This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json) Hash identifier: UjigJI4xW2uBLg1D78jRY94GpUyvfKqsR2X5XzwbZmU= Subject key identifier: 44:96:E0:38:A4:50:F1:71:74:30:95:D0:7B:22:77:AD:2F:1B:AD:0D Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Certificate serial: 019C1BDEBA6136870C08F1C5AF7962AB74F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 01:01:47 +0000 Manifest this update: Mon 02 Feb 2026 01:01:47 +0000 Manifest next update: Tue 03 Feb 2026 01:01:47 +0000 Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: Sszbg0/yPZsDBX5CDszvXN7q0ZGVV11Qdx039jf0vvU=) 2: ZG5rts2ZkyOJSQmSee48v9Fzqrg.roa (hash: XvIKOTRGF7IlMAqssYAjO2zqCz+EAc1ZEi5OTjncjsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:ba:61:36:87:0c:08:f1:c5:af:79:62:ab:74:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc Validity Not Before: Feb 2 01:01:47 2026 GMT Not After : Feb 3 01:01:47 2026 GMT Subject: CN=4496e038a450f171743095d07b2277ad2f1bad0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3d:b9:a9:5f:df:b6:40:45:d1:82:f6:42:97: 9f:46:fd:03:21:63:8a:0e:d7:c6:2f:b7:e1:7b:5c: c7:ba:51:a8:84:54:ce:06:a1:03:67:b9:e0:49:b5: 04:ac:9d:35:67:3c:dd:a6:20:41:85:ea:e3:1e:ec: f9:fc:39:ed:c7:5d:f7:be:c2:36:ed:ad:5c:6e:b2: e7:37:f0:82:fb:80:57:34:42:a4:c0:06:b8:b4:b2: 90:a0:e1:4e:9f:71:9a:44:b9:a0:64:7f:a5:f5:a6: 5b:72:cd:55:5e:fe:b2:04:c0:46:27:a3:24:e6:91: c8:f3:c4:9a:c6:18:36:86:e8:52:64:72:36:bb:3e: c3:df:4a:6e:77:68:0c:63:59:e7:7b:d9:eb:d4:74: 95:12:ba:d3:1c:21:fa:18:9f:62:29:32:0d:db:b6: 0c:1a:41:5b:8a:b7:71:cc:42:e6:92:88:5b:60:a5: bf:0d:da:5b:55:2e:72:c9:bf:9a:ac:cb:9b:ee:cb: 50:71:73:72:6a:45:4f:39:15:73:ce:18:21:53:dc: a1:59:a6:9b:43:c8:b8:5e:83:ff:a3:17:63:72:fc: 68:26:21:97:82:9f:2f:30:af:c5:01:c2:9d:ce:d3: 7c:e6:74:ec:cf:1a:ae:b5:13:5e:f9:2c:73:53:02: 60:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:96:E0:38:A4:50:F1:71:74:30:95:D0:7B:22:77:AD:2F:1B:AD:0D X509v3 Authority Key Identifier: keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0a:8a:60:20:85:55:a5:3b:40:53:58:9b:35:d8:80:aa:8c: eb:c0:f1:f2:66:3e:a5:e7:2e:49:a7:d1:57:9d:0f:76:af:6e: 1d:a3:88:87:b5:14:ad:fc:72:e1:05:6e:02:76:41:73:3a:40: b2:66:69:54:15:4f:bc:f4:00:95:09:5a:c3:59:f5:40:c2:cf: 63:d1:45:4b:f1:5a:b8:72:56:9a:af:8b:42:31:95:48:51:05: b8:59:13:ec:c6:dc:41:c9:79:a5:0b:5f:73:28:39:cb:a7:2d: d2:31:54:01:6e:23:c3:70:66:93:84:bc:e9:44:5a:0b:f0:e4: 60:c5:79:90:22:e4:4c:dc:d5:55:27:58:12:1f:62:ea:23:82: 7c:0f:9d:4a:bc:39:09:4c:c2:9b:01:91:56:64:0a:7d:f2:0e: 84:a6:67:83:21:cc:07:e6:4e:99:28:37:e2:97:4a:30:42:e5: 59:2e:2a:c4:ac:83:4b:4d:39:fd:77:95:a5:b9:94:ee:0e:de: 8b:73:b5:be:26:82:75:cd:1e:fa:f3:b2:47:ea:4d:e0:ff:cd: 7b:10:d9:50:d7:a1:fa:7b:25:8e:02:7a:28:26:bf:de:2c:3d: 81:b2:de:1d:03:7e:55:e3:28:c9:96:12:9a:d3:77:a3:18:94: cf:59:f9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3rphNocMCPHFr3liq3T3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk YmNiYmMwHhcNMjYwMjAyMDEwMTQ3WhcNMjYwMjAzMDEwMTQ3WjAzMTEwLwYDVQQD Eyg0NDk2ZTAzOGE0NTBmMTcxNzQzMDk1ZDA3YjIyNzdhZDJmMWJhZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz25qV/ftkBF0YL2QpefRv0DIWOK DtfGL7fhe1zHulGohFTOBqEDZ7ngSbUErJ01ZzzdpiBBherjHuz5/Dntx133vsI2 7a1cbrLnN/CC+4BXNEKkwAa4tLKQoOFOn3GaRLmgZH+l9aZbcs1VXv6yBMBGJ6Mk 5pHI88Saxhg2huhSZHI2uz7D30pud2gMY1nne9nr1HSVErrTHCH6GJ9iKTIN27YM GkFbirdxzELmkohbYKW/DdpbVS5yyb+arMub7stQcXNyakVPORVzzhghU9yhWaab Q8i4XoP/oxdjcvxoJiGXgp8vMK/FAcKdztN85nTszxqutRNe+SxzUwJgrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESW4DikUPFxdDCV0Hsid60vG60NMB8GA1UdIwQY MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwqKYCCF VaU7QFNYmzXYgKqM68Dx8mY+pecuSafRV50Pdq9uHaOIh7UUrfxy4QVuAnZBczpA smZpVBVPvPQAlQlaw1n1QMLPY9FFS/FauHJWmq+LQjGVSFEFuFkT7MbcQcl5pQtf cyg5y6ct0jFUAW4jw3Bmk4S86URaC/DkYMV5kCLkTNzVVSdYEh9i6iOCfA+dSrw5 CUzCmwGRVmQKffIOhKZngyHMB+ZOmSg34pdKMELlWS4qxKyDS005/XeVpbmU7g7e i3O1viaCdc0e+vOyR+pN4P/NexDZUNeh+nsljgJ6KCa/3iw9gbLeHQN+VeMoyZYS mtN3oxiUz1n5IQ== -----END CERTIFICATE-----Generated at Mon Feb 2 12:50:46 2026 by rpki-client