This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json) Hash identifier: 5UQ6AXKxxIjBRTYf8KkhBx8W0/FeC3u2l+M8GP363W0= Subject key identifier: 03:F1:23:9A:8C:9A:CD:0E:97:9C:FA:CF:97:27:15:A0:F1:3F:AE:06 Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Certificate serial: 019B6DD7EE3B46F59DBE25488EAC847EB76A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft Manifest number: 10B2 Signing time: Tue 30 Dec 2025 06:00:26 +0000 Manifest this update: Tue 30 Dec 2025 06:00:26 +0000 Manifest next update: Wed 31 Dec 2025 06:00:26 +0000 Files and hashes: 1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=) 2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=) 3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: yXjYANYtCFkgJNyU/ttbRhsToAxVgWocATy3337tkNE=) 4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d7:ee:3b:46:f5:9d:be:25:48:8e:ac:84:7e:b7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Validity Not Before: Dec 30 06:00:26 2025 GMT Not After : Dec 31 06:00:26 2025 GMT Subject: CN=03f1239a8c9acd0e979cfacf972715a0f13fae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:5b:36:ff:00:49:dd:3f:d1:8e:68:97:9e: a3:f3:29:77:ce:d2:2c:28:37:fb:2b:ba:45:fb:92: f3:45:04:ff:51:11:37:78:d2:39:96:87:79:e4:82: b1:ca:9d:e6:f2:14:4c:e7:fc:d4:1e:f2:8f:32:45: 29:74:ee:bd:85:9c:d5:65:65:cd:e1:20:31:22:18: 59:e1:77:ee:7f:2e:6e:2b:03:9f:1f:7f:dc:4d:06: 51:d9:fa:58:43:eb:1e:d6:c7:d6:01:18:a8:f1:97: fd:06:4c:d0:18:d4:db:7c:ad:7d:b9:2f:7a:39:ce: 03:2f:af:c7:01:93:45:41:ef:db:48:47:79:6c:06: f8:76:15:96:78:8d:c5:f6:3f:39:36:dd:16:b1:c2: c7:f4:7f:64:1b:c9:69:18:ff:46:8c:7d:fb:6d:a2: bd:48:65:84:4c:56:2d:3f:70:2e:1e:79:e4:af:92: 4a:fe:5e:02:82:13:d4:38:d3:df:ea:45:3e:30:6e: bd:17:cd:2f:29:23:57:d6:df:85:e2:99:10:e1:48: ab:0a:09:73:df:2f:41:85:dc:f5:14:58:87:ee:f0: 2f:0b:d0:97:73:ee:5f:97:17:c4:63:86:cb:97:6b: 48:47:59:9d:e3:01:f8:a1:5a:70:02:01:c8:49:86: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F1:23:9A:8C:9A:CD:0E:97:9C:FA:CF:97:27:15:A0:F1:3F:AE:06 X509v3 Authority Key Identifier: keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0d:d5:f9:fa:51:0a:fd:5a:5f:a3:dc:10:e0:3e:4f:1b:00: b7:0e:0b:3c:19:36:b0:9d:7c:1e:c9:c0:a9:fd:71:68:80:c5: c1:f8:4d:ed:f3:a0:f1:b2:78:88:cb:72:8c:2a:3e:ed:9f:84: 29:07:d4:8e:7d:cd:eb:3a:a2:cc:4c:11:03:3d:07:f3:33:bc: 91:f6:ef:06:ed:93:a6:49:af:4a:73:95:7b:49:58:cc:9c:db: 02:92:e8:e7:41:8e:c6:61:a3:5e:18:3b:6e:54:d4:56:88:56: 2d:53:86:11:ba:6a:a8:0b:1a:b8:b3:2a:a8:39:11:08:91:b7: 70:b5:bd:db:22:79:7c:a0:5c:c0:31:bb:a8:c4:e2:e2:aa:ed: 5d:02:68:69:28:d1:f9:a5:c9:65:c8:ae:fe:e1:38:79:e3:4d: 44:bc:58:55:fa:a8:7e:ad:fc:d8:2f:8f:19:02:37:2e:2e:b0: ea:62:1e:05:d6:87:50:ce:e9:3d:7c:65:1c:bf:aa:86:49:54: 72:b8:1d:95:92:22:2e:1e:0d:fa:1d:be:24:a0:bd:6b:25:aa: cf:7d:dd:56:2e:fd:c8:63:70:23:98:76:83:f6:bc:f5:5b:b1: 3c:f7:78:3a:07:4b:66:74:00:22:59:4a:c2:ac:12:8a:81:c5: 06:2e:ca:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt1+47RvWdviVIjqyEfrdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTE0NWZlM2I3OWIyYmY2OGFhZGJlMDA3ZGVmNmQ3MmFl ZjJhYzMwHhcNMjUxMjMwMDYwMDI2WhcNMjUxMjMxMDYwMDI2WjAzMTEwLwYDVQQD EygwM2YxMjM5YThjOWFjZDBlOTc5Y2ZhY2Y5NzI3MTVhMGYxM2ZhZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmChbNv8ASd0/0Y5ol56j8yl3ztIs KDf7K7pF+5LzRQT/URE3eNI5lod55IKxyp3m8hRM5/zUHvKPMkUpdO69hZzVZWXN 4SAxIhhZ4Xfufy5uKwOfH3/cTQZR2fpYQ+se1sfWARio8Zf9BkzQGNTbfK19uS96 Oc4DL6/HAZNFQe/bSEd5bAb4dhWWeI3F9j85Nt0WscLH9H9kG8lpGP9GjH37baK9 SGWETFYtP3AuHnnkr5JK/l4CghPUONPf6kU+MG69F80vKSNX1t+F4pkQ4UirCglz 3y9Bhdz1FFiH7vAvC9CXc+5flxfEY4bLl2tIR1md4wH4oVpwAgHISYY51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPxI5qMms0Ol5z6z5cnFaDxP64GMB8GA1UdIwQY MBaAFDrhRf47ebK/aKrb4Afe9tcq7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYt YjdiNTc0ZWVkYzMzLzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYtYjdiNTc0ZWVkYzMz LzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ3V+fpR Cv1aX6PcEOA+TxsAtw4LPBk2sJ18HsnAqf1xaIDFwfhN7fOg8bJ4iMtyjCo+7Z+E KQfUjn3N6zqizEwRAz0H8zO8kfbvBu2TpkmvSnOVe0lYzJzbApLo50GOxmGjXhg7 blTUVohWLVOGEbpqqAsauLMqqDkRCJG3cLW92yJ5fKBcwDG7qMTi4qrtXQJoaSjR +aXJZciu/uE4eeNNRLxYVfqofq382C+PGQI3Li6w6mIeBdaHUM7pPXxlHL+qhklU crgdlZIiLh4N+h2+JKC9ayWqz33dVi79yGNwI5h2g/a89VuxPPd4OgdLZnQAIllK wqwSioHFBi7K5Q== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:10 2025 by rpki-client