This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json) Hash identifier: 40hBcfC/PAl6Ipb9YNzhIPsBEwktrDcS6/8OKxJhcKI= Subject key identifier: F8:1A:F9:7E:99:24:4E:EA:4A:AD:44:5F:C9:0A:19:A7:F9:2B:8C:03 Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc Certificate serial: 019C43906097E58917345338607F373E462B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft Manifest number: 0EF0 Signing time: Mon 09 Feb 2026 18:01:01 +0000 Manifest this update: Mon 09 Feb 2026 18:01:01 +0000 Manifest next update: Tue 10 Feb 2026 18:01:01 +0000 Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: ZXuZc76Xjm/SFso7MdxcbBsU8yfeDv78OiptbFb69JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:60:97:e5:89:17:34:53:38:60:7f:37:3e:46:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc Validity Not Before: Feb 9 18:01:01 2026 GMT Not After : Feb 10 18:01:01 2026 GMT Subject: CN=f81af97e99244eea4aad445fc90a19a7f92b8c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:f6:c5:be:32:5d:33:93:33:b9:e7:41:02: 1e:3e:38:8c:0f:aa:29:6b:75:49:92:ae:a0:f9:05: 99:e0:82:bd:e1:b8:f8:38:e6:6a:81:c7:8d:b2:95: 27:8b:66:be:68:61:ac:4a:53:03:f4:dd:63:43:05: 20:0a:f2:bc:a9:43:2f:0d:25:f2:1a:8b:28:54:99: 2b:f2:5a:5e:45:d3:78:af:ce:71:ed:7a:5e:db:48: 35:09:7e:8f:55:f6:d7:d7:a0:7d:30:73:f2:bb:a5: 77:e1:f5:89:e8:1f:1b:d2:dd:9c:78:81:b0:42:48: 56:07:7b:91:17:88:d9:25:92:09:98:5f:99:0f:16: 75:3c:42:b5:03:0d:95:7e:aa:75:5d:50:45:56:d8: 7a:84:c4:7d:20:66:02:3d:fd:dc:4f:ba:02:98:e3: 1e:70:9a:af:af:f3:e8:06:ab:d6:01:31:73:c5:34: 00:d9:fe:57:79:21:68:31:62:9e:e0:fe:af:98:95: cd:a8:9a:2a:ba:ec:d1:94:b3:e8:be:c1:af:b3:b2: 95:4a:30:dc:c2:68:76:7e:e4:bd:12:64:8f:c9:38: 38:88:d7:31:13:38:7d:a6:66:b1:fe:0d:cd:3f:e0: c1:31:c9:02:2c:89:06:93:a1:d8:1f:70:31:78:62: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1A:F9:7E:99:24:4E:EA:4A:AD:44:5F:C9:0A:19:A7:F9:2B:8C:03 X509v3 Authority Key Identifier: keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a0:43:81:b5:4f:95:4c:a8:b0:f7:1b:21:1b:d3:3c:97:b0: 4a:b2:c3:c0:1f:b9:ad:04:53:ac:5f:10:ee:7d:a1:be:15:49: 23:9d:54:ba:8c:af:2d:f4:73:b5:e3:37:37:de:23:9d:b3:84: e8:a0:6b:76:ed:5e:45:46:01:73:fc:ed:27:ff:f1:42:4e:93: 0f:ff:89:9f:62:fc:cf:a2:45:e0:96:d6:55:44:25:4f:f4:49: 5c:53:13:cb:5a:f9:e4:3f:8d:71:94:8b:89:6d:e0:99:7c:7c: 27:1a:e3:fb:3c:e1:52:fc:2c:df:48:34:eb:13:45:55:42:d3: c0:d9:e8:13:56:1f:ec:70:7d:69:50:3f:65:3e:d9:2d:79:75: 46:16:71:c5:2e:da:dc:0e:87:4b:cd:70:7b:d9:76:ee:d7:d0: ae:3b:2a:9c:15:48:ef:f2:b5:03:6a:cc:27:aa:91:b5:0d:d8: 48:b2:e1:07:64:9d:10:a6:a5:e6:46:3c:7e:6c:fd:9f:26:26: 88:4e:93:75:f8:b5:78:3c:01:bc:b5:43:ef:c8:73:34:58:f2: 44:da:d6:f9:86:df:86:01:81:59:8f:fd:38:4f:2d:7b:d1:30: 69:2a:44:3b:b7:60:02:d8:b1:46:71:83:f9:cf:07:27:b7:e6: 01:77:7e:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGCX5YkXNFM4YH83PkYrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjMzYWVjZDhkNTlhNmE0ZjA1NjkyY2NjNzJlMmI3MTM5 ZTE3Y2MwHhcNMjYwMjA5MTgwMTAxWhcNMjYwMjEwMTgwMTAxWjAzMTEwLwYDVQQD EyhmODFhZjk3ZTk5MjQ0ZWVhNGFhZDQ0NWZjOTBhMTlhN2Y5MmI4YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR72xb4yXTOTM7nnQQIePjiMD6op a3VJkq6g+QWZ4IK94bj4OOZqgceNspUni2a+aGGsSlMD9N1jQwUgCvK8qUMvDSXy GosoVJkr8lpeRdN4r85x7Xpe20g1CX6PVfbX16B9MHPyu6V34fWJ6B8b0t2ceIGw QkhWB3uRF4jZJZIJmF+ZDxZ1PEK1Aw2Vfqp1XVBFVth6hMR9IGYCPf3cT7oCmOMe cJqvr/PoBqvWATFzxTQA2f5XeSFoMWKe4P6vmJXNqJoquuzRlLPovsGvs7KVSjDc wmh2fuS9EmSPyTg4iNcxEzh9pmax/g3NP+DBMckCLIkGk6HYH3AxeGIVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPga+X6ZJE7qSq1EX8kKGaf5K4wDMB8GA1UdIwQY MBaAFKHzOuzY1ZpqTwVpLMxy4rcTnhfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4Yjgt MzlkNjNlOWU1ODZiLzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4YjgtMzlkNjNlOWU1ODZi LzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaBDgbVP lUyosPcbIRvTPJewSrLDwB+5rQRTrF8Q7n2hvhVJI51UuoyvLfRzteM3N94jnbOE 6KBrdu1eRUYBc/ztJ//xQk6TD/+Jn2L8z6JF4JbWVUQlT/RJXFMTy1r55D+NcZSL iW3gmXx8Jxrj+zzhUvws30g06xNFVULTwNnoE1Yf7HB9aVA/ZT7ZLXl1RhZxxS7a 3A6HS81we9l27tfQrjsqnBVI7/K1A2rMJ6qRtQ3YSLLhB2SdEKal5kY8fmz9nyYm iE6Tdfi1eDwBvLVD78hzNFjyRNrW+YbfhgGBWY/9OE8te9EwaSpEO7dgAtixRnGD +c8HJ7fmAXd+WQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:05 2026 by rpki-client