This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft File: OuFF_jt5sr9oqtvgB9721yrvKsM.mft (raw, json) Hash identifier: NRZr/JitOS3tffxoiJHiRhV4kg6Tj39BtN9xFi9J66I= Subject key identifier: 2C:CB:EA:39:0D:72:92:2D:C3:6A:38:DB:48:0B:35:E7:90:9B:0D:53 Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Certificate serial: 019B3F7F9A6A7BA21AB9DF4B086A058ACA3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft Manifest number: 109A Signing time: Sun 21 Dec 2025 06:01:25 +0000 Manifest this update: Sun 21 Dec 2025 06:01:25 +0000 Manifest next update: Mon 22 Dec 2025 06:01:25 +0000 Files and hashes: 1: 6z3u5jhbEbKa0ThEh3AFryqpqyQ.roa (hash: uoWydXs46C7pAA7LsT8e6YRW42KQemKKMgQf6yVmG/s=) 2: 7OwJ3NZ5gt6M2YbNy203LEEgxvo.roa (hash: ceOMKYcnnBwRulSCt+ABQYJyvPInT12PHncdmZb/zVg=) 3: OuFF_jt5sr9oqtvgB9721yrvKsM.crl (hash: 9ZIjKUTRwzS/h60EAe2z1UuiaYOZJh5GJR/Q1a/frfg=) 4: jp5nTO_8vGG_gXw2zLO8q19JQc4.roa (hash: VCuZ3n81SKY0VnV/9981IOoXLe5Qs/nr8ZYqBQ4Ru6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:9a:6a:7b:a2:1a:b9:df:4b:08:6a:05:8a:ca:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Validity Not Before: Dec 21 06:01:25 2025 GMT Not After : Dec 22 06:01:25 2025 GMT Subject: CN=2ccbea390d72922dc36a38db480b35e7909b0d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bd:07:5f:98:3a:b2:95:66:bf:01:dd:9a:66: 81:da:86:9b:d9:9c:b5:ba:c3:c1:9e:11:e5:7a:22: cd:0b:5f:b5:e3:37:27:50:3c:33:09:31:ca:ee:45: f7:46:a2:e9:37:28:f8:60:dd:fa:de:fd:1b:ff:d1: fb:65:dc:7a:89:39:58:d4:b9:fa:f3:bc:b7:22:d9: 25:a8:8b:7c:22:c3:06:5d:f8:14:32:62:f5:12:77: e0:99:6f:96:58:3d:a7:67:cb:8c:05:5d:d0:b7:c0: c3:c1:1f:61:30:99:8c:2d:7e:6a:2c:04:e0:5d:f5: a7:bb:67:ad:3e:a4:c4:95:69:be:cf:18:ef:51:58: 89:89:20:9e:bd:ec:e2:05:2b:e6:48:56:6c:ce:44: df:5b:82:a0:25:dd:c0:25:9a:fe:78:98:88:b9:09: 62:8b:ee:07:17:1d:41:13:72:c5:1f:34:49:5e:d1: 02:8e:98:95:28:f6:77:a8:1d:a6:44:19:9b:7b:fb: 40:df:0c:0e:45:c4:62:7d:ce:bf:40:3f:91:dc:8c: 08:19:5f:c7:37:bb:99:e4:bf:d9:83:0d:2a:9e:46: 09:f1:1b:96:ad:2e:67:7c:19:49:34:4b:4e:4f:7b: e2:19:75:c4:dc:54:01:bc:b4:12:5a:2a:35:cc:95: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:EA:39:0D:72:92:2D:C3:6A:38:DB:48:0B:35:E7:90:9B:0D:53 X509v3 Authority Key Identifier: keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3d:bc:94:ec:30:e5:ba:9d:a8:a5:e6:ca:23:4a:b1:fb:6d: 1d:37:ad:cd:c1:29:22:ef:f1:51:1a:c1:e9:79:0c:d1:93:06: 25:cb:ee:bf:32:7e:b3:12:80:95:64:57:b6:57:9f:34:ee:f9: 45:a1:1b:cf:06:c1:7d:37:c7:93:2c:25:0c:6a:71:91:f1:6f: 96:4a:aa:e9:86:f6:fb:1f:19:82:96:ca:20:c8:db:8a:14:fb: 78:72:47:63:6f:6d:fb:39:69:e9:bd:8a:bf:0d:f7:13:5f:56: 12:47:40:c4:5b:cf:dd:d3:c7:49:a9:a1:5f:e5:74:3c:b4:56: 8d:c8:12:b7:82:c4:c1:c2:dd:12:8f:84:89:e1:43:5c:aa:93: e7:8b:80:e0:de:34:0b:c0:48:7c:a5:1b:17:75:b3:92:bd:84: 1f:14:21:45:37:d9:13:2a:e6:a0:e6:8d:b9:f3:2f:4a:08:79: 47:c5:f5:c1:cd:31:93:fa:b4:9e:61:ac:a2:d4:a3:40:b5:14: 0c:ae:b5:fb:b6:16:4c:b9:26:35:fe:a2:f0:15:c3:77:b5:20: 42:62:07:ff:52:b2:e8:ec:e6:fa:a4:c3:1f:a2:b1:34:cd:7f: 27:4e:51:a8:80:62:cd:ca:76:88:c2:4e:34:05:dd:d0:e5:5c: 6e:75:06:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f5pqe6Iaud9LCGoFiso6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTE0NWZlM2I3OWIyYmY2OGFhZGJlMDA3ZGVmNmQ3MmFl ZjJhYzMwHhcNMjUxMjIxMDYwMTI1WhcNMjUxMjIyMDYwMTI1WjAzMTEwLwYDVQQD EygyY2NiZWEzOTBkNzI5MjJkYzM2YTM4ZGI0ODBiMzVlNzkwOWIwZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L0HX5g6spVmvwHdmmaB2oab2Zy1 usPBnhHleiLNC1+14zcnUDwzCTHK7kX3RqLpNyj4YN363v0b/9H7Zdx6iTlY1Ln6 87y3ItklqIt8IsMGXfgUMmL1EnfgmW+WWD2nZ8uMBV3Qt8DDwR9hMJmMLX5qLATg XfWnu2etPqTElWm+zxjvUViJiSCeveziBSvmSFZszkTfW4KgJd3AJZr+eJiIuQli i+4HFx1BE3LFHzRJXtECjpiVKPZ3qB2mRBmbe/tA3wwORcRifc6/QD+R3IwIGV/H N7uZ5L/Zgw0qnkYJ8RuWrS5nfBlJNEtOT3viGXXE3FQBvLQSWio1zJWNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzL6jkNcpItw2o420gLNeeQmw1TMB8GA1UdIwQY MBaAFDrhRf47ebK/aKrb4Afe9tcq7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYt YjdiNTc0ZWVkYzMzLzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYtYjdiNTc0ZWVkYzMz LzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD28lOww 5bqdqKXmyiNKsfttHTetzcEpIu/xURrB6XkM0ZMGJcvuvzJ+sxKAlWRXtlefNO75 RaEbzwbBfTfHkywlDGpxkfFvlkqq6Yb2+x8ZgpbKIMjbihT7eHJHY29t+zlp6b2K vw33E19WEkdAxFvP3dPHSamhX+V0PLRWjcgSt4LEwcLdEo+EieFDXKqT54uA4N40 C8BIfKUbF3Wzkr2EHxQhRTfZEyrmoOaNufMvSgh5R8X1wc0xk/q0nmGsotSjQLUU DK61+7YWTLkmNf6i8BXDd7UgQmIH/1Ky6Ozm+qTDH6KxNM1/J05RqIBizcp2iMJO NAXd0OVcbnUGfA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:07 2025 by rpki-client