This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json) Hash identifier: d6VjAm+RpJunpQKwsbt88SbCcAbpZat5WAfcVM2XunU= Subject key identifier: 59:F0:37:53:60:E3:E4:B7:26:E8:3D:B8:B2:61:8B:AC:41:0C:31:1E Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b Certificate serial: 019C4133A4F507A307F408D33BF914A4A3D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft Manifest number: 0666 Signing time: Mon 09 Feb 2026 07:00:29 +0000 Manifest this update: Mon 09 Feb 2026 07:00:29 +0000 Manifest next update: Tue 10 Feb 2026 07:00:29 +0000 Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: NVq6TsPuqGhd3JouGunxA3I0zk7/ClBDXaLXlVMsZqk=) 2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:a4:f5:07:a3:07:f4:08:d3:3b:f9:14:a4:a3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b Validity Not Before: Feb 9 07:00:29 2026 GMT Not After : Feb 10 07:00:29 2026 GMT Subject: CN=59f0375360e3e4b726e83db8b2618bac410c311e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:33:1e:0c:0b:aa:5b:79:be:5c:cc:9e:cb:73: 9a:11:ee:59:2e:c5:cc:68:29:b5:71:b5:4a:b1:8c: e5:24:2a:9a:9f:8b:35:84:73:ec:5e:d2:f9:92:98: 2d:2d:dc:7e:16:9c:78:28:9b:2b:be:74:29:5f:11: 18:c8:80:1c:dc:d2:99:c4:75:34:a6:02:5b:48:6d: e8:49:65:4a:46:bf:9e:99:15:bb:d1:57:f9:b0:b6: 2b:38:61:89:f3:79:ac:32:d5:a1:8c:41:fd:57:70: d9:76:a0:be:d5:89:20:37:2b:0a:4e:6e:0f:c2:f1: 81:eb:48:3b:d9:2a:31:2c:ca:73:cf:e7:3a:a4:39: c0:03:a4:69:dd:9e:e5:5e:07:d1:bb:77:31:70:ee: b6:d9:54:8d:cf:0b:9a:f2:2c:3f:bd:ad:43:1a:98: 0f:f5:a9:7d:16:18:df:df:c3:73:1c:8a:c0:96:cb: 81:5f:3a:f6:4c:e7:43:4c:a8:42:e8:bb:ec:23:4c: 7f:84:37:fe:d9:0d:30:8f:a1:d1:df:fb:37:82:21: 03:04:c3:2a:ff:d4:a0:a5:21:80:65:24:0b:64:00: 6d:c4:b3:51:4b:71:6b:4a:1f:de:ba:f3:10:15:65: 82:8b:d3:bf:55:b2:48:97:29:44:4b:f7:df:fa:53: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F0:37:53:60:E3:E4:B7:26:E8:3D:B8:B2:61:8B:AC:41:0C:31:1E X509v3 Authority Key Identifier: keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:34:5a:43:fd:fd:b4:ca:a1:d2:f3:dc:47:94:4f:c8:68:9e: 4c:a9:b3:5b:b5:32:e0:a4:67:8c:dd:70:ec:1f:fd:1c:62:28: a1:5e:b3:c1:54:f1:2a:19:67:92:92:4a:ac:81:f4:79:9a:96: 87:71:d7:85:52:a9:8f:43:ea:fe:ad:9e:bd:63:3f:56:c8:f1: 7c:fd:a5:27:f6:4a:da:6c:5b:b9:d9:81:ef:e2:8a:30:6d:01: 5f:d0:1e:fa:dd:ea:90:10:5c:46:9a:97:a8:54:a0:9d:92:14: 9e:01:cd:73:65:49:ca:a4:ad:17:96:4f:0e:ff:87:1f:3e:2c: b4:d4:16:b4:8a:d3:3e:84:25:46:8b:f0:f9:bc:07:33:dd:08: 70:72:6e:f4:44:64:a2:87:b3:b3:32:33:77:aa:b0:aa:63:10: a3:11:02:66:d3:5f:e3:bc:26:6a:24:49:d3:1b:b4:3b:8f:b8: 09:ec:de:41:b1:42:02:a2:ee:62:43:c1:f5:0b:e4:68:f7:54: 9f:9b:d2:7b:05:22:79:ae:63:84:88:8b:15:a3:06:1f:49:b7: 20:df:1a:74:39:42:87:13:16:05:f0:30:27:66:f0:09:08:49: ac:d4:3b:e6:6b:52:f0:eb:4f:f1:f8:39:6e:ff:83:4b:62:d2: b6:cd:c6:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM6T1B6MH9AjTO/kUpKPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1 NjVmMWIwHhcNMjYwMjA5MDcwMDI5WhcNMjYwMjEwMDcwMDI5WjAzMTEwLwYDVQQD Eyg1OWYwMzc1MzYwZTNlNGI3MjZlODNkYjhiMjYxOGJhYzQxMGMzMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DMeDAuqW3m+XMyey3OaEe5ZLsXM aCm1cbVKsYzlJCqan4s1hHPsXtL5kpgtLdx+Fpx4KJsrvnQpXxEYyIAc3NKZxHU0 pgJbSG3oSWVKRr+emRW70Vf5sLYrOGGJ83msMtWhjEH9V3DZdqC+1YkgNysKTm4P wvGB60g72SoxLMpzz+c6pDnAA6Rp3Z7lXgfRu3cxcO622VSNzwua8iw/va1DGpgP 9al9Fhjf38NzHIrAlsuBXzr2TOdDTKhC6LvsI0x/hDf+2Q0wj6HR3/s3giEDBMMq /9SgpSGAZSQLZABtxLNRS3FrSh/euvMQFWWCi9O/VbJIlylES/ff+lMhgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnwN1Ng4+S3Jug9uLJhi6xBDDEeMB8GA1UdIwQY MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDRaQ/39 tMqh0vPcR5RPyGieTKmzW7Uy4KRnjN1w7B/9HGIooV6zwVTxKhlnkpJKrIH0eZqW h3HXhVKpj0Pq/q2evWM/VsjxfP2lJ/ZK2mxbudmB7+KKMG0BX9Ae+t3qkBBcRpqX qFSgnZIUngHNc2VJyqStF5ZPDv+HHz4stNQWtIrTPoQlRovw+bwHM90IcHJu9ERk ooezszIzd6qwqmMQoxECZtNf47wmaiRJ0xu0O4+4CezeQbFCAqLuYkPB9QvkaPdU n5vSewUiea5jhIiLFaMGH0m3IN8adDlChxMWBfAwJ2bwCQhJrNQ75mtS8OtP8fg5 bv+DS2LSts3Ghw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:33 2026 by rpki-client