This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json) Hash identifier: lXAiSaqgAGlQLWxuU1U+7riQINrECeLTJHrRr5G/cVA= Subject key identifier: E2:E9:33:D4:B5:0D:CA:77:70:AF:B8:CE:20:FA:FC:9E:38:4C:C2:F1 Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459 Certificate serial: 019C40FD1B774837E189A2B3B6405E150F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:00:55 +0000 Manifest this update: Mon 09 Feb 2026 06:00:55 +0000 Manifest next update: Tue 10 Feb 2026 06:00:55 +0000 Files and hashes: 1: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: NMmkTi6qbk+Dgdgm2PC+479uQOfrAa28FF5Lf0XpIJo=) 2: zhmEXTTO06gpLxWO64H29X0-CFk.roa (hash: 5E099Sh8nPjWGjRVAIGCRAKM5QSFykLo1AXb7NFz/x4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:1b:77:48:37:e1:89:a2:b3:b6:40:5e:15:0f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459 Validity Not Before: Feb 9 06:00:55 2026 GMT Not After : Feb 10 06:00:55 2026 GMT Subject: CN=e2e933d4b50dca7770afb8ce20fafc9e384cc2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:9d:28:e2:0d:8b:1e:19:8e:b3:75:2e:04: e4:38:b2:20:4b:58:9a:c6:f8:c5:82:cd:da:57:2f: 95:1d:32:67:1b:47:20:72:39:7c:5b:bd:a3:a5:78: 6a:5f:6e:7a:8f:db:f3:f4:3e:ad:2b:6d:d0:3d:6b: 6b:aa:91:ca:19:13:48:84:f6:9f:bb:21:e4:87:af: e6:67:82:7a:c9:bd:62:51:39:cc:9a:fd:2c:a8:bf: 8c:ed:6c:0a:fa:ab:3d:ab:60:f4:52:ef:56:d8:f8: 75:c6:1e:1d:bb:90:5f:d7:69:74:db:67:81:04:e6: 41:be:56:dd:c0:b7:9d:78:11:4f:e3:b4:86:d0:11: f0:88:ea:47:47:10:fe:1d:e6:45:02:43:9f:bd:f6: 1f:38:c9:7a:c7:ce:2a:7f:5a:f7:a7:53:92:24:f7: 51:8f:c8:4d:ba:71:61:2f:e6:d1:a8:6f:eb:6b:5f: 3e:27:b9:6b:d0:29:63:04:6c:cd:40:d7:62:56:9e: 07:84:27:c1:f2:bb:f0:f7:19:dc:46:2c:87:fc:24: 60:7e:bf:eb:5e:49:2c:69:a1:39:fc:95:fe:4c:dd: a4:66:ae:fe:23:69:20:d9:2e:ed:08:55:f2:18:5d: f0:8a:b9:7f:ab:4a:c6:15:2d:0f:76:21:db:82:dc: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E9:33:D4:B5:0D:CA:77:70:AF:B8:CE:20:FA:FC:9E:38:4C:C2:F1 X509v3 Authority Key Identifier: keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4e:c9:be:6d:2a:5a:eb:4f:59:7d:95:9f:52:77:d4:0e:ae: f3:96:47:de:cd:53:f4:3a:0b:46:9f:68:f5:14:73:ff:6d:d4: 7f:54:78:b2:67:0d:64:fa:c7:ce:93:94:f5:76:47:54:4c:8d: 27:4a:b0:9f:91:13:cb:0f:ae:cd:56:03:df:eb:a4:1a:6e:27: ac:de:0a:9f:8b:ed:b8:39:44:f3:e4:6e:90:e4:ef:2b:b1:6d: b8:93:4a:f1:b3:fb:5e:be:69:0e:ac:89:46:68:6d:4a:a7:46: fd:d3:1d:5e:4f:7e:89:06:8a:50:b3:e4:29:eb:07:8d:df:77: 38:1e:c9:2a:02:b3:48:44:82:d6:e7:5b:47:30:6b:f9:c4:4e: 20:8a:3a:23:34:f8:fd:3b:98:81:86:1d:7c:1c:c5:f0:14:0a: cb:28:6d:64:1c:fc:ad:ec:83:88:28:6c:37:cf:8f:c0:8b:54: 09:d9:a8:9a:a5:85:4f:1f:c2:5c:a8:98:96:2a:5d:00:1c:3d: b2:50:26:a9:70:11:39:42:2a:87:05:e8:b6:a9:24:8d:d8:7e: 9a:5d:0e:7b:93:63:aa:38:a6:f6:75:16:e3:75:ae:09:dd:6b: f3:56:9e:bf:6e:90:83:83:b2:da:42:5c:c5:5a:33:e8:21:bd: ff:c9:36:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Rt3SDfhiaKztkBeFQ9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMWYyMDU5NzlkMmZiZGU5NTc1NmE0NmEwZjI3MzlkNzgx NmQ0NTkwHhcNMjYwMjA5MDYwMDU1WhcNMjYwMjEwMDYwMDU1WjAzMTEwLwYDVQQD EyhlMmU5MzNkNGI1MGRjYTc3NzBhZmI4Y2UyMGZhZmM5ZTM4NGNjMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYSdKOINix4ZjrN1LgTkOLIgS1ia xvjFgs3aVy+VHTJnG0cgcjl8W72jpXhqX256j9vz9D6tK23QPWtrqpHKGRNIhPaf uyHkh6/mZ4J6yb1iUTnMmv0sqL+M7WwK+qs9q2D0Uu9W2Ph1xh4du5Bf12l022eB BOZBvlbdwLedeBFP47SG0BHwiOpHRxD+HeZFAkOfvfYfOMl6x84qf1r3p1OSJPdR j8hNunFhL+bRqG/ra18+J7lr0CljBGzNQNdiVp4HhCfB8rvw9xncRiyH/CRgfr/r XkksaaE5/JX+TN2kZq7+I2kg2S7tCFXyGF3wirl/q0rGFS0PdiHbgtxqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLpM9S1Dcp3cK+4ziD6/J44TMLxMB8GA1UdIwQY MBaAFKEfIFl50vvelXVqRqDyc514FtRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGIt MTU1MGYyYWM4N2IzLzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xOWYyMjktYTkwZi00MmM0LTk4MGItMTU1MGYyYWM4N2Iz LzEvb1I4Z1dYblMtOTZWZFdwR29QSnpuWGdXMUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk7Jvm0q WutPWX2Vn1J31A6u85ZH3s1T9DoLRp9o9RRz/23Uf1R4smcNZPrHzpOU9XZHVEyN J0qwn5ETyw+uzVYD3+ukGm4nrN4Kn4vtuDlE8+RukOTvK7FtuJNK8bP7Xr5pDqyJ RmhtSqdG/dMdXk9+iQaKULPkKesHjd93OB7JKgKzSESC1udbRzBr+cROIIo6IzT4 /TuYgYYdfBzF8BQKyyhtZBz8reyDiChsN8+PwItUCdmomqWFTx/CXKiYlipdABw9 slAmqXAROUIqhwXotqkkjdh+ml0Oe5Njqjim9nUW43WuCd1r81aev26Qg4Oy2kJc xVoz6CG9/8k2bg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:45 2026 by rpki-client