This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft File: o_AJmtht2ENOUvjG_d7rLD7Wxso.mft (raw, json) Hash identifier: 7GMLX3cUkcB4tGqrHEKAmK6HaU/qiMxF77++Fp17eJM= Subject key identifier: 38:40:9E:D9:49:17:80:48:1F:CF:16:DC:69:FF:B1:3C:10:41:7E:33 Authority key identifier: A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA Certificate issuer: /CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Certificate serial: 019C427D2FCEEED0B3C57CC8C2759C066287 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft Manifest number: 0D3D Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: h1nd4Qn-NC3F4blTzKUQQVdDcGU.roa (hash: lz23Y5PvDIkn6cwsXMHaDyiIabMEIIObGoga2OQiexA=) 2: o_AJmtht2ENOUvjG_d7rLD7Wxso.crl (hash: iqzLHb3s9o25ckQWmTG1lnAS5hK47HL4xpSbRJVS9/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2f:ce:ee:d0:b3:c5:7c:c8:c2:75:9c:06:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f0099ad86dd8434e52f8c6fddeeb2c3ed6c6ca Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=38409ed9491780481fcf16dc69ffb13c10417e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e8:3e:a6:b3:42:21:bb:4b:92:11:bd:da:90: 9c:a1:d4:d0:58:bf:f1:be:74:2e:0f:61:44:1d:e7: b4:03:05:4f:71:68:e3:a3:ab:07:7f:25:1e:aa:65: 87:0b:4f:60:35:1b:01:47:1d:e3:de:e2:3f:d0:71: 90:3a:98:4b:eb:14:99:95:21:d0:11:d1:bf:61:e8: 61:3f:00:1f:d9:d1:ea:fb:90:76:64:f0:0f:12:07: 48:a2:bc:15:5a:99:ef:06:e2:c0:cc:70:87:9a:c3: 4c:80:9c:81:15:9c:a4:a1:0c:b3:6a:5c:3b:c3:35: b0:86:b7:fa:2d:2a:13:80:9d:a7:64:dd:74:2b:38: 39:25:ec:ff:e1:68:2b:2b:84:95:6a:69:b4:44:c5: bb:ac:d4:92:27:5e:98:bf:eb:9a:f7:41:f0:08:ab: 9b:10:d3:d1:dd:ce:d8:46:89:8e:67:97:be:27:9d: 88:27:44:9c:7d:be:9e:08:44:39:65:55:39:71:9c: bb:dd:b6:df:6e:79:0f:38:f1:5f:b5:22:be:70:f2: ba:56:28:22:e2:14:27:8e:ee:c4:d0:0f:76:d0:b2: 4a:41:2b:ee:c8:cb:9d:9a:17:1a:9f:3c:63:79:7e: ed:f6:da:b3:2a:66:ec:7d:a7:c5:fd:e2:a9:a2:55: 12:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:40:9E:D9:49:17:80:48:1F:CF:16:DC:69:FF:B1:3C:10:41:7E:33 X509v3 Authority Key Identifier: keyid:A3:F0:09:9A:D8:6D:D8:43:4E:52:F8:C6:FD:DE:EB:2C:3E:D6:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_AJmtht2ENOUvjG_d7rLD7Wxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cce012-2cb9-4be6-a1b6-d5167e6756b6/1/o_AJmtht2ENOUvjG_d7rLD7Wxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c4:9d:81:ba:d2:49:8d:75:9d:1a:e4:1f:9e:ce:37:ad:32: 1b:c1:05:04:08:7e:c0:32:cd:d3:9d:d4:21:02:8f:6d:0c:5a: dd:6a:87:f5:b5:69:9e:7c:da:a1:69:18:7b:eb:52:7c:67:9a: f1:45:35:6e:b7:7c:c3:97:5e:c8:d7:e1:e7:41:16:38:71:5b: 34:4e:42:1c:a5:02:d8:0b:d4:c1:28:22:87:cd:a1:35:91:2e: ff:60:9e:61:da:8e:f2:ea:8a:29:1b:ec:66:db:cf:33:0d:96: 4a:bc:e9:07:7b:f3:ac:40:d9:da:b6:cf:79:21:4e:70:c7:7c: cb:c1:a1:c9:8a:7a:9e:26:78:5e:fa:22:4f:0c:2d:12:1c:ca: 07:ab:fc:7f:35:ed:e3:5b:c8:75:be:ab:1e:b3:dd:80:30:3f: 93:a3:69:95:43:35:a4:03:b0:ad:3c:11:f8:c2:f4:59:89:62: c1:94:94:e3:ea:ed:c9:90:d3:34:49:b9:2b:9c:27:19:76:91: af:65:67:cb:01:20:d5:f0:ea:95:b9:09:7e:b0:0e:29:16:76: 21:11:55:3e:28:30:d4:31:ea:9a:3c:fa:f2:a5:44:97:f0:a1: 12:6d:50:00:d5:1e:0c:f8:fc:9d:f8:51:02:91:ba:3f:c1:7b: db:20:ec:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfS/O7tCzxXzIwnWcBmKHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjAwOTlhZDg2ZGQ4NDM0ZTUyZjhjNmZkZGVlYjJjM2Vk NmM2Y2EwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD EygzODQwOWVkOTQ5MTc4MDQ4MWZjZjE2ZGM2OWZmYjEzYzEwNDE3ZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+g+prNCIbtLkhG92pCcodTQWL/x vnQuD2FEHee0AwVPcWjjo6sHfyUeqmWHC09gNRsBRx3j3uI/0HGQOphL6xSZlSHQ EdG/YehhPwAf2dHq+5B2ZPAPEgdIorwVWpnvBuLAzHCHmsNMgJyBFZykoQyzalw7 wzWwhrf6LSoTgJ2nZN10Kzg5Jez/4WgrK4SVamm0RMW7rNSSJ16Yv+ua90HwCKub ENPR3c7YRomOZ5e+J52IJ0Scfb6eCEQ5ZVU5cZy73bbfbnkPOPFftSK+cPK6Vigi 4hQnju7E0A920LJKQSvuyMudmhcanzxjeX7t9tqzKmbsfafF/eKpolUSUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhAntlJF4BIH88W3Gn/sTwQQX4zMB8GA1UdIwQY MBaAFKPwCZrYbdhDTlL4xv3e6yw+1sbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYt ZDUxNjdlNjc1NmI2LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jY2UwMTItMmNiOS00YmU2LWExYjYtZDUxNjdlNjc1NmI2 LzEvb19BSm10aHQyRU5PVXZqR19kN3JMRDdXeHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcSdgbrS SY11nRrkH57ON60yG8EFBAh+wDLN053UIQKPbQxa3WqH9bVpnnzaoWkYe+tSfGea 8UU1brd8w5deyNfh50EWOHFbNE5CHKUC2AvUwSgih82hNZEu/2CeYdqO8uqKKRvs ZtvPMw2WSrzpB3vzrEDZ2rbPeSFOcMd8y8GhyYp6niZ4XvoiTwwtEhzKB6v8fzXt 41vIdb6rHrPdgDA/k6NplUM1pAOwrTwR+ML0WYliwZSU4+rtyZDTNEm5K5wnGXaR r2VnywEg1fDqlbkJfrAOKRZ2IRFVPigw1DHqmjz68qVEl/ChEm1QANUeDPj8nfhR ApG6P8F72yDs9g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:11 2026 by rpki-client