This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft File: _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json) Hash identifier: UyUpYp/26LQWePHWOahecbU5GkBjs7bZ9Gmc5X8xGo8= Subject key identifier: 6A:48:D2:04:A5:E7:E5:B5:64:F4:10:6D:78:01:C4:7C:20:E0:E2:ED Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Certificate serial: 019C43FDBED3B3FA5188E1311D261CAD4FB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 20:00:28 +0000 Manifest this update: Mon 09 Feb 2026 20:00:28 +0000 Manifest next update: Tue 10 Feb 2026 20:00:28 +0000 Files and hashes: 1: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: QmJ+f4yh+YCDJslt5apQCzylGxvt0LszlwU5/HNwdJA=) 2: crGJsaUqkVJvevG7S1aR5kRrjuk.roa (hash: JplAsFQ7Xa/4SQCkj3u1taRZpnPpuKuRz//hnGEkFyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:be:d3:b3:fa:51:88:e1:31:1d:26:1c:ad:4f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Validity Not Before: Feb 9 20:00:28 2026 GMT Not After : Feb 10 20:00:28 2026 GMT Subject: CN=6a48d204a5e7e5b564f4106d7801c47c20e0e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:cf:10:78:fe:78:7e:e4:55:23:28:66:ef: 64:0a:8c:f3:35:ea:23:4b:cf:90:09:4d:90:97:48: 99:80:85:ae:9e:a4:46:08:6c:d4:f1:f4:40:5e:53: 60:13:90:fa:93:f4:b3:a0:77:62:fd:84:5e:87:23: a2:f2:37:97:05:b5:46:65:ac:4e:04:e7:1f:35:52: 5b:d0:6f:d3:14:10:1d:71:e8:4a:c8:f8:6b:3b:ff: b4:40:5f:d8:dc:4b:bc:08:d5:21:6e:0a:b7:8f:ce: d2:6f:fc:33:bb:4f:ee:80:30:5b:8a:d8:9e:73:4e: 22:49:96:bc:52:dc:68:42:54:ee:0c:f9:da:39:b8: 4d:6f:3e:31:b3:df:45:9e:ef:28:d6:ec:0b:e9:69: b2:cf:ac:dc:9b:74:47:8c:7c:af:c1:d3:f7:dc:85: 9c:75:97:e5:f9:af:71:b2:42:f5:cb:cb:f3:9e:3c: 27:8e:40:ed:7e:f4:7b:7a:b5:47:ac:8f:a0:fe:08: 3a:30:98:04:2b:b1:5b:e1:fb:3d:9a:81:ac:3f:9e: 78:e2:f7:59:e9:ba:5b:3a:25:3d:ee:b0:18:12:79: f2:1e:77:62:ff:55:9c:f5:39:d4:8a:c6:d4:84:5a: 8b:b7:bf:3b:5d:77:d5:98:e8:5d:5a:53:02:42:30: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:48:D2:04:A5:E7:E5:B5:64:F4:10:6D:78:01:C4:7C:20:E0:E2:ED X509v3 Authority Key Identifier: keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:49:6c:9b:a4:35:39:d4:97:12:ca:81:7e:5a:37:21:f7: e4:93:15:17:30:96:06:f8:14:c8:1e:37:b6:fb:a2:7a:7f:10: 95:f1:8f:21:75:80:f3:25:d9:df:cd:a1:28:73:ad:95:11:b7: f8:01:88:5d:8d:bb:9f:94:c3:73:01:7d:eb:e1:f8:e6:50:37: db:c3:b8:b1:0e:26:39:5f:54:c1:ea:48:6e:30:16:be:3c:9f: fe:a0:e1:05:0e:3a:0f:01:6f:8b:35:bd:81:9b:66:5a:5a:d3: 33:21:68:06:5e:f4:c2:5a:ab:4b:6b:28:f0:6e:24:f7:e5:49: 6c:2e:51:5e:47:78:87:f7:78:f4:eb:9d:27:7c:b7:87:a5:21: 54:bd:0a:3b:8d:e1:b6:fa:f2:f3:71:ce:3c:21:86:67:bf:13: 9c:80:a8:c4:6a:c7:2d:d7:d0:03:bc:27:34:af:39:6c:0f:e7: a0:e8:ce:f8:3b:fd:18:33:9b:ff:ea:f5:a4:74:1a:62:7d:c0: 68:f7:08:10:88:bd:26:09:9b:a5:98:a2:44:ee:d7:00:fd:d4: c8:00:8c:bb:4a:57:7d:f1:e2:38:10:56:24:4c:87:34:8a:6f: b8:40:57:5f:52:53:47:96:bc:09:bc:bd:41:91:b9:ba:b4:ee: f2:0c:af:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/b7Ts/pRiOExHSYcrU+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNWEyOWNjZGExZGM4YThhMTYzYWMyNzc4MWU4ZWM1OTdl NzZkYjkwHhcNMjYwMjA5MjAwMDI4WhcNMjYwMjEwMjAwMDI4WjAzMTEwLwYDVQQD Eyg2YTQ4ZDIwNGE1ZTdlNWI1NjRmNDEwNmQ3ODAxYzQ3YzIwZTBlMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61/PEHj+eH7kVSMoZu9kCozzNeoj S8+QCU2Ql0iZgIWunqRGCGzU8fRAXlNgE5D6k/SzoHdi/YRehyOi8jeXBbVGZaxO BOcfNVJb0G/TFBAdcehKyPhrO/+0QF/Y3Eu8CNUhbgq3j87Sb/wzu0/ugDBbitie c04iSZa8UtxoQlTuDPnaObhNbz4xs99Fnu8o1uwL6Wmyz6zcm3RHjHyvwdP33IWc dZfl+a9xskL1y8vznjwnjkDtfvR7erVHrI+g/gg6MJgEK7Fb4fs9moGsP5544vdZ 6bpbOiU97rAYEnnyHndi/1Wc9TnUisbUhFqLt787XXfVmOhdWlMCQjDOiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpI0gSl5+W1ZPQQbXgBxHwg4OLtMB8GA1UdIwQY MBaAFP9aKczaHciooWOsJ3gejsWX5225MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQt OWJjNTVmNjJkYWJhLzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQtOWJjNTVmNjJkYWJh LzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP5JbJuk NTnUlxLKgX5aNyH35JMVFzCWBvgUyB43tvuien8QlfGPIXWA8yXZ382hKHOtlRG3 +AGIXY27n5TDcwF96+H45lA328O4sQ4mOV9UwepIbjAWvjyf/qDhBQ46DwFvizW9 gZtmWlrTMyFoBl70wlqrS2so8G4k9+VJbC5RXkd4h/d49OudJ3y3h6UhVL0KO43h tvry83HOPCGGZ78TnICoxGrHLdfQA7wnNK85bA/noOjO+Dv9GDOb/+r1pHQaYn3A aPcIEIi9JgmbpZiiRO7XAP3UyACMu0pXffHiOBBWJEyHNIpvuEBXX1JTR5a8Cby9 QZG5urTu8gyv/w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:50 2026 by rpki-client