This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json) Hash identifier: skhZMTs7/79jQ9xSV5+XxXcCjKKDC1mKLzhKWK72s2w= Subject key identifier: 87:4E:CA:9D:41:DF:D8:AC:39:B1:E1:90:B5:5D:2F:AD:14:E3:63:87 Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1 Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1 Certificate serial: 019C42EAF3BF52416B7830139E57C523F1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft Manifest number: 0EFD Signing time: Mon 09 Feb 2026 15:00:19 +0000 Manifest this update: Mon 09 Feb 2026 15:00:19 +0000 Manifest next update: Tue 10 Feb 2026 15:00:19 +0000 Files and hashes: 1: RF94BnXgi0R9Os57s0wl9sVC1E8.roa (hash: 0fOD15YKqjCsf/vXO4OCMgCmPeLPtrJce5ZO8YGHzXE=) 2: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: j9xY0yauifVRMqavXxnsVrxYLOqO764l90RXuyZdlLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f3:bf:52:41:6b:78:30:13:9e:57:c5:23:f1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1 Validity Not Before: Feb 9 15:00:19 2026 GMT Not After : Feb 10 15:00:19 2026 GMT Subject: CN=874eca9d41dfd8ac39b1e190b55d2fad14e36387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:9a:fc:49:d9:29:f0:b0:1a:2e:f6:38:fe: 7b:cc:47:5d:d5:99:a7:b7:1c:fb:c7:27:f8:dc:be: 5d:2d:d0:ae:35:e3:02:73:9a:83:a0:1a:01:e0:8c: ce:b7:5c:c0:dc:5e:a8:3c:11:20:20:f2:a9:3b:1a: 22:9c:f7:d6:19:6a:5a:64:56:0e:bc:fd:49:46:12: 7c:ef:28:05:dd:ab:8e:a6:4d:2a:d5:c1:18:ca:7b: d0:f3:0f:cc:57:ed:dd:ee:fc:c0:96:85:2a:d1:e8: 04:e6:69:04:86:29:e9:fe:46:ab:be:52:99:cf:18: 3f:f9:64:75:6f:78:16:82:33:e1:9a:8b:97:27:f2: d1:7d:08:60:77:92:54:70:0e:7e:45:8f:34:0d:9d: 17:9f:17:9a:86:66:41:d8:13:d8:52:51:75:c5:73: 42:7e:6a:a8:de:f0:2e:00:0c:e8:2a:35:47:29:90: 35:d4:ea:db:e6:b7:be:96:93:07:7b:15:d5:c1:fb: ed:99:c5:e1:b5:3a:b4:ab:c4:c3:32:9f:30:ab:c7: ab:cf:37:c5:15:52:af:3d:68:da:69:68:ba:b7:b4: 9f:41:07:c9:52:0c:49:9e:65:99:b2:89:ae:d1:27: f2:7c:f2:63:a2:0c:a1:66:85:d7:3a:44:b9:cc:3b: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4E:CA:9D:41:DF:D8:AC:39:B1:E1:90:B5:5D:2F:AD:14:E3:63:87 X509v3 Authority Key Identifier: keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:14:cb:54:80:8f:da:dd:6a:33:a3:73:a0:d5:41:30:42:2a: 18:3a:42:be:ba:f3:f5:01:79:0a:d7:04:c2:cc:31:d2:f7:90: d9:d3:64:90:3c:8c:8b:86:42:9a:4c:c8:0f:aa:a1:6d:5a:b8: f1:06:ab:63:aa:33:b8:3a:4f:cc:98:01:a5:9e:83:d0:d5:29: 18:6c:76:c1:da:4f:56:96:65:49:82:5a:ec:c4:8e:69:2f:05: 50:9f:8f:45:10:d7:b4:b4:f7:9e:fb:4b:61:f7:f3:95:21:b7: 6c:22:c3:cd:38:fc:13:21:79:cc:2e:d4:f7:99:ed:89:87:bd: 04:5a:6b:d8:0d:9f:bd:e4:ee:44:da:d2:12:6d:ec:c2:1e:75: 94:74:ba:fa:12:57:ef:37:dc:fa:19:5a:13:85:68:e2:08:46: 99:2b:7b:68:8f:a7:77:81:bd:ba:51:f9:08:b8:4a:11:ca:5f: 30:68:30:73:31:99:1d:e7:6b:43:28:97:ec:26:8c:89:b6:7c: 02:20:ab:6b:ec:5c:39:5a:c2:1f:8d:2c:b6:2f:1d:c4:0d:58: 41:2b:cf:8f:70:57:74:1a:87:01:7f:8f:53:8a:90:1e:65:cc: 36:a3:d3:ee:f3:8b:7f:91:45:ec:7d:77:71:65:3f:86:14:d6: f4:86:e6:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vO/UkFreDATnlfFI/H5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwN2RjYjZkYjlhNzVjMTAxN2ZlZTY3MmY3M2I5NjE3NzFi NzdjYTEwHhcNMjYwMjA5MTUwMDE5WhcNMjYwMjEwMTUwMDE5WjAzMTEwLwYDVQQD Eyg4NzRlY2E5ZDQxZGZkOGFjMzliMWUxOTBiNTVkMmZhZDE0ZTM2Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzqa/EnZKfCwGi72OP57zEdd1Zmn txz7xyf43L5dLdCuNeMCc5qDoBoB4IzOt1zA3F6oPBEgIPKpOxoinPfWGWpaZFYO vP1JRhJ87ygF3auOpk0q1cEYynvQ8w/MV+3d7vzAloUq0egE5mkEhinp/karvlKZ zxg/+WR1b3gWgjPhmouXJ/LRfQhgd5JUcA5+RY80DZ0XnxeahmZB2BPYUlF1xXNC fmqo3vAuAAzoKjVHKZA11Orb5re+lpMHexXVwfvtmcXhtTq0q8TDMp8wq8erzzfF FVKvPWjaaWi6t7SfQQfJUgxJnmWZsomu0SfyfPJjogyhZoXXOkS5zDu1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdOyp1B39isObHhkLVdL60U42OHMB8GA1UdIwQY MBaAFKB9y225p1wQF/7mcvc7lhdxt3yhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEt Y2I0MGVlMDQ4ZGMwLzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMDMxMDUtZTdjOC00YTQ0LWExODEtY2I0MGVlMDQ4ZGMw LzEvb0gzTGJibW5YQkFYX3VaeTl6dVdGM0czZktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBTLVICP 2t1qM6NzoNVBMEIqGDpCvrrz9QF5CtcEwswx0veQ2dNkkDyMi4ZCmkzID6qhbVq4 8QarY6ozuDpPzJgBpZ6D0NUpGGx2wdpPVpZlSYJa7MSOaS8FUJ+PRRDXtLT3nvtL YffzlSG3bCLDzTj8EyF5zC7U95ntiYe9BFpr2A2fveTuRNrSEm3swh51lHS6+hJX 7zfc+hlaE4Vo4ghGmSt7aI+nd4G9ulH5CLhKEcpfMGgwczGZHedrQyiX7CaMibZ8 AiCra+xcOVrCH40sti8dxA1YQSvPj3BXdBqHAX+PU4qQHmXMNqPT7vOLf5FF7H13 cWU/hhTW9Ibm+A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:58 2026 by rpki-client