This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json) Hash identifier: n/ZDnfTaIyLL6A3IsWCZiAp+BpykcS40xJalQEweO5c= Subject key identifier: 90:0F:AB:D3:6D:71:20:9A:09:DB:B9:77:C9:8C:EF:33:10:AA:D0:09 Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Certificate serial: 019C420F47C8C320C416C81474C58EE477E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft Manifest number: 12FF Signing time: Mon 09 Feb 2026 11:00:23 +0000 Manifest this update: Mon 09 Feb 2026 11:00:23 +0000 Manifest next update: Tue 10 Feb 2026 11:00:23 +0000 Files and hashes: 1: hXAXsmUnJiWV8z-SUw75JeiGESc.roa (hash: VUrv1bazpJi2/YTeV0TBl6sYZknhiXdswe7oWJCYACU=) 2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: /w5KqlGwmL6odOeZIXLfH4X2VWi8xEzgoHDS02OFYvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:47:c8:c3:20:c4:16:c8:14:74:c5:8e:e4:77:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3 Validity Not Before: Feb 9 11:00:23 2026 GMT Not After : Feb 10 11:00:23 2026 GMT Subject: CN=900fabd36d71209a09dbb977c98cef3310aad009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:6d:35:e0:cc:e0:fa:ac:6a:68:71:7f:96: dd:af:1d:7f:0f:c9:af:0e:64:d2:92:87:bf:46:ea: 4d:10:78:65:ce:0e:6d:5f:46:b3:22:5e:37:c1:22: 7a:95:39:2e:c2:09:34:f7:8a:44:28:40:e0:54:c1: ab:48:80:80:8c:2e:67:29:ee:e1:5a:b7:72:46:a6: d7:f9:ab:43:90:ee:bb:fa:d2:3b:39:5e:32:c2:c0: f3:f3:6c:20:76:01:83:ce:d0:2d:8d:02:12:99:af: 62:70:3b:f0:db:7b:1c:4f:a9:22:cb:4f:a2:f8:ee: 15:d1:77:3a:ac:cc:09:db:2a:5a:0a:09:b8:d8:56: 41:b2:58:cc:58:1e:24:0b:e7:27:34:0b:81:88:15: 4a:a8:1b:48:5e:cf:0d:1f:85:82:41:bf:41:54:b6: 97:8c:c6:44:a1:54:3d:e2:63:4a:ac:33:3e:a8:39: eb:07:f0:3f:43:b0:6f:97:bc:26:55:b7:15:d8:06: d0:56:af:d9:10:95:52:63:15:ea:ae:c0:79:52:cc: d8:1f:92:d2:bd:d5:2d:c3:b9:f8:15:04:21:de:e0: bd:11:84:cb:0d:03:77:f8:ef:2f:80:fb:f5:3b:ae: 4f:b3:84:96:b8:37:05:0b:9f:07:a4:ff:0e:02:3e: da:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0F:AB:D3:6D:71:20:9A:09:DB:B9:77:C9:8C:EF:33:10:AA:D0:09 X509v3 Authority Key Identifier: keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:00:bc:92:2e:3e:b7:6f:9d:9b:3e:96:6b:27:dd:58:1f:4e: a5:20:17:02:5b:4a:f0:1a:88:29:5e:26:5a:37:40:32:bb:28: 1d:51:af:35:88:d6:3e:8b:7d:82:63:24:5a:ca:b3:5a:8a:45: 5d:5f:d6:2c:e7:6b:d8:3e:da:d1:8a:b4:69:5c:cf:2f:49:7d: ee:ff:0a:a4:2a:15:b3:f9:67:3e:92:87:97:8b:6f:7f:25:84: 62:f7:27:50:1a:cf:2a:58:09:1a:6d:c4:0e:8e:6b:e5:d7:a0: db:52:f8:58:01:8b:5e:9f:9e:e6:24:17:99:1b:d7:e3:4b:1f: 06:0a:b9:94:6b:c7:16:00:c3:66:f0:16:1b:4c:9c:49:fd:94: 47:ba:05:63:ea:ea:5e:42:41:f1:b9:26:46:eb:b8:ad:dd:f5: 82:c0:a6:7a:44:14:0f:fa:0f:a6:52:b6:fd:bb:02:7a:66:dd: d4:8d:5f:dd:d7:69:80:4a:d1:6c:51:c4:ce:31:fa:5c:d8:85: 2f:ac:00:d7:17:06:47:d2:bc:e0:8c:5a:00:46:82:e2:9f:8d: 58:b8:96:e6:09:6d:75:d6:ee:0a:97:36:a9:5e:93:6b:c1:82: 30:42:15:de:aa:41:70:1a:c9:09:4c:a2:64:3a:07:b0:a7:c4: 86:66:14:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0fIwyDEFsgUdMWO5HfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNzdhMzU2ZjA3ZTA3NGNhZTZmMjZlN2Y1ODkzZGNlOWRh YzhhZDMwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD Eyg5MDBmYWJkMzZkNzEyMDlhMDlkYmI5NzdjOThjZWYzMzEwYWFkMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jptNeDM4Pqsamhxf5bdrx1/D8mv DmTSkoe/RupNEHhlzg5tX0azIl43wSJ6lTkuwgk094pEKEDgVMGrSICAjC5nKe7h WrdyRqbX+atDkO67+tI7OV4ywsDz82wgdgGDztAtjQISma9icDvw23scT6kiy0+i +O4V0Xc6rMwJ2ypaCgm42FZBsljMWB4kC+cnNAuBiBVKqBtIXs8NH4WCQb9BVLaX jMZEoVQ94mNKrDM+qDnrB/A/Q7Bvl7wmVbcV2AbQVq/ZEJVSYxXqrsB5UszYH5LS vdUtw7n4FQQh3uC9EYTLDQN3+O8vgPv1O65Ps4SWuDcFC58HpP8OAj7a2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAPq9NtcSCaCdu5d8mM7zMQqtAJMB8GA1UdIwQY MBaAFKB3o1bwfgdMrm8m5/WJPc6drIrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQt NDgwOTNmYjZjNjdmLzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8yM2IzY2UtOTkyMi00MmZiLWExMjQtNDgwOTNmYjZjNjdm LzEvb0hlalZ2Qi1CMHl1YnlibjlZazl6cDJzaXRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwC8ki4+ t2+dmz6WayfdWB9OpSAXAltK8BqIKV4mWjdAMrsoHVGvNYjWPot9gmMkWsqzWopF XV/WLOdr2D7a0Yq0aVzPL0l97v8KpCoVs/lnPpKHl4tvfyWEYvcnUBrPKlgJGm3E Do5r5deg21L4WAGLXp+e5iQXmRvX40sfBgq5lGvHFgDDZvAWG0ycSf2UR7oFY+rq XkJB8bkmRuu4rd31gsCmekQUD/oPplK2/bsCembd1I1f3ddpgErRbFHEzjH6XNiF L6wA1xcGR9K84IxaAEaC4p+NWLiW5gltddbuCpc2qV6Ta8GCMEIV3qpBcBrJCUyi ZDoHsKfEhmYUJA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:30 2026 by rpki-client