This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json) Hash identifier: SBVyqtfbTZU0eYKhTvxe6p+Lqx5wQgocSMI0VFWARMA= Subject key identifier: 37:82:BE:D7:26:D3:B0:C3:38:90:06:1D:07:88:67:E6:B2:C7:B8:6A Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0 Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0 Certificate serial: 019B33B1DA46FE57AE6B9D257094BB6EAB3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft Manifest number: 0CCA Signing time: Thu 18 Dec 2025 23:00:52 +0000 Manifest this update: Thu 18 Dec 2025 23:00:52 +0000 Manifest next update: Fri 19 Dec 2025 23:00:52 +0000 Files and hashes: 1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=) 2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: krqksWkSvOheVSMllP3a+b/8psn4BIqfDx2eGioN/JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:da:46:fe:57:ae:6b:9d:25:70:94:bb:6e:ab:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0 Validity Not Before: Dec 18 23:00:52 2025 GMT Not After : Dec 19 23:00:52 2025 GMT Subject: CN=3782bed726d3b0c33890061d078867e6b2c7b86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:95:f6:d3:d2:89:b3:0f:74:48:8a:e4:66:98: 62:3f:1e:5e:ec:c5:aa:8c:53:25:06:68:8a:21:5b: 8a:45:62:48:0f:75:50:c0:e6:5f:68:3d:35:10:df: 20:7d:46:34:8c:37:a9:bf:01:80:e7:1c:99:39:24: 87:71:f5:b7:26:92:2e:78:9d:be:e4:db:c5:2f:5d: 6b:ff:2c:5b:31:28:d6:dc:e0:fc:cc:43:64:01:48: 8e:20:9a:1f:0f:e3:8c:45:fc:f2:59:db:9f:ef:1d: 55:06:4c:a6:c4:a5:2a:8d:e5:01:b7:0c:79:07:25: 80:fe:b7:58:ed:7c:ed:f6:20:c1:37:5d:e3:1e:31: 0d:77:62:2b:46:aa:7d:f8:99:9e:20:5b:ce:50:06: 20:86:dc:75:a0:c5:14:34:1b:ad:3d:13:6e:77:95: 7c:52:49:f3:18:0e:bf:63:29:aa:0f:a4:5a:f0:33: 01:34:79:b3:be:6e:fb:a0:6f:7f:be:76:dd:11:30: b4:55:6e:cc:6c:88:24:d2:e6:3c:61:35:4e:59:f2: 9a:3a:d8:88:55:6c:21:4c:3b:06:ad:db:74:3f:5f: 52:ee:e3:90:4c:0c:b3:88:76:0d:23:67:b7:19:0b: 59:a1:12:f7:19:9f:66:0d:74:10:f7:98:e4:45:08: d3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:BE:D7:26:D3:B0:C3:38:90:06:1D:07:88:67:E6:B2:C7:B8:6A X509v3 Authority Key Identifier: keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:18:cc:0d:d7:75:86:eb:c8:ea:e6:74:e1:0d:34:29:4c:0c: 2c:4b:8a:a7:bf:b3:b0:9e:c1:cc:a6:aa:d2:92:ce:e7:b4:db: d7:d4:ac:46:54:ae:0c:47:fe:b9:07:4c:8c:c2:b0:d9:90:57: 5c:e1:ea:da:8d:ac:f9:be:76:9f:da:95:14:c7:61:71:d7:d3: e3:16:8a:50:54:42:41:69:6e:a6:b4:c6:2b:4f:ef:5c:47:07: 50:00:c7:cb:fb:7b:5e:b9:65:49:67:e9:31:c1:92:e9:b3:46: 95:96:ac:35:54:53:e3:5a:45:f3:96:07:e2:a4:71:8d:68:4b: 55:88:ae:41:88:7d:71:0a:6d:c9:1a:d2:0b:f0:5c:d9:03:01: 1f:2c:28:17:6b:3c:16:8b:5e:01:26:35:28:d7:18:63:62:a5: 45:62:29:69:5c:71:71:0b:60:f7:9f:8b:e8:75:20:77:c5:08: db:96:9e:69:1a:d3:83:9c:75:f6:6e:42:7c:d4:23:8e:cc:a6: 91:e4:e3:e1:77:ce:cf:ef:1b:5f:11:2a:93:c9:bf:4b:d0:ce: b7:ad:66:46:9c:1d:5a:c2:9e:b4:23:a2:8b:92:55:66:2f:a0: 2c:0b:7d:84:1e:13:34:c7:d3:32:02:3f:e7:4c:2d:a4:7b:0a: 12:89:81:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsdpG/leua50lcJS7bqs+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NWNmNDkzOWJlZWVhZWFmNDQwOWMyODQwZWIzNDRjYWIw ODUwZTAwHhcNMjUxMjE4MjMwMDUyWhcNMjUxMjE5MjMwMDUyWjAzMTEwLwYDVQQD EygzNzgyYmVkNzI2ZDNiMGMzMzg5MDA2MWQwNzg4NjdlNmIyYzdiODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65X209KJsw90SIrkZphiPx5e7MWq jFMlBmiKIVuKRWJID3VQwOZfaD01EN8gfUY0jDepvwGA5xyZOSSHcfW3JpIueJ2+ 5NvFL11r/yxbMSjW3OD8zENkAUiOIJofD+OMRfzyWduf7x1VBkymxKUqjeUBtwx5 ByWA/rdY7Xzt9iDBN13jHjENd2IrRqp9+JmeIFvOUAYghtx1oMUUNButPRNud5V8 UknzGA6/YymqD6Ra8DMBNHmzvm77oG9/vnbdETC0VW7MbIgk0uY8YTVOWfKaOtiI VWwhTDsGrdt0P19S7uOQTAyziHYNI2e3GQtZoRL3GZ9mDXQQ95jkRQjT1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeCvtcm07DDOJAGHQeIZ+ayx7hqMB8GA1UdIwQY MBaAFDhc9JOb7urq9ECcKEDrNEyrCFDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQt N2I3NjE1ZmYwZTk2LzEvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQtN2I3NjE1ZmYwZTk2 LzEvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhjMDdd1 huvI6uZ04Q00KUwMLEuKp7+zsJ7BzKaq0pLO57Tb19SsRlSuDEf+uQdMjMKw2ZBX XOHq2o2s+b52n9qVFMdhcdfT4xaKUFRCQWluprTGK0/vXEcHUADHy/t7XrllSWfp McGS6bNGlZasNVRT41pF85YH4qRxjWhLVYiuQYh9cQptyRrSC/Bc2QMBHywoF2s8 FoteASY1KNcYY2KlRWIpaVxxcQtg95+L6HUgd8UI25aeaRrTg5x19m5CfNQjjsym keTj4XfOz+8bXxEqk8m/S9DOt61mRpwdWsKetCOii5JVZi+gLAt9hB4TNMfTMgI/ 50wtpHsKEomBmA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:29:44 2025 by rpki-client