This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json) Hash identifier: 1rLfAln+dxykZqmQs7n2LcNKUjDQ+PMmCPMJn/eXUuA= Subject key identifier: 12:5F:7A:25:A8:79:6A:AC:59:57:A8:1F:6D:8B:B0:06:12:85:52:2F Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Certificate serial: 019C1B033E40ACBAD48F8AA784938A22ED99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft Manifest number: 23 Signing time: Sun 01 Feb 2026 21:02:03 +0000 Manifest this update: Sun 01 Feb 2026 21:02:03 +0000 Manifest next update: Mon 02 Feb 2026 21:02:03 +0000 Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=) 2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: c+ql3AUp8B4I14CM4grP0d9CTIonHVAqI3gBwg/Jcvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:03:3e:40:ac:ba:d4:8f:8a:a7:84:93:8a:22:ed:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da Validity Not Before: Feb 1 21:02:03 2026 GMT Not After : Feb 2 21:02:03 2026 GMT Subject: CN=125f7a25a8796aac5957a81f6d8bb0061285522f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:b9:a7:44:94:cd:ba:2c:83:31:8d:ac:ef: 44:dd:13:a0:50:de:56:b7:cf:12:33:e6:e0:13:08: fc:3b:c4:16:40:52:88:11:5b:fb:23:de:2f:32:67: ce:18:1d:56:04:17:15:7a:11:4e:f6:0a:7a:ca:78: 16:89:d0:16:fe:b3:f2:55:33:9a:fd:32:8d:b4:be: f5:a9:b9:0d:3a:2f:3c:da:f0:7d:84:4d:3c:00:cd: 90:8c:b1:3f:a6:fd:c6:cf:63:ea:cb:8d:54:87:c9: 82:fe:1e:3e:39:b6:4f:36:ba:9b:44:fc:39:36:87: 7f:35:0d:0a:54:b8:fe:39:ff:d9:78:b6:39:2c:32: e3:2f:2c:21:3f:ef:e7:ba:09:fb:a3:71:88:c8:3d: 4c:8b:82:8d:80:d0:9c:9b:dd:29:2b:86:65:de:fe: 98:5c:e4:2c:ad:5e:c5:03:6b:29:ae:6e:65:68:e6: 1a:37:b2:08:d2:09:26:10:bf:96:2e:d8:ee:99:21: c5:55:b2:5f:97:c4:7b:fe:c6:9c:2f:51:33:58:41: 12:92:a0:d6:fe:5f:89:07:74:2b:9a:81:f7:b8:f9: 9f:e0:83:2c:1d:46:47:63:80:60:98:2e:a1:de:52: 86:96:31:bf:1e:ed:4f:15:10:a9:58:de:e8:23:4d: 86:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:7A:25:A8:79:6A:AC:59:57:A8:1F:6D:8B:B0:06:12:85:52:2F X509v3 Authority Key Identifier: keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bd:e0:ce:bd:d6:27:a4:f2:11:6f:1c:d6:74:50:56:2b:49: 3a:f2:28:e4:1a:c4:2e:12:49:bf:66:ef:84:64:b2:44:70:30: 39:c1:a7:61:46:66:8a:c7:31:e1:e6:49:b1:2d:ec:14:4b:69: ef:3b:52:e1:32:b1:4e:b3:4d:1e:67:67:a3:d2:b2:03:ef:13: 2c:de:a1:f5:18:fe:d2:59:2b:44:83:04:ef:aa:ee:a6:45:da: 1c:2c:85:89:8e:29:b4:84:92:20:37:40:0e:11:b9:82:8d:6d: 49:fe:a6:3c:c3:bd:5e:8f:db:b6:4c:35:b2:66:88:4f:08:4c: c5:bf:7c:ca:2a:27:c9:96:d4:60:97:eb:fe:e7:92:e2:c2:65: 8f:03:d5:51:ad:64:ce:a1:56:3f:9a:e7:fd:24:12:16:33:0c: 0e:40:65:22:1a:79:a3:c4:d6:ea:14:6d:f3:c5:a5:80:fb:5d: fd:21:2d:e0:70:44:5d:b8:41:26:d3:73:37:ea:2a:80:6f:18: 3a:33:3d:aa:c1:09:23:28:88:63:17:f4:ae:a8:7b:55:b4:b4: 6b:1a:b3:ca:16:62:85:db:63:6a:8b:27:83:44:20:cb:22:c9: 86:39:8b:a8:88:f5:ee:4c:ec:3f:ca:1d:30:5b:32:aa:d1:1a: e9:68:06:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAz5ArLrUj4qnhJOKIu2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4 NTYzZGEwHhcNMjYwMjAxMjEwMjAzWhcNMjYwMjAyMjEwMjAzWjAzMTEwLwYDVQQD EygxMjVmN2EyNWE4Nzk2YWFjNTk1N2E4MWY2ZDhiYjAwNjEyODU1MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDu5p0SUzbosgzGNrO9E3ROgUN5W t88SM+bgEwj8O8QWQFKIEVv7I94vMmfOGB1WBBcVehFO9gp6yngWidAW/rPyVTOa /TKNtL71qbkNOi882vB9hE08AM2QjLE/pv3Gz2Pqy41Uh8mC/h4+ObZPNrqbRPw5 Nod/NQ0KVLj+Of/ZeLY5LDLjLywhP+/nugn7o3GIyD1Mi4KNgNCcm90pK4Zl3v6Y XOQsrV7FA2sprm5laOYaN7II0gkmEL+WLtjumSHFVbJfl8R7/sacL1EzWEESkqDW /l+JB3QrmoH3uPmf4IMsHUZHY4BgmC6h3lKGljG/Hu1PFRCpWN7oI02GMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJfeiWoeWqsWVeoH22LsAYShVIvMB8GA1UdIwQY MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt MGY0NzViZjE0NjAzLzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPr3gzr3W J6TyEW8c1nRQVitJOvIo5BrELhJJv2bvhGSyRHAwOcGnYUZmiscx4eZJsS3sFEtp 7ztS4TKxTrNNHmdno9KyA+8TLN6h9Rj+0lkrRIME76rupkXaHCyFiY4ptISSIDdA DhG5go1tSf6mPMO9Xo/btkw1smaITwhMxb98yionyZbUYJfr/ueS4sJljwPVUa1k zqFWP5rn/SQSFjMMDkBlIhp5o8TW6hRt88WlgPtd/SEt4HBEXbhBJtNzN+oqgG8Y OjM9qsEJIyiIYxf0rqh7VbS0axqzyhZihdtjaosng0QgyyLJhjmLqIj17kzsP8od MFsyqtEa6WgGjg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:43 2026 by rpki-client