This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft File: Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft (raw, json) Hash identifier: gveUlhom+1pccR9/cuZsbuuKDXMlb/+gvBjS0R0m/BM= Subject key identifier: 88:16:A2:85:37:C9:21:BF:FD:BB:8A:10:D4:71:8F:50:EC:EF:4C:81 Authority key identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 Certificate issuer: /CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8 Certificate serial: 019C43226EF646ACAF121746C8CFE98B2C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl (hash: Y8yJZSWMslByTQ/yqSiPcIJwuGgQLtKNwVNe2ef5DKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6e:f6:46:ac:af:12:17:46:c8:cf:e9:8b:2c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=8816a28537c921bffdbb8a10d4718f50ecef4c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:d7:d7:09:2e:ee:b8:3d:5d:e2:5b:40:e4: 6c:ca:4e:31:73:60:77:24:86:59:39:a7:ef:58:29: 74:17:17:75:88:b6:6f:87:1e:23:5d:50:3f:57:43: 2e:89:e5:b0:65:84:c1:5a:e9:a8:27:9a:06:88:6e: fc:71:70:14:ca:28:7d:59:3a:13:6d:4c:db:b3:5e: ba:56:cc:80:9d:8b:f8:76:04:77:ce:23:0c:94:3e: 4b:8c:a2:11:d0:3d:08:54:36:2e:46:e5:64:4b:3e: a7:d8:09:97:ce:9d:2c:51:1c:a1:17:da:2b:1f:65: 99:c5:1a:a8:4a:11:6c:6c:3c:cd:68:ed:13:77:9a: 5e:dd:d5:b9:a8:3e:cb:5c:fc:53:64:e5:82:cf:55: 09:93:6f:83:4a:7a:e7:82:91:fc:26:d5:b9:a0:0f: de:ea:64:a1:7c:a3:d8:98:bf:0f:e9:52:ec:6f:7a: 4d:b4:4f:60:87:5c:46:f2:aa:90:34:89:e9:4e:8c: 3b:91:39:de:1c:3e:dc:4a:07:47:ac:ec:75:94:70: 7b:14:08:42:f5:5c:bf:e1:b5:9d:37:94:0c:0d:ac: 01:f7:bf:a5:91:d9:cf:cd:53:db:50:6b:fd:f2:77: 5b:63:e4:62:16:8b:a8:f6:d1:b2:bb:f0:f0:ff:e7: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:16:A2:85:37:C9:21:BF:FD:BB:8A:10:D4:71:8F:50:EC:EF:4C:81 X509v3 Authority Key Identifier: keyid:39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b1:a0:3d:2f:9c:bd:0a:d1:a1:9c:8b:d3:75:26:30:ff:ae: 2c:33:30:54:12:82:18:ff:03:d0:5d:77:d5:20:a2:9b:fc:b1: 92:d9:7e:75:fb:59:37:fa:05:a0:a7:15:07:9e:4a:da:1e:8d: c8:df:35:19:8d:74:d4:9b:8b:3e:4d:f0:8c:79:1c:ff:04:b3: 75:fd:06:76:9b:a5:49:67:81:d5:7a:33:4b:8e:d0:13:b7:c7: 8a:fb:b1:53:66:f5:f9:48:4b:fe:ac:9c:3c:d5:b7:53:ca:35: a8:99:7c:8b:b0:25:73:48:73:84:cf:58:c9:8e:54:fb:bd:c0: de:79:98:5d:54:71:a2:2c:fd:45:ba:1f:a2:86:b8:c1:b7:2f: 3c:b9:d8:fb:d6:62:fa:d4:cf:b6:22:24:47:85:c6:eb:0d:fb: ec:12:c8:e9:a2:96:50:c3:28:6a:89:b8:d0:14:ce:bd:37:5a: e2:07:38:7f:19:8b:8a:2a:48:24:7e:4a:b2:74:a9:c5:3b:1c: 58:d0:a0:9c:c4:55:07:a1:5f:a2:7e:99:b4:b8:1b:16:a2:cd: b0:3b:d1:4e:bb:15:00:c3:45:a2:83:5f:7f:fa:c8:26:34:b6: 98:f6:29:72:ce:34:f8:90:25:25:a2:da:ea:40:66:02:5f:3f: 35:9c:3b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm72RqyvEhdGyM/piyxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2QxZDViYjg4OTU4YzY5Y2JkZGU5MGE5ZTA1NmI0OGM0 ZmFiZjgwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD Eyg4ODE2YTI4NTM3YzkyMWJmZmRiYjhhMTBkNDcxOGY1MGVjZWY0YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDX1wku7rg9XeJbQORsyk4xc2B3 JIZZOafvWCl0Fxd1iLZvhx4jXVA/V0MuieWwZYTBWumoJ5oGiG78cXAUyih9WToT bUzbs166VsyAnYv4dgR3ziMMlD5LjKIR0D0IVDYuRuVkSz6n2AmXzp0sURyhF9or H2WZxRqoShFsbDzNaO0Td5pe3dW5qD7LXPxTZOWCz1UJk2+DSnrngpH8JtW5oA/e 6mShfKPYmL8P6VLsb3pNtE9gh1xG8qqQNInpTow7kTneHD7cSgdHrOx1lHB7FAhC 9Vy/4bWdN5QMDawB97+lkdnPzVPbUGv98ndbY+RiFouo9tGyu/Dw/+eNwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgWooU3ySG//buKENRxj1Ds70yBMB8GA1UdIwQY MBaAFDnNHVu4iVjGnL3ekKngVrSMT6v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMt NDZhODVhMjhlNzQ5LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMtNDZhODVhMjhlNzQ5 LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrGgPS+c vQrRoZyL03UmMP+uLDMwVBKCGP8D0F131SCim/yxktl+dftZN/oFoKcVB55K2h6N yN81GY101JuLPk3wjHkc/wSzdf0GdpulSWeB1XozS47QE7fHivuxU2b1+UhL/qyc PNW3U8o1qJl8i7Alc0hzhM9YyY5U+73A3nmYXVRxoiz9Rbofooa4wbcvPLnY+9Zi +tTPtiIkR4XG6w377BLI6aKWUMMoaom40BTOvTda4gc4fxmLiipIJH5KsnSpxTsc WNCgnMRVB6Ffon6ZtLgbFqLNsDvRTrsVAMNFooNff/rIJjS2mPYpcs40+JAlJaLa 6kBmAl8/NZw7fw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:21 2026 by rpki-client