This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json) Hash identifier: qyIzTgzSah7wTvi4obyzyEuQk/BzrJ7jKGKsD/8vuko= Subject key identifier: B3:F4:B4:28:EC:23:30:6D:47:6C:D6:C9:F2:72:42:D9:6A:50:B3:7F Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Certificate serial: 019C40FD8CB9842AF4AEC1C9A60D86F66EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft Manifest number: 05D3 Signing time: Mon 09 Feb 2026 06:01:24 +0000 Manifest this update: Mon 09 Feb 2026 06:01:24 +0000 Manifest next update: Tue 10 Feb 2026 06:01:24 +0000 Files and hashes: 1: 1pw_z4ALbNcIneHL4Ij33SpACpI.roa (hash: twH8uqFHcds859fXJknbVUO58IQvg3qbZxRTaJIyMwY=) 2: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: wLt9AFAeEazld1Rs1R3Qk+4NQJ1IxXTNqCOxipEtaxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:8c:b9:84:2a:f4:ae:c1:c9:a6:0d:86:f6:6e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Validity Not Before: Feb 9 06:01:24 2026 GMT Not After : Feb 10 06:01:24 2026 GMT Subject: CN=b3f4b428ec23306d476cd6c9f27242d96a50b37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:8e:67:e5:18:25:aa:fb:ca:aa:18:45:6f: f6:b3:bd:80:4b:6b:12:07:82:7e:84:12:53:93:b5: f9:7a:8b:91:7b:25:10:67:7c:1e:95:7a:76:04:d1: b8:ad:36:0e:57:97:5e:7f:a1:bd:1d:28:64:f4:e5: 32:c3:38:5e:8f:28:ef:6c:97:bd:39:a1:52:f6:c2: fa:d3:03:5f:e1:ce:a0:09:96:18:22:10:1b:e5:c7: 94:b3:b9:56:84:ea:94:02:e0:64:44:c9:e0:cf:40: 39:24:90:65:f7:d4:a9:45:ea:28:91:d2:3c:2b:52: 25:b7:42:96:56:df:fe:14:86:e1:cd:0e:66:23:c5: 7e:1a:58:35:3b:81:de:89:6d:88:07:de:c1:e6:9b: 62:f1:23:0a:de:28:57:90:61:5e:25:d0:e2:c9:26: d5:79:d6:ad:f8:ac:b1:a2:ad:d7:e2:2e:4f:49:f7: 72:96:bd:24:41:71:1c:31:15:7e:88:7c:cd:43:98: 22:95:02:14:13:b2:37:ec:86:7d:17:28:9c:dc:c0: c2:42:0a:d6:ee:b6:d9:24:88:8a:40:06:02:28:13: 87:f1:80:7d:f0:05:7c:f8:18:d2:8d:df:d0:77:22: 2b:29:78:51:79:05:e5:31:ad:a5:40:6e:a7:ce:06: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:B4:28:EC:23:30:6D:47:6C:D6:C9:F2:72:42:D9:6A:50:B3:7F X509v3 Authority Key Identifier: keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b4:08:e2:9b:74:7a:5f:e8:43:54:b8:38:91:6a:6e:1f:ec: d3:af:ae:57:82:a0:7f:8d:84:24:9b:f4:26:bb:c0:b1:3d:76: f2:35:2d:72:46:53:bb:07:4b:f8:d9:f6:92:c2:7e:de:f5:db: d3:89:9a:c1:4f:32:3d:2b:3d:52:6e:68:f1:22:f8:78:e8:5b: 9f:ae:ae:db:7f:11:5f:00:57:e2:3a:88:38:ca:26:c3:88:15: 57:aa:d0:23:38:8f:99:a0:1e:e4:ac:67:9b:52:98:a0:c0:c0: 8e:57:da:ef:c0:2c:64:dd:b6:8a:ad:38:bb:96:eb:d6:bf:c0: 3f:fa:d8:33:5d:90:7d:23:aa:8b:12:26:13:12:d3:0f:78:d4: 1e:bf:95:99:48:48:50:79:b6:20:1b:67:44:43:84:3d:ad:17: 1e:b0:71:05:82:d0:d8:68:f8:88:9f:b4:cd:e8:b8:03:a7:d2: e4:00:ea:2f:c9:12:13:01:77:79:2d:20:60:eb:15:78:a7:5b: 6b:5b:a2:7e:8e:a3:1c:17:c4:e1:65:c5:44:b6:7a:47:6f:15: 00:d1:3e:b3:2a:11:40:f4:a5:6c:e1:f9:fd:ff:65:21:d4:52: 0f:45:d3:4e:48:6b:15:33:08:26:3d:4b:6d:f5:4c:7a:65:4b: be:f7:7f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/Yy5hCr0rsHJpg2G9m7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy NDk4ZWYwHhcNMjYwMjA5MDYwMTI0WhcNMjYwMjEwMDYwMTI0WjAzMTEwLwYDVQQD EyhiM2Y0YjQyOGVjMjMzMDZkNDc2Y2Q2YzlmMjcyNDJkOTZhNTBiMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dCOZ+UYJar7yqoYRW/2s72AS2sS B4J+hBJTk7X5eouReyUQZ3welXp2BNG4rTYOV5def6G9HShk9OUywzhejyjvbJe9 OaFS9sL60wNf4c6gCZYYIhAb5ceUs7lWhOqUAuBkRMngz0A5JJBl99SpReookdI8 K1Ilt0KWVt/+FIbhzQ5mI8V+Glg1O4HeiW2IB97B5pti8SMK3ihXkGFeJdDiySbV edat+Kyxoq3X4i5PSfdylr0kQXEcMRV+iHzNQ5gilQIUE7I37IZ9Fyic3MDCQgrW 7rbZJIiKQAYCKBOH8YB98AV8+BjSjd/QdyIrKXhReQXlMa2lQG6nzgYpLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP0tCjsIzBtR2zWyfJyQtlqULN/MB8GA1UdIwQY MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbQI4pt0 el/oQ1S4OJFqbh/s06+uV4Kgf42EJJv0JrvAsT128jUtckZTuwdL+Nn2ksJ+3vXb 04mawU8yPSs9Um5o8SL4eOhbn66u238RXwBX4jqIOMomw4gVV6rQIziPmaAe5Kxn m1KYoMDAjlfa78AsZN22iq04u5br1r/AP/rYM12QfSOqixImExLTD3jUHr+VmUhI UHm2IBtnREOEPa0XHrBxBYLQ2Gj4iJ+0zei4A6fS5ADqL8kSEwF3eS0gYOsVeKdb a1uifo6jHBfE4WXFRLZ6R28VANE+syoRQPSlbOH5/f9lIdRSD0XTTkhrFTMIJj1L bfVMemVLvvd/rA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:43 2026 by rpki-client