This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json) Hash identifier: 8khhVuLGDsxriPEfXOTZF0TMygepT2lmFEEy30dmklk= Subject key identifier: 5C:40:CC:7C:E8:B9:A0:01:B3:BF:B2:BD:EE:A6:0E:2C:5E:EC:34:AF Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Certificate serial: 019C4210163E984975D8DB8908040C112AB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft Manifest number: 037F Signing time: Mon 09 Feb 2026 11:01:16 +0000 Manifest this update: Mon 09 Feb 2026 11:01:16 +0000 Manifest next update: Tue 10 Feb 2026 11:01:16 +0000 Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=) 2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: 3ZjfPuso8EpvuDZJl4FPueZ7btIjF1P63NuxSWqLrhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:16:3e:98:49:75:d8:db:89:08:04:0c:11:2a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38 Validity Not Before: Feb 9 11:01:16 2026 GMT Not After : Feb 10 11:01:16 2026 GMT Subject: CN=5c40cc7ce8b9a001b3bfb2bdeea60e2c5eec34af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:4a:95:a9:ec:2f:6f:ab:97:9c:73:f9:8b: 1b:81:4d:2a:4f:ec:ad:ce:44:55:ca:9b:96:88:d9: 52:3e:a9:e6:69:24:0b:ce:94:39:dd:da:a1:d6:60: 2c:05:cc:88:9c:24:74:85:87:92:ee:1f:3c:c7:1e: 7f:c6:d7:be:01:3b:3e:3b:d1:01:69:6a:82:d3:ba: ab:8f:b3:f0:70:83:a4:35:0e:55:f2:d0:c6:c2:ba: da:31:13:d9:d8:0c:c4:06:d4:18:42:b5:9f:a1:23: 09:60:71:54:97:7c:1a:8d:c2:37:62:c5:ec:39:f4: 2f:91:d0:0d:c6:f0:c6:10:74:57:4e:9c:d9:98:78: 6c:63:76:47:28:49:24:7a:cd:2e:28:7c:ff:b2:48: fd:02:16:d2:0c:9c:2a:21:10:71:a4:ec:0f:a6:ac: cd:32:7e:6c:16:20:de:72:a1:4a:c1:29:32:bc:3d: c9:76:89:ed:43:8b:d3:59:c3:95:c1:ef:e0:c2:68: 00:22:9f:39:43:dc:42:d6:a6:6a:64:6a:61:a9:7f: 01:73:1d:c4:82:46:00:6e:20:43:77:92:3d:ce:c9: 1b:cb:a7:de:de:f4:b6:0f:85:bc:cb:09:a0:09:7e: 26:f4:30:03:7e:c2:80:08:b3:60:43:2d:8a:a4:05: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:40:CC:7C:E8:B9:A0:01:B3:BF:B2:BD:EE:A6:0E:2C:5E:EC:34:AF X509v3 Authority Key Identifier: keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4e:5a:10:c7:ad:53:1f:85:08:d2:48:74:df:bd:17:13:c3: 20:3d:d0:65:ac:5e:74:7a:38:a5:0e:0b:0e:77:7d:bd:3f:14: 51:51:1f:0d:db:f3:dd:54:b9:c7:7e:4c:4e:c4:bc:b2:4a:95: 17:5e:a3:a9:51:c2:d7:e2:03:0e:4e:a2:66:dc:da:36:25:8e: 98:c3:37:68:4a:d4:51:5c:c6:5b:c3:36:86:a4:00:3b:09:9d: 2c:1b:66:98:56:b9:34:b3:74:79:21:e5:51:78:f0:73:de:44: 0e:7d:54:3e:2b:9a:8c:02:72:ad:d7:5a:c4:e3:03:55:72:b2: 2f:46:e9:21:2e:dc:58:96:77:4b:09:1e:f5:19:3d:87:e3:bb: 4d:2d:1b:1e:e1:47:ac:2a:4f:20:47:bd:e0:80:db:3d:92:63: 6f:02:75:e7:d4:46:34:02:08:b8:8b:87:14:2d:66:09:4f:cb: 3f:05:1d:bf:44:74:47:58:bc:26:39:1c:3b:eb:b3:cf:f5:d3: 75:47:27:02:fd:af:a2:0b:1a:2b:ca:bf:6b:88:3f:2d:a3:8f: 73:84:5c:57:da:9b:8c:23:d8:5f:73:8e:2b:5a:9b:f0:37:5d: c7:69:2b:ea:68:5a:fe:a2:3f:fa:47:80:6f:57:d6:0f:ab:1f: 54:8c:0b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEBY+mEl12NuJCAQMESqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWEwOGI2OWY3YzMwY2Q3YTA4MTNhZWI5MTA5ZjdlNzVk MmFhMzgwHhcNMjYwMjA5MTEwMTE2WhcNMjYwMjEwMTEwMTE2WjAzMTEwLwYDVQQD Eyg1YzQwY2M3Y2U4YjlhMDAxYjNiZmIyYmRlZWE2MGUyYzVlZWMzNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvudKlansL2+rl5xz+YsbgU0qT+yt zkRVypuWiNlSPqnmaSQLzpQ53dqh1mAsBcyInCR0hYeS7h88xx5/xte+ATs+O9EB aWqC07qrj7PwcIOkNQ5V8tDGwrraMRPZ2AzEBtQYQrWfoSMJYHFUl3wajcI3YsXs OfQvkdANxvDGEHRXTpzZmHhsY3ZHKEkkes0uKHz/skj9AhbSDJwqIRBxpOwPpqzN Mn5sFiDecqFKwSkyvD3JdontQ4vTWcOVwe/gwmgAIp85Q9xC1qZqZGphqX8Bcx3E gkYAbiBDd5I9zskby6fe3vS2D4W8ywmgCX4m9DADfsKACLNgQy2KpAW5LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxAzHzouaABs7+yve6mDixe7DSvMB8GA1UdIwQY MBaAFMfqCLaffDDNeggTrrkQn3510qo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMt Y2YzMDVjNTQzOTNlLzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zODg1MjItNWRmOC00OTYzLTljMmMtY2YzMDVjNTQzOTNl LzEveC1vSXRwOThNTTE2Q0JPdXVSQ2ZmblhTcWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgU5aEMet Ux+FCNJIdN+9FxPDID3QZaxedHo4pQ4LDnd9vT8UUVEfDdvz3VS5x35MTsS8skqV F16jqVHC1+IDDk6iZtzaNiWOmMM3aErUUVzGW8M2hqQAOwmdLBtmmFa5NLN0eSHl UXjwc95EDn1UPiuajAJyrddaxOMDVXKyL0bpIS7cWJZ3Swke9Rk9h+O7TS0bHuFH rCpPIEe94IDbPZJjbwJ159RGNAIIuIuHFC1mCU/LPwUdv0R0R1i8JjkcO+uzz/XT dUcnAv2vogsaK8q/a4g/LaOPc4RcV9qbjCPYX3OOK1qb8Dddx2kr6mha/qI/+keA b1fWD6sfVIwLzw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:46 2026 by rpki-client