This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json) Hash identifier: A7NFA2g7TuxA2Ct2SAXjFnWZ1VIIBJDk7vN8iEieof8= Subject key identifier: EB:B7:C0:17:BD:B5:70:5C:78:B6:D4:2C:8B:B3:6E:07:5D:D9:5A:E4 Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42 Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342 Certificate serial: 019C43FE0EA79A30934936511ED0E2FA97B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft Manifest number: 118C Signing time: Mon 09 Feb 2026 20:00:49 +0000 Manifest this update: Mon 09 Feb 2026 20:00:49 +0000 Manifest next update: Tue 10 Feb 2026 20:00:49 +0000 Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: l6PllfnTsYEatwTvcHnnuSY9van/GedC6JKMTXh2jDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:0e:a7:9a:30:93:49:36:51:1e:d0:e2:fa:97:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342 Validity Not Before: Feb 9 20:00:49 2026 GMT Not After : Feb 10 20:00:49 2026 GMT Subject: CN=ebb7c017bdb5705c78b6d42c8bb36e075dd95ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:d8:e7:c4:6a:3d:55:9f:ef:2b:c6:87:26: b9:2a:1d:58:17:72:3d:bb:22:14:b4:42:68:e8:6f: a3:8f:3e:c1:82:03:94:18:d8:c5:0c:0e:eb:b9:ba: a8:f8:1c:22:a3:b8:5d:20:6f:98:88:71:c1:1c:fe: ee:99:c8:92:41:95:a2:65:e0:c8:0d:8a:1f:1a:77: ca:95:f2:33:6e:e0:24:08:59:60:05:08:19:16:63: b3:76:7e:7e:9f:f3:c7:64:0d:33:2e:8d:1a:2c:53: 8d:e8:2d:3b:87:48:2d:48:57:9d:68:b5:cb:60:e2: c6:4a:01:73:a2:aa:66:5d:78:19:22:f9:93:09:08: 23:32:db:1f:1d:63:24:8d:b7:22:1f:25:5e:ce:7a: 41:8c:91:9f:72:60:c3:b2:4b:bc:5e:bf:31:e3:9a: ff:41:68:f8:ea:51:d5:3f:57:7c:d0:32:fc:42:4d: d8:b6:1c:2a:a7:d1:be:c5:36:89:2f:fd:3d:4b:1f: 6f:09:74:55:9b:9e:20:e7:b5:4f:93:29:44:97:51: 7a:d0:41:34:cf:18:0d:cf:2b:c5:2b:1f:96:9d:aa: db:8f:09:ae:05:04:08:eb:6f:29:62:ed:6a:4f:4b: 00:15:a5:39:f4:a9:c8:b8:92:2e:e7:0f:b8:b7:2d: 4e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:C0:17:BD:B5:70:5C:78:B6:D4:2C:8B:B3:6E:07:5D:D9:5A:E4 X509v3 Authority Key Identifier: keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b3:39:a5:e1:29:de:74:df:9a:9f:73:76:d7:4b:3d:6e:d9: 60:c6:a0:12:0a:97:90:d6:67:35:0a:e3:3b:37:ac:e0:9d:5b: 02:7e:d1:40:a9:38:3c:2c:f8:2c:8b:de:f4:eb:32:4a:05:8c: 49:db:fe:48:9c:91:1b:a4:44:5d:82:f1:e2:75:59:0e:fd:f4: 5a:c2:37:35:a1:c0:eb:b3:b2:7b:98:8d:2d:12:aa:f4:56:02: e6:3f:78:20:41:a5:84:a3:f7:03:3e:23:96:19:17:73:36:86: fc:11:e3:a5:14:09:b4:21:e5:d3:82:75:35:12:ae:27:e3:59: 75:b7:07:08:0e:a1:78:f2:9a:d7:32:a8:5f:38:d7:cf:56:8f: 39:c4:03:19:73:09:a8:8e:c6:70:78:6c:53:42:98:37:13:d5: e6:9a:94:13:6d:e5:ce:73:1d:e2:63:32:af:ec:76:ce:f6:a2: 2e:7d:4c:eb:be:9c:9d:16:c9:82:02:ae:8b:af:a6:bd:6d:0f: 17:76:d8:ce:93:7a:53:03:18:74:ce:06:86:a7:b4:52:98:ff: d5:4a:24:2e:41:ab:38:ab:88:58:a0:19:94:4a:08:98:54:87: d3:79:8b:aa:47:f2:16:21:15:00:f9:c8:26:6b:fc:ce:e8:0b: 7e:3e:e4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/g6nmjCTSTZRHtDi+pe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODM0NjhhZDE2ZTY5OThkNGRiNzc2OWJlZmJmYTA2ZWEx ZjEzNDIwHhcNMjYwMjA5MjAwMDQ5WhcNMjYwMjEwMjAwMDQ5WjAzMTEwLwYDVQQD EyhlYmI3YzAxN2JkYjU3MDVjNzhiNmQ0MmM4YmIzNmUwNzVkZDk1YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3PY58RqPVWf7yvGhya5Kh1YF3I9 uyIUtEJo6G+jjz7BggOUGNjFDA7rubqo+Bwio7hdIG+YiHHBHP7umciSQZWiZeDI DYofGnfKlfIzbuAkCFlgBQgZFmOzdn5+n/PHZA0zLo0aLFON6C07h0gtSFedaLXL YOLGSgFzoqpmXXgZIvmTCQgjMtsfHWMkjbciHyVeznpBjJGfcmDDsku8Xr8x45r/ QWj46lHVP1d80DL8Qk3Ythwqp9G+xTaJL/09Sx9vCXRVm54g57VPkylEl1F60EE0 zxgNzyvFKx+WnarbjwmuBQQI628pYu1qT0sAFaU59KnIuJIu5w+4ty1OywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu3wBe9tXBceLbULIuzbgdd2VrkMB8GA1UdIwQY MBaAFKGDRorRbmmY1Nt3ab77+gbqHxNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2Mt MzcxYWM3YzY1NGRhLzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2MtMzcxYWM3YzY1NGRh LzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbM5peEp 3nTfmp9zdtdLPW7ZYMagEgqXkNZnNQrjOzes4J1bAn7RQKk4PCz4LIve9OsySgWM Sdv+SJyRG6REXYLx4nVZDv30WsI3NaHA67Oye5iNLRKq9FYC5j94IEGlhKP3Az4j lhkXczaG/BHjpRQJtCHl04J1NRKuJ+NZdbcHCA6hePKa1zKoXzjXz1aPOcQDGXMJ qI7GcHhsU0KYNxPV5pqUE23lznMd4mMyr+x2zvaiLn1M676cnRbJggKui6+mvW0P F3bYzpN6UwMYdM4Ghqe0Upj/1UokLkGrOKuIWKAZlEoImFSH03mLqkfyFiEVAPnI Jmv8zugLfj7kPg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:14 2026 by rpki-client