This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json) Hash identifier: 1psRHma5RodRakmb0AcAR3IKDIRz8V4eyY56opT1VaU= Subject key identifier: B8:19:E7:F1:C9:97:DA:FC:ED:8C:9B:13:6F:E5:F7:C2:8C:F7:34:21 Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Certificate serial: 019B39EB1F0570A51A66CD106CE423D2343F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 04:01:08 +0000 Manifest this update: Sat 20 Dec 2025 04:01:08 +0000 Manifest next update: Sun 21 Dec 2025 04:01:08 +0000 Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=) 2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: IiU3zlB2egvJ/yiKI0PxVlF3A6UK7ttpuVQBXbYo1JI=) 3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1f:05:70:a5:1a:66:cd:10:6c:e4:23:d2:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Validity Not Before: Dec 20 04:01:08 2025 GMT Not After : Dec 21 04:01:08 2025 GMT Subject: CN=b819e7f1c997dafced8c9b136fe5f7c28cf73421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:0d:08:a7:8d:f6:d3:19:5f:4a:b6:4a:86: f6:00:6f:40:66:9a:71:4a:e5:f0:9c:bd:40:4c:9b: 9c:5c:43:aa:fd:9b:8a:64:d7:1d:b8:00:7a:2d:d4: 69:e2:82:95:54:10:f7:32:4b:ba:cf:c3:0d:f2:11: 11:c4:e9:1f:29:cf:85:ba:55:1e:4d:55:a8:1c:39: ff:02:14:73:07:6d:1f:be:27:83:25:e7:ab:d1:05: 25:02:99:fe:2a:51:3c:6d:12:79:6e:3f:01:2f:99: 36:7b:bc:ad:5f:93:38:77:0a:a5:84:65:c8:03:31: 6b:82:d5:94:78:c1:bf:26:2d:21:42:2a:1e:ea:75: 86:d6:52:38:4f:b9:67:6b:1c:52:52:3c:df:59:b9: 10:44:6d:80:40:c3:f5:aa:8d:c4:60:50:fc:4e:24: 66:74:78:77:43:e8:6a:8d:54:e7:26:97:82:77:a3: 96:3d:c7:b8:a9:3b:6e:1a:90:a6:eb:bc:27:c4:8c: b0:0a:7f:63:05:3d:67:2a:a3:f0:7f:82:5c:ce:a6: ad:99:48:92:b9:ea:6b:90:3e:dc:27:62:f8:8c:e7: d3:2d:9f:c6:3f:98:a7:79:bd:af:c3:fa:96:61:b3: 7c:ba:37:93:4e:d3:48:1e:b4:c3:b2:55:9c:7a:46: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:E7:F1:C9:97:DA:FC:ED:8C:9B:13:6F:E5:F7:C2:8C:F7:34:21 X509v3 Authority Key Identifier: keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ba:b9:67:42:28:2b:f4:51:a5:6c:c9:45:b4:8b:ec:67:14: 01:ec:ce:28:f1:d9:de:4f:14:70:30:29:05:5b:c1:6f:76:d5: 0a:0d:e4:67:68:82:87:69:97:4c:c6:11:63:d6:71:8e:9b:a2: 4f:44:52:0b:1c:4b:3e:42:ed:f5:09:2a:61:13:84:05:6f:54: 52:00:f1:19:68:22:c1:d1:1e:0b:b5:15:86:99:38:19:a7:6c: 7d:1e:eb:bb:de:9c:dd:40:11:df:43:a0:9c:00:a1:95:d6:ad: 44:d7:5a:40:c3:cd:a8:1e:6a:29:83:b9:36:73:e9:f0:bf:cb: 9a:e1:bb:35:a7:95:96:f6:f4:cd:42:f0:d1:00:26:5f:46:70: 43:3b:0c:67:5e:28:75:dc:c5:b0:5d:08:3d:9c:80:78:ad:06: bc:8f:3a:63:95:85:ae:cc:2c:c7:ca:b8:78:7d:81:61:69:37: 9c:55:9d:01:c2:ca:44:41:d1:cc:04:c2:f8:0e:e2:97:62:4a: 32:43:1c:79:6d:d9:9a:f2:27:4b:7f:c3:01:9f:03:2e:38:4c: 77:9b:33:75:1f:a1:ba:be:fc:7c:8e:2d:d7:44:82:50:16:e7: 85:49:90:cf:63:47:2f:03:3d:b8:9c:f4:75:28:19:1b:03:f8: 40:b3:97:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56x8FcKUaZs0QbOQj0jQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0 N2M2MDMwHhcNMjUxMjIwMDQwMTA4WhcNMjUxMjIxMDQwMTA4WjAzMTEwLwYDVQQD EyhiODE5ZTdmMWM5OTdkYWZjZWQ4YzliMTM2ZmU1ZjdjMjhjZjczNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunQNCKeN9tMZX0q2Sob2AG9AZppx SuXwnL1ATJucXEOq/ZuKZNcduAB6LdRp4oKVVBD3Mku6z8MN8hERxOkfKc+FulUe TVWoHDn/AhRzB20fvieDJeer0QUlApn+KlE8bRJ5bj8BL5k2e7ytX5M4dwqlhGXI AzFrgtWUeMG/Ji0hQioe6nWG1lI4T7lnaxxSUjzfWbkQRG2AQMP1qo3EYFD8TiRm dHh3Q+hqjVTnJpeCd6OWPce4qTtuGpCm67wnxIywCn9jBT1nKqPwf4JczqatmUiS ueprkD7cJ2L4jOfTLZ/GP5ineb2vw/qWYbN8ujeTTtNIHrTDslWcekZ4KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZ5/HJl9r87YybE2/l98KM9zQhMB8GA1UdIwQY MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELq5Z0Io K/RRpWzJRbSL7GcUAezOKPHZ3k8UcDApBVvBb3bVCg3kZ2iCh2mXTMYRY9Zxjpui T0RSCxxLPkLt9QkqYROEBW9UUgDxGWgiwdEeC7UVhpk4GadsfR7ru96c3UAR30Og nAChldatRNdaQMPNqB5qKYO5NnPp8L/LmuG7NaeVlvb0zULw0QAmX0ZwQzsMZ14o ddzFsF0IPZyAeK0GvI86Y5WFrswsx8q4eH2BYWk3nFWdAcLKREHRzATC+A7il2JK MkMceW3ZmvInS3/DAZ8DLjhMd5szdR+hur78fI4t10SCUBbnhUmQz2NHLwM9uJz0 dSgZGwP4QLOX1g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:37:55 2025 by rpki-client