This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: ysmaxvpP64i8ImmxtLGR7eu/wI4TiRluTKharWrowkk=
Subject key identifier: F5:B1:07:52:55:AF:C8:93:5E:E5:D1:95:0A:FD:55:E5:A5:6E:D9:59
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 019C446BC4C7EEB72C90D8A77FA73514331B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 22:00:39 +0000
Manifest this update: Mon 09 Feb 2026 22:00:39 +0000
Manifest next update: Tue 10 Feb 2026 22:00:39 +0000
Files and hashes: 1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: CBgeXDpqK0bCjgKyKJiQYLf9wrp9/KvmdblovGrpCzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:c4:c7:ee:b7:2c:90:d8:a7:7f:a7:35:14:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Feb 9 22:00:39 2026 GMT
Not After : Feb 10 22:00:39 2026 GMT
Subject: CN=f5b1075255afc8935ee5d1950afd55e5a56ed959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:d9:0e:e4:af:05:31:5e:d0:7b:c6:f0:95:
4b:42:8e:84:25:60:35:2a:ed:01:9f:16:22:54:b6:
bb:95:2e:bb:63:75:94:cd:84:8f:ae:2a:54:e8:80:
7b:bc:3f:ce:ca:91:66:8e:57:6c:fa:45:80:c0:40:
16:00:95:1e:8c:1c:60:3b:56:f7:e0:11:52:ad:5b:
78:6e:94:d9:05:85:fc:33:74:f4:4c:0f:70:dd:44:
09:32:ed:a6:55:84:2a:bc:17:07:ae:86:be:93:36:
89:6a:6e:82:f9:86:dd:1e:06:df:e7:03:2d:b1:44:
3b:c2:c8:d4:7d:58:a8:ca:b8:dd:99:3c:05:52:79:
bd:73:2a:92:71:6d:66:b2:7f:1f:ac:50:20:07:c7:
1f:6a:98:d3:d4:c2:f9:5f:f5:ad:d2:ca:e6:3b:d0:
68:70:ef:ff:83:0a:d6:90:82:f5:de:18:7c:94:82:
fa:81:8d:d1:a0:6e:d6:fc:74:02:f6:51:68:19:66:
13:63:34:71:a5:b7:63:73:bd:f5:b1:ea:06:25:c0:
46:c2:18:f5:3d:fd:45:d3:a3:3e:8b:32:16:cf:2e:
20:ab:4f:ff:7b:6c:7d:d0:c7:d5:31:46:cc:b7:50:
95:7b:66:73:bd:a2:2e:2b:da:71:d9:14:19:cc:e3:
fb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:07:52:55:AF:C8:93:5E:E5:D1:95:0A:FD:55:E5:A5:6E:D9:59
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d8:24:67:66:17:35:5d:bf:f5:fb:45:91:9d:6b:03:77:9e:
92:7b:32:f1:64:18:5a:a0:5f:54:82:d8:57:e6:78:ae:18:67:
f2:73:76:d2:10:dd:4d:93:27:22:6a:7f:77:b9:22:65:48:49:
23:e4:04:43:1d:25:44:74:d4:48:52:80:21:f2:e5:ee:3c:c8:
9d:90:09:36:c1:34:63:9f:2f:9c:a8:ba:3f:5d:a0:b2:fd:29:
3d:79:79:94:9e:41:4d:ad:d4:70:21:6e:8a:8b:f5:12:3c:92:
ee:41:e5:6c:3e:53:9f:e9:18:06:82:a0:c2:2e:78:4d:d6:10:
0a:3e:5b:27:88:d8:d1:ef:f9:14:84:8d:50:4f:f8:1c:95:0e:
07:7f:bc:e8:10:18:5b:bb:9c:c8:f3:3d:2b:a1:1d:0a:66:ec:
04:de:e9:4a:96:80:64:ea:18:ab:93:41:b2:38:6a:dd:72:c1:
21:e3:8e:b7:80:15:be:2d:40:b9:b6:54:e2:13:e1:0c:3a:65:
fd:bd:b6:71:b4:81:e9:b1:83:31:7b:44:7a:66:4c:dc:72:06:
ff:5a:3b:78:06:c1:2f:f6:84:98:bc:78:53:35:f1:a2:dd:e0:
02:2e:11:c3:eb:07:d5:a4:3d:85:2e:ee:7a:39:82:9b:f6:21:
8c:bf:b1:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa8TH7rcskNinf6c1FDMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZmQxNmMyNDdjZjQ2NmVlZDMxYTMwNGJiOGYxN2ZhMzIx
NWFhYWEwHhcNMjYwMjA5MjIwMDM5WhcNMjYwMjEwMjIwMDM5WjAzMTEwLwYDVQQD
EyhmNWIxMDc1MjU1YWZjODkzNWVlNWQxOTUwYWZkNTVlNWE1NmVkOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzrZDuSvBTFe0HvG8JVLQo6EJWA1
Ku0BnxYiVLa7lS67Y3WUzYSPripU6IB7vD/OypFmjlds+kWAwEAWAJUejBxgO1b3
4BFSrVt4bpTZBYX8M3T0TA9w3UQJMu2mVYQqvBcHroa+kzaJam6C+YbdHgbf5wMt
sUQ7wsjUfVioyrjdmTwFUnm9cyqScW1msn8frFAgB8cfapjT1ML5X/Wt0srmO9Bo
cO//gwrWkIL13hh8lIL6gY3RoG7W/HQC9lFoGWYTYzRxpbdjc731seoGJcBGwhj1
Pf1F06M+izIWzy4gq0//e2x90MfVMUbMt1CVe2ZzvaIuK9px2RQZzOP73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWxB1JVr8iTXuXRlQr9VeWlbtlZMB8GA1UdIwQY
MBaAFKH9FsJHz0Zu7TGjBLuPF/oyFaqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTct
NmNlZjFhYmFiM2ZjLzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTctNmNlZjFhYmFiM2Zj
LzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNgkZ2YX
NV2/9ftFkZ1rA3eeknsy8WQYWqBfVILYV+Z4rhhn8nN20hDdTZMnImp/d7kiZUhJ
I+QEQx0lRHTUSFKAIfLl7jzInZAJNsE0Y58vnKi6P12gsv0pPXl5lJ5BTa3UcCFu
iov1EjyS7kHlbD5Tn+kYBoKgwi54TdYQCj5bJ4jY0e/5FISNUE/4HJUOB3+86BAY
W7ucyPM9K6EdCmbsBN7pSpaAZOoYq5NBsjhq3XLBIeOOt4AVvi1AubZU4hPhDDpl
/b22cbSB6bGDMXtEemZM3HIG/1o7eAbBL/aEmLx4UzXxot3gAi4Rw+sH1aQ9hS7u
ejmCm/YhjL+x9w==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:04 2026 by rpki-client