This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json) Hash identifier: H4grZvVgHYcd2KUaaofjOYt7heAR8Z5ZLzSZ2Dikijg= Subject key identifier: FF:29:E3:16:D2:1F:65:52:C3:88:B6:7D:B4:05:16:45:BA:E6:61:E2 Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d Certificate serial: 019B37FCA812BF4610C020D768758AC78E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft Manifest number: 1422 Signing time: Fri 19 Dec 2025 19:01:03 +0000 Manifest this update: Fri 19 Dec 2025 19:01:03 +0000 Manifest next update: Sat 20 Dec 2025 19:01:03 +0000 Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: xuOdpbRTwgqi6fUwRAhk3R07jjyD8zusTXXbZTB/qcQ=) 2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:a8:12:bf:46:10:c0:20:d7:68:75:8a:c7:8e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d Validity Not Before: Dec 19 19:01:03 2025 GMT Not After : Dec 20 19:01:03 2025 GMT Subject: CN=ff29e316d21f6552c388b67db4051645bae661e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:a2:4d:54:e1:07:d6:f6:ea:4a:99:cd:01: 6b:28:30:06:a4:c9:e8:07:63:46:7a:ad:bf:26:87: ff:51:69:77:14:ae:df:0e:60:af:b3:31:60:bf:77: 8f:7a:79:12:e5:5d:3a:6b:9f:37:7c:45:f3:04:2c: 4b:31:cf:8e:75:5a:da:bc:d0:bb:40:8a:6d:92:aa: 3c:b7:5d:91:a8:e9:3b:c7:eb:d8:38:3b:08:3c:b9: 43:be:23:27:9e:66:07:a5:d0:03:b5:26:a2:79:ec: d3:0e:d9:4e:90:df:99:7c:38:ef:17:86:12:e4:f9: ad:fc:1f:d6:2d:03:cd:5a:b1:86:3f:fd:e0:00:c3: 4a:c6:c6:25:40:d9:6c:98:78:09:cc:7b:b9:74:03: cb:5a:06:e9:12:b8:e8:28:f9:73:c1:4c:e7:a5:f4: be:40:3b:45:76:b0:55:6c:f7:ec:71:f5:d9:fd:11: 54:81:f5:9f:56:68:45:3e:19:ed:6d:49:d6:bb:8e: 98:66:42:14:87:48:b4:67:d0:69:47:41:55:d1:aa: 93:9f:57:9c:98:f6:2a:35:c8:99:d6:47:00:7f:90: ad:42:fc:72:a9:29:63:a3:05:00:ca:19:1e:01:00: 5a:32:a0:c7:fa:23:8e:a1:e7:9b:9f:8f:48:46:65: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:29:E3:16:D2:1F:65:52:C3:88:B6:7D:B4:05:16:45:BA:E6:61:E2 X509v3 Authority Key Identifier: keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3d:fa:ae:d8:ce:fd:a6:53:16:57:ce:a3:1b:8b:39:d9:be: 9d:8d:22:83:cb:cb:e4:1c:40:0e:16:4f:2b:4d:85:d8:1d:6d: 01:0e:b1:5b:9b:bb:3f:75:eb:cb:1f:c5:f8:a9:d4:92:5d:e8: f6:c2:c4:5b:ba:89:6c:4d:89:3c:10:27:8f:eb:52:59:56:77: b8:54:42:88:d3:4d:c6:0c:cb:79:74:58:6b:66:e8:dd:12:e8: d4:22:e6:cc:73:1d:37:05:0b:58:68:15:f9:50:9b:86:b2:82: d2:a8:18:cf:0c:e1:96:00:db:00:ff:9b:15:d0:15:72:8a:ba: 52:21:7b:b3:53:1a:07:3f:c0:fd:13:3a:8a:8b:87:67:da:6f: 77:4e:13:d9:09:b2:d7:a3:29:54:69:6d:fc:72:8a:fe:77:00: 95:e0:2d:bc:73:53:56:e5:e5:88:e0:ac:27:9e:53:e7:20:78: 37:3a:b7:70:9b:72:da:64:8a:06:7f:fe:dc:57:30:fc:46:a1: 0d:46:78:96:f5:5a:c8:90:41:0d:29:14:a6:57:60:7c:24:82: 32:a2:62:4c:c5:05:18:8f:3e:ac:9c:86:2a:9f:88:63:79:e4: d2:70:08:82:6c:c0:10:f4:2a:40:92:97:d5:27:94:94:f1:90: 60:68:40:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/KgSv0YQwCDXaHWKx46QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTNhZjUwMTQ0OTliMmZiNWNkMmMxZTY4YTI0ZmY4MjU2 ZDBkMGQwHhcNMjUxMjE5MTkwMTAzWhcNMjUxMjIwMTkwMTAzWjAzMTEwLwYDVQQD EyhmZjI5ZTMxNmQyMWY2NTUyYzM4OGI2N2RiNDA1MTY0NWJhZTY2MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF2iTVThB9b26kqZzQFrKDAGpMno B2NGeq2/Jof/UWl3FK7fDmCvszFgv3ePenkS5V06a583fEXzBCxLMc+OdVravNC7 QIptkqo8t12RqOk7x+vYODsIPLlDviMnnmYHpdADtSaieezTDtlOkN+ZfDjvF4YS 5Pmt/B/WLQPNWrGGP/3gAMNKxsYlQNlsmHgJzHu5dAPLWgbpErjoKPlzwUznpfS+ QDtFdrBVbPfscfXZ/RFUgfWfVmhFPhntbUnWu46YZkIUh0i0Z9BpR0FV0aqTn1ec mPYqNciZ1kcAf5CtQvxyqSljowUAyhkeAQBaMqDH+iOOoeebn49IRmWQrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8p4xbSH2VSw4i2fbQFFkW65mHiMB8GA1UdIwQY MBaAFDhTr1AUSZsvtc0sHmiiT/glbQ0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5Zjgt ZGNiNTZhY2I3NzdmLzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5ZjgtZGNiNTZhY2I3Nzdm LzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlz36rtjO /aZTFlfOoxuLOdm+nY0ig8vL5BxADhZPK02F2B1tAQ6xW5u7P3Xryx/F+KnUkl3o 9sLEW7qJbE2JPBAnj+tSWVZ3uFRCiNNNxgzLeXRYa2bo3RLo1CLmzHMdNwULWGgV +VCbhrKC0qgYzwzhlgDbAP+bFdAVcoq6UiF7s1MaBz/A/RM6iouHZ9pvd04T2Qmy 16MpVGlt/HKK/ncAleAtvHNTVuXliOCsJ55T5yB4Nzq3cJty2mSKBn/+3Fcw/Eah DUZ4lvVayJBBDSkUpldgfCSCMqJiTMUFGI8+rJyGKp+IY3nk0nAIgmzAEPQqQJKX 1SeUlPGQYGhAGA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:39 2025 by rpki-client