This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json) Hash identifier: fBxTMM2CIsMskR4vCzs01+y4f4MfmkLMozkj/wCDL68= Subject key identifier: 09:F6:88:AB:0A:C0:BF:45:61:D7:18:03:2B:AD:4C:1E:C1:58:8D:3D Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5 Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5 Certificate serial: 019C446BEE1F9AAF4CD9670B7B41D352086C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 22:00:49 +0000 Manifest this update: Mon 09 Feb 2026 22:00:49 +0000 Manifest next update: Tue 10 Feb 2026 22:00:49 +0000 Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: yywr6rDvB3MRveibVqZqj2C2qHO2m4nyaunWqUQZwqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:ee:1f:9a:af:4c:d9:67:0b:7b:41:d3:52:08:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5 Validity Not Before: Feb 9 22:00:49 2026 GMT Not After : Feb 10 22:00:49 2026 GMT Subject: CN=09f688ab0ac0bf4561d718032bad4c1ec1588d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b8:c0:96:82:e0:48:1a:63:1d:23:79:a8:15: 46:e2:e6:4c:21:43:ba:3f:87:49:ed:2b:7b:b8:f7: a7:06:59:b8:aa:0d:d4:73:9a:0d:e7:c6:ee:c8:66: 15:29:2b:a2:ca:cc:b3:c0:27:41:ab:24:d9:bf:ad: 23:d0:30:9e:9f:94:34:25:c6:6a:da:30:e2:36:f9: 2f:3a:40:ba:57:fd:ff:a9:82:a3:50:b7:35:1a:b2: d2:bf:37:33:cc:87:32:65:8c:92:d5:15:23:ae:65: 3b:f5:de:5f:32:2f:c3:ce:c5:b9:39:ca:52:9e:08: f1:ae:fe:44:5f:86:0e:ad:39:41:1d:40:64:b7:ed: 3d:49:ae:1e:4d:c9:51:ba:e8:02:a6:76:9c:d2:8f: bf:a0:47:80:2f:a6:ac:cd:b4:89:7e:15:04:12:a5: 4d:28:4d:c4:30:93:8c:58:5c:90:28:52:54:3c:9a: e4:e0:5f:a8:3f:45:e2:d0:d7:a1:b6:90:f2:cc:7f: b5:cc:f0:af:a7:8a:63:4d:f9:d3:ea:f6:f6:29:af: 19:cc:98:30:c9:91:4d:0a:96:72:ff:45:d0:0e:01: e7:8f:6b:1a:fe:d5:3c:a1:9d:a0:6a:7c:a3:d2:47: fd:92:40:13:62:0d:bb:f0:75:20:a3:3f:d2:1a:4c: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F6:88:AB:0A:C0:BF:45:61:D7:18:03:2B:AD:4C:1E:C1:58:8D:3D X509v3 Authority Key Identifier: keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ae:7f:d3:b3:b9:01:d4:20:c5:2f:8b:67:17:d8:c2:28:ca: 32:46:00:90:4a:54:35:ce:2e:0b:62:37:d2:f0:a1:1f:0f:82: c7:63:50:d5:bb:a7:78:80:fe:f2:db:1a:bd:84:e7:59:ea:f6: 39:0c:a5:7c:c5:b2:7e:74:74:ea:15:eb:08:4c:1b:23:4f:ff: 66:58:88:b7:e8:98:15:57:b7:89:e5:43:da:28:e4:99:55:bc: c1:12:c9:70:8c:2b:e3:3e:32:bd:55:77:a0:c7:6f:fc:10:90: c0:98:12:85:55:85:64:c2:c9:6c:df:23:5d:5a:ab:fb:5f:9a: 35:81:95:5d:9d:78:56:34:bd:37:af:b6:53:02:d3:b4:2a:ed: 11:78:41:2d:58:54:9a:d3:b1:bf:23:39:f4:e6:25:79:fb:a7: ae:6e:8f:ed:3c:ec:ae:80:5b:9b:d7:42:df:ba:2f:ac:c6:7e: a3:56:bf:c4:89:a0:01:b4:cb:2b:fd:e4:22:40:e6:f3:3c:70: 95:5f:1e:f4:ed:55:6d:54:a6:ff:7c:62:8a:93:88:bd:32:1e: fb:99:d1:1d:23:81:09:79:19:f5:b2:10:f4:09:44:0a:b2:4b: d7:71:2e:9c:ed:c9:5a:86:45:6d:15:f8:48:80:53:24:5b:45: 30:9e:b9:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa+4fmq9M2WcLe0HTUghsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMzNhNmFmNWY2ODg0MzI4NzljN2UwYzA3NzJjZGRkOGYx NzZkYjUwHhcNMjYwMjA5MjIwMDQ5WhcNMjYwMjEwMjIwMDQ5WjAzMTEwLwYDVQQD EygwOWY2ODhhYjBhYzBiZjQ1NjFkNzE4MDMyYmFkNGMxZWMxNTg4ZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrjAloLgSBpjHSN5qBVG4uZMIUO6 P4dJ7St7uPenBlm4qg3Uc5oN58buyGYVKSuiysyzwCdBqyTZv60j0DCen5Q0JcZq 2jDiNvkvOkC6V/3/qYKjULc1GrLSvzczzIcyZYyS1RUjrmU79d5fMi/DzsW5OcpS ngjxrv5EX4YOrTlBHUBkt+09Sa4eTclRuugCpnac0o+/oEeAL6aszbSJfhUEEqVN KE3EMJOMWFyQKFJUPJrk4F+oP0Xi0NehtpDyzH+1zPCvp4pjTfnT6vb2Ka8ZzJgw yZFNCpZy/0XQDgHnj2sa/tU8oZ2ganyj0kf9kkATYg278HUgoz/SGkwT2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAn2iKsKwL9FYdcYAyutTB7BWI09MB8GA1UdIwQY MBaAFKIzpq9faIQyh5x+DAdyzd2PF221MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEt M2U0MjQwNTY5NDhmLzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEtM2U0MjQwNTY5NDhm LzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK5/07O5 AdQgxS+LZxfYwijKMkYAkEpUNc4uC2I30vChHw+Cx2NQ1buneID+8tsavYTnWer2 OQylfMWyfnR06hXrCEwbI0//ZliIt+iYFVe3ieVD2ijkmVW8wRLJcIwr4z4yvVV3 oMdv/BCQwJgShVWFZMLJbN8jXVqr+1+aNYGVXZ14VjS9N6+2UwLTtCrtEXhBLVhU mtOxvyM59OYlefunrm6P7TzsroBbm9dC37ovrMZ+o1a/xImgAbTLK/3kIkDm8zxw lV8e9O1VbVSm/3xiipOIvTIe+5nRHSOBCXkZ9bIQ9AlECrJL13EunO3JWoZFbRX4 SIBTJFtFMJ650g== -----END CERTIFICATE-----Generated at Tue Feb 10 03:00:01 2026 by rpki-client