This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json) Hash identifier: CK3TPaD0w6gOmzcj+adeBQBCBoT1LNs/jVbawLyXT5c= Subject key identifier: EC:A0:AE:F4:B8:29:01:04:FC:7C:33:91:F7:88:E0:23:1F:FC:60:60 Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369 Certificate serial: 019C44DA409EBAE4712090CE7E3887E8FE1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft Manifest number: 016C Signing time: Tue 10 Feb 2026 00:01:19 +0000 Manifest this update: Tue 10 Feb 2026 00:01:19 +0000 Manifest next update: Wed 11 Feb 2026 00:01:19 +0000 Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=) 2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: BCZIymgSQ3wzzox873c28ucN132OlT9Nc2fRIbl2Ak8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:40:9e:ba:e4:71:20:90:ce:7e:38:87:e8:fe:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369 Validity Not Before: Feb 10 00:01:19 2026 GMT Not After : Feb 11 00:01:19 2026 GMT Subject: CN=eca0aef4b8290104fc7c3391f788e0231ffc6060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:b0:b1:29:55:e1:d1:f5:06:a2:98:0e:c2: 11:54:b8:12:11:be:8f:c3:dd:a4:31:19:07:bb:35: 77:a3:1f:24:d4:99:2b:c1:ec:93:64:a0:77:de:2b: 92:b3:81:c7:dc:00:65:e3:a6:66:8a:9e:5e:cc:c9: 8c:35:74:94:05:c7:2a:ca:0e:b1:ee:61:80:77:f8: 80:43:ac:a9:e5:e3:8e:6b:fb:37:2b:f5:e1:11:59: 47:ce:45:30:f9:4e:ea:c0:24:01:5f:44:a7:4c:99: c4:bd:7b:74:c1:51:96:77:10:62:c1:90:50:b3:7a: c2:d3:d2:db:33:80:6e:58:0b:f2:20:81:8f:6d:72: 9f:73:d8:38:6b:a4:17:22:11:83:43:3c:ec:6c:ef: 5f:9e:eb:04:b2:61:a7:69:41:c4:8d:f0:f4:80:7d: 74:ec:bd:f8:b8:26:83:22:7c:3e:3b:2d:61:66:a3: 6b:b5:6e:05:28:33:3c:9a:98:85:2d:3e:71:c5:d1: 3e:f0:f6:b8:7b:8a:52:ec:60:2a:e8:f7:c0:37:27: ae:a8:61:7f:84:53:97:2c:de:a3:ea:70:ed:01:56: f7:db:3e:68:a7:c0:24:bf:f0:81:73:18:da:85:76: 06:c0:b9:8d:55:26:dd:4d:5c:13:dd:83:66:0b:93: 32:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A0:AE:F4:B8:29:01:04:FC:7C:33:91:F7:88:E0:23:1F:FC:60:60 X509v3 Authority Key Identifier: keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1d:0b:83:d9:27:54:c3:a7:61:56:03:fa:a3:c9:e0:28:c5: 6c:fb:bc:9d:cf:5a:f2:c4:b9:62:7a:48:d7:bc:c7:00:3f:55: 52:43:c7:eb:99:2b:31:2a:a0:c9:3b:4b:1b:76:32:f8:5c:9f: 54:98:6a:fc:b6:b3:71:93:e8:d6:ed:45:96:2a:4d:0b:2c:cb: d3:4f:17:2a:8f:ec:b7:b4:37:fc:97:95:dc:20:b9:47:77:76: 39:6c:d5:4b:62:f3:21:5b:3d:9a:da:9c:c4:07:a5:5f:9c:d5: de:34:2a:1e:99:72:c8:f7:e6:75:fb:f2:99:a8:d6:0d:2f:c3: 98:b9:1f:9f:a9:0a:8e:36:d4:17:87:94:f0:8e:2b:a3:af:ee: 31:43:af:9d:29:8c:0b:9d:2b:f9:1e:95:ab:50:48:22:ff:41: d8:fe:38:73:4a:7e:e1:ef:c7:9b:3a:98:7f:09:c6:6d:24:a6: 1b:13:43:bc:b7:29:ee:3f:a9:47:2f:0e:8a:47:3a:27:ac:b0: b6:d1:d6:6e:de:dd:a3:54:57:50:f4:b1:ac:40:dd:57:93:a7: ae:1e:2d:19:53:5b:bd:20:66:4a:92:72:10:08:46:84:c5:46: 10:c1:24:a2:3b:ba:bc:a8:35:c6:b9:5b:80:e6:b8:64:b6:c5: bc:68:d4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2kCeuuRxIJDOfjiH6P4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjVkZjc5ODcwNmY5MGU2ZDhmZDQyMDQ5NTU1MDI0Yjcz ZWQzNjkwHhcNMjYwMjEwMDAwMTE5WhcNMjYwMjExMDAwMTE5WjAzMTEwLwYDVQQD EyhlY2EwYWVmNGI4MjkwMTA0ZmM3YzMzOTFmNzg4ZTAyMzFmZmM2MDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqGwsSlV4dH1BqKYDsIRVLgSEb6P w92kMRkHuzV3ox8k1JkrweyTZKB33iuSs4HH3ABl46Zmip5ezMmMNXSUBccqyg6x 7mGAd/iAQ6yp5eOOa/s3K/XhEVlHzkUw+U7qwCQBX0SnTJnEvXt0wVGWdxBiwZBQ s3rC09LbM4BuWAvyIIGPbXKfc9g4a6QXIhGDQzzsbO9fnusEsmGnaUHEjfD0gH10 7L34uCaDInw+Oy1hZqNrtW4FKDM8mpiFLT5xxdE+8Pa4e4pS7GAq6PfANyeuqGF/ hFOXLN6j6nDtAVb32z5op8Akv/CBcxjahXYGwLmNVSbdTVwT3YNmC5MyfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOygrvS4KQEE/HwzkfeI4CMf/GBgMB8GA1UdIwQY MBaAFDkl33mHBvkObY/UIElVUCS3PtNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUt MDg5NDJiNDU0OTk4LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUtMDg5NDJiNDU0OTk4 LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACR0Lg9kn VMOnYVYD+qPJ4CjFbPu8nc9a8sS5YnpI17zHAD9VUkPH65krMSqgyTtLG3Yy+Fyf VJhq/LazcZPo1u1FlipNCyzL008XKo/st7Q3/JeV3CC5R3d2OWzVS2LzIVs9mtqc xAelX5zV3jQqHplyyPfmdfvymajWDS/DmLkfn6kKjjbUF4eU8I4ro6/uMUOvnSmM C50r+R6Vq1BIIv9B2P44c0p+4e/HmzqYfwnGbSSmGxNDvLcp7j+pRy8Oikc6J6yw ttHWbt7do1RXUPSxrEDdV5Onrh4tGVNbvSBmSpJyEAhGhMVGEMEkoju6vKg1xrlb gOa4ZLbFvGjUPA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:46 2026 by rpki-client