This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: PNWo0I5BPz2ThVd3Hkr6xdb2fd+0DyJAKb12q7HHo3U=
Subject key identifier: 64:C8:CB:6F:B9:48:7F:54:4B:30:C2:70:75:A8:A4:AA:79:80:12:41
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 019C432269EACA706A832A7D55AEFC08F7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 0C88
Signing time: Mon 09 Feb 2026 16:00:54 +0000
Manifest this update: Mon 09 Feb 2026 16:00:54 +0000
Manifest next update: Tue 10 Feb 2026 16:00:54 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: A/R/Rm3g5AZw+3WyZO16FkMBZtt51dbPst2EgnODF5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:69:ea:ca:70:6a:83:2a:7d:55:ae:fc:08:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Feb 9 16:00:54 2026 GMT
Not After : Feb 10 16:00:54 2026 GMT
Subject: CN=64c8cb6fb9487f544b30c27075a8a4aa79801241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:83:6b:45:d4:7d:1e:e7:a8:d9:5c:6e:6b:
b7:a5:e7:64:07:23:4c:f0:8e:a6:40:e0:b8:72:46:
7f:7a:fe:45:cd:36:d6:2e:30:38:94:89:04:56:1f:
1c:c0:03:80:3d:54:e2:6b:76:41:db:00:60:7f:33:
c5:9b:39:4d:40:c0:87:be:57:ec:5b:95:73:91:e1:
35:63:e8:ca:5c:f9:67:14:11:29:81:05:2c:6a:4c:
1c:6c:08:92:08:64:d9:bd:56:28:17:71:b4:7a:1d:
e3:07:95:66:a4:a5:3f:54:38:36:f8:86:13:70:e7:
f7:ce:ab:3c:45:fd:6b:35:d6:03:86:64:90:7c:3f:
36:a7:3a:67:61:02:d9:4b:40:9b:b8:43:38:72:f6:
ee:f9:c8:31:0c:55:80:99:98:48:2b:74:bc:bf:f0:
0c:59:c6:de:aa:41:69:ed:17:5e:8a:3f:e6:17:8c:
e4:e5:6a:f6:d5:d2:d8:e9:7f:7b:51:06:6f:5f:e1:
c1:bc:33:26:91:0c:c3:39:4d:ea:86:b5:e3:c1:d5:
a1:49:93:a4:2d:01:34:4b:c6:e2:db:03:bf:97:c7:
73:1c:74:e0:1c:ff:b2:92:b9:81:df:db:f9:d0:34:
90:f4:ca:34:71:56:8b:70:8e:30:cd:3b:50:7b:1f:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:CB:6F:B9:48:7F:54:4B:30:C2:70:75:A8:A4:AA:79:80:12:41
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9e:7b:aa:39:b0:dd:0a:2c:5b:3d:79:63:f7:21:54:8e:18:
bc:2b:3c:77:fb:03:fa:b5:ca:44:e4:0e:4a:b9:0c:02:58:7e:
be:98:f3:2c:57:2d:dd:f5:19:1c:5e:ac:a6:18:5f:c0:7f:0d:
57:c8:98:ea:bb:10:24:f6:36:3d:5a:88:ec:56:0a:8e:95:6b:
45:be:e4:48:60:bc:f3:25:fe:e8:85:9b:59:a9:d9:14:d7:59:
5a:e1:18:40:47:12:73:ca:cd:e0:78:ea:38:6a:1f:26:8b:cb:
75:af:29:87:00:b1:12:b7:24:24:e9:6c:ae:7b:e5:cb:60:67:
9e:2b:56:32:6b:cd:24:80:88:11:d5:aa:8e:bc:5f:af:4a:b6:
db:85:00:0c:c0:44:83:9a:0b:ec:1d:ba:66:55:a7:a1:5c:e1:
97:28:53:bb:c9:6d:32:0c:55:d0:dc:95:bd:1b:2e:c7:d8:2e:
5a:ea:bd:97:d2:0c:1e:73:2e:f2:91:68:80:26:a4:05:26:0d:
9e:f9:9e:5e:38:31:3e:87:ba:dd:98:55:49:b7:91:c2:16:f8:
b7:b7:83:d7:ea:80:f4:56:8b:5f:a4:96:0d:cf:65:89:8b:2a:
80:fc:d4:c4:bc:62:c9:54:bb:60:9e:c0:a0:73:cf:f6:74:4e:
20:3d:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:52 2026 by rpki-client