This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft File: OeQFnlGefK0FNr1U2RvJeHVkTNs.mft (raw, json) Hash identifier: zvTLNy81P4g2b13IEnhio9wMzMuCwUJGI28zLmtK6Ng= Subject key identifier: B7:18:04:05:1F:6C:8A:0D:0B:9E:1E:2A:37:C0:E4:4B:5B:3D:D4:A5 Authority key identifier: 39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB Certificate issuer: /CN=39e4059e519e7cad0536bd54d91bc97875644cdb Certificate serial: 019C43FDFADE0A16EF42FD2D2D0C996D98E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 20:00:44 +0000 Manifest this update: Mon 09 Feb 2026 20:00:44 +0000 Manifest next update: Tue 10 Feb 2026 20:00:44 +0000 Files and hashes: 1: OeQFnlGefK0FNr1U2RvJeHVkTNs.crl (hash: Q9xGd2rws92cxHIywsNjQK4qMbnLkm6XUAeRdzHl+ek=) 2: qOowaPdAtIoEeA8UwWKl0WeOo_E.roa (hash: qf6D/9fKMsy5vRBqrt+Mp9eken3A/z5tlK1SkhHLKO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:fa:de:0a:16:ef:42:fd:2d:2d:0c:99:6d:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39e4059e519e7cad0536bd54d91bc97875644cdb Validity Not Before: Feb 9 20:00:44 2026 GMT Not After : Feb 10 20:00:44 2026 GMT Subject: CN=b71804051f6c8a0d0b9e1e2a37c0e44b5b3dd4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:57:ef:19:f1:e7:5f:a3:d5:8d:bd:e3:07: 40:a3:fa:3e:85:87:6d:ac:ee:14:3b:bb:40:97:50: 81:96:9d:a1:f0:30:8d:df:97:03:8a:a3:48:a5:fc: c5:cf:18:5a:db:9c:a2:03:ca:79:5a:04:f6:5a:3e: 8b:bc:7c:91:86:73:54:82:08:3c:69:45:83:31:b5: c8:08:8d:14:e1:87:3e:64:d4:f5:06:2e:e1:80:06: 07:62:a1:10:2a:b1:48:3d:8b:f7:ee:5f:fc:30:79: aa:c5:e5:c6:43:f3:78:3b:57:8e:fc:fe:c8:71:2a: 6b:e3:6d:a8:bb:96:f2:25:56:88:3e:2b:8d:c3:f1: 6a:2b:ad:e8:fe:bf:4a:9f:cc:b5:7d:a1:11:0f:b5: 3d:c5:d8:02:bb:3b:7a:ea:ff:5c:aa:cc:7b:f0:ed: 32:9a:b8:fe:9f:16:32:8a:61:dd:a3:b0:83:60:0b: 07:ff:a6:b6:67:de:4c:1d:6c:a9:bc:55:67:d9:8c: d6:31:b0:68:03:c8:f6:30:e5:71:1e:3b:a5:cb:19: a9:46:4c:8b:88:3d:7a:f3:4e:23:ed:6c:ad:2d:3c: a1:c1:04:80:8f:5d:71:a5:a1:e8:9f:5f:93:65:6e: df:9b:b8:63:a0:f1:11:5e:2f:5c:39:18:b6:76:08: e9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:04:05:1F:6C:8A:0D:0B:9E:1E:2A:37:C0:E4:4B:5B:3D:D4:A5 X509v3 Authority Key Identifier: keyid:39:E4:05:9E:51:9E:7C:AD:05:36:BD:54:D9:1B:C9:78:75:64:4C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeQFnlGefK0FNr1U2RvJeHVkTNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ef9221-c354-4e67-a32f-84e596a3c121/1/OeQFnlGefK0FNr1U2RvJeHVkTNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f4:6e:1e:fe:2c:7f:4d:d9:90:b2:bb:c6:89:cc:6d:a1:48: 0f:ca:3a:2e:a2:8f:69:17:f9:46:e0:4e:06:f4:5e:8b:d7:50: b0:5f:0f:ee:ba:cf:c4:66:60:c7:2e:ea:49:8b:87:1a:60:22: 6b:50:e4:fb:22:49:80:c6:71:a3:77:e0:cf:d8:1f:9e:2a:1b: 02:4d:16:6d:59:7e:fe:ab:ae:5b:9d:b3:eb:15:e4:98:af:f1: 2c:d4:9f:f8:49:f4:34:09:cb:37:21:3b:21:18:fc:cf:6a:07: c7:a6:f3:e7:09:2a:2e:e1:75:2f:1a:66:e2:52:01:53:9f:2b: 00:c4:0e:24:6b:f2:05:aa:f6:00:98:b9:a9:bd:a1:94:1f:25: fa:e0:44:3a:be:6d:e1:ae:74:b9:96:1a:7e:0a:40:59:bf:cd: 92:86:da:18:54:75:be:5c:9c:02:65:3e:49:49:c6:a1:d1:10: a6:9e:25:9f:0f:84:3f:65:30:c3:f2:3e:22:71:9f:68:30:ca: 00:fa:d3:db:ba:2f:86:ac:ab:fc:b9:5c:3d:35:9b:d2:ed:90: f8:41:5a:ba:52:fd:d5:27:63:cd:97:e6:03:6d:0b:49:15:0e: 7b:67:71:fc:e7:ed:f5:90:73:0d:45:1c:f9:25:19:a5:d1:a0: 3c:fd:e1:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/freChbvQv0tLQyZbZjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZTQwNTllNTE5ZTdjYWQwNTM2YmQ1NGQ5MWJjOTc4NzU2 NDRjZGIwHhcNMjYwMjA5MjAwMDQ0WhcNMjYwMjEwMjAwMDQ0WjAzMTEwLwYDVQQD EyhiNzE4MDQwNTFmNmM4YTBkMGI5ZTFlMmEzN2MwZTQ0YjViM2RkNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41NX7xnx51+j1Y294wdAo/o+hYdt rO4UO7tAl1CBlp2h8DCN35cDiqNIpfzFzxha25yiA8p5WgT2Wj6LvHyRhnNUggg8 aUWDMbXICI0U4Yc+ZNT1Bi7hgAYHYqEQKrFIPYv37l/8MHmqxeXGQ/N4O1eO/P7I cSpr422ou5byJVaIPiuNw/FqK63o/r9Kn8y1faERD7U9xdgCuzt66v9cqsx78O0y mrj+nxYyimHdo7CDYAsH/6a2Z95MHWypvFVn2YzWMbBoA8j2MOVxHjulyxmpRkyL iD16804j7WytLTyhwQSAj11xpaHon1+TZW7fm7hjoPERXi9cORi2dgjpKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcYBAUfbIoNC54eKjfA5EtbPdSlMB8GA1UdIwQY MBaAFDnkBZ5RnnytBTa9VNkbyXh1ZEzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYt ODRlNTk2YTNjMTIxLzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lZjkyMjEtYzM1NC00ZTY3LWEzMmYtODRlNTk2YTNjMTIx LzEvT2VRRm5sR2VmSzBGTnIxVTJSdkplSFZrVE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPRuHv4s f03ZkLK7xonMbaFID8o6LqKPaRf5RuBOBvRei9dQsF8P7rrPxGZgxy7qSYuHGmAi a1Dk+yJJgMZxo3fgz9gfniobAk0WbVl+/quuW52z6xXkmK/xLNSf+En0NAnLNyE7 IRj8z2oHx6bz5wkqLuF1Lxpm4lIBU58rAMQOJGvyBar2AJi5qb2hlB8l+uBEOr5t 4a50uZYafgpAWb/NkobaGFR1vlycAmU+SUnGodEQpp4lnw+EP2Uww/I+InGfaDDK APrT27ovhqyr/LlcPTWb0u2Q+EFaulL91SdjzZfmA20LSRUOe2dx/Oft9ZBzDUUc +SUZpdGgPP3hIg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:13 2026 by rpki-client