This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json) Hash identifier: Ak/BxkG31PDZw/ikjm4AoCJpV5rDrOnCIZHBT/g/GA0= Subject key identifier: BF:34:3A:75:D3:27:D5:00:9B:5D:E9:34:75:E5:41:CE:5C:26:E9:0E Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb Certificate serial: 019C41D8DDAEB9A3A904030475CB3982F669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft Manifest number: 03EE Signing time: Mon 09 Feb 2026 10:00:57 +0000 Manifest this update: Mon 09 Feb 2026 10:00:57 +0000 Manifest next update: Tue 10 Feb 2026 10:00:57 +0000 Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: JdexFY5dvI12axXEwNoDkqrQGgAfn1np30HE+Gr8zkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:dd:ae:b9:a3:a9:04:03:04:75:cb:39:82:f6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb Validity Not Before: Feb 9 10:00:57 2026 GMT Not After : Feb 10 10:00:57 2026 GMT Subject: CN=bf343a75d327d5009b5de93475e541ce5c26e90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:6b:87:fa:de:05:02:54:c7:db:a7:34:89: f1:28:ea:38:a1:a8:2b:b5:8d:a0:24:99:88:6b:19: e5:a6:9c:87:21:e3:04:29:73:98:8f:53:33:7f:de: 9e:4d:d4:6d:73:36:2e:87:35:42:07:e1:45:14:fb: 32:26:e1:5c:a3:19:fe:41:f2:37:55:e8:cc:92:b8: 87:c5:af:50:f2:25:87:3c:de:35:90:99:ce:1a:b0: 97:69:c7:1f:f3:89:46:0d:0c:41:b3:01:25:8a:e7: 41:6b:58:a5:26:44:1d:17:98:5d:75:77:ef:ac:60: 23:a2:ba:b4:8b:6f:7b:95:7b:b5:fb:76:b1:4e:60: 48:15:32:d6:08:84:1a:a6:ba:d7:20:de:c0:5e:75: 13:81:26:02:7d:8f:a6:df:75:78:ac:ab:2b:08:24: be:3b:1e:fa:ff:36:45:30:16:36:d1:95:5c:4a:73: 0e:65:05:a7:f7:66:0b:50:db:8e:f6:4f:16:0a:fc: 50:fa:f4:30:ec:c1:4b:fa:9a:66:92:6f:6c:39:63: 38:b8:94:59:5e:78:46:ee:89:67:b7:4e:96:bd:21: 8e:37:ad:84:f7:c7:f4:2a:7d:2a:89:92:08:3d:7d: e8:6b:10:86:b1:be:45:41:c0:79:9c:aa:fd:2b:ad: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:3A:75:D3:27:D5:00:9B:5D:E9:34:75:E5:41:CE:5C:26:E9:0E X509v3 Authority Key Identifier: keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1e:d5:4b:6b:ba:39:8d:4a:2f:34:e5:7b:c2:f4:9f:ad:2a: 65:3e:29:02:37:35:a9:e4:ce:fb:16:4f:d1:63:3e:2e:84:8d: da:94:8b:a0:46:6a:74:6d:c2:ff:c9:bb:1c:6a:9c:97:2f:2d: 19:68:9c:f6:4a:ab:5e:f5:d6:0c:34:7b:f6:08:45:5e:17:f9: 2e:10:f2:db:38:6e:ed:da:8f:ae:63:bd:de:34:ce:f8:5d:30: 90:5d:5d:f3:38:84:97:b4:25:97:b6:cf:a0:00:e3:49:79:ef: 83:e2:8c:4f:53:30:54:aa:41:16:c3:a4:8c:4e:ee:f2:8a:f3: d2:4e:6c:31:e2:2c:28:20:90:2f:b6:40:a1:c9:5c:ee:6d:0c: a3:b1:58:cf:55:6b:98:1b:44:44:61:54:42:4f:9d:a8:f9:bc: f3:04:5b:2c:0c:2c:5c:e2:b9:bf:13:fe:c2:a0:ec:e3:e8:c5: 74:11:70:46:4f:53:92:e2:bb:f0:42:b0:9f:6e:82:20:3c:e6: 41:f3:a4:87:a7:16:46:1f:b2:37:aa:4d:01:48:cd:1f:c7:8c: bd:21:0d:68:88:10:1f:87:c0:43:71:9f:46:3e:b5:10:a0:c0: 44:e4:53:06:b4:28:be:29:1c:ff:1f:98:d3:01:ae:0b:e7:d9: 6d:aa:8c:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2N2uuaOpBAMEdcs5gvZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZDE1NTI5YTQ1MWM5NWNjZDkzNGFjNTZlYzA5ZDUxODc1 MDY2Y2IwHhcNMjYwMjA5MTAwMDU3WhcNMjYwMjEwMTAwMDU3WjAzMTEwLwYDVQQD EyhiZjM0M2E3NWQzMjdkNTAwOWI1ZGU5MzQ3NWU1NDFjZTVjMjZlOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOVrh/reBQJUx9unNInxKOo4oagr tY2gJJmIaxnlppyHIeMEKXOYj1Mzf96eTdRtczYuhzVCB+FFFPsyJuFcoxn+QfI3 VejMkriHxa9Q8iWHPN41kJnOGrCXaccf84lGDQxBswEliudBa1ilJkQdF5hddXfv rGAjorq0i297lXu1+3axTmBIFTLWCIQaprrXIN7AXnUTgSYCfY+m33V4rKsrCCS+ Ox76/zZFMBY20ZVcSnMOZQWn92YLUNuO9k8WCvxQ+vQw7MFL+ppmkm9sOWM4uJRZ XnhG7olnt06WvSGON62E98f0Kn0qiZIIPX3oaxCGsb5FQcB5nKr9K63YjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL80OnXTJ9UAm13pNHXlQc5cJukOMB8GA1UdIwQY MBaAFKHRVSmkUclczZNKxW7AnVGHUGbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjkt ZDZkZGFjZjZhM2VjLzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81OTMxZTMtN2QxMC00MzVjLWFmNjktZDZkZGFjZjZhM2Vj LzEvb2RGVkthUlJ5VnpOazByRmJzQ2RVWWRRWnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASR7VS2u6 OY1KLzTle8L0n60qZT4pAjc1qeTO+xZP0WM+LoSN2pSLoEZqdG3C/8m7HGqcly8t GWic9kqrXvXWDDR79ghFXhf5LhDy2zhu7dqPrmO93jTO+F0wkF1d8ziEl7Qll7bP oADjSXnvg+KMT1MwVKpBFsOkjE7u8orz0k5sMeIsKCCQL7ZAoclc7m0Mo7FYz1Vr mBtERGFUQk+dqPm88wRbLAwsXOK5vxP+wqDs4+jFdBFwRk9TkuK78EKwn26CIDzm QfOkh6cWRh+yN6pNAUjNH8eMvSENaIgQH4fAQ3GfRj61EKDARORTBrQovikc/x+Y 0wGuC+fZbaqMsA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:46 2026 by rpki-client