This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft File: OjFJ2goSvb8b71mLBGMJB4AgbOA.mft (raw, json) Hash identifier: /TTTHED+BAzxg5kBxzZGXvcd0c95GOi6ZU/UQkZO4/E= Subject key identifier: 04:14:5C:B2:5A:41:CF:1F:EA:7E:96:60:05:57:74:32:44:53:9A:F6 Authority key identifier: 3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0 Certificate issuer: /CN=3a3149da0a12bdbf1bef598b0463090780206ce0 Certificate serial: 019C42B497FA32975F2BAA3EE4DBDA740FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft Manifest number: 0702 Signing time: Mon 09 Feb 2026 14:00:57 +0000 Manifest this update: Mon 09 Feb 2026 14:00:57 +0000 Manifest next update: Tue 10 Feb 2026 14:00:57 +0000 Files and hashes: 1: OjFJ2goSvb8b71mLBGMJB4AgbOA.crl (hash: DVhYB/AU78Cp8RCvGptWGU4yqKp1SC0uNj7eKKtYh6k=) 2: g9D60eT4osY914CQ4MsZqD3p_Gw.roa (hash: 9V83sePRPvQWxHMpiIJhpUEoLq1Krp0NLVKYoKzzAfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:97:fa:32:97:5f:2b:aa:3e:e4:db:da:74:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3149da0a12bdbf1bef598b0463090780206ce0 Validity Not Before: Feb 9 14:00:57 2026 GMT Not After : Feb 10 14:00:57 2026 GMT Subject: CN=04145cb25a41cf1fea7e96600557743244539af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:0d:5e:ee:9f:f8:27:16:66:0d:d7:a2:75: 8c:0c:37:76:00:a8:ca:27:00:38:1a:fc:15:2e:db: 5d:75:dc:4d:0c:65:55:4c:fb:1d:ee:fe:c7:60:d4: ab:f0:c5:c3:67:ca:9f:48:c2:7b:37:be:b7:5e:28: eb:44:0d:09:72:d5:d1:37:0c:79:17:bd:4f:3e:ae: 8e:55:5c:c4:97:19:67:6c:53:bd:6d:a7:df:6c:f0: ae:0c:cf:e8:9d:fe:26:9f:c5:ff:1e:23:6a:28:59: 9b:05:02:d6:72:2d:e9:da:36:39:82:f1:7c:67:39: 7a:d3:b7:74:5c:2a:8d:88:92:e5:32:6b:bc:17:4b: d2:b5:8f:68:c6:7a:b4:1b:35:33:f1:3a:94:f4:5a: ff:6d:eb:a8:14:a6:b0:22:5b:69:af:9a:04:26:6e: a4:c9:81:2b:68:79:38:84:9b:5c:2b:05:d8:2e:6a: 41:8e:f0:90:b1:fc:62:29:17:49:e5:47:9a:8f:01: d9:79:47:87:87:85:34:e9:96:ae:93:fa:0f:31:47: 80:55:ae:2e:33:ea:a9:f5:15:d9:9c:38:ab:fc:e4: 23:98:4e:67:6e:c6:39:6d:22:2e:8c:57:f7:35:fc: 50:5f:07:b9:73:c0:24:9f:3c:a8:f3:08:21:04:ee: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:14:5C:B2:5A:41:CF:1F:EA:7E:96:60:05:57:74:32:44:53:9A:F6 X509v3 Authority Key Identifier: keyid:3A:31:49:DA:0A:12:BD:BF:1B:EF:59:8B:04:63:09:07:80:20:6C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjFJ2goSvb8b71mLBGMJB4AgbOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d88aae-68c3-4909-9f8a-07e83cd5b60d/1/OjFJ2goSvb8b71mLBGMJB4AgbOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e5:bc:04:aa:3a:09:28:17:bb:23:bc:c6:7e:70:45:7e:6e: d1:eb:2a:a2:de:1c:b1:d2:fc:b3:c0:b1:03:67:0a:fb:4e:e9: 67:2f:a5:96:84:9f:1f:22:0b:47:4f:5c:f5:53:2e:d3:dd:fa: 5b:28:24:a8:a7:06:ef:be:5c:67:76:42:12:4c:b5:96:9d:17: c9:91:60:53:10:8c:93:2b:39:5f:25:08:61:b9:d3:90:4a:9a: 7a:65:fb:47:55:ff:ac:76:f8:83:64:84:82:d2:1a:f6:bb:ef: a6:5b:71:ca:2d:bb:c0:88:2e:5e:37:d1:23:ab:da:19:2f:c9: 2e:5f:78:2f:ee:3e:f6:41:ca:80:30:d3:0b:da:98:e6:eb:2a: 68:49:56:67:8d:7e:81:7d:5a:fb:bd:24:c5:3a:98:37:6e:9c: ec:75:0a:23:a8:d4:ba:e9:4a:f6:7f:f2:55:33:94:1c:22:fe: fa:e6:14:70:79:8f:32:cf:6e:de:4c:d2:04:f7:84:cf:a0:4d: 3b:9c:db:30:c7:15:72:62:ca:31:51:5f:f8:07:b6:18:f9:9a: ad:5b:4a:24:75:ea:62:54:cf:74:9c:6c:3d:68:53:ee:16:a7: ca:2a:37:43:4e:17:68:98:aa:a9:55:0e:c2:82:fc:e3:b8:dc: 9b:24:a2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJf6MpdfK6o+5NvadA+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMzE0OWRhMGExMmJkYmYxYmVmNTk4YjA0NjMwOTA3ODAy MDZjZTAwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD EygwNDE0NWNiMjVhNDFjZjFmZWE3ZTk2NjAwNTU3NzQzMjQ0NTM5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ4NXu6f+CcWZg3XonWMDDd2AKjK JwA4GvwVLttdddxNDGVVTPsd7v7HYNSr8MXDZ8qfSMJ7N763XijrRA0JctXRNwx5 F71PPq6OVVzElxlnbFO9baffbPCuDM/onf4mn8X/HiNqKFmbBQLWci3p2jY5gvF8 Zzl607d0XCqNiJLlMmu8F0vStY9oxnq0GzUz8TqU9Fr/beuoFKawIltpr5oEJm6k yYEraHk4hJtcKwXYLmpBjvCQsfxiKRdJ5UeajwHZeUeHh4U06Zauk/oPMUeAVa4u M+qp9RXZnDir/OQjmE5nbsY5bSIujFf3NfxQXwe5c8Aknzyo8wghBO7cwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQUXLJaQc8f6n6WYAVXdDJEU5r2MB8GA1UdIwQY MBaAFDoxSdoKEr2/G+9ZiwRjCQeAIGzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEt MDdlODNjZDViNjBkLzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kODhhYWUtNjhjMy00OTA5LTlmOGEtMDdlODNjZDViNjBk LzEvT2pGSjJnb1N2YjhiNzFtTEJHTUpCNEFnYk9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuW8BKo6 CSgXuyO8xn5wRX5u0esqot4csdL8s8CxA2cK+07pZy+lloSfHyILR09c9VMu0936 WygkqKcG775cZ3ZCEky1lp0XyZFgUxCMkys5XyUIYbnTkEqaemX7R1X/rHb4g2SE gtIa9rvvpltxyi27wIguXjfRI6vaGS/JLl94L+4+9kHKgDDTC9qY5usqaElWZ41+ gX1a+70kxTqYN26c7HUKI6jUuulK9n/yVTOUHCL++uYUcHmPMs9u3kzSBPeEz6BN O5zbMMcVcmLKMVFf+Ae2GPmarVtKJHXqYlTPdJxsPWhT7hanyio3Q04XaJiqqVUO woL847jcmySiPw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:38:13 2026 by rpki-client