This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft File: OXxQHi_zsKtTS0hMOpKNHwk10bE.mft (raw, json) Hash identifier: e7aIrlShYvB9/V7g/PoQCEfRx6ruU7Af4D7hEqS1WQ8= Subject key identifier: D6:AD:B9:1F:42:FB:36:8D:17:53:1E:E7:72:8B:5D:A8:AF:EC:A9:93 Authority key identifier: 39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1 Certificate issuer: /CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1 Certificate serial: 019C416ACD8018357854D2C8093D03649DF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft Manifest number: 57 Signing time: Mon 09 Feb 2026 08:00:44 +0000 Manifest this update: Mon 09 Feb 2026 08:00:44 +0000 Manifest next update: Tue 10 Feb 2026 08:00:44 +0000 Files and hashes: 1: OXxQHi_zsKtTS0hMOpKNHwk10bE.crl (hash: j44YvUyHesrYKAhtUBP40Hl9i6NN3psK5yr9UG3bSak=) 2: gLMnpAvJYDZgw8CMi1ywBPu8HKA.roa (hash: HfvKqfxiDqSfDMKCc4gBb3RHAJZd+tjrpFoCaU5J9O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:cd:80:18:35:78:54:d2:c8:09:3d:03:64:9d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397c501e2ff3b0ab534b484c3a928d1f0935d1b1 Validity Not Before: Feb 9 08:00:44 2026 GMT Not After : Feb 10 08:00:44 2026 GMT Subject: CN=d6adb91f42fb368d17531ee7728b5da8afeca993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:93:90:6f:ec:e4:8c:ad:1c:bb:cf:11:f8: 97:de:58:08:d8:ce:f8:30:4a:0f:eb:3e:de:62:dd: ef:4e:33:d1:04:3a:ce:e4:81:59:26:57:34:b9:c5: c7:56:af:6e:a7:f7:f2:c4:af:0c:c7:3e:76:6a:38: e0:02:f4:d0:87:18:66:de:8d:b2:c1:2b:a5:04:b0: 1a:20:0c:1e:4a:d6:28:25:7d:86:ba:54:82:64:b3: 5d:78:ea:24:51:f3:2f:6e:24:00:b8:3e:bc:62:b8: 2a:c2:cb:8a:fa:33:d2:ef:47:b0:4f:9f:94:ed:d1: 12:e0:9b:6e:28:e2:57:5a:cf:0a:32:74:f3:db:c0: 6e:48:fa:a1:a8:7b:ec:8b:60:e9:83:e5:70:5c:80: b4:e3:6a:60:d4:99:32:a4:f9:a6:2b:5b:0a:03:e2: 47:5c:1d:7b:f2:e4:e6:df:3e:5a:05:16:dd:29:05: ce:98:0c:2e:0c:8f:56:b6:0e:18:b0:3c:f8:3b:07: e2:ca:66:74:22:02:93:7e:0f:1b:93:e2:67:69:f7: 25:6d:ef:ae:53:67:02:24:0d:d2:b5:d4:73:d4:32: 4c:75:2a:da:6d:35:66:ef:06:ab:95:0b:a3:be:29: 91:34:5c:52:23:0f:26:84:d9:03:0c:80:f0:c3:92: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AD:B9:1F:42:FB:36:8D:17:53:1E:E7:72:8B:5D:A8:AF:EC:A9:93 X509v3 Authority Key Identifier: keyid:39:7C:50:1E:2F:F3:B0:AB:53:4B:48:4C:3A:92:8D:1F:09:35:D1:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXxQHi_zsKtTS0hMOpKNHwk10bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8d14d5-869f-47f3-88bd-f7afca5cb034/1/OXxQHi_zsKtTS0hMOpKNHwk10bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ad:59:00:dd:95:da:40:a5:d4:39:c5:bf:86:2a:2b:94:da: ba:75:3e:bc:59:33:e3:5f:30:5b:52:77:59:03:85:a7:92:3d: fa:70:00:67:f1:50:4b:d7:4e:f1:c8:57:8c:e3:54:5b:17:3c: 92:3a:ca:dd:d8:ca:a5:f0:23:e3:b2:60:a8:88:9b:33:9d:93: 6d:e2:11:d8:16:60:56:9d:26:53:68:ec:39:77:b0:4d:3b:b8: 41:8b:99:26:f1:83:2e:b8:01:a3:8a:c7:96:28:5f:3e:15:7e: 2b:41:24:43:b1:89:7a:ab:3c:c8:9e:54:51:c0:38:95:61:e8: 31:5b:11:3d:c9:dc:4a:1c:2f:88:65:2f:41:7f:21:00:ce:b1: 5b:ee:f0:e9:2c:f0:39:4e:40:08:ff:17:c7:9d:6b:68:c9:3d: 8e:92:ed:08:1f:74:29:10:db:60:9e:f6:05:b1:71:08:84:9a: 47:01:b4:11:05:80:6b:c5:68:9a:30:eb:ca:dd:55:c6:f0:7b: 26:64:fc:d6:17:d6:1d:57:56:52:1b:6a:f2:5b:19:24:ab:d8: a7:ea:16:6c:2c:1d:ff:3f:21:cf:0b:b0:e9:18:65:ce:04:e1: 05:75:e5:ad:24:86:08:bd:77:9b:16:e5:03:ea:15:c5:ea:d4: 7b:9b:4f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBas2AGDV4VNLICT0DZJ34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5N2M1MDFlMmZmM2IwYWI1MzRiNDg0YzNhOTI4ZDFmMDkz NWQxYjEwHhcNMjYwMjA5MDgwMDQ0WhcNMjYwMjEwMDgwMDQ0WjAzMTEwLwYDVQQD EyhkNmFkYjkxZjQyZmIzNjhkMTc1MzFlZTc3MjhiNWRhOGFmZWNhOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YmTkG/s5IytHLvPEfiX3lgI2M74 MEoP6z7eYt3vTjPRBDrO5IFZJlc0ucXHVq9up/fyxK8Mxz52ajjgAvTQhxhm3o2y wSulBLAaIAweStYoJX2GulSCZLNdeOokUfMvbiQAuD68YrgqwsuK+jPS70ewT5+U 7dES4JtuKOJXWs8KMnTz28BuSPqhqHvsi2Dpg+VwXIC042pg1JkypPmmK1sKA+JH XB178uTm3z5aBRbdKQXOmAwuDI9Wtg4YsDz4OwfiymZ0IgKTfg8bk+Jnafclbe+u U2cCJA3StdRz1DJMdSrabTVm7warlQujvimRNFxSIw8mhNkDDIDww5I8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNatuR9C+zaNF1Me53KLXaiv7KmTMB8GA1UdIwQY MBaAFDl8UB4v87CrU0tITDqSjR8JNdGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQt ZjdhZmNhNWNiMDM0LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC84ZDE0ZDUtODY5Zi00N2YzLTg4YmQtZjdhZmNhNWNiMDM0 LzEvT1h4UUhpX3pzS3RUUzBoTU9wS05Id2sxMGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK1ZAN2V 2kCl1DnFv4YqK5TaunU+vFkz418wW1J3WQOFp5I9+nAAZ/FQS9dO8chXjONUWxc8 kjrK3djKpfAj47JgqIibM52TbeIR2BZgVp0mU2jsOXewTTu4QYuZJvGDLrgBo4rH lihfPhV+K0EkQ7GJeqs8yJ5UUcA4lWHoMVsRPcncShwviGUvQX8hAM6xW+7w6Szw OU5ACP8Xx51raMk9jpLtCB90KRDbYJ72BbFxCISaRwG0EQWAa8VomjDryt1VxvB7 JmT81hfWHVdWUhtq8lsZJKvYp+oWbCwd/z8hzwuw6RhlzgThBXXlrSSGCL13mxbl A+oVxerUe5tPeg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:04 2026 by rpki-client