This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json) Hash identifier: 6UQm8x7/pJk/pO5bdjQf506gy7u/9t64E5/FZJj8vHo= Subject key identifier: F2:A8:86:71:AD:89:27:EF:DA:F7:39:93:1A:DB:6A:49:39:40:59:89 Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a Certificate serial: 019C416AF7CA688BF460733A63F308CD262A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft Manifest number: 051E Signing time: Mon 09 Feb 2026 08:00:54 +0000 Manifest this update: Mon 09 Feb 2026 08:00:54 +0000 Manifest next update: Tue 10 Feb 2026 08:00:54 +0000 Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: v7iA1qVr10pyPg7p+qT0o1P84SEjEaiHVmnQ59FBRzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:f7:ca:68:8b:f4:60:73:3a:63:f3:08:cd:26:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a Validity Not Before: Feb 9 08:00:54 2026 GMT Not After : Feb 10 08:00:54 2026 GMT Subject: CN=f2a88671ad8927efdaf739931adb6a4939405989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:b3:bc:bd:e3:6c:06:c3:f0:fe:da:b8:fb: 6a:e4:74:5f:8b:1f:87:32:fb:00:7b:15:c3:31:88: 7a:3d:05:f8:4c:78:63:f4:ca:31:e1:70:d3:3d:15: f2:bd:07:5b:82:f5:52:7b:02:f4:8b:a8:b1:66:92: 54:49:10:a8:48:ae:1a:06:6c:eb:fa:80:bc:64:7e: 9e:1f:e8:3d:0a:38:c5:0c:65:01:f3:2e:e5:46:ea: a6:d6:69:b5:3f:13:f7:b9:8b:02:df:9a:b6:63:c5: f9:7f:0a:5f:ca:49:73:96:23:fa:34:93:15:dd:c3: 62:5a:78:e0:32:9c:36:6b:17:c8:97:44:32:29:2f: 1c:91:33:a3:c3:40:fa:da:38:89:6e:f0:1d:a8:5b: bb:91:98:22:72:52:7a:7a:93:47:33:dd:ec:01:4d: 07:c6:15:7a:9f:31:94:be:a2:a4:fb:b7:52:91:49: fb:32:d8:9d:ff:a9:cb:99:a6:c4:69:8e:bb:10:20: 58:ee:a9:23:06:13:6c:e2:c4:5e:59:7e:fc:7c:4c: 67:3e:09:b2:67:45:40:18:1e:f4:0b:2c:34:9d:67: d2:ad:13:7f:6b:15:10:79:29:6b:07:85:18:f3:7c: a0:45:9a:c7:fc:ed:35:04:d5:4a:d0:c1:4d:0b:20: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:86:71:AD:89:27:EF:DA:F7:39:93:1A:DB:6A:49:39:40:59:89 X509v3 Authority Key Identifier: keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:83:96:01:9b:3d:78:99:7f:52:5b:84:db:24:61:f9:3e: 2f:51:74:7b:32:34:9b:c8:e7:00:62:4f:f3:c8:5d:da:e7:18: f9:75:85:4a:ad:33:a2:9e:72:ea:bc:30:c2:e0:e3:3d:51:a1: 58:55:f1:f6:81:42:3d:5b:ab:00:73:f2:1f:06:94:78:ca:e9: 56:b1:1c:a8:3b:01:72:d9:01:73:21:05:fc:cb:4d:13:bc:55: bb:8b:2a:04:29:9e:f4:37:ab:85:dc:8d:54:3c:e7:d4:9c:bb: 96:e9:f0:05:4c:44:66:10:7d:69:3d:13:63:d0:a3:d7:21:4b: 3c:cf:d9:15:8d:ae:07:85:ea:10:4f:6a:dc:a3:a7:66:91:51: c3:ba:06:37:17:52:02:2d:1c:6e:35:b2:b2:cb:86:2c:4b:b9: 0d:a4:2c:d1:ca:38:07:06:a3:00:c2:b6:e7:be:21:b8:a2:d2: 97:a7:85:26:50:fd:e0:3e:9b:2b:be:11:82:18:e4:89:be:46: a2:7c:a8:d5:74:c9:b2:4c:be:88:67:1b:77:4f:2f:6e:58:33: 54:47:e2:0b:bd:44:0c:8b:61:d7:10:1d:d2:fd:65:2a:4a:b9: 6b:3e:eb:e9:e3:92:4f:73:5a:b5:52:56:2b:dd:ed:66:2d:11: 92:fc:fa:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBavfKaIv0YHM6Y/MIzSYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMzVlZGI1MDY0MjExNDQzMWFkYWVkOGJjNTA1ZTY4NTU5 Y2FkNGEwHhcNMjYwMjA5MDgwMDU0WhcNMjYwMjEwMDgwMDU0WjAzMTEwLwYDVQQD EyhmMmE4ODY3MWFkODkyN2VmZGFmNzM5OTMxYWRiNmE0OTM5NDA1OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbOzvL3jbAbD8P7auPtq5HRfix+H MvsAexXDMYh6PQX4THhj9Mox4XDTPRXyvQdbgvVSewL0i6ixZpJUSRCoSK4aBmzr +oC8ZH6eH+g9CjjFDGUB8y7lRuqm1mm1PxP3uYsC35q2Y8X5fwpfyklzliP6NJMV 3cNiWnjgMpw2axfIl0QyKS8ckTOjw0D62jiJbvAdqFu7kZgiclJ6epNHM93sAU0H xhV6nzGUvqKk+7dSkUn7Mtid/6nLmabEaY67ECBY7qkjBhNs4sReWX78fExnPgmy Z0VAGB70Cyw0nWfSrRN/axUQeSlrB4UY83ygRZrH/O01BNVK0MFNCyAIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKohnGtiSfv2vc5kxrbakk5QFmJMB8GA1UdIwQY MBaAFKA17bUGQhFEMa2u2LxQXmhVnK1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUt ZDQ5OGFhYjRlYjJhLzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUtZDQ5OGFhYjRlYjJh LzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/2DlgGb PXiZf1JbhNskYfk+L1F0ezI0m8jnAGJP88hd2ucY+XWFSq0zop5y6rwwwuDjPVGh WFXx9oFCPVurAHPyHwaUeMrpVrEcqDsBctkBcyEF/MtNE7xVu4sqBCme9DerhdyN VDzn1Jy7lunwBUxEZhB9aT0TY9Cj1yFLPM/ZFY2uB4XqEE9q3KOnZpFRw7oGNxdS Ai0cbjWyssuGLEu5DaQs0co4BwajAMK2574huKLSl6eFJlD94D6bK74Rghjkib5G onyo1XTJsky+iGcbd08vblgzVEfiC71EDIth1xAd0v1lKkq5az7r6eOST3NatVJW K93tZi0Rkvz6Zw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:22 2026 by rpki-client