This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft File: O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json) Hash identifier: VJFe/D5S6zM0k7YdzHqhJC4j8jDXGVFR9JKxwVKoVtQ= Subject key identifier: 1A:97:FB:F5:79:9C:57:2F:0D:6C:52:DC:99:F0:A6:8D:FB:F6:B5:CD Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86 Certificate issuer: /CN=3b84523c3932e2d198046234b962e0dc51abf586 Certificate serial: 019C43225CCDF62FBBC53E1F7B23679C283C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 16:00:51 +0000 Manifest this update: Mon 09 Feb 2026 16:00:51 +0000 Manifest next update: Tue 10 Feb 2026 16:00:51 +0000 Files and hashes: 1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: CQQvHGXlIqVdKru27kbxwcJJd5QN7sUzuK/qf+jvSJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:5c:cd:f6:2f:bb:c5:3e:1f:7b:23:67:9c:28:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586 Validity Not Before: Feb 9 16:00:51 2026 GMT Not After : Feb 10 16:00:51 2026 GMT Subject: CN=1a97fbf5799c572f0d6c52dc99f0a68dfbf6b5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5c:d1:52:b9:e2:47:c5:da:2c:8e:71:1c:96: 7b:65:36:c6:d3:56:51:58:09:93:e1:a0:b2:32:bc: b3:f5:1a:28:78:86:a1:0d:f6:58:8d:e1:72:d1:62: 0c:48:7d:6c:0d:33:94:94:75:9e:c1:fb:b8:bb:2f: 41:1a:3d:97:19:7c:86:74:ba:7d:ba:5e:1e:63:be: 72:ab:15:ba:a3:40:40:00:11:59:bd:09:d4:09:1b: 2b:11:c6:57:7d:94:ac:85:b5:b2:90:28:5a:e9:d7: d7:0c:d3:13:76:60:d9:7d:36:e2:02:ac:94:61:10: e0:96:e9:ad:ce:5e:2b:91:8a:f0:8f:51:c3:b8:f3: 73:d8:09:36:a4:f1:65:b0:8a:6d:39:a0:3d:f7:84: 86:c1:71:07:64:1e:a7:16:bc:46:b8:d7:00:9b:81: 23:0a:cd:6e:9e:f5:f5:fd:4d:9f:b8:c8:42:f3:4b: ca:2b:6e:f3:75:2b:2b:7c:40:29:2b:50:33:52:2e: d0:2d:08:92:6c:9f:ab:c0:f9:5c:2e:51:4d:b0:b3: 02:ab:a4:11:d0:d6:f3:c6:e9:90:2e:1f:49:d7:8f: 53:02:7f:da:55:14:02:8c:14:21:fd:42:17:06:b8: b4:64:9c:6e:8b:98:e9:47:06:1d:96:ae:08:38:c6: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:97:FB:F5:79:9C:57:2F:0D:6C:52:DC:99:F0:A6:8D:FB:F6:B5:CD X509v3 Authority Key Identifier: keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a6:3a:9d:d3:96:98:cc:50:06:f6:92:31:3f:fb:77:8a:91: f3:19:46:27:bb:9b:c1:28:40:d0:cf:c4:54:0d:91:a3:4b:28: 29:00:7f:07:c0:85:99:27:a9:33:83:16:5f:71:0b:d3:82:ff: 83:a7:80:db:f4:ae:cc:8e:4a:e2:db:ad:e9:2c:b9:02:e1:58: 5e:e8:55:2e:eb:51:bc:b7:fd:d4:f0:ee:c6:33:01:14:9e:7e: 6c:bb:8f:7f:74:77:b9:1c:79:cf:d8:af:2b:7d:e0:49:c5:f7: 47:a8:32:b2:c7:76:bc:c3:a0:09:0a:29:3a:21:89:d5:0a:da: 1d:fd:dd:38:1b:a7:8a:05:61:ce:aa:79:9f:a9:b3:7b:d5:8f: fe:99:b4:a8:54:d3:42:d0:a4:97:bd:be:32:2c:c5:82:9b:a7: b0:da:e5:21:cc:0f:2c:50:50:03:70:50:e0:c4:34:8d:81:24: 70:ba:f6:c4:ed:7a:0b:f9:67:00:a2:36:68:67:c2:c0:cf:30: c6:b0:e4:08:7a:a1:93:1d:ad:56:ec:2c:f9:cd:53:86:56:21: 49:b6:68:65:3e:8a:e8:83:bb:20:92:a5:d5:38:0d:bc:29:21: 43:e6:04:37:d8:31:22:df:90:65:c5:77:ff:b2:61:26:4c:91: 44:84:08:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlzN9i+7xT4feyNnnCg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiODQ1MjNjMzkzMmUyZDE5ODA0NjIzNGI5NjJlMGRjNTFh YmY1ODYwHhcNMjYwMjA5MTYwMDUxWhcNMjYwMjEwMTYwMDUxWjAzMTEwLwYDVQQD EygxYTk3ZmJmNTc5OWM1NzJmMGQ2YzUyZGM5OWYwYTY4ZGZiZjZiNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VzRUrniR8XaLI5xHJZ7ZTbG01ZR WAmT4aCyMryz9RooeIahDfZYjeFy0WIMSH1sDTOUlHWewfu4uy9BGj2XGXyGdLp9 ul4eY75yqxW6o0BAABFZvQnUCRsrEcZXfZSshbWykCha6dfXDNMTdmDZfTbiAqyU YRDglumtzl4rkYrwj1HDuPNz2Ak2pPFlsIptOaA994SGwXEHZB6nFrxGuNcAm4Ej Cs1unvX1/U2fuMhC80vKK27zdSsrfEApK1AzUi7QLQiSbJ+rwPlcLlFNsLMCq6QR 0NbzxumQLh9J149TAn/aVRQCjBQh/UIXBri0ZJxui5jpRwYdlq4IOMZqXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqX+/V5nFcvDWxS3Jnwpo379rXNMB8GA1UdIwQY MBaAFDuEUjw5MuLRmARiNLli4NxRq/WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYt YmRmNWM3ODA3NDJlLzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYtYmRmNWM3ODA3NDJl LzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKY6ndOW mMxQBvaSMT/7d4qR8xlGJ7ubwShA0M/EVA2Ro0soKQB/B8CFmSepM4MWX3EL04L/ g6eA2/SuzI5K4tut6Sy5AuFYXuhVLutRvLf91PDuxjMBFJ5+bLuPf3R3uRx5z9iv K33gScX3R6gyssd2vMOgCQopOiGJ1QraHf3dOBunigVhzqp5n6mze9WP/pm0qFTT QtCkl72+MizFgpunsNrlIcwPLFBQA3BQ4MQ0jYEkcLr2xO16C/lnAKI2aGfCwM8w xrDkCHqhkx2tVuws+c1ThlYhSbZoZT6K6IO7IJKl1TgNvCkhQ+YEN9gxIt+QZcV3 /7JhJkyRRIQIQw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:16 2026 by rpki-client