This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json) Hash identifier: cEFnBqhp73TAC59m9vVA0u+ZGgbNSgrMzajMIs3Js/E= Subject key identifier: 9D:C1:AF:D0:E4:75:CE:89:56:61:E3:3D:DF:6C:70:BE:E8:9D:C7:DF Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Certificate serial: 019C41D8FD003F5DEF05F5B58950200CE64D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft Manifest number: 1555 Signing time: Mon 09 Feb 2026 10:01:05 +0000 Manifest this update: Mon 09 Feb 2026 10:01:05 +0000 Manifest next update: Tue 10 Feb 2026 10:01:05 +0000 Files and hashes: 1: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: i0yi4l06OApE3D5ixZECYsjLOdKA/fPirE4YoUUMJdM=) 2: nyzykzCSciL9b7XcY2Eb25U1248.roa (hash: y0AO2J7wuOu2+dkp56Hwq0efMMez1I5zXW1sHLiGxC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:fd:00:3f:5d:ef:05:f5:b5:89:50:20:0c:e6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be Validity Not Before: Feb 9 10:01:05 2026 GMT Not After : Feb 10 10:01:05 2026 GMT Subject: CN=9dc1afd0e475ce895661e33ddf6c70bee89dc7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:80:fe:b8:41:e2:e5:d3:ce:a2:9c:0e:82:76: cc:7e:32:c0:47:71:12:ac:f0:66:07:bf:45:57:2d: de:5d:48:ee:09:ec:9c:1b:d8:a9:cc:69:92:67:83: e1:1c:4e:b1:51:05:72:cb:7a:88:05:42:e5:b2:6b: 18:a1:cc:d0:11:db:4a:6e:f9:7d:32:be:c0:1f:f8: 1c:88:ea:59:c9:bc:46:c9:32:e6:eb:51:72:be:93: bf:1b:ec:66:8d:f4:bd:16:87:11:0c:4d:ea:91:e5: 13:93:b1:c7:06:98:6f:0e:df:03:a7:46:73:00:ea: aa:24:4b:e9:1a:05:63:2b:1b:b4:f0:0b:56:40:52: 9a:c7:f3:ae:37:6f:73:a9:2d:8a:7c:c7:95:d2:fc: 42:cd:7a:9f:65:21:9a:8b:22:44:f1:96:1d:dd:1c: d0:60:db:2f:8e:78:c0:20:a8:e5:e0:14:50:45:5d: d8:f3:21:1b:03:1f:80:4c:8f:72:39:8a:50:88:2c: 30:fa:6c:c6:b2:41:41:fd:df:46:6b:29:fd:0e:dd: f2:ac:e8:4e:52:cd:83:0d:c4:6e:c2:c8:42:60:64: 38:38:48:99:42:ac:3d:f5:6d:5c:ec:bb:2e:9a:81: 82:23:88:28:4a:e4:00:f1:4b:68:f4:ef:f4:8d:36: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C1:AF:D0:E4:75:CE:89:56:61:E3:3D:DF:6C:70:BE:E8:9D:C7:DF X509v3 Authority Key Identifier: keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:92:e5:6c:f2:a7:91:8b:6f:d4:92:2e:77:24:28:77:4d:7c: 20:64:0a:ee:ce:80:ab:8b:e2:c3:c2:00:2f:00:a7:db:80:72: 08:62:f8:23:a6:ed:3a:f3:86:ac:b7:61:9c:ed:21:ef:08:75: 4d:d0:3f:d0:6c:60:bd:e2:c9:f7:2c:43:f9:5d:b8:cb:eb:df: 76:97:47:d1:52:80:91:e9:cd:c1:5b:37:d0:76:f6:a0:c8:e2: 5a:d1:b4:de:63:de:19:0d:ab:95:c7:a7:bc:dc:43:f1:f2:f1: db:b2:d7:18:0c:fd:48:c7:81:b1:8d:69:ae:e2:5c:1f:ee:9d: 5c:8c:f1:d9:c9:5a:f6:c0:bd:65:a6:56:94:35:e1:03:97:50: 89:af:09:bb:7c:ce:7d:cd:6a:1b:50:1a:c9:50:e0:02:b3:a4: 3d:a3:5e:9c:8f:67:3a:06:b9:0a:6a:38:7b:f4:03:76:bb:91: 2d:bf:95:71:06:a7:e3:6a:de:34:2e:da:3f:22:66:91:0b:90: 7b:e0:d0:2c:3a:9d:22:24:b8:81:7d:1d:d1:7c:a4:82:00:df: fe:ab:58:c9:e7:d7:8a:a4:57:ed:b7:10:95:df:a1:d5:06:8c: 74:83:f0:c9:19:ad:44:7c:73:e6:0e:77:19:80:b7:1a:8d:fb: 3d:27:d3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2P0AP13vBfW1iVAgDOZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTJjOTdkYmQzMjE5NWI2YWZhOTExNDBiNTUyMGI1ZTBj MmM1YmUwHhcNMjYwMjA5MTAwMTA1WhcNMjYwMjEwMTAwMTA1WjAzMTEwLwYDVQQD Eyg5ZGMxYWZkMGU0NzVjZTg5NTY2MWUzM2RkZjZjNzBiZWU4OWRjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YD+uEHi5dPOopwOgnbMfjLAR3ES rPBmB79FVy3eXUjuCeycG9ipzGmSZ4PhHE6xUQVyy3qIBULlsmsYoczQEdtKbvl9 Mr7AH/gciOpZybxGyTLm61FyvpO/G+xmjfS9FocRDE3qkeUTk7HHBphvDt8Dp0Zz AOqqJEvpGgVjKxu08AtWQFKax/OuN29zqS2KfMeV0vxCzXqfZSGaiyJE8ZYd3RzQ YNsvjnjAIKjl4BRQRV3Y8yEbAx+ATI9yOYpQiCww+mzGskFB/d9Gayn9Dt3yrOhO Us2DDcRuwshCYGQ4OEiZQqw99W1c7LsumoGCI4goSuQA8Uto9O/0jTZU1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3Br9Dkdc6JVmHjPd9scL7oncffMB8GA1UdIwQY MBaAFDgSyX29MhlbavqRFAtVILXgwsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEt ZDkyNzg1YTYxMjE5LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jYjUzZmMtNzA5Ni00NTk0LTkxYjEtZDkyNzg1YTYxMjE5 LzEvT0JMSmZiMHlHVnRxLXBFVUMxVWd0ZURDeGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJLlbPKn kYtv1JIudyQod018IGQK7s6Aq4viw8IALwCn24ByCGL4I6btOvOGrLdhnO0h7wh1 TdA/0GxgveLJ9yxD+V24y+vfdpdH0VKAkenNwVs30Hb2oMjiWtG03mPeGQ2rlcen vNxD8fLx27LXGAz9SMeBsY1pruJcH+6dXIzx2cla9sC9ZaZWlDXhA5dQia8Ju3zO fc1qG1AayVDgArOkPaNenI9nOga5Cmo4e/QDdruRLb+VcQan42reNC7aPyJmkQuQ e+DQLDqdIiS4gX0d0XykggDf/qtYyefXiqRX7bcQld+h1QaMdIPwyRmtRHxz5g53 GYC3Go37PSfTeA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:59 2026 by rpki-client