This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft File: OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft (raw, json) Hash identifier: HYqxblceFyeOEZ50CAjtSZbkFlbWbZXSKrT/dGgAV3E= Subject key identifier: 1F:25:85:BC:D2:42:42:68:E8:A1:89:A6:37:D4:02:63:17:5C:31:0D Authority key identifier: 39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43 Certificate issuer: /CN=39348867dcb2956aca65d08348e440d4727a3743 Certificate serial: 019C427E041DE896BEF7A3993337F56A08DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft Manifest number: 05B4 Signing time: Mon 09 Feb 2026 13:01:20 +0000 Manifest this update: Mon 09 Feb 2026 13:01:20 +0000 Manifest next update: Tue 10 Feb 2026 13:01:20 +0000 Files and hashes: 1: OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl (hash: FN5MGrlN2lrArRlMCX1HD+kDYuVEaOnRfXUDRJiQ6Dc=) 2: T72oUjEo0s0JrOYNowoRHWjX0w4.roa (hash: y4/cjDz+TB542z9AKMzNcOCpxzpFqML97uF7RmVq7YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:04:1d:e8:96:be:f7:a3:99:33:37:f5:6a:08:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39348867dcb2956aca65d08348e440d4727a3743 Validity Not Before: Feb 9 13:01:20 2026 GMT Not After : Feb 10 13:01:20 2026 GMT Subject: CN=1f2585bcd2424268e8a189a637d40263175c310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:83:29:23:8c:2a:56:d8:59:e1:23:81:2c:44: 46:6b:e5:1b:0b:69:46:49:2e:a6:f5:86:51:f7:1b: 37:b5:88:9f:bd:3f:fb:01:77:e4:66:45:1c:8e:16: 87:0d:7f:68:61:7b:4c:ca:7d:ab:c5:71:6f:4b:97: 3a:05:a9:e2:9d:ae:42:24:0d:1c:da:bc:ac:f7:90: 54:a6:3a:78:40:24:8d:b6:36:5c:6e:e6:08:dc:2b: 77:65:d2:eb:37:70:4f:04:41:0e:d8:7e:26:c8:d1: 17:a9:2a:91:49:1e:9a:6a:ca:cb:c2:2e:8d:f4:08: 90:28:fa:7b:9f:97:a4:12:6a:38:09:d0:5a:ea:06: c8:33:14:cf:fa:a7:d2:a2:80:95:b2:93:28:2d:2e: 2f:54:8f:1c:4a:60:a5:a1:9d:a4:ee:be:9f:79:44: fa:aa:d9:f1:08:a8:78:10:31:cd:ac:59:db:78:e0: b9:b0:18:bf:2d:42:c8:68:a2:cb:6a:5e:59:71:c0: 25:b8:4b:ec:79:39:e2:1f:fe:23:d4:8c:84:28:96: 12:9e:be:d1:27:fa:46:de:da:f3:b7:e4:5d:7b:93: d7:ca:f2:ea:6a:01:81:4d:6f:af:55:c3:2c:3a:11: e1:ee:5f:f9:33:76:15:40:6f:cf:4b:a0:e9:bd:b6: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:25:85:BC:D2:42:42:68:E8:A1:89:A6:37:D4:02:63:17:5C:31:0D X509v3 Authority Key Identifier: keyid:39:34:88:67:DC:B2:95:6A:CA:65:D0:83:48:E4:40:D4:72:7A:37:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTSIZ9yylWrKZdCDSORA1HJ6N0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1dffe1-c8ff-466b-9dc2-bfc6f48e96ab/1/OTSIZ9yylWrKZdCDSORA1HJ6N0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:30:23:96:8f:58:83:41:ef:69:60:ca:66:31:63:55:ce:f8: d4:1e:70:60:8f:a3:dc:cb:85:44:66:e8:71:c1:a1:c5:bd:75: c5:a0:eb:43:d7:31:ba:4e:75:b3:54:53:e5:66:c5:0b:c7:ea: 69:2e:eb:8c:25:8c:05:3e:29:77:ee:96:7a:87:c5:ca:b8:53: d9:55:5d:80:af:af:86:76:d2:69:b6:e6:98:29:fc:a9:65:f4: 02:f8:86:a0:bc:9a:96:2a:d2:b6:cf:c9:80:ec:3c:01:08:76: 6e:d1:a2:e7:55:21:ad:b0:c6:32:78:d9:d4:5a:e6:7e:e2:54: a5:28:c5:97:3e:cf:b9:79:a7:28:e6:e9:d9:e4:88:de:1a:b2: 81:60:1d:b2:c2:67:c5:e2:5f:73:21:6b:58:b1:b2:86:c1:9a: 17:c3:f5:ab:20:24:44:4d:3f:d8:71:20:ca:ac:7d:fc:78:43: 55:22:c9:8c:9c:a7:ee:16:fb:6f:a8:2d:3d:dc:f5:9c:e0:f4: d8:7d:f0:6a:3b:4a:14:b0:1a:50:57:d1:51:9d:ee:f6:54:84: 8a:7b:83:c6:f7:44:13:a4:b4:8c:52:93:ff:43:46:ef:0c:60: f7:00:f5:48:7a:e6:54:3c:bb:99:a0:cc:01:01:aa:91:a4:a0: 7b:18:64:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgQd6Ja+96OZMzf1agjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzQ4ODY3ZGNiMjk1NmFjYTY1ZDA4MzQ4ZTQ0MGQ0NzI3 YTM3NDMwHhcNMjYwMjA5MTMwMTIwWhcNMjYwMjEwMTMwMTIwWjAzMTEwLwYDVQQD EygxZjI1ODViY2QyNDI0MjY4ZThhMTg5YTYzN2Q0MDI2MzE3NWMzMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64MpI4wqVthZ4SOBLERGa+UbC2lG SS6m9YZR9xs3tYifvT/7AXfkZkUcjhaHDX9oYXtMyn2rxXFvS5c6Banina5CJA0c 2rys95BUpjp4QCSNtjZcbuYI3Ct3ZdLrN3BPBEEO2H4myNEXqSqRSR6aasrLwi6N 9AiQKPp7n5ekEmo4CdBa6gbIMxTP+qfSooCVspMoLS4vVI8cSmCloZ2k7r6feUT6 qtnxCKh4EDHNrFnbeOC5sBi/LULIaKLLal5ZccAluEvseTniH/4j1IyEKJYSnr7R J/pG3trzt+Rde5PXyvLqagGBTW+vVcMsOhHh7l/5M3YVQG/PS6DpvbY88QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8lhbzSQkJo6KGJpjfUAmMXXDENMB8GA1UdIwQY MBaAFDk0iGfcspVqymXQg0jkQNRyejdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzIt YmZjNmY0OGU5NmFiLzEvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xZGZmZTEtYzhmZi00NjZiLTlkYzItYmZjNmY0OGU5NmFi LzEvT1RTSVo5eXlsV3JLWmRDRFNPUkExSEo2TjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzAjlo9Y g0HvaWDKZjFjVc741B5wYI+j3MuFRGboccGhxb11xaDrQ9cxuk51s1RT5WbFC8fq aS7rjCWMBT4pd+6WeofFyrhT2VVdgK+vhnbSabbmmCn8qWX0AviGoLyalirSts/J gOw8AQh2btGi51UhrbDGMnjZ1FrmfuJUpSjFlz7PuXmnKObp2eSI3hqygWAdssJn xeJfcyFrWLGyhsGaF8P1qyAkRE0/2HEgyqx9/HhDVSLJjJyn7hb7b6gtPdz1nOD0 2H3wajtKFLAaUFfRUZ3u9lSEinuDxvdEE6S0jFKT/0NG7wxg9wD1SHrmVDy7maDM AQGqkaSgexhk1A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:22 2026 by rpki-client