This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json) Hash identifier: Ijq/Y8LM0sUcRev3R4BqTEV0c1Onp6qZADE60Pc2X44= Subject key identifier: C5:B3:E4:1E:33:FC:F8:D3:F4:23:A5:F7:E7:5B:CB:9D:F1:7C:75:D7 Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Certificate serial: 019C41A2735E98F690D832F8018AC68D41C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft Manifest number: 13A3 Signing time: Mon 09 Feb 2026 09:01:31 +0000 Manifest this update: Mon 09 Feb 2026 09:01:31 +0000 Manifest next update: Tue 10 Feb 2026 09:01:31 +0000 Files and hashes: 1: EfrbbVNsRESDxPceTPw-5MN_E7s.roa (hash: 1V7YqzBGw+lW57pDGC7FJ9hb2upKEO6VdoiZzsqxDIs=) 2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: DTOmS8uP3+dKiP8JuqwH6vXF3O4uBd9jXoH8wlrTL7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:73:5e:98:f6:90:d8:32:f8:01:8a:c6:8d:41:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Validity Not Before: Feb 9 09:01:31 2026 GMT Not After : Feb 10 09:01:31 2026 GMT Subject: CN=c5b3e41e33fcf8d3f423a5f7e75bcb9df17c75d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2a:e7:db:31:35:de:a0:d2:ef:47:c6:b6:7b: 31:9d:4c:82:eb:9c:f4:fc:5c:cf:04:9f:35:67:c2: 4d:e1:fe:7e:80:36:b1:e3:e2:46:57:a5:b5:54:c2: 18:04:73:bf:dd:2d:47:fa:59:c6:4c:39:df:ce:9a: 16:08:0c:a0:3d:20:c2:59:29:85:d5:6c:e5:7c:c1: 6d:8e:d7:6d:90:c5:db:a1:62:1c:04:c7:8f:b2:10: c6:eb:66:6e:19:c9:4f:93:c5:14:9c:25:6e:72:35: c7:40:fe:ae:87:f7:49:7b:43:96:9a:c5:4d:d5:32: c7:b9:4e:20:ec:20:2d:6a:06:c9:73:91:ad:fe:11: 53:07:3e:bc:c1:10:84:77:5d:ce:c3:8e:b2:26:ce: 6a:df:ea:b1:8f:40:e9:49:95:a0:74:9e:2b:4c:85: 7b:c8:72:43:c5:54:5f:fe:59:88:7a:8f:d6:0d:c0: 18:36:e1:81:cd:2d:13:03:c0:38:5d:7e:b6:ae:38: e1:da:8e:7c:40:c9:f2:35:4f:e0:ac:80:0d:e8:dd: 6b:f2:6b:d5:39:a6:65:5f:d1:54:59:60:88:9e:7a: 29:bc:a6:fe:0a:b5:99:75:7e:09:9c:d0:d3:79:a8: 50:07:23:7d:25:a2:5d:27:cd:73:ef:0e:d3:20:7b: 12:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B3:E4:1E:33:FC:F8:D3:F4:23:A5:F7:E7:5B:CB:9D:F1:7C:75:D7 X509v3 Authority Key Identifier: keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:27:d0:0d:a0:3c:b6:04:09:d1:e5:91:79:8f:b3:5a:f3:4e: 61:0f:07:07:cd:ef:d4:8e:c1:a5:5d:6a:1c:06:3e:90:41:a4: 31:be:36:59:1c:6f:77:10:b5:d4:82:14:f8:7e:cf:39:aa:9e: 2b:c4:5a:04:57:f9:1c:77:d7:8b:62:97:2f:1e:d6:ab:13:c0: 2f:02:20:36:d6:98:a7:55:51:61:78:50:a3:c3:ca:0a:83:0e: b3:aa:b6:e2:b3:4e:da:07:3e:21:cd:18:9c:bf:1e:f9:ad:89: 42:72:1e:bc:5a:ac:9e:e6:12:7d:b6:c2:9c:0c:46:4f:52:79: 2c:cf:f9:7a:12:ba:f5:88:25:77:30:87:86:0f:b2:e7:d0:e0: 39:89:0b:e8:d9:07:fb:a0:00:01:08:fa:31:00:87:0c:7e:8a: db:72:67:c9:0d:13:2e:fe:86:9f:0c:44:51:3e:ae:9f:fb:b5: 80:06:11:37:58:d0:05:40:2d:06:7a:66:cf:ec:97:97:12:10: 46:55:4f:bb:c2:a3:35:ae:56:b3:b3:25:3e:06:a2:cb:1a:86: 63:04:7f:29:33:02:89:1d:79:95:cf:2b:1a:02:db:1b:dd:ad: 35:89:d1:92:9b:32:d8:ca:91:6b:eb:1a:69:e3:e4:6b:92:4a: 97:b4:c7:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBonNemPaQ2DL4AYrGjUHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGU0MWNiZmRlZmFkMGJiMGUyOTcyNDdhY2MxYTIwMWQy ZGY0YTAwHhcNMjYwMjA5MDkwMTMxWhcNMjYwMjEwMDkwMTMxWjAzMTEwLwYDVQQD EyhjNWIzZTQxZTMzZmNmOGQzZjQyM2E1ZjdlNzViY2I5ZGYxN2M3NWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSrn2zE13qDS70fGtnsxnUyC65z0 /FzPBJ81Z8JN4f5+gDax4+JGV6W1VMIYBHO/3S1H+lnGTDnfzpoWCAygPSDCWSmF 1WzlfMFtjtdtkMXboWIcBMePshDG62ZuGclPk8UUnCVucjXHQP6uh/dJe0OWmsVN 1TLHuU4g7CAtagbJc5Gt/hFTBz68wRCEd13Ow46yJs5q3+qxj0DpSZWgdJ4rTIV7 yHJDxVRf/lmIeo/WDcAYNuGBzS0TA8A4XX62rjjh2o58QMnyNU/grIAN6N1r8mvV OaZlX9FUWWCInnopvKb+CrWZdX4JnNDTeahQByN9JaJdJ81z7w7TIHsSuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWz5B4z/PjT9COl9+dby53xfHXXMB8GA1UdIwQY MBaAFKCOQcv9760LsOKXJHrMGiAdLfSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzkt NjU4ZDRjNDYyOGFkLzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzktNjU4ZDRjNDYyOGFk LzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoifQDaA8 tgQJ0eWReY+zWvNOYQ8HB83v1I7BpV1qHAY+kEGkMb42WRxvdxC11IIU+H7POaqe K8RaBFf5HHfXi2KXLx7WqxPALwIgNtaYp1VRYXhQo8PKCoMOs6q24rNO2gc+Ic0Y nL8e+a2JQnIevFqsnuYSfbbCnAxGT1J5LM/5ehK69YgldzCHhg+y59DgOYkL6NkH +6AAAQj6MQCHDH6K23JnyQ0TLv6GnwxEUT6un/u1gAYRN1jQBUAtBnpmz+yXlxIQ RlVPu8KjNa5Ws7MlPgaiyxqGYwR/KTMCiR15lc8rGgLbG92tNYnRkpsy2MqRa+sa aePka5JKl7THuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:28 2026 by rpki-client