This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft File: OALHmHAErngZDmkeNw3lCf9ZEns.mft (raw, json) Hash identifier: K5S01k2sN1Q7dIswwYe3L/OP3F2peol0Kpql0cLYnFc= Subject key identifier: AB:64:B5:C9:0E:F2:E2:7F:BC:B7:1E:7F:48:8A:EB:08:C8:7C:E0:65 Authority key identifier: 38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B Certificate issuer: /CN=3802c7987004ae78190e691e370de509ff59127b Certificate serial: 019C270639ECBBC93E3D3C642EC47D3B9CCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft Manifest number: 0852 Signing time: Wed 04 Feb 2026 05:00:45 +0000 Manifest this update: Wed 04 Feb 2026 05:00:45 +0000 Manifest next update: Thu 05 Feb 2026 05:00:45 +0000 Files and hashes: 1: OALHmHAErngZDmkeNw3lCf9ZEns.crl (hash: woa15D5Tr9+8MZvxpKutcH7my1ziQsH2ZVauHHGrN+s=) 2: znDve5CjV618M32KGB6DWBGicnw.roa (hash: ijbBK+p6F9dsyDrBRAIbTBjRD23gRWQsjidlNNmRMxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:06:39:ec:bb:c9:3e:3d:3c:64:2e:c4:7d:3b:9c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3802c7987004ae78190e691e370de509ff59127b Validity Not Before: Feb 4 05:00:45 2026 GMT Not After : Feb 5 05:00:45 2026 GMT Subject: CN=ab64b5c90ef2e27fbcb71e7f488aeb08c87ce065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:09:50:1a:f6:aa:3c:36:a7:fd:e5:59:28: d3:8a:cf:79:ab:46:93:30:f6:cc:92:79:44:29:87: 60:ff:df:cb:5b:3b:60:8b:87:74:9c:0a:b9:9b:3a: e0:79:11:47:db:71:97:d8:b6:7f:87:6f:1a:9b:7f: 2d:1b:c0:84:d9:a2:80:46:84:b6:14:fe:2e:23:32: 28:ff:e4:57:03:4e:d7:ba:29:cc:90:94:3d:06:22: 89:6d:c3:78:5c:cc:cf:5a:c3:f8:2e:7e:bb:6d:2e: 40:4b:1d:c4:1e:83:aa:b7:f0:28:d2:e3:ef:09:5f: cf:f6:77:c2:c0:69:e1:87:a2:c7:50:3a:4e:c7:0d: d2:6a:01:8e:26:5b:a7:cc:92:4f:29:ab:90:d6:bc: aa:9d:e4:31:9a:57:16:2b:bd:5c:44:ec:47:61:fb: 9e:32:0d:4a:0f:a8:d4:17:f4:4d:25:e5:2f:d7:0e: 38:6b:68:8a:a9:a3:7e:8d:4b:ee:4e:dd:a1:88:3f: 5d:bc:d4:c5:1a:b1:b6:5d:16:ce:c7:39:9b:c3:61: 49:80:0b:f8:1e:1b:56:79:f8:2a:3f:e2:1f:4f:af: b9:2a:d7:89:0e:58:f3:2f:90:22:d8:e5:99:0b:1a: df:d6:6c:d2:25:56:93:c0:91:f8:4d:0b:48:02:c0: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:B5:C9:0E:F2:E2:7F:BC:B7:1E:7F:48:8A:EB:08:C8:7C:E0:65 X509v3 Authority Key Identifier: keyid:38:02:C7:98:70:04:AE:78:19:0E:69:1E:37:0D:E5:09:FF:59:12:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OALHmHAErngZDmkeNw3lCf9ZEns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fe5ac1-28fe-43ec-8700-bf25ce0f8393/1/OALHmHAErngZDmkeNw3lCf9ZEns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d0:0f:a4:ad:d3:f5:a1:ad:10:4a:88:04:46:7d:8e:d3:35: 0d:8e:f5:77:db:db:8a:99:81:ff:9b:6f:5c:98:8f:2d:8b:32: a2:5b:b3:a6:ca:70:ae:6a:d9:52:d3:52:f4:54:fa:a0:e4:96: f7:af:ca:12:92:f8:fc:ad:58:da:a7:6c:8d:19:7d:ce:1b:77: fa:4d:b9:e7:33:83:41:d1:9a:fb:00:8a:04:af:55:2c:fd:22: 9d:a2:13:29:b6:f8:92:02:c1:7c:a7:33:2c:f8:cf:04:d1:5b: 5b:a6:56:2d:a4:15:d2:1a:b1:63:b2:88:ea:1a:c1:c7:84:36: 18:b0:4f:89:20:e1:2f:a1:fa:1d:f3:0a:35:e6:2d:7a:76:53: bc:26:e9:e3:f8:65:55:29:34:78:00:b4:95:2d:c9:00:af:3c: 38:3d:52:fa:c7:53:ed:7e:df:07:f7:f5:6e:b2:9b:09:71:72: 37:4b:e8:25:a2:6a:f8:67:b2:8e:ca:e2:82:dc:9c:69:f6:d3: f7:a5:8a:06:21:f7:56:69:df:60:7b:1d:9d:bb:e0:01:de:fe: ed:3b:b7:39:0a:b8:29:ac:be:a9:eb:bb:45:e1:60:71:db:00: e0:b8:03:97:0e:5e:62:69:29:39:f6:43:80:2d:cf:cf:ed:23: 62:03:88:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwnBjnsu8k+PTxkLsR9O5zOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDJjNzk4NzAwNGFlNzgxOTBlNjkxZTM3MGRlNTA5ZmY1 OTEyN2IwHhcNMjYwMjA0MDUwMDQ1WhcNMjYwMjA1MDUwMDQ1WjAzMTEwLwYDVQQD EyhhYjY0YjVjOTBlZjJlMjdmYmNiNzFlN2Y0ODhhZWIwOGM4N2NlMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR8JUBr2qjw2p/3lWSjTis95q0aT MPbMknlEKYdg/9/LWztgi4d0nAq5mzrgeRFH23GX2LZ/h28am38tG8CE2aKARoS2 FP4uIzIo/+RXA07XuinMkJQ9BiKJbcN4XMzPWsP4Ln67bS5ASx3EHoOqt/Ao0uPv CV/P9nfCwGnhh6LHUDpOxw3SagGOJlunzJJPKauQ1ryqneQxmlcWK71cROxHYfue Mg1KD6jUF/RNJeUv1w44a2iKqaN+jUvuTt2hiD9dvNTFGrG2XRbOxzmbw2FJgAv4 HhtWefgqP+IfT6+5KteJDljzL5Ai2OWZCxrf1mzSJVaTwJH4TQtIAsCLlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtktckO8uJ/vLcef0iK6wjIfOBlMB8GA1UdIwQY MBaAFDgCx5hwBK54GQ5pHjcN5Qn/WRJ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAt YmYyNWNlMGY4MzkzLzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mZTVhYzEtMjhmZS00M2VjLTg3MDAtYmYyNWNlMGY4Mzkz LzEvT0FMSG1IQUVybmdaRG1rZU53M2xDZjlaRW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNAPpK3T 9aGtEEqIBEZ9jtM1DY71d9vbipmB/5tvXJiPLYsyoluzpspwrmrZUtNS9FT6oOSW 96/KEpL4/K1Y2qdsjRl9zht3+k255zODQdGa+wCKBK9VLP0inaITKbb4kgLBfKcz LPjPBNFbW6ZWLaQV0hqxY7KI6hrBx4Q2GLBPiSDhL6H6HfMKNeYtenZTvCbp4/hl VSk0eAC0lS3JAK88OD1S+sdT7X7fB/f1brKbCXFyN0voJaJq+GeyjsrigtycafbT 96WKBiH3VmnfYHsdnbvgAd7+7Tu3OQq4Kay+qeu7ReFgcdsA4LgDlw5eYmkpOfZD gC3Pz+0jYgOI3g== -----END CERTIFICATE-----Generated at Wed Feb 4 11:13:37 2026 by rpki-client