This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json) Hash identifier: yQnuVWC4J3/tiqBwB0MHFZKNI+nCG5089lly0CsfsPo= Subject key identifier: E3:3A:C6:BC:57:E5:3D:6F:E8:9E:85:03:0D:01:CD:30:1E:10:50:F3 Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d Certificate serial: 019C41A2220BC7C3EEBF53FA0EFADF50BDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft Manifest number: 1409 Signing time: Mon 09 Feb 2026 09:01:10 +0000 Manifest this update: Mon 09 Feb 2026 09:01:10 +0000 Manifest next update: Tue 10 Feb 2026 09:01:10 +0000 Files and hashes: 1: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: MRqFqArbJyxer7g58WITrqhxbDMwpphAX7FrgL4KLLA=) 2: sU4SdgLEKJLdmmd7O0WH0cIHbDc.roa (hash: 56F6iMelALI7bLbAqUWShoXQBZvQSM/mzwf3Aamh/qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:22:0b:c7:c3:ee:bf:53:fa:0e:fa:df:50:bd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d Validity Not Before: Feb 9 09:01:10 2026 GMT Not After : Feb 10 09:01:10 2026 GMT Subject: CN=e33ac6bc57e53d6fe89e85030d01cd301e1050f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:c3:18:75:c6:04:ae:03:5d:a5:e6:80:b3: 1c:1a:cf:64:14:7f:6c:24:b7:d2:ad:6b:76:6f:8f: 0d:60:84:d6:7b:66:c3:5c:1e:1c:a8:0a:67:e2:8f: 97:c0:c6:3f:00:5d:75:2f:91:b2:02:37:76:0b:c2: 4f:96:54:84:7e:9c:91:a8:b6:f3:b7:74:7d:c9:71: 0f:2b:af:62:91:9b:fa:98:e3:ec:b5:40:d9:21:36: cb:8a:33:bd:e8:36:f1:cc:21:20:fc:7f:d4:74:74: e2:fd:2c:c5:d5:14:58:a9:b7:66:bc:86:e2:0b:ab: b1:2b:c3:2f:68:25:41:16:24:9f:30:5f:06:a6:a7: 16:5a:07:06:8d:f5:c6:4f:b8:84:c4:26:a6:b1:9b: d4:f6:15:d5:d2:93:b2:bd:cc:1f:34:47:ec:bb:6a: aa:5e:76:11:1e:f8:bc:a5:18:f1:69:01:ff:72:1d: e9:47:eb:66:43:85:a7:3c:48:0c:3a:e0:4f:ed:11: 26:94:fc:ed:79:42:d6:0b:e5:0f:74:1d:e3:fb:95: 74:78:a6:56:22:8f:21:24:c2:d6:87:bf:45:36:b8: 9b:d9:d0:7f:09:94:46:48:bd:0d:61:c3:41:e6:03: af:b4:ca:c1:b6:2c:aa:05:e9:03:d3:fa:92:d6:cc: 9b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3A:C6:BC:57:E5:3D:6F:E8:9E:85:03:0D:01:CD:30:1E:10:50:F3 X509v3 Authority Key Identifier: keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2e:8b:b4:fd:43:ff:f0:52:70:d3:34:90:4d:1e:b3:62:48: 41:6f:8a:e4:5d:23:14:57:e1:62:43:fa:13:03:5a:2e:d2:1a: 7d:58:dc:2a:08:9c:28:e5:6e:1e:22:98:ed:27:a7:82:ca:f8: 4c:cf:12:f8:87:40:88:24:c8:27:76:9c:75:53:7e:18:16:6f: 80:44:61:39:11:8a:0f:65:c9:48:a2:70:a6:1b:1d:c7:c2:e1: 91:fe:78:0a:ff:75:40:4a:08:1c:05:5d:ea:a1:6a:e9:e2:f4: 6d:db:fe:f2:44:0b:e8:ed:c1:42:80:0d:d3:04:c3:23:2e:5d: 4e:f2:03:4a:77:f4:36:a1:28:d0:36:18:67:46:b9:e0:01:4d: b0:13:0f:f1:23:8c:d0:65:0b:b3:1b:31:c8:49:b3:2b:80:f6: 2c:5e:e6:d1:9f:60:13:85:46:19:7f:a4:ea:e4:4e:66:e9:cd: ec:67:41:5c:0f:ee:ea:cb:78:dc:d8:68:f8:ca:5e:ad:63:55: 6c:4f:20:1e:87:d1:e8:5b:38:c6:10:7e:e5:b4:43:ff:55:4f: 33:c8:68:a4:7c:42:e1:a2:af:b6:bc:64:3f:31:5e:b5:bd:82: 40:9e:3a:37:7d:10:04:35:78:a5:b3:3d:b6:33:42:b2:b5:48: a7:77:8d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiILx8Puv1P6DvrfUL2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2E1MDY1MDQzZDI4YTJhZGMzNjM4M2ExZGY3ZDNiZWM4 MWNlOGQwHhcNMjYwMjA5MDkwMTEwWhcNMjYwMjEwMDkwMTEwWjAzMTEwLwYDVQQD EyhlMzNhYzZiYzU3ZTUzZDZmZTg5ZTg1MDMwZDAxY2QzMDFlMTA1MGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF/DGHXGBK4DXaXmgLMcGs9kFH9s JLfSrWt2b48NYITWe2bDXB4cqApn4o+XwMY/AF11L5GyAjd2C8JPllSEfpyRqLbz t3R9yXEPK69ikZv6mOPstUDZITbLijO96DbxzCEg/H/UdHTi/SzF1RRYqbdmvIbi C6uxK8MvaCVBFiSfMF8GpqcWWgcGjfXGT7iExCamsZvU9hXV0pOyvcwfNEfsu2qq XnYRHvi8pRjxaQH/ch3pR+tmQ4WnPEgMOuBP7REmlPzteULWC+UPdB3j+5V0eKZW Io8hJMLWh79FNrib2dB/CZRGSL0NYcNB5gOvtMrBtiyqBekD0/qS1syb8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM6xrxX5T1v6J6FAw0BzTAeEFDzMB8GA1UdIwQY MBaAFDnKUGUEPSiircNjg6HffTvsgc6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2Njgt ODcwYWNmZWNiY2RmLzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2NjgtODcwYWNmZWNiY2Rm LzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi6LtP1D //BScNM0kE0es2JIQW+K5F0jFFfhYkP6EwNaLtIafVjcKgicKOVuHiKY7Sengsr4 TM8S+IdAiCTIJ3acdVN+GBZvgERhORGKD2XJSKJwphsdx8Lhkf54Cv91QEoIHAVd 6qFq6eL0bdv+8kQL6O3BQoAN0wTDIy5dTvIDSnf0NqEo0DYYZ0a54AFNsBMP8SOM 0GULsxsxyEmzK4D2LF7m0Z9gE4VGGX+k6uROZunN7GdBXA/u6st43Nho+MperWNV bE8gHofR6Fs4xhB+5bRD/1VPM8hopHxC4aKvtrxkPzFetb2CQJ46N30QBDV4pbM9 tjNCsrVIp3eNpg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:38 2026 by rpki-client