This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json) Hash identifier: pmA9Mal3KoGdMZLe64rz1kV0M8sy2wbnqSeOYcMV/EI= Subject key identifier: 77:63:BB:EF:DB:DC:2B:CE:4E:78:EB:20:4A:72:75:87:57:0E:F3:8A Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a Certificate serial: 019BF87699472242EDF241644BB2A5C0186D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft Manifest number: 16DE Signing time: Mon 26 Jan 2026 04:01:20 +0000 Manifest this update: Mon 26 Jan 2026 04:01:20 +0000 Manifest next update: Tue 27 Jan 2026 04:01:20 +0000 Files and hashes: 1: 1-XFYwPQnihAKGAhaHmX_YgLq5hk.roa (hash: ovbwKoLcXw/nyUFXJNVtanDEZc8QQ/BY+2ucYpAs6QU=) 2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: 6LxMJ/nv61TN8UAE2ft//wbAn6h70XxAGWV5tZFD3sg=) 3: g3oitvyEV7LvQtXRePU4IoICFKI.roa (hash: wn/JQSFqf1OF8h85r+kWbdnYTIEYaxosW7IMZNrl36A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:99:47:22:42:ed:f2:41:64:4b:b2:a5:c0:18:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Validity Not Before: Jan 26 04:01:20 2026 GMT Not After : Jan 27 04:01:20 2026 GMT Subject: CN=7763bbefdbdc2bce4e78eb204a727587570ef38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:3f:46:f9:1d:0d:e9:7d:fc:be:8f:27:9f: d8:b2:15:ed:fe:66:ef:25:2b:e2:b2:ba:ac:79:f0: e0:22:ef:9b:fe:e9:44:37:8d:c6:ef:11:8f:62:0a: 22:36:93:57:bf:bd:3a:00:91:4d:4e:15:b7:fe:9c: 08:c1:7d:58:ff:04:53:a6:af:f2:9f:cc:63:59:17: 6b:f9:ab:bc:e3:11:08:05:d1:79:45:8d:4e:d1:6a: ed:d1:e4:2f:4d:6c:b1:2c:06:99:f0:70:fb:c2:a6: ae:6d:4b:01:5b:23:f2:e2:ab:fc:57:5e:da:2d:cb: 85:0c:20:e9:27:a7:37:03:b6:1d:3d:35:17:de:cc: 9a:f7:11:ca:e1:f8:47:07:f6:94:09:c5:47:c5:ee: a8:57:41:97:40:2d:22:75:7e:73:0d:aa:d1:07:55: a7:ee:98:dc:51:7f:af:da:11:7f:27:2a:7a:77:e7: 80:53:6b:4f:e1:81:f6:b7:0e:ca:f7:dd:14:26:0d: 9f:70:3b:67:9e:5f:8c:19:7c:bd:a4:7d:ce:4e:61: 0f:15:7b:57:e7:77:4b:f8:23:c4:b5:10:84:ef:08: 00:92:de:d8:a1:e6:54:7a:fb:d7:b5:ed:a8:91:6c: b5:07:c0:c0:35:bd:60:73:65:27:bd:2e:2b:9b:78: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:BB:EF:DB:DC:2B:CE:4E:78:EB:20:4A:72:75:87:57:0E:F3:8A X509v3 Authority Key Identifier: keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e5:cf:b7:54:6f:e4:85:7f:1a:5f:bc:01:0b:d1:d9:0c:d7: 23:d2:97:03:5d:0c:96:12:a9:21:ac:3b:5d:11:21:b7:18:81: a1:9d:9c:d9:d6:95:d9:ac:61:f4:fb:45:cc:21:b2:3a:c3:f3: a0:1a:c6:a3:ba:33:5d:01:47:48:89:ff:ae:04:9f:38:c4:d3: cf:bd:d7:e6:2e:0d:fd:c4:8b:10:2b:ab:16:d3:a6:a8:62:b1: 7e:b8:ca:7d:52:22:e2:7f:d6:dc:12:9d:5e:1a:2a:a1:a2:91: 11:49:42:16:61:38:9a:9a:a9:fb:96:79:1d:0e:f5:79:01:ed: c5:04:a5:ea:ed:28:57:2c:aa:45:d2:34:e8:f2:be:ca:00:77: 84:d9:af:79:58:0a:0e:fd:c4:38:20:e6:54:c8:a0:b4:20:be: 73:8f:ba:78:af:77:cc:05:45:82:a2:c4:1b:71:32:15:9b:b1: 73:c8:23:e7:30:e6:71:5c:b1:2f:f0:ba:f9:a1:0d:08:74:ba: de:cf:3c:14:03:d2:56:55:61:fd:29:bf:c3:43:84:c7:81:50: 2b:70:ea:ad:62:50:27:2c:b1:e5:89:d2:84:49:6d:de:81:6e: ce:0a:66:6a:95:d0:2d:79:ac:71:4c:ed:0b:18:57:3f:04:f2: 41:a6:87:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dplHIkLt8kFkS7KlwBhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0 MTQwOGEwHhcNMjYwMTI2MDQwMTIwWhcNMjYwMTI3MDQwMTIwWjAzMTEwLwYDVQQD Eyg3NzYzYmJlZmRiZGMyYmNlNGU3OGViMjA0YTcyNzU4NzU3MGVmMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxc/RvkdDel9/L6PJ5/YshXt/mbv JSvisrqsefDgIu+b/ulEN43G7xGPYgoiNpNXv706AJFNThW3/pwIwX1Y/wRTpq/y n8xjWRdr+au84xEIBdF5RY1O0Wrt0eQvTWyxLAaZ8HD7wqaubUsBWyPy4qv8V17a LcuFDCDpJ6c3A7YdPTUX3sya9xHK4fhHB/aUCcVHxe6oV0GXQC0idX5zDarRB1Wn 7pjcUX+v2hF/Jyp6d+eAU2tP4YH2tw7K990UJg2fcDtnnl+MGXy9pH3OTmEPFXtX 53dL+CPEtRCE7wgAkt7YoeZUevvXte2okWy1B8DANb1gc2UnvS4rm3iMrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdju+/b3CvOTnjrIEpydYdXDvOKMB8GA1UdIwQY MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt OGRmOGFmMzAwMWJjLzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+XPt1Rv 5IV/Gl+8AQvR2QzXI9KXA10MlhKpIaw7XREhtxiBoZ2c2daV2axh9PtFzCGyOsPz oBrGo7ozXQFHSIn/rgSfOMTTz73X5i4N/cSLECurFtOmqGKxfrjKfVIi4n/W3BKd XhoqoaKREUlCFmE4mpqp+5Z5HQ71eQHtxQSl6u0oVyyqRdI06PK+ygB3hNmveVgK Dv3EOCDmVMigtCC+c4+6eK93zAVFgqLEG3EyFZuxc8gj5zDmcVyxL/C6+aENCHS6 3s88FAPSVlVh/Sm/w0OEx4FQK3DqrWJQJyyx5YnShElt3oFuzgpmapXQLXmscUzt CxhXPwTyQaaHQg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:43 2026 by rpki-client