This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json) Hash identifier: scdtmAdiDfK2d7nNY69i/Nu4SqGDYo3o2Qj7XlU67bw= Subject key identifier: F9:42:AF:5D:3F:F9:6F:51:1C:9D:C1:7B:62:39:8D:A6:49:5E:14:3F Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Certificate serial: 019C42B3ECF83C1F6BB913FAFDC3D3FFBB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft Manifest number: 1473 Signing time: Mon 09 Feb 2026 14:00:13 +0000 Manifest this update: Mon 09 Feb 2026 14:00:13 +0000 Manifest next update: Tue 10 Feb 2026 14:00:13 +0000 Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: DLJKaZZqvIIpPh3ewlLRrBcltoN/XzuzlUI2cGu3jgA=) 2: avNEwpL_11H5YSsomwm0HOp9pcY.roa (hash: W9XdBIvP8KNer4n6RxTSErrCF+Uq5P5iFTsq9VlqdFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:ec:f8:3c:1f:6b:b9:13:fa:fd:c3:d3:ff:bb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a Validity Not Before: Feb 9 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2026 GMT Subject: CN=f942af5d3ff96f511c9dc17b62398da6495e143f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:ce:9b:40:9d:da:89:a4:80:40:05:c4:57: 3c:ee:c8:7b:96:c8:63:e1:34:cc:98:db:76:5b:bb: ff:1c:68:fc:24:3e:5e:a9:21:5c:f3:14:11:47:67: 77:84:90:0e:8c:5b:ec:f8:5d:0e:b8:ad:59:37:21: 3b:02:4c:ef:73:2e:86:5b:69:9c:18:b5:4e:5a:23: c1:af:14:70:6e:0e:d8:6b:6d:ec:f7:94:2c:66:c6: a5:4b:00:dd:76:47:58:14:8e:c8:ff:76:21:8f:bf: 76:c3:fc:a5:de:4c:49:a0:20:fc:f3:0a:25:9e:21: bd:5a:67:80:12:6c:4e:9b:78:05:f3:26:d8:28:82: fe:ff:11:3f:66:b8:24:4b:31:e1:28:e3:d8:96:63: f4:d8:91:ba:f2:0e:49:9f:27:2c:e2:22:4e:87:45: 6b:9b:0a:a2:bd:47:ff:cf:4a:db:8d:2c:de:39:f6: d2:ac:e7:01:4a:71:61:b4:59:43:92:47:96:03:b6: ce:d1:9c:a5:85:e8:02:ec:9f:75:57:20:3d:d1:29: 5f:99:b4:4a:b8:50:a3:45:b5:a3:59:55:37:cb:b3: f7:99:51:60:e5:d8:45:9a:84:a0:83:32:47:24:83: 0a:c7:dd:20:f6:1c:7b:68:e3:f3:2d:1f:e5:3f:2c: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:42:AF:5D:3F:F9:6F:51:1C:9D:C1:7B:62:39:8D:A6:49:5E:14:3F X509v3 Authority Key Identifier: keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:35:e3:29:55:c8:7f:b4:76:db:f5:70:ae:fd:4f:54:da:1c: cc:84:48:c6:6c:bc:92:ae:b9:85:f3:6b:26:47:35:3a:24:fd: 72:41:38:6a:25:b8:d6:37:dd:a7:27:01:5b:e0:65:c3:97:01: 45:ee:8f:77:84:4f:e8:39:8f:16:ca:8e:04:27:45:00:8b:d6: 72:7b:bb:aa:67:a8:54:9c:40:20:37:8d:43:86:3e:f3:7d:be: cf:86:7c:4a:90:17:88:55:58:3f:52:5e:3d:39:dd:72:28:3d: 32:56:c1:1d:57:2b:cd:7e:d2:c3:f8:06:a2:89:43:68:4e:e4: 39:23:be:bf:84:71:76:52:5c:aa:c4:5d:e4:ae:0a:06:24:f5: d3:c8:ed:9d:8d:6b:22:53:aa:0b:72:1c:36:b1:16:5b:05:cd: 96:f6:81:04:c8:01:c9:8a:9c:01:0d:25:b4:c7:98:86:bd:9b: 7d:69:30:41:70:68:fd:64:8e:89:56:fc:14:43:22:8d:1a:d6: 55:44:57:ca:ab:a5:4e:86:c6:b9:ed:7b:1b:88:6f:d7:b0:fb: be:fb:ef:34:fb:89:ce:12:fe:9b:52:a2:c4:f3:36:7b:35:40: 1f:5a:66:de:9c:11:ae:2c:b6:d8:6d:00:33:d0:e9:3f:d7:9b: c1:3a:85:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs+z4PB9ruRP6/cPT/7ufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2EyMGE3ZjI4YTgyNGY2NzMxNWE1NjZlNTkyNDRhYWE4 YzdkNGEwHhcNMjYwMjA5MTQwMDEzWhcNMjYwMjEwMTQwMDEzWjAzMTEwLwYDVQQD EyhmOTQyYWY1ZDNmZjk2ZjUxMWM5ZGMxN2I2MjM5OGRhNjQ5NWUxNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JTOm0Cd2omkgEAFxFc87sh7lshj 4TTMmNt2W7v/HGj8JD5eqSFc8xQRR2d3hJAOjFvs+F0OuK1ZNyE7Akzvcy6GW2mc GLVOWiPBrxRwbg7Ya23s95QsZsalSwDddkdYFI7I/3Yhj792w/yl3kxJoCD88wol niG9WmeAEmxOm3gF8ybYKIL+/xE/ZrgkSzHhKOPYlmP02JG68g5Jnycs4iJOh0Vr mwqivUf/z0rbjSzeOfbSrOcBSnFhtFlDkkeWA7bO0ZylhegC7J91VyA90SlfmbRK uFCjRbWjWVU3y7P3mVFg5dhFmoSggzJHJIMKx90g9hx7aOPzLR/lPyyQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlCr10/+W9RHJ3Be2I5jaZJXhQ/MB8GA1UdIwQY MBaAFON6IKfyioJPZzFaVm5ZJEqqjH1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMt NTcwNjllMDgwM2I1LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hYzU5OGYtNWY1Mi00MzMwLWIwMTMtNTcwNjllMDgwM2I1 LzEvNDNvZ3BfS0tnazluTVZwV2Jsa2tTcXFNZlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTXjKVXI f7R22/Vwrv1PVNoczIRIxmy8kq65hfNrJkc1OiT9ckE4aiW41jfdpycBW+Blw5cB Re6Pd4RP6DmPFsqOBCdFAIvWcnu7qmeoVJxAIDeNQ4Y+832+z4Z8SpAXiFVYP1Je PTndcig9MlbBHVcrzX7Sw/gGoolDaE7kOSO+v4RxdlJcqsRd5K4KBiT108jtnY1r IlOqC3IcNrEWWwXNlvaBBMgByYqcAQ0ltMeYhr2bfWkwQXBo/WSOiVb8FEMijRrW VURXyqulTobGue17G4hv17D7vvvvNPuJzhL+m1KixPM2ezVAH1pm3pwRriy22G0A M9DpP9ebwTqFOA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:38 2026 by rpki-client