f:0b:b4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=304283cba318cbd17372ab0157a7ce5004735524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:57:c2:c4:20:71:05:90:01:cb:3e:c5:06: db:ec:2b:86:58:58:88:95:47:8b:16:a0:02:44:5a: af:09:15:1d:e0:34:f9:d4:97:0d:92:90:cc:ac:f3: 83:7e:df:dc:af:29:ce:70:e6:50:a4:fe:d4:7c:64: 03:75:95:24:ee:5c:f8:2b:2e:76:ab:e1:13:d6:ef: e2:b7:48:ee:1c:d7:ba:d1:fc:87:b2:b6:57:ad:e2: d9:87:71:be:9f:87:84:bd:02:10:5b:7a:db:96:c4: 60:8d:6a:64:9d:3d:f8:bf:8a:bd:7a:17:fe:03:4e: b0:69:f1:35:49:8b:94:56:0e:84:bf:cf:7f:76:ac: 72:04:99:54:2a:ab:49:fc:b4:88:6e:50:c3:a3:67: f8:f6:1b:11:66:d9:44:77:18:1c:9e:87:8c:47:7b: 7a:8e:6a:c7:8a:23:65:2a:62:de:f8:65:52:c9:ed: 71:87:c1:eb:15:42:ed:e2:0f:63:6c:e0:b5:99:0e: 55:70:3b:0c:02:d8:4c:61:07:9a:c2:7c:6c:0d:d4: 80:64:c9:21:67:79:88:61:46:d5:61:89:06:4b:ed: 81:34:a0:00:34:3a:c7:1a:ad:34:b1:29:2c:b7:fb: 31:07:1f:10:1f:55:64:83:9c:a8:3f:d2:07:22:d4: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:42:83:CB:A3:18:CB:D1:73:72:AB:01:57:A7:CE:50:04:73:55:24 X509v3 Authority Key Identifier: keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d6:7f:f2:64:e6:90:18:25:d5:0e:f7:83:0e:d8:d7:73:bc: 04:42:ca:2a:d6:56:b5:9a:7f:05:42:c3:82:f3:a1:5b:1d:8d: 73:c8:e1:2d:3a:26:96:25:77:13:7a:79:be:8c:b2:d6:c6:da: 63:be:8a:cc:1a:a8:ca:f1:dc:5a:86:1e:94:fe:2b:5f:28:98: 4b:a2:a6:ce:4c:d1:97:09:af:47:55:d9:6b:e3:9d:e4:19:11: 68:b3:94:53:5a:ef:10:19:fa:43:d7:fe:09:66:75:6e:55:37: 4b:e3:64:4a:64:e6:b9:b7:ae:1d:da:74:ba:03:d1:32:7c:bc: 47:87:af:66:e7:d8:42:86:08:40:e4:c8:74:20:27:c7:90:0b: 73:98:c5:89:53:9e:2a:33:2a:c2:3c:37:62:e3:e5:b2:74:74: 02:18:af:e1:2e:ae:be:69:96:54:eb:3b:35:7a:9b:82:34:af: 28:8d:09:49:f9:a2:f7:5d:b2:be:17:b9:9d:77:a7:a1:6e:03: 46:16:11:7e:8f:bb:d1:43:15:3f:a2:f9:3b:9f:2c:10:42:3d: 32:97:0f:0e:ed:b4:4a:1e:02:8d:96:6a:5a:63:ed:92:9f:02: ce:0a:66:fd:42:35:40:b5:ed:f4:f6:67:19:c0:1f:e9:c3:65: b1:77:3b:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqYdZOayw2hrjSg/C7ScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZDNhOTE0NTk3M2M3OWEzZTdiOTU1MzFlM2QwZGY3ZDI4 YzRhMDQwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD EygzMDQyODNjYmEzMThjYmQxNzM3MmFiMDE1N2E3Y2U1MDA0NzM1NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv9XwsQgcQWQAcs+xQbb7CuGWFiI lUeLFqACRFqvCRUd4DT51JcNkpDMrPODft/crynOcOZQpP7UfGQDdZUk7lz4Ky52 q+ET1u/it0juHNe60fyHsrZXreLZh3G+n4eEvQIQW3rblsRgjWpknT34v4q9ehf+ A06wafE1SYuUVg6Ev89/dqxyBJlUKqtJ/LSIblDDo2f49hsRZtlEdxgcnoeMR3t6 jmrHiiNlKmLe+GVSye1xh8HrFULt4g9jbOC1mQ5VcDsMAthMYQeawnxsDdSAZMkh Z3mIYUbVYYkGS+2BNKAANDrHGq00sSkst/sxBx8QH1Vkg5yoP9IHItTBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBCg8ujGMvRc3KrAVenzlAEc1UkMB8GA1UdIwQY MBaAFInTqRRZc8eaPnuVUx49DffSjEoEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUt N2Q0MGMxMWE5NTAwLzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84YzBmMGMtMTljNy00ZWFmLTk2ZjUtN2Q0MGMxMWE5NTAw LzEvaWRPcEZGbHp4NW8tZTVWVEhqME45OUtNU2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidZ/8mTm kBgl1Q73gw7Y13O8BELKKtZWtZp/BULDgvOhWx2Nc8jhLTomliV3E3p5voyy1sba Y76KzBqoyvHcWoYelP4rXyiYS6KmzkzRlwmvR1XZa+Od5BkRaLOUU1rvEBn6Q9f+ CWZ1blU3S+NkSmTmubeuHdp0ugPRMny8R4evZufYQoYIQOTIdCAnx5ALc5jFiVOe KjMqwjw3YuPlsnR0Ahiv4S6uvmmWVOs7NXqbgjSvKI0JSfmi912yvhe5nXenoW4D RhYRfo+70UMVP6L5O58sEEI9MpcPDu20Sh4CjZZqWmPtkp8Czgpm/UI1QLXt9PZn GcAf6cNlsXc7RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:36 2026 by rpki-client