This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft File: ODHl2Yzu4014OlHMy27k3E7kN5M.mft (raw, json) Hash identifier: dHnnsOXjQ32qdwqVc/7dpz+G1UENbRM0HwTeUeVp4kE= Subject key identifier: 08:0D:6A:77:09:F7:D2:25:C0:BE:5C:92:D3:C9:44:53:AC:35:EC:72 Authority key identifier: 38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 Certificate issuer: /CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Certificate serial: 019C40FD825F7AC58C1C678AFC425B259634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:01:21 +0000 Manifest this update: Mon 09 Feb 2026 06:01:21 +0000 Manifest next update: Tue 10 Feb 2026 06:01:21 +0000 Files and hashes: 1: ODHl2Yzu4014OlHMy27k3E7kN5M.crl (hash: oBcHEsS1wddyKECuHwWoCOz8RwCyLOHskMdvsoynk64=) 2: zucJ6YgrQJGDLIOYLMRpGOFrJ0w.roa (hash: +d11tlOKKVhj+zqZ+T5wWGXNqfLiHwbuzCrGTpX/Jag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:82:5f:7a:c5:8c:1c:67:8a:fc:42:5b:25:96:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3831e5d98ceee34d783a51cccb6ee4dc4ee43793 Validity Not Before: Feb 9 06:01:21 2026 GMT Not After : Feb 10 06:01:21 2026 GMT Subject: CN=080d6a7709f7d225c0be5c92d3c94453ac35ec72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:56:42:a7:ea:2a:ef:cf:39:b0:cc:70:13: c3:86:be:54:e4:de:40:fc:94:59:a2:75:62:46:2b: a6:0f:56:d0:30:f1:bc:2a:a0:04:8f:7f:92:ef:eb: 37:9b:45:59:26:67:36:e4:28:c8:ce:65:17:6a:f6: 91:5d:bc:1e:79:f4:bb:58:77:c6:64:db:be:38:cb: 0c:cc:e8:33:dc:d8:06:b7:55:df:fb:e3:2b:e1:cb: 11:13:5b:05:8d:a4:37:a9:16:87:12:68:1a:6b:49: 3e:71:a2:81:9a:95:8a:79:3b:46:af:88:5a:7f:30: 18:35:9d:c4:05:c1:8f:36:29:78:54:d7:98:d7:8f: 56:96:7d:31:fd:20:4c:9c:07:a7:24:0d:83:59:48: 25:1f:88:aa:29:70:f3:61:34:61:a5:b1:79:e1:63: 47:f7:a8:c6:04:21:64:71:eb:a3:3b:4d:d7:15:fc: c1:43:9e:5f:c3:c9:e3:65:01:4b:a1:be:9c:f3:7a: f9:55:f4:79:61:c4:8b:69:56:80:73:63:89:f0:42: e6:db:3a:0b:95:41:11:35:61:1c:7a:a1:15:df:30: 22:6a:7e:92:6f:a1:f4:ec:6d:c3:9e:ca:81:32:ee: 4d:37:8b:e2:b2:14:9e:f4:d3:49:35:57:92:80:a1: bc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:6A:77:09:F7:D2:25:C0:BE:5C:92:D3:C9:44:53:AC:35:EC:72 X509v3 Authority Key Identifier: keyid:38:31:E5:D9:8C:EE:E3:4D:78:3A:51:CC:CB:6E:E4:DC:4E:E4:37:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODHl2Yzu4014OlHMy27k3E7kN5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f41e52-0f25-4cc0-ac87-352cd296ebb8/1/ODHl2Yzu4014OlHMy27k3E7kN5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:44:2d:1c:4a:7e:fa:f1:6e:cf:39:ee:e4:c9:73:99:82: a5:5d:ff:bc:d4:03:4c:9c:4e:6a:b4:e6:ef:51:23:7e:9e:95: 2c:3a:f6:f1:33:47:e2:7b:d1:a1:c7:e1:12:5a:87:17:8c:3c: 86:28:39:9d:19:33:d4:0f:d1:0d:79:9f:7c:30:3a:31:f6:79: cf:50:04:f4:3a:70:c3:bd:c3:86:28:08:41:1d:23:ae:ef:42: cf:10:84:78:f9:20:b9:48:d5:73:0d:c3:4d:f6:2b:ea:bc:b1: 93:0a:91:d9:16:c4:34:9c:72:19:8c:dc:ef:ba:1e:ee:f5:e1: 38:11:8d:3f:2d:45:cc:e6:f7:e2:18:d9:d9:94:e5:0b:7f:17: 7e:cd:e7:98:40:ff:a6:81:86:ff:67:7f:51:c3:18:14:e2:0b: c5:a3:84:32:c3:2a:29:ba:42:63:2a:a1:aa:07:a7:44:8d:b7: d7:1e:00:3a:79:58:a5:f8:f2:9a:ce:3c:8a:6b:8d:5e:9f:4b: de:7a:67:7d:18:0a:4e:b3:58:75:ef:7e:b7:9f:82:6a:65:06: 8e:fa:50:56:86:65:32:80:d2:93:b0:e8:c9:98:12:91:8e:69: 1b:19:38:27:af:ee:38:b4:2a:0a:96:0c:23:df:0c:55:5d:97: d4:c8:ec:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/YJfesWMHGeK/EJbJZY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzFlNWQ5OGNlZWUzNGQ3ODNhNTFjY2NiNmVlNGRjNGVl NDM3OTMwHhcNMjYwMjA5MDYwMTIxWhcNMjYwMjEwMDYwMTIxWjAzMTEwLwYDVQQD EygwODBkNmE3NzA5ZjdkMjI1YzBiZTVjOTJkM2M5NDQ1M2FjMzVlYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxFWQqfqKu/PObDMcBPDhr5U5N5A /JRZonViRiumD1bQMPG8KqAEj3+S7+s3m0VZJmc25CjIzmUXavaRXbweefS7WHfG ZNu+OMsMzOgz3NgGt1Xf++Mr4csRE1sFjaQ3qRaHEmgaa0k+caKBmpWKeTtGr4ha fzAYNZ3EBcGPNil4VNeY149Wln0x/SBMnAenJA2DWUglH4iqKXDzYTRhpbF54WNH 96jGBCFkceujO03XFfzBQ55fw8njZQFLob6c83r5VfR5YcSLaVaAc2OJ8ELm2zoL lUERNWEceqEV3zAian6Sb6H07G3DnsqBMu5NN4vishSe9NNJNVeSgKG8yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgNancJ99IlwL5cktPJRFOsNexyMB8GA1UdIwQY MBaAFDgx5dmM7uNNeDpRzMtu5NxO5DeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODct MzUyY2QyOTZlYmI4LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9mNDFlNTItMGYyNS00Y2MwLWFjODctMzUyY2QyOTZlYmI4 LzEvT0RIbDJZenU0MDE0T2xITXkyN2szRTdrTjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTNELRxK fvrxbs857uTJc5mCpV3/vNQDTJxOarTm71Ejfp6VLDr28TNH4nvRocfhElqHF4w8 hig5nRkz1A/RDXmffDA6MfZ5z1AE9Dpww73DhigIQR0jru9CzxCEePkguUjVcw3D TfYr6ryxkwqR2RbENJxyGYzc77oe7vXhOBGNPy1FzOb34hjZ2ZTlC38Xfs3nmED/ poGG/2d/UcMYFOILxaOEMsMqKbpCYyqhqgenRI231x4AOnlYpfjyms48imuNXp9L 3npnfRgKTrNYde9+t5+CamUGjvpQVoZlMoDSk7DoyZgSkY5pGxk4J6/uOLQqCpYM I98MVV2X1Mjs6A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client