This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json) Hash identifier: MZPUGsnNVqB8fap0H6K+++3ujfU0RxOo8LMgK3djyp4= Subject key identifier: 76:07:2E:E4:97:A9:62:DF:B2:D1:9E:9B:59:6D:E3:E5:EC:A5:A7:0F Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Certificate serial: 019C41D85196E1F18F1A0AE40271E47A8215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft Manifest number: 0A95 Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: 8Jh5Xr7XKBnk4CEk51UAwGwI0+0CrI2Z9GqCMvUbgnw=) 2: pgGnSHyUvU2MCidf2eDuWrDOeCY.roa (hash: oty+EyubS3vsZNVfWcxWo/GIVhsqz3pi2U3eHoewYe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:51:96:e1:f1:8f:1a:0a:e4:02:71:e4:7a:82:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6 Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=76072ee497a962dfb2d19e9b596de3e5eca5a70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:e2:c9:6e:af:b4:41:96:da:2c:98:d1:03: 64:b8:78:37:a0:5a:43:ef:2b:5e:24:5f:2f:85:31: 40:3c:bc:12:56:91:39:49:73:a4:b1:24:e6:bd:b4: 28:2c:71:60:5c:c1:28:be:a9:59:c6:52:e7:a6:b8: 6d:d8:81:98:cf:67:49:7f:7e:33:fb:ec:b6:17:cb: 3f:a8:5b:04:27:42:9b:ee:d7:15:2b:3b:c7:fa:76: 10:c5:cc:de:f6:2d:08:be:a5:a6:84:df:12:34:fd: e1:b5:36:3f:10:53:a7:96:4c:1e:db:f4:96:da:a9: 6c:b1:ae:d7:f6:c1:08:97:6c:b1:fd:99:2b:93:23: 18:8e:76:80:10:34:8f:80:81:14:0f:f6:bf:ec:a2: d7:53:fc:b3:87:bc:06:be:70:88:d7:e9:11:b8:fb: a5:88:94:b6:9f:38:c2:4d:b5:53:f7:24:fc:87:53: 43:5b:2e:a3:92:70:6d:1c:2d:9e:d4:36:8a:1a:a4: cd:90:da:61:60:f3:dc:b2:13:79:2e:a1:be:fa:a0: ee:c6:51:45:7d:1d:8d:8c:36:8e:9f:c3:2b:d2:79: 8a:03:ca:03:1e:ea:1f:02:df:74:a1:e7:aa:94:32: da:0b:4a:59:18:a5:bd:02:8c:13:72:5c:1b:81:11: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:2E:E4:97:A9:62:DF:B2:D1:9E:9B:59:6D:E3:E5:EC:A5:A7:0F X509v3 Authority Key Identifier: keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:28:26:a3:62:ef:2e:fa:78:5c:f7:3e:d7:1c:83:b6:14:d0: 30:ae:d1:22:fa:47:16:67:53:d2:fc:56:6d:06:cb:bc:3b:85: 80:a1:6d:a8:85:4e:9a:3c:3e:d9:3c:18:fb:c9:f1:49:24:74: be:a1:ca:de:6e:93:e0:29:2f:be:7a:95:33:0a:8a:52:63:3e: 63:4d:1c:7d:c1:ec:cd:dd:d4:95:63:6c:51:f3:00:8d:e1:10: 58:8b:b2:39:c9:4a:72:db:04:6c:a9:c7:52:2f:9a:04:d8:ca: 0a:92:f8:4e:ec:93:dc:6a:60:32:90:79:06:21:19:d7:30:fa: d9:02:f1:7c:2e:b2:e4:99:c3:52:ac:2d:f5:c7:ed:74:31:e1: 49:2b:d1:6b:e8:e7:85:68:2f:97:29:c6:d8:44:d8:46:db:7a: 0b:03:f5:a5:44:81:cb:1e:d0:b0:59:a4:f8:49:b0:be:8e:e4: c7:95:66:35:6c:84:4e:1f:5e:b5:1f:9f:9d:a8:a4:30:cc:52: 87:49:74:3d:f1:d4:88:10:af:03:41:5e:e7:28:6e:c2:95:d7: c4:4a:c6:21:21:dd:ff:5f:7d:f1:e9:1c:57:3f:98:84:ec:37: 60:7e:d8:52:b5:66:58:bb:38:d4:1d:c0:fa:43:98:fb:94:14: cc:b6:cf:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FGW4fGPGgrkAnHkeoIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZWE1MjU1Zjg4ZDRiOTU3MTg5YzE0MmY4YWM1NjgxYzUw YzY4YTYwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD Eyg3NjA3MmVlNDk3YTk2MmRmYjJkMTllOWI1OTZkZTNlNWVjYTVhNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBniyW6vtEGW2iyY0QNkuHg3oFpD 7yteJF8vhTFAPLwSVpE5SXOksSTmvbQoLHFgXMEovqlZxlLnprht2IGYz2dJf34z ++y2F8s/qFsEJ0Kb7tcVKzvH+nYQxcze9i0IvqWmhN8SNP3htTY/EFOnlkwe2/SW 2qlssa7X9sEIl2yx/ZkrkyMYjnaAEDSPgIEUD/a/7KLXU/yzh7wGvnCI1+kRuPul iJS2nzjCTbVT9yT8h1NDWy6jknBtHC2e1DaKGqTNkNphYPPcshN5LqG++qDuxlFF fR2NjDaOn8Mr0nmKA8oDHuofAt90oeeqlDLaC0pZGKW9AowTclwbgRGRMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYHLuSXqWLfstGem1lt4+XspacPMB8GA1UdIwQY MBaAFIjqUlX4jUuVcYnBQvisVoHFDGimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzkt ZTdjZTI2ODg0YmU2LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9iYjg3MjctNzhmNy00MDFmLTkzMzktZTdjZTI2ODg0YmU2 LzEvaU9wU1ZmaU5TNVZ4aWNGQy1LeFdnY1VNYUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCgmo2Lv Lvp4XPc+1xyDthTQMK7RIvpHFmdT0vxWbQbLvDuFgKFtqIVOmjw+2TwY+8nxSSR0 vqHK3m6T4CkvvnqVMwqKUmM+Y00cfcHszd3UlWNsUfMAjeEQWIuyOclKctsEbKnH Ui+aBNjKCpL4TuyT3GpgMpB5BiEZ1zD62QLxfC6y5JnDUqwt9cftdDHhSSvRa+jn hWgvlynG2ETYRtt6CwP1pUSByx7QsFmk+Emwvo7kx5VmNWyETh9etR+fnaikMMxS h0l0PfHUiBCvA0Fe5yhuwpXXxErGISHd/1998ekcVz+YhOw3YH7YUrVmWLs41B3A +kOY+5QUzLbPkA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:00 2026 by rpki-client