This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft File: OPdGuBrsAONrm8t6CGQqZOkT2ls.mft (raw, json) Hash identifier: 44oyX5nWdjMkKu0DdH27QP1VZObpxIBXDeSpob1VgJk= Subject key identifier: A9:F2:9C:AE:18:39:7B:16:57:3C:EA:D5:21:54:E6:10:94:DA:8D:18 Authority key identifier: 38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B Certificate issuer: /CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Certificate serial: 019C42EB5A0699E2E6EF1E7211DE5C259A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft Manifest number: 0E13 Signing time: Mon 09 Feb 2026 15:00:46 +0000 Manifest this update: Mon 09 Feb 2026 15:00:46 +0000 Manifest next update: Tue 10 Feb 2026 15:00:46 +0000 Files and hashes: 1: DhiVgaWvNmOXlh13NZD3ECCC-Jg.roa (hash: YxArlaNhHs1+rEEwwN6ySNTuQKxwubxKRItAAtcuCZs=) 2: OPdGuBrsAONrm8t6CGQqZOkT2ls.crl (hash: u9XJZj/tLRk5EbY5B8zwZcif20Qt/Tf5bMHrVf3iyjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:5a:06:99:e2:e6:ef:1e:72:11:de:5c:25:9a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38f746b81aec00e36b9bcb7a08642a64e913da5b Validity Not Before: Feb 9 15:00:46 2026 GMT Not After : Feb 10 15:00:46 2026 GMT Subject: CN=a9f29cae18397b16573cead52154e61094da8d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:a6:b2:90:d2:03:32:64:63:32:9a:f7:2e: 2d:c2:8c:6d:1d:6a:f3:64:18:5b:f9:29:95:bc:69: ae:2c:50:31:a7:50:de:75:6e:94:2f:e8:95:c8:39: c0:73:5e:ed:98:27:d6:02:5a:8f:c5:ef:f7:7a:d8: 37:05:25:08:0a:76:78:81:d3:6d:4c:01:54:4f:11: 1b:b7:f6:fb:bc:1a:55:9e:b0:6f:17:89:99:50:c3: 31:58:cc:fb:89:f5:fb:dc:b6:e3:5d:b6:8d:a1:8c: 58:11:05:06:6f:1d:99:49:73:78:5f:fc:63:d3:36: ae:15:6b:98:5f:7d:89:48:e5:4c:5b:f5:c2:43:4b: 13:ad:15:05:7f:72:d8:b9:c5:e2:4d:8f:82:71:8d: 6a:a8:e2:05:ba:0f:dc:d7:dc:9b:f0:c7:45:eb:ae: 5e:b9:77:89:4a:ba:fe:5b:84:f2:f0:23:fd:89:22: c8:a6:84:bb:91:c4:49:f9:16:66:06:bc:b5:06:64: 62:6b:a6:4a:ab:92:00:0d:57:15:5f:9c:02:b4:ad: ec:f2:64:54:ff:a3:35:4f:45:c8:46:13:28:d9:8c: 65:bd:1e:75:3b:7a:f1:96:f0:31:cd:d6:55:10:93: cd:08:e6:0a:95:34:93:bc:06:d1:c5:e7:0d:96:a8: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:9C:AE:18:39:7B:16:57:3C:EA:D5:21:54:E6:10:94:DA:8D:18 X509v3 Authority Key Identifier: keyid:38:F7:46:B8:1A:EC:00:E3:6B:9B:CB:7A:08:64:2A:64:E9:13:DA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPdGuBrsAONrm8t6CGQqZOkT2ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f4dc76-dcd2-475b-9e68-c22395ce1be4/1/OPdGuBrsAONrm8t6CGQqZOkT2ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b0:c5:6e:2c:4b:8d:76:a1:cb:9d:b6:a5:3d:e3:9d:dc:36: 32:aa:bd:8c:94:95:8e:0c:be:81:ac:9c:46:a7:0b:11:55:74: 20:ce:32:6e:c4:62:b5:9d:34:7c:4f:7d:74:f4:ba:eb:65:3e: a3:8a:70:e1:e5:0d:1a:d6:16:f0:a6:02:03:1a:0b:77:07:3d: d7:a5:59:d1:a8:9e:17:cc:bf:de:4d:e4:a9:6e:e2:4c:d9:99: 9a:cd:cc:a2:e1:92:63:3c:eb:f6:4a:97:ff:b0:33:f6:c0:f8: 19:f4:12:77:b3:27:0b:0b:4c:f2:8d:7f:fa:ff:cf:7c:93:ea: ed:9b:c1:9c:14:2b:74:be:3a:65:d0:c3:21:c6:56:e8:d0:71: 64:c0:9d:f4:1b:33:0b:95:ab:54:27:63:8a:cb:24:40:8a:54: 1a:24:6a:1a:88:dc:01:a8:22:13:6b:f2:4d:37:8e:f1:33:4c: 95:6c:f3:0d:9e:0e:3d:7d:43:8f:6c:0a:5e:36:16:a7:fa:a9: 9f:3f:6e:c8:ba:0a:c7:c8:e7:7b:6e:1b:f9:e1:64:b6:70:25: 62:c1:d4:a2:fb:d3:5e:5d:91:a4:55:67:40:22:47:b3:6e:43: d2:e0:35:2a:da:05:c3:fc:d1:b7:80:f0:d8:cc:d0:fc:39:d5: 9f:87:76:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61oGmeLm7x5yEd5cJZouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4Zjc0NmI4MWFlYzAwZTM2YjliY2I3YTA4NjQyYTY0ZTkx M2RhNWIwHhcNMjYwMjA5MTUwMDQ2WhcNMjYwMjEwMTUwMDQ2WjAzMTEwLwYDVQQD EyhhOWYyOWNhZTE4Mzk3YjE2NTczY2VhZDUyMTU0ZTYxMDk0ZGE4ZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/+mspDSAzJkYzKa9y4twoxtHWrz ZBhb+SmVvGmuLFAxp1DedW6UL+iVyDnAc17tmCfWAlqPxe/3etg3BSUICnZ4gdNt TAFUTxEbt/b7vBpVnrBvF4mZUMMxWMz7ifX73LbjXbaNoYxYEQUGbx2ZSXN4X/xj 0zauFWuYX32JSOVMW/XCQ0sTrRUFf3LYucXiTY+CcY1qqOIFug/c19yb8MdF665e uXeJSrr+W4Ty8CP9iSLIpoS7kcRJ+RZmBry1BmRia6ZKq5IADVcVX5wCtK3s8mRU /6M1T0XIRhMo2YxlvR51O3rxlvAxzdZVEJPNCOYKlTSTvAbRxecNlqhi3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnynK4YOXsWVzzq1SFU5hCU2o0YMB8GA1UdIwQY MBaAFDj3Rrga7ADja5vLeghkKmTpE9pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgt YzIyMzk1Y2UxYmU0LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNGRjNzYtZGNkMi00NzViLTllNjgtYzIyMzk1Y2UxYmU0 LzEvT1BkR3VCcnNBT05ybTh0NkNHUXFaT2tUMmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLDFbixL jXahy522pT3jndw2Mqq9jJSVjgy+gaycRqcLEVV0IM4ybsRitZ00fE99dPS662U+ o4pw4eUNGtYW8KYCAxoLdwc916VZ0aieF8y/3k3kqW7iTNmZms3MouGSYzzr9kqX /7Az9sD4GfQSd7MnCwtM8o1/+v/PfJPq7ZvBnBQrdL46ZdDDIcZW6NBxZMCd9Bsz C5WrVCdjisskQIpUGiRqGojcAagiE2vyTTeO8TNMlWzzDZ4OPX1Dj2wKXjYWp/qp nz9uyLoKx8jne24b+eFktnAlYsHUovvTXl2RpFVnQCJHs25D0uA1KtoFw/zRt4Dw 2MzQ/DnVn4d2Zg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:34 2026 by rpki-client