This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json) Hash identifier: HcitD26xHyRqGkfkrDPaeAKRM6cJ9tAu0Ny+kRPIPqI= Subject key identifier: BC:92:AB:38:F3:2D:92:66:B3:10:37:95:86:4F:90:41:DD:31:19:87 Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Certificate serial: 019C43C6D6FAD99757FAD589140A43F64840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft Manifest number: 10BD Signing time: Mon 09 Feb 2026 19:00:30 +0000 Manifest this update: Mon 09 Feb 2026 19:00:30 +0000 Manifest next update: Tue 10 Feb 2026 19:00:30 +0000 Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: xonhwEA6Fsd+V94u1FQ7eARRpGP2ibK9A/EsjKfESqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:d6:fa:d9:97:57:fa:d5:89:14:0a:43:f6:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Validity Not Before: Feb 9 19:00:30 2026 GMT Not After : Feb 10 19:00:30 2026 GMT Subject: CN=bc92ab38f32d9266b3103795864f9041dd311987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:dd:4f:ac:03:b8:8a:1f:37:62:c2:6f:ba: 6d:2f:01:97:34:fa:f5:ec:51:a0:bd:8b:81:e0:ac: 9c:89:0c:ab:cb:bd:ea:da:82:67:3a:2c:05:e3:28: f9:82:1a:1e:cb:59:00:55:14:d1:66:88:84:d1:4b: 0c:4c:4e:01:95:18:ae:21:c8:08:a0:5c:ca:1f:f1: 98:87:0c:2e:f4:a1:bd:37:23:fb:01:95:0c:09:fe: fc:c3:de:9e:78:8f:2a:5e:81:06:79:be:63:5a:d7: e0:89:be:ba:9a:99:de:0e:56:6d:c4:73:18:c3:90: 15:a6:fa:c2:3d:a8:c2:e6:57:2c:57:b9:c2:26:98: 9f:86:36:d8:09:ae:de:6d:fb:29:ac:cd:f1:45:d4: 5d:1e:5a:ca:0f:43:67:1a:3a:f2:2f:2f:41:73:c8: 1a:5d:ec:d2:83:3d:45:2f:f7:67:4d:f1:37:90:82: 66:f1:e9:73:68:a5:07:31:64:dd:d2:74:99:85:b8: ec:16:98:bf:de:30:58:ce:de:e0:8e:7a:ef:fa:e6: 70:77:f5:c4:2d:79:8d:1a:28:20:74:a6:00:54:f1: e4:57:77:6c:45:ec:d6:a3:ac:e5:b8:65:8c:41:2c: ad:63:4e:1d:be:6e:43:7f:38:48:84:71:7a:51:d7: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:AB:38:F3:2D:92:66:B3:10:37:95:86:4F:90:41:DD:31:19:87 X509v3 Authority Key Identifier: keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:c5:89:58:93:43:04:06:ed:34:47:98:75:92:b1:f6:29: f5:45:c6:92:fc:bd:2b:f0:19:df:ab:1f:f5:d0:93:85:2d:4d: bd:9a:49:87:c5:be:48:e5:f8:99:7e:02:b3:b3:31:c0:b5:dc: 1e:db:b2:05:ad:e9:99:83:11:94:40:e5:32:6c:11:83:66:1c: 92:46:8c:3d:bd:c8:92:b9:4c:84:e6:d1:69:1d:c8:a3:63:9d: ee:03:28:f8:2f:51:5c:e2:79:c1:5f:99:84:93:c9:22:22:e1: 21:33:9b:a4:d5:9e:82:48:54:df:b4:95:9f:a2:e1:8c:0f:c0: 92:f2:6d:59:54:fe:62:2f:f6:ab:0c:fd:c6:ac:e9:43:b1:df: 7a:7e:a7:19:34:49:7c:a0:41:f6:3a:50:a9:80:61:57:a6:74: aa:ba:ac:04:33:9f:98:40:b5:b4:70:69:d4:ec:13:93:88:e4: 98:99:f4:51:cd:c3:39:5d:5b:fd:4c:52:4e:e5:11:0a:22:4a: 93:bd:c8:02:1b:c4:ed:51:47:75:61:f9:e5:1a:4d:21:ca:45: b7:0b:df:0f:e7:a2:cc:0a:0a:c4:08:6e:9a:eb:b9:cb:8e:f4: 75:7f:11:34:cd:92:48:cd:d1:22:b7:49:e4:ec:5b:ef:52:7b: 41:51:86:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxtb62ZdX+tWJFApD9khAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm ZDRhZWMwHhcNMjYwMjA5MTkwMDMwWhcNMjYwMjEwMTkwMDMwWjAzMTEwLwYDVQQD EyhiYzkyYWIzOGYzMmQ5MjY2YjMxMDM3OTU4NjRmOTA0MWRkMzExOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WLdT6wDuIofN2LCb7ptLwGXNPr1 7FGgvYuB4KyciQyry73q2oJnOiwF4yj5ghoey1kAVRTRZoiE0UsMTE4BlRiuIcgI oFzKH/GYhwwu9KG9NyP7AZUMCf78w96eeI8qXoEGeb5jWtfgib66mpneDlZtxHMY w5AVpvrCPajC5lcsV7nCJpifhjbYCa7ebfsprM3xRdRdHlrKD0NnGjryLy9Bc8ga XezSgz1FL/dnTfE3kIJm8elzaKUHMWTd0nSZhbjsFpi/3jBYzt7gjnrv+uZwd/XE LXmNGiggdKYAVPHkV3dsRezWo6zluGWMQSytY04dvm5DfzhIhHF6UdeeoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLySqzjzLZJmsxA3lYZPkEHdMRmHMB8GA1UdIwQY MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa/FiViT QwQG7TRHmHWSsfYp9UXGkvy9K/AZ36sf9dCThS1NvZpJh8W+SOX4mX4Cs7MxwLXc HtuyBa3pmYMRlEDlMmwRg2YckkaMPb3IkrlMhObRaR3Io2Od7gMo+C9RXOJ5wV+Z hJPJIiLhITObpNWegkhU37SVn6LhjA/AkvJtWVT+Yi/2qwz9xqzpQ7Hfen6nGTRJ fKBB9jpQqYBhV6Z0qrqsBDOfmEC1tHBp1OwTk4jkmJn0Uc3DOV1b/UxSTuURCiJK k73IAhvE7VFHdWH55RpNIcpFtwvfD+eizAoKxAhumuu5y470dX8RNM2SSM3RIrdJ 5Oxb71J7QVGGBA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:05 2026 by rpki-client