This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft File: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft (raw, json) Hash identifier: PoDapyYojexxIvP3tb5Kl4UkP/BS+SwqOKn++1BqcZE= Subject key identifier: BE:88:DD:2D:BF:25:AE:3C:C5:22:47:21:63:E5:7C:64:3B:66:F1:7C Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a Certificate serial: 019C1BA6EC5FD0BB5C1F18781376409EAE31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft Manifest number: 1801 Signing time: Mon 02 Feb 2026 00:00:50 +0000 Manifest this update: Mon 02 Feb 2026 00:00:50 +0000 Manifest next update: Tue 03 Feb 2026 00:00:50 +0000 Files and hashes: 1: DzilDttcXqE3Xvb3haJFRQwF9zk.asa (hash: nycTvypKFoAuxTdfFZ5SN111a0MioZNUXo+uz4SVtks=) 2: fWE5Pn1GMrv6VgGwD7OgdDzsgQA.roa (hash: +xJkUcHJIVs0JLz+BAjbFgLWtRzM+wkJAxcAk5CBYUE=) 3: oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl (hash: hn0zVGK5Iy/damdiE/MdAZYNg0NLYCSS/5BubVu4kF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:a6:ec:5f:d0:bb:5c:1f:18:78:13:76:40:9e:ae:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a Validity Not Before: Feb 2 00:00:50 2026 GMT Not After : Feb 3 00:00:50 2026 GMT Subject: CN=be88dd2dbf25ae3cc522472163e57c643b66f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:0b:ce:33:d6:73:bd:bc:46:d3:83:90:ab: a7:52:90:52:ea:4d:ce:e6:46:ec:2d:60:45:38:0f: ee:aa:db:b9:f6:ed:9e:ed:e6:63:f4:38:02:c4:3c: 8f:67:a6:fc:2b:de:80:43:86:a2:e6:8e:39:a1:58: 1f:7e:55:5c:b3:cc:d6:4f:8f:d4:d7:06:d2:47:07: c1:05:0a:f6:e9:e2:ad:b2:f7:02:cf:e1:23:a0:4b: 79:ed:b3:42:af:a8:a3:37:6b:70:ed:3a:cc:68:87: 5b:2d:4a:05:22:a9:2a:77:8c:73:6f:e7:25:d6:e4: b4:f8:cf:42:40:fd:b8:fc:b7:28:36:c7:00:7e:3b: 4b:23:00:2e:e4:49:b6:ae:c6:d6:95:dd:66:55:e4: ae:a3:4f:c4:89:62:90:62:29:c7:38:9f:9d:43:70: 33:1b:2e:1d:21:89:ee:d0:f0:39:9e:6d:b0:d4:de: 2a:47:8a:58:ed:97:2b:81:9d:f3:ee:1f:48:8f:75: 01:44:b8:08:69:46:25:e2:70:e4:01:e6:b1:7a:cb: f3:e1:6a:60:b9:fc:8a:5d:dc:bc:a5:ee:ef:19:ca: a7:5e:e5:7d:88:83:86:32:1f:4c:c7:d2:20:6c:05: 80:dc:e0:22:58:47:d8:3c:ba:40:ba:0a:85:e5:66: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:DD:2D:BF:25:AE:3C:C5:22:47:21:63:E5:7C:64:3B:66:F1:7C X509v3 Authority Key Identifier: keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:7f:32:91:44:96:1a:c2:51:29:64:2b:82:6d:07:5f:8a:9a: 03:57:29:3d:4d:23:83:5a:7d:60:68:94:2c:65:ad:c3:d4:a6: 10:ff:b5:59:ef:b0:ce:4f:08:c9:63:70:3e:07:07:4e:df:93: 07:ae:12:2a:cc:82:1a:ea:9e:46:a7:5b:db:b6:c4:1d:32:79: ab:f7:a7:ee:d6:76:e1:07:6e:d5:a6:be:17:74:66:ec:f0:87: 96:cc:0a:fa:62:e2:f8:de:23:0e:16:df:fa:39:df:2d:f6:ed: aa:6c:11:d8:57:5d:84:28:21:e2:79:b7:63:42:da:d5:81:1f: 6e:8f:25:80:da:b4:67:eb:e5:75:bf:08:7c:db:e7:b3:72:3e: fc:6a:cc:c9:2c:f1:47:0c:41:40:99:47:5a:47:e9:0c:f4:12: 6e:38:80:ff:a9:f1:77:25:8f:d2:d5:6a:49:21:a2:af:23:0a: ff:16:cf:87:c1:ff:85:61:41:ad:c0:71:a1:47:b3:67:e9:99: 94:6f:42:a1:5c:66:bd:7f:ef:ef:37:d9:f1:70:99:f0:b8:2f: 12:82:9f:ed:ce:6c:21:a1:e4:2c:79:78:ec:d2:d0:36:93:7b: d5:0d:d4:65:59:96:a9:61:49:ff:32:6a:4a:77:51:8b:2f:94: 8f:5b:cb:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbpuxf0LtcHxh4E3ZAnq4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh ODhmN2EwHhcNMjYwMjAyMDAwMDUwWhcNMjYwMjAzMDAwMDUwWjAzMTEwLwYDVQQD EyhiZTg4ZGQyZGJmMjVhZTNjYzUyMjQ3MjE2M2U1N2M2NDNiNjZmMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIULzjPWc728RtODkKunUpBS6k3O 5kbsLWBFOA/uqtu59u2e7eZj9DgCxDyPZ6b8K96AQ4ai5o45oVgfflVcs8zWT4/U 1wbSRwfBBQr26eKtsvcCz+EjoEt57bNCr6ijN2tw7TrMaIdbLUoFIqkqd4xzb+cl 1uS0+M9CQP24/LcoNscAfjtLIwAu5Em2rsbWld1mVeSuo0/EiWKQYinHOJ+dQ3Az Gy4dIYnu0PA5nm2w1N4qR4pY7ZcrgZ3z7h9Ij3UBRLgIaUYl4nDkAeaxesvz4Wpg ufyKXdy8pe7vGcqnXuV9iIOGMh9Mx9IgbAWA3OAiWEfYPLpAugqF5WZaoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6I3S2/Ja48xSJHIWPlfGQ7ZvF8MB8GA1UdIwQY MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt ZjZiNmMwNDkxNmExLzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsX8ykUSW GsJRKWQrgm0HX4qaA1cpPU0jg1p9YGiULGWtw9SmEP+1We+wzk8IyWNwPgcHTt+T B64SKsyCGuqeRqdb27bEHTJ5q/en7tZ24Qdu1aa+F3Rm7PCHlswK+mLi+N4jDhbf +jnfLfbtqmwR2FddhCgh4nm3Y0La1YEfbo8lgNq0Z+vldb8IfNvns3I+/GrMySzx RwxBQJlHWkfpDPQSbjiA/6nxdyWP0tVqSSGiryMK/xbPh8H/hWFBrcBxoUezZ+mZ lG9CoVxmvX/v7zfZ8XCZ8LgvEoKf7c5sIaHkLHl47NLQNpN71Q3UZVmWqWFJ/zJq SndRiy+Uj1vLbg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:18:10 2026 by rpki-client