This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft File: OhZp0d72mq2VjU5W4b_5xk01DF8.mft (raw, json) Hash identifier: u89xkgCjBfIWJjcRFRO8M5/06e5igixzjyfKlddhjzc= Subject key identifier: D0:9E:63:4E:E1:AA:4D:D7:06:2A:54:BD:E7:3E:3F:C1:04:D3:A4:C3 Authority key identifier: 3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F Certificate issuer: /CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Certificate serial: 019C43C7385605C2F90ACC1415C8510DA2DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 19:00:55 +0000 Manifest this update: Mon 09 Feb 2026 19:00:55 +0000 Manifest next update: Tue 10 Feb 2026 19:00:55 +0000 Files and hashes: 1: OhZp0d72mq2VjU5W4b_5xk01DF8.crl (hash: GHKmD/XQ4fjETx0xmOY+QJsy1THL8ispqtGWsCd9XyM=) 2: VUrlm_hPpNP1fsoq1Z_J1_dTPDo.roa (hash: Gle5OIYk7BR03INIOIupQh+MtwLh/t3GqzYnZvdaeaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:38:56:05:c2:f9:0a:cc:14:15:c8:51:0d:a2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1669d1def69aad958d4e56e1bff9c64d350c5f Validity Not Before: Feb 9 19:00:55 2026 GMT Not After : Feb 10 19:00:55 2026 GMT Subject: CN=d09e634ee1aa4dd7062a54bde73e3fc104d3a4c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:4a:70:72:b9:79:ea:f5:97:66:8c:e2:57: b7:dc:34:49:aa:ba:ee:0c:4d:34:ff:77:91:3b:7e: f0:96:f8:19:92:96:31:26:78:0d:6f:0b:d8:bb:f4: 42:e9:cb:e8:53:03:02:3a:2c:00:01:80:fa:65:da: a1:27:27:de:50:d4:10:56:80:bd:b0:17:ce:31:91: 4f:eb:dd:cb:5a:23:aa:18:f7:25:fe:65:4c:7b:f1: cd:bf:f4:dc:28:5b:0e:ae:96:2a:04:97:30:5e:94: 25:3e:24:5f:33:44:b4:05:8c:61:28:ae:d9:11:84: 73:5b:30:24:23:b0:17:e5:42:1f:35:a1:a7:cd:62: f0:87:c6:36:33:fa:47:4a:01:d6:3a:c0:b8:25:8a: ec:6e:4a:d8:f2:83:23:e2:9b:4f:e1:4e:7c:2b:81: 1d:b3:09:e3:ab:7e:18:c3:1d:a1:82:ca:e4:3c:20: 78:58:77:f0:56:f3:2b:f0:63:0d:5a:eb:fa:d5:50: a4:7d:1b:14:47:f9:db:87:d8:95:93:05:c6:57:d2: 38:d5:ea:1a:81:67:9d:9e:c0:ef:f9:d8:80:99:57: f8:2a:ef:26:eb:15:bf:7b:96:11:9d:e6:3e:4f:6e: 8a:bf:c1:e3:35:bf:d6:d2:0d:d7:28:af:fe:fc:34: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9E:63:4E:E1:AA:4D:D7:06:2A:54:BD:E7:3E:3F:C1:04:D3:A4:C3 X509v3 Authority Key Identifier: keyid:3A:16:69:D1:DE:F6:9A:AD:95:8D:4E:56:E1:BF:F9:C6:4D:35:0C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhZp0d72mq2VjU5W4b_5xk01DF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c740f5-4f2b-4119-bd32-e159cd6f3654/1/OhZp0d72mq2VjU5W4b_5xk01DF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b9:e2:3d:21:00:b1:95:3e:7f:13:23:4e:9a:b0:18:e8:46: 5d:93:5b:29:01:67:b9:10:ba:20:4a:ab:9a:81:a2:a3:45:ec: fa:84:80:15:7f:e7:89:39:ff:95:ea:7b:77:fd:cd:e5:ac:a6: d5:1b:34:52:f7:5b:12:e7:0d:91:87:10:12:9c:6a:61:71:f3: a4:5c:e1:f1:56:d5:81:78:c0:f0:fb:5a:49:33:cf:ba:eb:d1: 9a:46:73:b0:95:15:00:61:95:0a:77:66:f4:19:51:94:f4:2b: 5d:23:26:3f:65:c6:08:80:c6:a2:d5:55:db:15:14:ad:20:35: ab:c0:7c:e8:a5:ab:01:31:2d:35:b7:80:49:fc:38:81:45:92: 18:05:47:30:19:23:25:41:a6:7f:6b:0e:3c:1a:5c:3d:44:7d: 84:a9:4a:9f:e4:cd:fe:2d:c3:30:a8:8d:a9:d1:23:28:df:65: fa:7d:6b:09:ee:0b:f5:b0:38:74:a7:19:33:a9:d6:91:72:f2: b8:2b:ff:12:13:37:96:1e:3a:ba:b4:4d:be:71:e3:25:fe:00: 6d:ad:4f:cf:16:a5:8f:4d:8e:3e:a5:29:84:59:2c:08:b5:b8: 50:91:43:27:1e:e8:06:77:66:3e:19:91:00:de:e9:71:78:89: ee:48:24:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxzhWBcL5CswUFchRDaLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMTY2OWQxZGVmNjlhYWQ5NThkNGU1NmUxYmZmOWM2NGQz NTBjNWYwHhcNMjYwMjA5MTkwMDU1WhcNMjYwMjEwMTkwMDU1WjAzMTEwLwYDVQQD EyhkMDllNjM0ZWUxYWE0ZGQ3MDYyYTU0YmRlNzNlM2ZjMTA0ZDNhNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhZKcHK5eer1l2aM4le33DRJqrru DE00/3eRO37wlvgZkpYxJngNbwvYu/RC6cvoUwMCOiwAAYD6ZdqhJyfeUNQQVoC9 sBfOMZFP693LWiOqGPcl/mVMe/HNv/TcKFsOrpYqBJcwXpQlPiRfM0S0BYxhKK7Z EYRzWzAkI7AX5UIfNaGnzWLwh8Y2M/pHSgHWOsC4JYrsbkrY8oMj4ptP4U58K4Ed swnjq34Ywx2hgsrkPCB4WHfwVvMr8GMNWuv61VCkfRsUR/nbh9iVkwXGV9I41eoa gWednsDv+diAmVf4Ku8m6xW/e5YRneY+T26Kv8HjNb/W0g3XKK/+/DS/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCeY07hqk3XBipUvec+P8EE06TDMB8GA1UdIwQY MBaAFDoWadHe9pqtlY1OVuG/+cZNNQxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzIt ZTE1OWNkNmYzNjU0LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jNzQwZjUtNGYyYi00MTE5LWJkMzItZTE1OWNkNmYzNjU0 LzEvT2hacDBkNzJtcTJWalU1VzRiXzV4azAxREY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7niPSEA sZU+fxMjTpqwGOhGXZNbKQFnuRC6IEqrmoGio0Xs+oSAFX/niTn/lep7d/3N5aym 1Rs0UvdbEucNkYcQEpxqYXHzpFzh8VbVgXjA8PtaSTPPuuvRmkZzsJUVAGGVCndm 9BlRlPQrXSMmP2XGCIDGotVV2xUUrSA1q8B86KWrATEtNbeASfw4gUWSGAVHMBkj JUGmf2sOPBpcPUR9hKlKn+TN/i3DMKiNqdEjKN9l+n1rCe4L9bA4dKcZM6nWkXLy uCv/EhM3lh46urRNvnHjJf4Aba1Pzxalj02OPqUphFksCLW4UJFDJx7oBndmPhmR AN7pcXiJ7kgkaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:36 2026 by rpki-client