This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json) Hash identifier: XM2H8bOcyNW+CixfhtF1S0Xdjhutuym9RwhbQsnPGj4= Subject key identifier: 6B:CB:68:BC:92:0D:CA:AD:57:0B:C2:0D:7D:BA:DE:22:90:31:55:10 Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Certificate serial: 019C41A1BF1466957E14164E2D3C89589CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 09:00:44 +0000 Manifest this update: Mon 09 Feb 2026 09:00:44 +0000 Manifest next update: Tue 10 Feb 2026 09:00:44 +0000 Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=) 2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: unWFvdorkYB6YIH2GmCUpMYk+SiqiA5qven9troV8cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:bf:14:66:95:7e:14:16:4e:2d:3c:89:58:9c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2 Validity Not Before: Feb 9 09:00:44 2026 GMT Not After : Feb 10 09:00:44 2026 GMT Subject: CN=6bcb68bc920dcaad570bc20d7dbade2290315510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:2d:60:c8:30:4d:14:ab:15:3b:48:03:64: b9:0d:47:48:a6:eb:07:ae:cf:4a:0c:93:3b:b3:92: ea:a4:e6:05:b7:3a:ca:24:34:12:c4:2c:4b:19:d6: ca:45:68:4e:30:31:51:24:f9:a5:50:11:f4:58:26: c2:f5:e8:92:07:d6:ba:b5:88:7f:02:85:a1:1b:0c: 8b:1b:91:e0:65:9b:2f:1f:ef:03:71:64:8d:5f:17: 92:41:c7:d0:2a:6d:32:ea:26:36:fb:3d:4e:06:ef: 24:72:3c:67:c8:be:4c:93:e2:80:b0:61:6b:9c:2d: 79:3d:01:5b:06:46:57:97:aa:04:1c:4b:01:05:ae: ba:ea:f2:13:50:e7:6f:95:a4:f5:dc:54:de:7a:aa: f6:6f:89:95:cd:86:97:66:ce:91:fc:67:51:33:a3: dd:8b:ce:88:63:55:4f:f8:d9:99:27:e9:4c:25:44: 2a:5b:e9:28:f5:82:c6:1f:e4:7d:4a:6d:53:dd:07: c0:4e:46:ce:4c:a3:89:10:5e:42:28:ee:56:ee:9c: 1b:98:65:62:11:2f:e5:b2:5a:bd:bc:3f:4b:6e:88: 88:02:21:c7:c7:23:e9:9f:f2:5f:ad:c9:aa:36:60: 15:93:1a:44:49:37:18:55:63:05:01:d0:1e:4a:62: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:68:BC:92:0D:CA:AD:57:0B:C2:0D:7D:BA:DE:22:90:31:55:10 X509v3 Authority Key Identifier: keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:b7:fd:68:92:91:a1:bb:97:aa:cd:61:61:be:b3:95:3a:0e: a0:88:1e:43:97:cb:85:ae:ee:1e:48:57:3b:00:dc:d2:ab:17: 61:b7:f5:03:3c:50:d0:f0:f8:73:3d:5a:3f:86:c4:11:81:22: da:d9:03:7c:06:30:cd:6a:98:be:d1:5d:34:55:01:c5:31:4f: a4:16:ed:2b:c5:f5:7b:6f:7e:ba:25:7e:51:c6:09:88:6f:9e: 5d:93:94:83:01:6d:1c:7b:1d:d4:cf:4d:a3:64:c0:fe:d6:65: a6:64:3c:8d:8a:2b:a0:c5:87:70:7a:2b:ff:40:32:53:e8:17: 67:1b:53:12:56:49:2f:65:59:b8:4f:78:15:cb:90:62:21:d8: 7c:32:f4:94:5a:20:b9:36:35:7d:f6:fb:ed:f6:d3:d2:18:aa: 77:ba:1f:fb:c4:76:51:72:73:ae:dd:cb:dc:1b:3e:3d:8e:f3: dc:85:e7:0b:32:94:bd:3b:13:66:bc:a5:32:7b:5e:c3:c8:d2: 27:52:1d:ca:23:94:2f:3f:38:10:7f:3e:6b:2e:a8:ec:d9:2e: c2:0f:95:a4:a0:af:99:dd:07:9c:10:b3:0c:b0:e3:27:ba:5f: 30:97:88:0c:96:84:8d:20:da:52:2b:d6:23:f1:4d:aa:49:7b: 67:5b:7f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBob8UZpV+FBZOLTyJWJzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx NzlhYzIwHhcNMjYwMjA5MDkwMDQ0WhcNMjYwMjEwMDkwMDQ0WjAzMTEwLwYDVQQD Eyg2YmNiNjhiYzkyMGRjYWFkNTcwYmMyMGQ3ZGJhZGUyMjkwMzE1NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GItYMgwTRSrFTtIA2S5DUdIpusH rs9KDJM7s5LqpOYFtzrKJDQSxCxLGdbKRWhOMDFRJPmlUBH0WCbC9eiSB9a6tYh/ AoWhGwyLG5HgZZsvH+8DcWSNXxeSQcfQKm0y6iY2+z1OBu8kcjxnyL5Mk+KAsGFr nC15PQFbBkZXl6oEHEsBBa666vITUOdvlaT13FTeeqr2b4mVzYaXZs6R/GdRM6Pd i86IY1VP+NmZJ+lMJUQqW+ko9YLGH+R9Sm1T3QfATkbOTKOJEF5CKO5W7pwbmGVi ES/lslq9vD9LboiIAiHHxyPpn/JfrcmqNmAVkxpESTcYVWMFAdAeSmLCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvLaLySDcqtVwvCDX263iKQMVUQMB8GA1UdIwQY MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLf9aJKR obuXqs1hYb6zlToOoIgeQ5fLha7uHkhXOwDc0qsXYbf1AzxQ0PD4cz1aP4bEEYEi 2tkDfAYwzWqYvtFdNFUBxTFPpBbtK8X1e29+uiV+UcYJiG+eXZOUgwFtHHsd1M9N o2TA/tZlpmQ8jYoroMWHcHor/0AyU+gXZxtTElZJL2VZuE94FcuQYiHYfDL0lFog uTY1ffb77fbT0hiqd7of+8R2UXJzrt3L3Bs+PY7z3IXnCzKUvTsTZrylMntew8jS J1IdyiOULz84EH8+ay6o7Nkuwg+VpKCvmd0HnBCzDLDjJ7pfMJeIDJaEjSDaUivW I/FNqkl7Z1t/8g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:28 2026 by rpki-client