This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft File: obeZgyScHV-GGfE1xtbn43379WI.mft (raw, json) Hash identifier: cwX2dtayQN3tlJ4aC/McYA9rR7Ok5FAyve3OvZozSXc= Subject key identifier: 4E:3A:44:FF:EB:54:05:A4:01:E4:E2:12:22:5C:D0:7C:EF:93:7F:84 Authority key identifier: A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62 Certificate issuer: /CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562 Certificate serial: 019C4322402C564D4A1BEA5ABF7C12BC83AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft Manifest number: 1014 Signing time: Mon 09 Feb 2026 16:00:44 +0000 Manifest this update: Mon 09 Feb 2026 16:00:44 +0000 Manifest next update: Tue 10 Feb 2026 16:00:44 +0000 Files and hashes: 1: obeZgyScHV-GGfE1xtbn43379WI.crl (hash: AZtKxInMZHs7gD0w+8Eb5gaJi4y8MHzQ8he19zRtf/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:40:2c:56:4d:4a:1b:ea:5a:bf:7c:12:bc:83:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b79983249c1d5f8619f135c6d6e7e37dfbf562 Validity Not Before: Feb 9 16:00:44 2026 GMT Not After : Feb 10 16:00:44 2026 GMT Subject: CN=4e3a44ffeb5405a401e4e212225cd07cef937f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:8c:d7:98:b0:e1:0b:1d:7d:09:dd:55:71: e5:02:13:92:29:d5:5c:66:37:7f:06:23:13:04:74: 16:1d:ab:39:53:4b:a1:fb:44:ab:bf:84:c2:0e:53: a8:17:99:e8:95:ed:e4:94:43:c2:c3:f4:7c:3c:56: 85:5c:f8:ac:85:8f:f9:d5:f8:be:33:5f:46:06:f0: 17:74:83:8b:77:1a:be:8b:e3:cc:b4:a2:17:b4:dd: e7:ec:15:6a:7f:36:d2:a4:1e:9e:a7:a5:16:53:5e: 96:a5:3f:19:f3:77:00:e5:98:77:8e:df:96:6c:64: 3e:ac:bd:2e:9e:dd:e5:9b:80:dd:d5:58:27:d6:51: be:89:f0:70:fc:41:f4:13:78:aa:b4:2e:00:19:8e: df:03:cb:f0:67:59:71:cc:61:41:c7:51:89:84:b1: bc:a1:d8:ed:f2:7c:d2:d9:72:4b:f1:ed:31:c3:cc: c6:a1:c0:7d:0a:28:bc:92:9e:5e:ad:59:5f:21:98: 06:83:1c:4f:2a:0b:f3:ad:a4:d8:63:8f:ab:00:d0: 9e:1d:f1:a6:5f:7c:ce:46:5b:c6:0f:8c:52:4d:55: d1:a0:52:ea:38:c8:bc:54:a7:d5:b2:3a:ef:ad:8f: 4b:64:7f:c0:e8:86:30:c3:e6:8f:7d:37:e1:8a:45: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:44:FF:EB:54:05:A4:01:E4:E2:12:22:5C:D0:7C:EF:93:7F:84 X509v3 Authority Key Identifier: keyid:A1:B7:99:83:24:9C:1D:5F:86:19:F1:35:C6:D6:E7:E3:7D:FB:F5:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obeZgyScHV-GGfE1xtbn43379WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/122d89-8e43-40c3-9cef-b33916b9f839/1/obeZgyScHV-GGfE1xtbn43379WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b8:2a:6f:26:16:5a:e3:3b:aa:d9:2a:68:58:3e:7c:be:2f: 2b:b5:2d:f9:18:cc:51:a3:ee:67:7a:0a:37:8a:d2:c3:02:0d: 4f:37:28:a7:94:d1:87:96:07:07:75:60:04:8e:b8:d7:b7:c0: a0:d1:72:92:ce:71:57:65:95:22:42:c6:11:2a:f6:cd:1b:4d: 68:da:50:2e:df:f3:af:80:f0:80:f0:b8:11:d9:3c:66:de:3f: cc:c8:c1:1f:0f:50:ea:95:91:fd:70:9d:47:bf:f8:81:41:de: 23:df:fc:f6:16:7e:12:a5:92:8d:b2:e9:b7:4d:89:9e:6a:3f: 2d:d3:a1:0f:f8:91:72:bb:d6:6c:8e:f9:04:b8:9f:01:96:a0: 5d:77:35:86:92:fe:c0:f5:e9:97:30:d5:38:bc:b6:5e:32:b6: d2:63:5f:a5:a7:2e:04:4b:a7:58:b2:c3:50:41:6d:c8:d0:8d: 65:e6:5e:0e:60:01:4a:04:57:98:56:4b:1b:79:e2:79:e7:75: f6:24:7c:d0:d1:ed:e5:27:a2:3c:77:a3:95:ea:88:12:c5:37: 4d:19:b6:8c:1d:a0:4b:32:65:8c:84:ce:c8:4f:cc:c7:2f:a9: 36:0f:c4:74:1d:57:62:ae:ce:8a:bd:e3:70:9a:4d:ee:69:5a: a6:b5:e8:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkAsVk1KG+pav3wSvIOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjc5OTgzMjQ5YzFkNWY4NjE5ZjEzNWM2ZDZlN2UzN2Rm YmY1NjIwHhcNMjYwMjA5MTYwMDQ0WhcNMjYwMjEwMTYwMDQ0WjAzMTEwLwYDVQQD Eyg0ZTNhNDRmZmViNTQwNWE0MDFlNGUyMTIyMjVjZDA3Y2VmOTM3Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKWM15iw4QsdfQndVXHlAhOSKdVc Zjd/BiMTBHQWHas5U0uh+0Srv4TCDlOoF5nole3klEPCw/R8PFaFXPishY/51fi+ M19GBvAXdIOLdxq+i+PMtKIXtN3n7BVqfzbSpB6ep6UWU16WpT8Z83cA5Zh3jt+W bGQ+rL0unt3lm4Dd1Vgn1lG+ifBw/EH0E3iqtC4AGY7fA8vwZ1lxzGFBx1GJhLG8 odjt8nzS2XJL8e0xw8zGocB9Cii8kp5erVlfIZgGgxxPKgvzraTYY4+rANCeHfGm X3zORlvGD4xSTVXRoFLqOMi8VKfVsjrvrY9LZH/A6IYww+aPfTfhikXzBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE46RP/rVAWkAeTiEiJc0Hzvk3+EMB8GA1UdIwQY MBaAFKG3mYMknB1fhhnxNcbW5+N9+/ViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYt YjMzOTE2YjlmODM5LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xMjJkODktOGU0My00MGMzLTljZWYtYjMzOTE2YjlmODM5 LzEvb2JlWmd5U2NIVi1HR2ZFMXh0Ym40MzM3OVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7gqbyYW WuM7qtkqaFg+fL4vK7Ut+RjMUaPuZ3oKN4rSwwINTzcop5TRh5YHB3VgBI6417fA oNFyks5xV2WVIkLGESr2zRtNaNpQLt/zr4DwgPC4Edk8Zt4/zMjBHw9Q6pWR/XCd R7/4gUHeI9/89hZ+EqWSjbLpt02Jnmo/LdOhD/iRcrvWbI75BLifAZagXXc1hpL+ wPXplzDVOLy2XjK20mNfpacuBEunWLLDUEFtyNCNZeZeDmABSgRXmFZLG3nieed1 9iR80NHt5SeiPHejleqIEsU3TRm2jB2gSzJljITOyE/Mxy+pNg/EdB1XYq7Oir3j cJpN7mlaprXoEg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:10 2026 by rpki-client