This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json) Hash identifier: 9VnAD1dOO1l1CrzovQkPgwLyFOXgSPEhVpChq2RhAtY= Subject key identifier: 53:86:8A:17:7A:36:E7:6F:4E:28:DB:B6:A9:C4:55:34:9E:9F:70:63 Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Certificate serial: 019B300C41443F11C402C8DF588499AF22D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 06:01:07 +0000 Manifest this update: Thu 18 Dec 2025 06:01:07 +0000 Manifest next update: Fri 19 Dec 2025 06:01:07 +0000 Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=) 2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=) 3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: B1SFgYKJTLwOQVDG4k7OepFYGmmz+VVTa3/T0Ez1bws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:41:44:3f:11:c4:02:c8:df:58:84:99:af:22:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Validity Not Before: Dec 18 06:01:07 2025 GMT Not After : Dec 19 06:01:07 2025 GMT Subject: CN=53868a177a36e76f4e28dbb6a9c455349e9f7063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:86:2a:49:ca:89:ed:76:27:aa:16:5e:e0: ed:ab:3f:13:f4:d2:7d:2b:02:5b:c4:a0:f6:7b:45: 01:2e:bc:f2:a3:aa:11:cc:1b:42:e9:65:6d:d5:0e: fc:bb:57:14:26:0c:48:29:6f:86:b6:4f:69:5d:09: 5c:d6:a2:ee:f4:1f:52:02:ea:be:71:bc:31:d3:50: 76:e2:ee:36:64:e2:80:66:53:38:c2:ae:8b:d0:1b: ad:94:15:c1:73:65:84:54:9a:c6:82:47:75:ef:3c: e6:ab:39:4a:15:13:ce:b9:10:69:ed:50:47:4b:a5: fa:79:d3:ad:08:c0:a9:52:32:3e:ec:e4:dc:d1:ee: c8:0e:a4:07:c1:9d:44:86:f7:d4:ed:81:38:51:23: 85:99:2a:39:5b:53:93:b1:c7:9f:be:75:4a:dd:06: 1a:75:39:30:ad:b8:e4:e0:51:e5:36:17:30:a2:fe: 26:db:55:76:09:ff:18:8f:0e:fd:a7:18:6a:e1:e1: 87:ab:36:33:9c:3d:b3:b1:ca:66:f2:08:b3:1d:e6: c3:60:db:44:04:84:32:00:1e:ab:77:3d:21:a3:32: b2:1d:1f:63:8e:c3:cd:6b:af:c5:cc:d2:81:f2:48: fa:87:6e:49:af:45:65:69:cc:bc:53:ea:a1:85:d6: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:86:8A:17:7A:36:E7:6F:4E:28:DB:B6:A9:C4:55:34:9E:9F:70:63 X509v3 Authority Key Identifier: keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a7:72:1e:b1:74:43:61:87:51:1a:13:85:d3:c7:3a:60:57: 31:5e:46:bc:1c:01:cc:30:4a:71:e1:5c:fb:7d:2d:cf:d8:73: 4a:6c:a1:10:f5:2f:05:e8:4a:57:1d:d1:26:45:85:66:dd:04: e8:9d:6e:db:de:a8:7c:77:59:69:ba:d8:c7:0b:30:6d:23:8e: 96:86:b8:33:fb:26:7e:2c:44:42:cf:6f:db:b1:09:86:bb:e6: ff:d8:2c:6c:90:80:83:06:6d:ee:b6:18:ef:f8:0a:a3:ee:18: c2:d0:3b:50:ca:33:30:2d:a5:0c:06:f8:fe:4c:6d:87:9f:13: 1a:05:a0:86:88:bf:4b:50:34:11:16:4a:1f:f7:48:cb:8b:36: 3b:38:9b:5f:4e:db:91:5b:c1:32:37:6f:0f:ab:e6:78:da:a9: 94:0a:17:d0:3f:35:1a:7e:ed:d0:7e:df:6b:5e:23:b3:5f:5a: 76:eb:9b:79:a0:72:2b:22:f9:9d:ff:9d:ea:69:f4:db:d5:aa: b4:7b:07:64:ce:a6:1a:a0:3b:d3:cf:68:6d:bc:bc:00:66:49: c0:9b:9a:ed:d3:d7:e6:44:6f:18:8d:d6:c1:f0:17:eb:cc:f2: d2:40:06:71:da:03:ad:14:cc:6a:7a:da:b1:a4:05:3e:5c:7b: 3d:a8:b4:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDEFEPxHEAsjfWISZryLSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy NWJmYzIwHhcNMjUxMjE4MDYwMTA3WhcNMjUxMjE5MDYwMTA3WjAzMTEwLwYDVQQD Eyg1Mzg2OGExNzdhMzZlNzZmNGUyOGRiYjZhOWM0NTUzNDllOWY3MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRqGKknKie12J6oWXuDtqz8T9NJ9 KwJbxKD2e0UBLrzyo6oRzBtC6WVt1Q78u1cUJgxIKW+Gtk9pXQlc1qLu9B9SAuq+ cbwx01B24u42ZOKAZlM4wq6L0ButlBXBc2WEVJrGgkd17zzmqzlKFRPOuRBp7VBH S6X6edOtCMCpUjI+7OTc0e7IDqQHwZ1EhvfU7YE4USOFmSo5W1OTscefvnVK3QYa dTkwrbjk4FHlNhcwov4m21V2Cf8Yjw79pxhq4eGHqzYznD2zscpm8gizHebDYNtE BIQyAB6rdz0hozKyHR9jjsPNa6/FzNKB8kj6h25Jr0Vlacy8U+qhhdbcfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOGihd6NudvTijbtqnEVTSen3BjMB8GA1UdIwQY MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2 LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6dyHrF0 Q2GHURoThdPHOmBXMV5GvBwBzDBKceFc+30tz9hzSmyhEPUvBehKVx3RJkWFZt0E 6J1u296ofHdZabrYxwswbSOOloa4M/smfixEQs9v27EJhrvm/9gsbJCAgwZt7rYY 7/gKo+4YwtA7UMozMC2lDAb4/kxth58TGgWghoi/S1A0ERZKH/dIy4s2OzibX07b kVvBMjdvD6vmeNqplAoX0D81Gn7t0H7fa14js19aduubeaByKyL5nf+d6mn029Wq tHsHZM6mGqA7089obby8AGZJwJua7dPX5kRvGI3WwfAX68zy0kAGcdoDrRTManra saQFPlx7Pai0OQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:17 2025 by rpki-client