This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json) Hash identifier: aXaBUi6DaDBzb3jWpSHVQsQlLZGNApyZjXB9UsTnIzs= Subject key identifier: 30:7A:64:89:35:EF:29:AB:60:9A:B5:15:EF:E2:54:B5:E0:55:39:4B Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Certificate serial: 019C1F15F32D51BF247D3C565BB283D7CD99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft Manifest number: 17FE Signing time: Mon 02 Feb 2026 16:00:58 +0000 Manifest this update: Mon 02 Feb 2026 16:00:58 +0000 Manifest next update: Tue 03 Feb 2026 16:00:58 +0000 Files and hashes: 1: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: 1E5VTB3kXP88j8/2DxRgapFiinOSan4A6hw6aPpxgSY=) 2: UqRs_bqs0VhHaTN282P9bVhhhBg.roa (hash: VbKxBTMmSvaIdEScwWRF+rUhdcFdJ0rTtF7OYGrB3iw=) 3: dducmgyazTdGY4TmDwS0cEZbyrc.roa (hash: DSpVEVTq6ENCIlj8O6Mveeu9RrT+RIRL8IMymFpQ5i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:15:f3:2d:51:bf:24:7d:3c:56:5b:b2:83:d7:cd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Validity Not Before: Feb 2 16:00:58 2026 GMT Not After : Feb 3 16:00:58 2026 GMT Subject: CN=307a648935ef29ab609ab515efe254b5e055394b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:d4:1b:e0:bd:21:d3:80:ba:9f:6c:2b:c0: 5e:f2:1b:0f:70:53:6d:0c:07:2a:a1:ad:8a:76:1f: e3:48:2f:08:2f:e0:5b:6b:1d:7a:e4:32:e7:e1:01: 11:61:d2:c7:f3:ce:eb:df:cc:06:77:3c:11:ab:a3: a7:67:e5:10:0a:de:3b:5b:02:b4:fd:81:56:ce:fc: 51:a1:be:2d:92:70:aa:a0:6d:a8:55:c7:88:6a:5a: 90:c7:a5:99:c0:d8:0a:e2:b1:2e:de:d3:8d:9b:bc: 28:06:23:1e:54:26:28:74:57:ba:1b:01:d8:3e:78: c7:ea:80:b6:d3:e9:25:75:19:dd:5f:1f:d6:eb:0b: 38:da:4e:8f:2b:2a:bf:63:a0:5e:2d:46:0a:98:76: 8f:eb:1d:9b:8f:cb:9f:5c:3b:0b:f4:db:e2:80:03: cd:37:e7:89:b8:b8:ab:15:46:e7:b4:bc:de:95:0c: 28:4d:70:36:a5:08:b9:4d:a6:92:d8:d9:4d:90:d2: 22:8a:36:29:20:95:40:47:d9:12:0e:fe:92:4e:ea: 46:60:41:8b:b8:5c:2d:74:b1:62:64:fd:d2:62:49: 9d:35:13:29:60:1f:67:c3:f0:c6:07:a4:34:78:e0: 24:21:41:ba:e3:bc:0b:01:79:61:0c:e6:68:de:e4: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7A:64:89:35:EF:29:AB:60:9A:B5:15:EF:E2:54:B5:E0:55:39:4B X509v3 Authority Key Identifier: keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a3:59:e6:3c:b0:8a:75:eb:e8:55:5a:97:03:85:b2:72:9a: 67:6f:4c:ab:be:24:db:20:eb:6f:e5:9c:94:c1:60:b5:97:a1: e3:0f:39:9d:23:a8:13:94:84:8e:c9:d5:2b:48:60:00:8a:79: c6:57:ed:4e:0e:ef:45:9d:7d:50:e8:33:f7:57:10:39:a2:35: 53:ec:0b:ab:b5:e5:6c:b5:97:bb:a6:3c:28:17:c5:c2:0f:ee: a6:1e:2c:f2:0c:9c:03:64:cf:60:a8:77:a8:76:0c:24:62:49: b0:15:53:9f:6c:05:db:07:43:80:ba:96:a9:8f:e9:9f:e4:b4: 40:bd:92:c1:b5:c4:3d:25:d3:ee:3e:da:08:21:aa:46:6e:a0: 4e:6e:a0:ba:4e:d5:e1:1e:4e:f5:44:8f:d4:d0:64:94:76:3e: 18:6e:68:0c:22:9f:93:16:1c:4e:8e:4a:0a:31:e4:df:99:6d: 79:69:10:09:32:24:0f:5b:3d:5d:2b:3d:0b:90:bd:38:90:0b: 96:97:dd:b6:06:9e:80:46:99:8b:97:e2:9a:21:5d:7e:1c:71: 6a:a8:19:49:7d:eb:1d:9b:a8:72:d6:7a:47:68:38:54:66:4a: 44:60:ee:da:c3:46:21:df:1e:02:2f:ef:4f:1c:5e:f2:67:bf: bd:00:ba:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfFfMtUb8kfTxWW7KD182ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0 N2M2MDMwHhcNMjYwMjAyMTYwMDU4WhcNMjYwMjAzMTYwMDU4WjAzMTEwLwYDVQQD EygzMDdhNjQ4OTM1ZWYyOWFiNjA5YWI1MTVlZmUyNTRiNWUwNTUzOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkODUG+C9IdOAup9sK8Be8hsPcFNt DAcqoa2Kdh/jSC8IL+Bbax165DLn4QERYdLH887r38wGdzwRq6OnZ+UQCt47WwK0 /YFWzvxRob4tknCqoG2oVceIalqQx6WZwNgK4rEu3tONm7woBiMeVCYodFe6GwHY PnjH6oC20+kldRndXx/W6ws42k6PKyq/Y6BeLUYKmHaP6x2bj8ufXDsL9NvigAPN N+eJuLirFUbntLzelQwoTXA2pQi5TaaS2NlNkNIiijYpIJVAR9kSDv6STupGYEGL uFwtdLFiZP3SYkmdNRMpYB9nw/DGB6Q0eOAkIUG647wLAXlhDOZo3uSL1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB6ZIk17ymrYJq1Fe/iVLXgVTlLMB8GA1UdIwQY MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6NZ5jyw inXr6FValwOFsnKaZ29Mq74k2yDrb+WclMFgtZeh4w85nSOoE5SEjsnVK0hgAIp5 xlftTg7vRZ19UOgz91cQOaI1U+wLq7XlbLWXu6Y8KBfFwg/uph4s8gycA2TPYKh3 qHYMJGJJsBVTn2wF2wdDgLqWqY/pn+S0QL2SwbXEPSXT7j7aCCGqRm6gTm6guk7V 4R5O9USP1NBklHY+GG5oDCKfkxYcTo5KCjHk35lteWkQCTIkD1s9XSs9C5C9OJAL lpfdtgaegEaZi5fimiFdfhxxaqgZSX3rHZuoctZ6R2g4VGZKRGDu2sNGId8eAi/v Txxe8me/vQC6Yw== -----END CERTIFICATE-----Generated at Tue Feb 3 01:52:46 2026 by rpki-client