This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json) Hash identifier: K8Sh2XxLaeCTU5CMlNFjlNbmdDJ0s//613uF1WQuDHg= Subject key identifier: 94:72:93:41:88:56:60:10:93:7F:5B:F5:FB:5C:9C:67:33:D5:5C:5B Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1 Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1 Certificate serial: 019C4322BE9A80EFB07946D32B9825C270DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft Manifest number: 118A Signing time: Mon 09 Feb 2026 16:01:16 +0000 Manifest this update: Mon 09 Feb 2026 16:01:16 +0000 Manifest next update: Tue 10 Feb 2026 16:01:16 +0000 Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: wJ0xH0J4urJLO65tMocrUmvoAY+2f7piBBpI4cF2LQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:be:9a:80:ef:b0:79:46:d3:2b:98:25:c2:70:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1 Validity Not Before: Feb 9 16:01:16 2026 GMT Not After : Feb 10 16:01:16 2026 GMT Subject: CN=9472934188566010937f5bf5fb5c9c6733d55c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:5c:65:34:a2:a7:15:0f:79:ec:c6:78:0c: b4:04:9b:62:c4:d6:fd:d2:ec:01:ed:1a:57:31:1f: 35:92:24:81:32:50:3a:4f:5f:36:b7:c3:0c:3c:d1: 08:0f:51:b4:de:c2:55:f1:8d:c6:c8:f0:ed:d1:d2: 98:61:5a:21:91:d9:5b:33:3f:2e:29:fc:41:cc:c8: d8:1c:3b:4c:7f:85:f7:c9:59:e3:55:36:dc:cb:e9: c3:55:53:f2:d2:ec:f5:8d:a0:38:dd:f3:d7:d2:16: 35:8e:76:79:33:82:57:51:76:6b:53:22:ae:50:1d: 1c:ec:88:c8:1d:fd:2f:45:57:74:47:07:24:ab:01: 98:e9:9d:a2:d1:ae:d9:01:71:b8:29:d8:6a:cc:15: 28:22:4c:d8:bf:c5:b8:10:e4:02:ab:1e:65:19:92: 49:7a:e7:cf:a3:24:e6:d8:10:61:34:25:bd:ee:20: c5:9e:08:3d:ff:63:f5:9d:30:59:c0:7e:cc:f9:39: f1:89:c3:3f:51:87:2b:36:ec:d6:71:c3:34:51:d2: 9b:a4:c4:25:1b:99:4a:05:c3:2f:bb:74:e6:21:ee: 5c:21:14:fb:bc:eb:da:61:02:d8:14:eb:f5:5e:1a: 15:72:ed:8f:2c:f5:a7:ef:a3:9c:61:ec:42:fc:f2: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:93:41:88:56:60:10:93:7F:5B:F5:FB:5C:9C:67:33:D5:5C:5B X509v3 Authority Key Identifier: keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:be:65:e7:e1:71:c7:59:7a:84:0e:17:51:ef:b2:04:75:82: c5:16:d1:c8:31:a4:f0:6f:69:8b:37:82:d0:ee:a8:20:3e:d3: 51:16:18:a1:15:6d:6d:52:2e:23:d3:32:ed:2d:07:c3:dc:13: 4c:46:f9:b8:61:6d:a2:07:cb:e1:45:37:23:92:b3:45:01:39: d0:dc:a9:21:43:3e:a6:21:38:c2:d7:7c:49:ce:c3:60:dc:fc: c9:55:1e:a2:d7:49:32:1d:54:81:4e:e9:db:33:01:f1:ad:ed: af:eb:11:71:a6:39:c1:68:09:25:d6:98:9c:01:34:75:8a:4e: 25:6b:d8:b9:5f:47:78:e1:08:0f:0e:68:92:33:9d:af:32:a5: 02:49:b3:05:9c:e8:2b:da:2b:7a:14:78:e8:92:99:5c:69:15: 65:e2:4d:7b:69:fe:b0:08:45:1f:c5:34:df:e9:38:00:5e:05: 4e:1c:e2:6f:0e:b3:b0:a8:ce:3d:a8:c8:f1:57:e5:38:b3:ff: 73:a4:88:13:cf:20:14:98:24:ae:ff:4d:bb:e1:55:f0:0d:98: 5b:36:14:2e:3d:6f:2e:a2:17:3f:70:ec:3b:1e:7e:f8:bc:99: 55:55:4a:73:eb:ec:8d:b9:ac:d7:e5:f5:20:3e:81:f0:cf:00: 2b:2b:a7:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr6agO+weUbTK5glwnDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTI3ZDY0YTRjZTk1ZTA4MzExYWZhZmY0M2U2NmQwNzNm YjIxZDEwHhcNMjYwMjA5MTYwMTE2WhcNMjYwMjEwMTYwMTE2WjAzMTEwLwYDVQQD Eyg5NDcyOTM0MTg4NTY2MDEwOTM3ZjViZjVmYjVjOWM2NzMzZDU1YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuRcZTSipxUPeezGeAy0BJtixNb9 0uwB7RpXMR81kiSBMlA6T182t8MMPNEID1G03sJV8Y3GyPDt0dKYYVohkdlbMz8u KfxBzMjYHDtMf4X3yVnjVTbcy+nDVVPy0uz1jaA43fPX0hY1jnZ5M4JXUXZrUyKu UB0c7IjIHf0vRVd0RwckqwGY6Z2i0a7ZAXG4KdhqzBUoIkzYv8W4EOQCqx5lGZJJ eufPoyTm2BBhNCW97iDFngg9/2P1nTBZwH7M+TnxicM/UYcrNuzWccM0UdKbpMQl G5lKBcMvu3TmIe5cIRT7vOvaYQLYFOv1XhoVcu2PLPWn76OcYexC/PKgUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRyk0GIVmAQk39b9ftcnGcz1VxbMB8GA1UdIwQY MBaAFPzifWSkzpXggxGvr/Q+ZtBz+yHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEt MDAxNGJjODU1YmY0LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEtMDAxNGJjODU1YmY0 LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx75l5+Fx x1l6hA4XUe+yBHWCxRbRyDGk8G9pizeC0O6oID7TURYYoRVtbVIuI9My7S0Hw9wT TEb5uGFtogfL4UU3I5KzRQE50NypIUM+piE4wtd8Sc7DYNz8yVUeotdJMh1UgU7p 2zMB8a3tr+sRcaY5wWgJJdaYnAE0dYpOJWvYuV9HeOEIDw5okjOdrzKlAkmzBZzo K9orehR46JKZXGkVZeJNe2n+sAhFH8U03+k4AF4FThzibw6zsKjOPajI8VflOLP/ c6SIE88gFJgkrv9Nu+FV8A2YWzYULj1vLqIXP3DsOx5++LyZVVVKc+vsjbms1+X1 ID6B8M8AKyunPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:24 2026 by rpki-client