This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft File: OIN-SKr1mLyrVKX8iuQ7F74lQik.mft (raw, json) Hash identifier: Mn2pHweEMcRLI8YiJjQMkiA41Ks359kN1HuGqm3aW2E= Subject key identifier: 28:4E:F0:45:6C:88:98:15:E2:14:8D:CA:2A:81:E3:AA:C8:7F:15:2E Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019C420FBF62BD2DF86F72B7D35DE7441320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft Manifest number: 0E8E Signing time: Mon 09 Feb 2026 11:00:54 +0000 Manifest this update: Mon 09 Feb 2026 11:00:54 +0000 Manifest next update: Tue 10 Feb 2026 11:00:54 +0000 Files and hashes: 1: OIN-SKr1mLyrVKX8iuQ7F74lQik.crl (hash: UApiBZZTkd8FJ+bgse4X0qySowgNvBEA7LDMch0Hjy8=) 2: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (hash: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:bf:62:bd:2d:f8:6f:72:b7:d3:5d:e7:44:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Feb 9 11:00:54 2026 GMT Not After : Feb 10 11:00:54 2026 GMT Subject: CN=284ef0456c889815e2148dca2a81e3aac87f152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:35:f6:83:cf:a7:3e:83:65:5d:d5:94:93: 1c:2a:17:56:e2:7f:7c:fb:02:67:ef:cb:6e:2a:1a: 54:d8:05:3f:7e:99:13:82:5e:40:30:e3:7b:5d:e9: 94:23:60:04:cd:28:01:d7:a6:2c:35:df:d8:75:bd: 6b:7b:5c:46:85:72:15:66:f2:9a:47:6f:12:a9:36: e8:de:70:76:69:33:e4:fa:c7:05:20:a9:ae:66:87: 82:fd:32:7e:2d:cc:e0:c5:de:15:98:10:8d:e7:d2: dd:8a:26:4c:72:58:e8:d2:5e:ee:86:9a:67:77:ce: 0e:30:be:21:dd:6b:3c:d5:16:29:c4:08:53:f6:f4: f2:59:cb:c9:16:8c:ac:32:1e:c7:11:d8:11:eb:e4: a9:34:b5:b2:66:a0:06:13:02:eb:b8:e9:88:99:9a: 92:a1:2f:5c:ed:bc:16:1c:0f:cd:2f:04:e7:97:9d: f0:4c:f2:ad:82:7b:4c:7b:96:c9:ad:a2:e4:e3:e4: 29:d9:11:b0:7a:04:b2:ff:9d:c1:55:5e:f9:df:a0: ac:22:34:2c:ca:12:32:52:b3:3c:21:df:1e:92:8a: 7d:41:a1:5e:e2:e6:3f:ad:7a:6d:e9:8c:b8:86:b5: 7e:f6:35:87:58:e7:a2:ce:99:26:98:c8:52:49:a7: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:F0:45:6C:88:98:15:E2:14:8D:CA:2A:81:E3:AA:C8:7F:15:2E X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:bf:65:4b:75:94:86:6b:28:f3:bd:30:cd:27:05:86:d3:a1: 23:42:cc:2c:ed:9f:e5:96:4e:1a:b3:09:82:6f:3a:14:5b:fc: cd:fc:58:cf:e0:23:e5:30:b5:51:12:fd:65:1a:27:a9:49:6e: 3b:9a:fe:9f:20:44:15:db:90:19:67:1a:70:99:2f:34:c8:57: b1:d4:0e:1a:e1:9c:db:b5:19:78:eb:05:d9:a3:09:e6:72:af: 63:d6:7e:4c:7f:d6:76:6d:ea:a2:f7:99:9b:53:02:75:17:e7: 5f:0d:49:b6:7f:e7:3e:3c:f8:11:70:c8:04:4e:05:ec:a3:6d: 62:05:d5:d2:e3:70:8a:a3:b5:b2:66:c5:f9:db:5d:09:8e:6b: 41:a9:e5:da:fd:e2:58:69:8f:65:c8:f5:05:14:4a:97:ce:de: 21:1b:aa:b2:cf:81:37:3f:c0:2a:9b:42:7a:e3:e2:00:e0:b0: 80:29:bb:95:41:9b:d9:95:ac:c7:c6:58:ae:f4:54:c3:6c:1f: 2f:58:fc:6a:c6:fc:d6:8c:d4:75:a8:bb:e2:9a:4a:26:b7:8c: 20:ff:76:08:a4:ab:b9:05:e1:dd:66:7e:00:bb:cd:02:d9:9f: 48:07:35:66:a0:de:f1:d5:10:4f:54:5e:6e:1d:b9:e7:e2:b9: a0:28:28:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD79ivS34b3K3013nRBMgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjYwMjA5MTEwMDU0WhcNMjYwMjEwMTEwMDU0WjAzMTEwLwYDVQQD EygyODRlZjA0NTZjODg5ODE1ZTIxNDhkY2EyYTgxZTNhYWM4N2YxNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbo19oPPpz6DZV3VlJMcKhdW4n98 +wJn78tuKhpU2AU/fpkTgl5AMON7XemUI2AEzSgB16YsNd/Ydb1re1xGhXIVZvKa R28SqTbo3nB2aTPk+scFIKmuZoeC/TJ+Lczgxd4VmBCN59LdiiZMcljo0l7uhppn d84OML4h3Ws81RYpxAhT9vTyWcvJFoysMh7HEdgR6+SpNLWyZqAGEwLruOmImZqS oS9c7bwWHA/NLwTnl53wTPKtgntMe5bJraLk4+Qp2RGwegSy/53BVV7536CsIjQs yhIyUrM8Id8ekop9QaFe4uY/rXpt6Yy4hrV+9jWHWOeizpkmmMhSSac7mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChO8EVsiJgV4hSNyiqB46rIfxUuMB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyL9lS3WU hmso870wzScFhtOhI0LMLO2f5ZZOGrMJgm86FFv8zfxYz+Aj5TC1URL9ZRonqUlu O5r+nyBEFduQGWcacJkvNMhXsdQOGuGc27UZeOsF2aMJ5nKvY9Z+TH/Wdm3qoveZ m1MCdRfnXw1Jtn/nPjz4EXDIBE4F7KNtYgXV0uNwiqO1smbF+dtdCY5rQanl2v3i WGmPZcj1BRRKl87eIRuqss+BNz/AKptCeuPiAOCwgCm7lUGb2ZWsx8ZYrvRUw2wf L1j8asb81ozUdai74ppKJreMIP92CKSruQXh3WZ+ALvNAtmfSAc1ZqDe8dUQT1Re bh255+K5oCgoGw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:59 2026 by rpki-client