This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft File: OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft (raw, json) Hash identifier: 8OgEVHrF5iDVBSHYrkXksr9Tp1bAkNUrpRhzo25ugxk= Subject key identifier: 86:6C:34:60:E2:74:08:30:2D:66:00:D9:55:FD:0F:9B:C7:A3:30:6E Authority key identifier: 38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0 Certificate issuer: /CN=385cf4939beeeaeaf4409c2840eb344cab0850e0 Certificate serial: 019B4ADF53F75C318F974A7C79CCC32A8807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft Manifest number: 0CD6 Signing time: Tue 23 Dec 2025 11:01:48 +0000 Manifest this update: Tue 23 Dec 2025 11:01:48 +0000 Manifest next update: Wed 24 Dec 2025 11:01:48 +0000 Files and hashes: 1: KI_OzKHWNWDApgfZA8fhKRHWYNw.roa (hash: KgInzOYraW/0zKTqbj1OirpA4x6saReBh+LdfK4ZXdI=) 2: OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl (hash: 84JwRd+CWnEfHxIrT61P8bDP+bAqlgzTyrpvlDQUSUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:53:f7:5c:31:8f:97:4a:7c:79:cc:c3:2a:88:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385cf4939beeeaeaf4409c2840eb344cab0850e0 Validity Not Before: Dec 23 11:01:48 2025 GMT Not After : Dec 24 11:01:48 2025 GMT Subject: CN=866c3460e27408302d6600d955fd0f9bc7a3306e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:bb:3d:f8:12:cd:91:3c:0a:b2:0c:bd:05: 21:ac:bd:f4:14:f8:14:21:37:ca:e8:e6:9f:dc:45: f7:de:7d:fd:2f:42:b2:7c:32:1a:0b:17:58:f1:f7: 73:e7:87:48:f1:89:8b:3c:16:be:6d:f9:36:f6:8c: cf:8c:7f:92:d3:db:5c:8d:6c:d5:fb:a2:0d:39:42: d2:f5:5a:39:3a:c5:79:bc:c4:3a:3d:84:05:08:54: d3:ca:40:c9:fe:fb:35:d2:e8:ac:1b:29:38:c7:09: e6:d2:c3:bb:4a:b6:dc:43:c0:9c:09:9e:56:aa:16: fa:87:8a:c2:d9:9d:b3:fe:32:ef:f6:c6:f5:97:b6: bf:f5:21:f6:e2:70:55:48:a7:53:fb:e3:5c:26:d7: 1a:72:3e:be:6d:10:bd:cf:93:8d:71:4d:31:fd:34: 4a:4e:4d:c1:05:5d:70:d5:49:f7:8a:0c:66:5f:f7: cd:1b:18:89:26:46:2a:51:27:09:23:c8:fd:a6:78: c8:6c:1b:90:01:e8:0e:b2:7f:0e:04:59:15:d6:43: 65:96:79:6b:c8:b2:05:5d:9e:1d:48:56:af:d5:42: 0a:cb:59:cb:66:b0:b0:8a:b5:48:e4:4d:8f:81:b2: 48:99:8b:f8:2c:76:1f:c8:1d:dc:94:ba:8e:76:d6: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6C:34:60:E2:74:08:30:2D:66:00:D9:55:FD:0F:9B:C7:A3:30:6E X509v3 Authority Key Identifier: keyid:38:5C:F4:93:9B:EE:EA:EA:F4:40:9C:28:40:EB:34:4C:AB:08:50:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFz0k5vu6ur0QJwoQOs0TKsIUOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/35b6bd-14b6-43dc-8384-7b7615ff0e96/1/OFz0k5vu6ur0QJwoQOs0TKsIUOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8d:de:93:f4:3d:98:0b:23:c8:2b:eb:4d:a3:e6:f0:65:28: 8d:9c:ae:81:bb:9f:ba:de:1d:27:74:9e:cf:84:e9:35:7b:b1: b6:c1:28:4d:c1:3d:33:43:63:f7:ab:71:da:79:ab:fb:59:33: 79:c7:0b:8a:2e:85:17:30:c3:02:ab:d5:ac:39:c6:c9:77:dc: c2:43:5d:49:98:dc:34:de:61:53:a4:98:58:83:7c:e6:5e:35: c1:f1:55:b2:85:09:eb:71:2c:c0:a6:cb:d9:b1:fc:1e:cd:a0: 91:e5:ab:34:49:01:33:32:74:99:12:c3:09:03:8f:97:c2:e2: e4:b1:e4:d9:f1:69:d4:cf:3b:cc:41:40:33:ea:87:31:f3:45: 16:a4:e2:e3:ca:fc:f4:96:dd:22:d7:79:7e:43:50:c9:96:6a: f5:60:f2:bc:0e:ab:9c:75:8a:5b:30:79:a0:82:54:51:76:f0: 2c:58:da:26:36:e8:39:7c:f0:89:9b:c2:76:d1:77:39:1c:1b: 1e:b2:9e:65:bc:df:ca:4c:15:1b:31:49:d3:06:c8:29:1c:66: e5:7a:c6:77:8b:d9:e7:cf:7f:98:c1:d8:53:79:0c:0d:6e:ce: d6:ac:14:7d:2a:36:1a:37:eb:f9:2d:38:30:04:88:3e:38:4c: 60:45:60:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK31P3XDGPl0p8eczDKogHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NWNmNDkzOWJlZWVhZWFmNDQwOWMyODQwZWIzNDRjYWIw ODUwZTAwHhcNMjUxMjIzMTEwMTQ4WhcNMjUxMjI0MTEwMTQ4WjAzMTEwLwYDVQQD Eyg4NjZjMzQ2MGUyNzQwODMwMmQ2NjAwZDk1NWZkMGY5YmM3YTMzMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw67PfgSzZE8CrIMvQUhrL30FPgU ITfK6Oaf3EX33n39L0KyfDIaCxdY8fdz54dI8YmLPBa+bfk29ozPjH+S09tcjWzV +6INOULS9Vo5OsV5vMQ6PYQFCFTTykDJ/vs10uisGyk4xwnm0sO7SrbcQ8CcCZ5W qhb6h4rC2Z2z/jLv9sb1l7a/9SH24nBVSKdT++NcJtcacj6+bRC9z5ONcU0x/TRK Tk3BBV1w1Un3igxmX/fNGxiJJkYqUScJI8j9pnjIbBuQAegOsn8OBFkV1kNllnlr yLIFXZ4dSFav1UIKy1nLZrCwirVI5E2PgbJImYv4LHYfyB3clLqOdtbFvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZsNGDidAgwLWYA2VX9D5vHozBuMB8GA1UdIwQY MBaAFDhc9JOb7urq9ECcKEDrNEyrCFDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQt N2I3NjE1ZmYwZTk2LzEvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8zNWI2YmQtMTRiNi00M2RjLTgzODQtN2I3NjE1ZmYwZTk2 LzEvT0Z6MGs1dnU2dXIwUUp3b1FPczBUS3NJVU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC43ek/Q9 mAsjyCvrTaPm8GUojZyugbufut4dJ3Sez4TpNXuxtsEoTcE9M0Nj96tx2nmr+1kz eccLii6FFzDDAqvVrDnGyXfcwkNdSZjcNN5hU6SYWIN85l41wfFVsoUJ63EswKbL 2bH8Hs2gkeWrNEkBMzJ0mRLDCQOPl8Li5LHk2fFp1M87zEFAM+qHMfNFFqTi48r8 9JbdItd5fkNQyZZq9WDyvA6rnHWKWzB5oIJUUXbwLFjaJjboOXzwiZvCdtF3ORwb HrKeZbzfykwVGzFJ0wbIKRxm5XrGd4vZ589/mMHYU3kMDW7O1qwUfSo2Gjfr+S04 MASIPjhMYEVgyg== -----END CERTIFICATE-----Generated at Tue Dec 23 17:15:04 2025 by rpki-client