This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft File: OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft (raw, json) Hash identifier: bWG5nm66QhQDIzXFqAtTDOkJhXj6EjKJWwnBbs1sgAU= Subject key identifier: F0:33:1D:51:38:0A:7C:69:64:3D:59:CE:7B:1B:E0:6E:5C:07:C7:51 Authority key identifier: 38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 Certificate issuer: /CN=389755423f832a528c93136110f0fe4b10453582 Certificate serial: 019C427DA59A0202C945D1E6190EC7438E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft Manifest number: 0EA6 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl (hash: 4NjfXvI0zuI8WZhgKsv2x4vOSHI9iLsFmw4lesAYPeQ=) 2: dvF-ax6xW9w6QlzjTOaIlgyWKik.roa (hash: E53mXDTZAgvYtLPLUqhUWEPa5aOM6nnfYCB3KgCjcD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a5:9a:02:02:c9:45:d1:e6:19:0e:c7:43:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389755423f832a528c93136110f0fe4b10453582 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=f0331d51380a7c69643d59ce7b1be06e5c07c751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:1e:da:97:f1:cd:04:5f:29:ce:e0:d5:46: 04:e2:73:f4:5f:bd:ae:32:c1:d1:3e:18:cd:d1:91: ad:b8:22:f4:0b:4a:54:3c:08:e6:a8:07:74:6e:76: fa:c2:ef:3e:f9:b4:e9:75:4d:82:cf:66:95:17:36: c6:b4:17:ae:62:c8:cb:b8:84:91:96:af:5c:91:00: 7f:7d:1a:f7:0b:53:02:9b:51:07:37:43:f9:ec:9b: e3:78:e2:4d:f0:ac:c2:68:70:24:17:0e:43:3e:3c: 4c:3c:e3:b0:4f:b3:bf:99:2b:88:56:fa:5c:ae:46: 3a:f1:06:e5:f4:4d:bb:f3:15:5b:fc:41:96:f5:e7: 7f:9c:0a:37:7e:2f:d9:f5:2c:19:77:ef:46:69:2e: 74:43:28:d1:bd:3f:93:3d:8d:85:93:4e:29:b9:85: 5f:a8:60:c0:77:02:f9:79:52:27:8a:5c:1b:6f:d3: 09:84:4a:18:e9:5a:bd:f4:e4:9f:aa:09:de:1d:0a: bf:6b:8f:08:25:f2:3e:69:c0:14:79:4b:38:20:cf: 25:bb:bb:94:93:f2:b3:c8:a5:9f:c0:56:46:be:48: 5e:7e:b1:2d:17:a8:d2:62:14:15:f7:41:89:69:d5: 20:7d:c1:c5:7b:35:a0:0e:65:86:f3:af:a8:0c:ed: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:1D:51:38:0A:7C:69:64:3D:59:CE:7B:1B:E0:6E:5C:07:C7:51 X509v3 Authority Key Identifier: keyid:38:97:55:42:3F:83:2A:52:8C:93:13:61:10:F0:FE:4B:10:45:35:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJdVQj-DKlKMkxNhEPD-SxBFNYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d9b596-601e-4426-a428-46957bd8860d/1/OJdVQj-DKlKMkxNhEPD-SxBFNYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f7:07:23:31:33:e3:53:dd:42:55:27:4d:3b:1b:a7:59:f8: b1:0d:ba:66:c1:f2:16:03:39:6e:74:00:21:61:d6:27:f1:e4: a9:8d:42:57:6b:ab:94:73:a7:c6:a0:a9:eb:2d:fe:d0:47:cc: 5a:40:07:0c:b3:9d:c1:a9:26:a6:a1:a5:0a:38:c5:72:91:b5: fa:13:9c:b4:ce:0d:66:4f:d6:54:e5:d7:c8:47:65:ed:52:34: ad:8a:19:02:78:60:15:1f:75:e4:82:30:a5:e8:77:b0:f8:ab: 06:ad:39:5c:84:c2:9b:61:d5:31:f4:89:24:c6:01:c0:3a:37: 61:61:e4:63:00:d7:e3:d1:bf:0b:47:5f:fe:5b:fb:ec:40:13: 67:73:e4:83:ff:01:22:3f:89:3a:e3:9f:65:5a:e0:ac:5b:3c: 9e:98:dc:d2:f3:54:c9:1a:88:1a:2a:a3:23:33:ff:de:56:b1: 90:c4:3f:ac:54:d5:dc:43:23:dc:23:e0:c4:3a:89:30:40:c0: 22:82:b7:07:db:23:1d:93:6f:75:65:5d:8e:b9:7e:e1:bb:68: 3c:13:8f:f0:89:20:c8:ce:15:76:13:f0:32:ae:cf:11:78:a3: 3b:ed:ac:26:18:ed:5d:f8:56:fe:6f:bc:02:98:8a:60:d8:6f: ea:a3:ce:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaWaAgLJRdHmGQ7HQ45wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTc1NTQyM2Y4MzJhNTI4YzkzMTM2MTEwZjBmZTRiMTA0 NTM1ODIwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD EyhmMDMzMWQ1MTM4MGE3YzY5NjQzZDU5Y2U3YjFiZTA2ZTVjMDdjNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKUe2pfxzQRfKc7g1UYE4nP0X72u MsHRPhjN0ZGtuCL0C0pUPAjmqAd0bnb6wu8++bTpdU2Cz2aVFzbGtBeuYsjLuISR lq9ckQB/fRr3C1MCm1EHN0P57JvjeOJN8KzCaHAkFw5DPjxMPOOwT7O/mSuIVvpc rkY68Qbl9E278xVb/EGW9ed/nAo3fi/Z9SwZd+9GaS50QyjRvT+TPY2Fk04puYVf qGDAdwL5eVInilwbb9MJhEoY6Vq99OSfqgneHQq/a48IJfI+acAUeUs4IM8lu7uU k/KzyKWfwFZGvkhefrEtF6jSYhQV90GJadUgfcHFezWgDmWG86+oDO36owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAzHVE4CnxpZD1Zznsb4G5cB8dRMB8GA1UdIwQY MBaAFDiXVUI/gypSjJMTYRDw/ksQRTWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0Mjgt NDY5NTdiZDg4NjBkLzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9kOWI1OTYtNjAxZS00NDI2LWE0MjgtNDY5NTdiZDg4NjBk LzEvT0pkVlFqLURLbEtNa3hOaEVQRC1TeEJGTllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfcHIzEz 41PdQlUnTTsbp1n4sQ26ZsHyFgM5bnQAIWHWJ/HkqY1CV2urlHOnxqCp6y3+0EfM WkAHDLOdwakmpqGlCjjFcpG1+hOctM4NZk/WVOXXyEdl7VI0rYoZAnhgFR915IIw peh3sPirBq05XITCm2HVMfSJJMYBwDo3YWHkYwDX49G/C0df/lv77EATZ3Pkg/8B Ij+JOuOfZVrgrFs8npjc0vNUyRqIGiqjIzP/3laxkMQ/rFTV3EMj3CPgxDqJMEDA IoK3B9sjHZNvdWVdjrl+4btoPBOP8IkgyM4VdhPwMq7PEXijO+2sJhjtXfhW/m+8 ApiKYNhv6qPOtA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:14:00 2026 by rpki-client