This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json) Hash identifier: WxI7T2k7FERcmHmALZq3DTae97DwV7ZSIKmJtzDHV7A= Subject key identifier: 2D:40:D1:3A:63:02:FE:95:18:20:AF:16:15:95:72:FF:D8:D8:2E:C6 Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Certificate serial: 019B21074E1971FB1B6D2A818ECC1581D9E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft Manifest number: 02F5 Signing time: Mon 15 Dec 2025 08:01:25 +0000 Manifest this update: Mon 15 Dec 2025 08:01:25 +0000 Manifest next update: Tue 16 Dec 2025 08:01:25 +0000 Files and hashes: 1: 4TBEbTwznRUyfO-99-DGzicdpVY.roa (hash: NUzc37NEChJ2ehR4MuI3RA+Wwr1maBIZ+yC3jO0gtfU=) 2: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: z2YM0uVrOQMNEh2e0hb7YJfm8J5VJNy57915oUUQyR0=) 3: dsqp4bxyFCCs7RL2PZGSdi7KthE.roa (hash: LpothYWyfl3DUg9u8R+0xehBO2vE3vsq9xV0G0H4C0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:4e:19:71:fb:1b:6d:2a:81:8e:cc:15:81:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Validity Not Before: Dec 15 08:01:25 2025 GMT Not After : Dec 16 08:01:25 2025 GMT Subject: CN=2d40d13a6302fe951820af16159572ffd8d82ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:ff:75:fa:69:67:f9:c1:cb:65:a5:a5:d7: 23:81:06:c2:63:24:3b:8f:b2:ff:53:c5:7c:e4:70: ea:4f:5f:40:47:82:21:9a:12:c5:58:4b:83:32:1d: 7a:04:45:bf:48:dd:74:58:9f:ad:16:08:38:c5:9e: 45:41:e8:b4:b9:85:20:fd:0f:a0:9c:1e:eb:aa:d5: 4e:3f:ed:79:07:27:de:14:a3:46:0a:a4:5f:ea:93: 1a:d7:37:77:07:61:f1:7d:5a:db:33:1d:4b:a7:dd: de:33:e7:38:da:a6:c6:4a:5a:00:55:dd:f5:ca:70: cb:69:32:52:7f:82:2b:a2:da:af:1f:59:2e:82:01: ae:aa:08:ba:5a:fb:ea:70:71:57:6f:ee:1e:09:0b: bd:31:df:32:ec:6c:d5:05:5c:af:fc:eb:5e:93:15: 7a:dd:03:a8:0a:b0:09:7f:d1:e2:58:51:0e:12:2e: 6d:f6:06:9e:1b:f3:58:25:e0:a9:70:99:8a:7c:7b: 66:ef:db:b2:28:17:af:84:4c:eb:b3:1a:4f:63:17: 18:b7:dd:8f:4e:5e:3f:7f:bb:7b:12:ee:38:e0:0a: a3:78:e5:57:bb:64:b2:86:39:ab:ad:4e:f6:b7:a8: ba:4a:f3:8e:06:b9:a8:22:8c:9c:8e:03:46:c6:c4: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:D1:3A:63:02:FE:95:18:20:AF:16:15:95:72:FF:D8:D8:2E:C6 X509v3 Authority Key Identifier: keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d4:75:4a:bd:e7:8c:6f:20:3d:0c:8b:7b:83:8b:dc:dc:69: 6c:68:7b:ef:38:77:ec:d6:16:f5:61:8d:3f:7b:8a:41:cd:17: b5:f8:53:92:57:e2:67:29:23:1c:1b:c0:2d:c7:dd:dc:b0:1d: b8:e7:c8:c8:8d:65:c3:e5:1b:a7:40:39:58:8b:15:66:4f:c1: 6e:9a:76:46:6a:43:9c:12:5f:9c:62:1e:12:42:5f:cf:36:02: 7e:54:5c:e5:fa:d6:05:63:e5:6a:35:10:29:03:fd:6e:8f:0d: 58:9c:7a:3a:b4:cf:bc:b5:a3:07:d5:e9:68:db:11:7b:44:e8: c2:12:c6:21:fe:ff:fa:65:f7:e5:ac:d3:a1:43:2c:9c:69:b2: 21:6e:13:6f:31:c1:7a:47:ba:29:ad:40:57:db:38:31:49:09: 7f:d1:63:a9:18:b5:f0:a6:51:ee:a2:ae:84:1f:66:f3:83:82: d6:07:d2:f8:f2:5d:14:47:af:bc:f6:b0:53:a7:22:16:9c:36: bf:67:5d:02:bb:cb:b7:fb:37:fc:81:19:19:08:a0:c2:cf:f0: ee:0e:9f:92:bf:c7:2a:91:e5:d1:65:b3:cb:08:c2:ae:78:68: 99:3e:eb:d2:dd:2f:3d:4f:ac:12:61:1a:1b:df:5c:02:c4:4d: 6e:0f:dd:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshB04ZcfsbbSqBjswVgdnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Zjg3M2NkMzkzOTIwM2M3NzhhOGVhYWYxNjgzZTk0NjRh YzM0MDAwHhcNMjUxMjE1MDgwMTI1WhcNMjUxMjE2MDgwMTI1WjAzMTEwLwYDVQQD EygyZDQwZDEzYTYzMDJmZTk1MTgyMGFmMTYxNTk1NzJmZmQ4ZDgyZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56z/dfppZ/nBy2WlpdcjgQbCYyQ7 j7L/U8V85HDqT19AR4IhmhLFWEuDMh16BEW/SN10WJ+tFgg4xZ5FQei0uYUg/Q+g nB7rqtVOP+15ByfeFKNGCqRf6pMa1zd3B2HxfVrbMx1Lp93eM+c42qbGSloAVd31 ynDLaTJSf4IrotqvH1kuggGuqgi6WvvqcHFXb+4eCQu9Md8y7GzVBVyv/OtekxV6 3QOoCrAJf9HiWFEOEi5t9gaeG/NYJeCpcJmKfHtm79uyKBevhEzrsxpPYxcYt92P Tl4/f7t7Eu444AqjeOVXu2SyhjmrrU72t6i6SvOOBrmoIoycjgNGxsRGgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1A0TpjAv6VGCCvFhWVcv/Y2C7GMB8GA1UdIwQY MBaAFDn4c805OSA8d4qOqvFoPpRkrDQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMt NGU2NTViNWI2NDI3LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMtNGU2NTViNWI2NDI3 LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNR1Sr3n jG8gPQyLe4OL3NxpbGh77zh37NYW9WGNP3uKQc0XtfhTklfiZykjHBvALcfd3LAd uOfIyI1lw+Ubp0A5WIsVZk/Bbpp2RmpDnBJfnGIeEkJfzzYCflRc5frWBWPlajUQ KQP9bo8NWJx6OrTPvLWjB9XpaNsRe0TowhLGIf7/+mX35azToUMsnGmyIW4TbzHB eke6Ka1AV9s4MUkJf9FjqRi18KZR7qKuhB9m84OC1gfS+PJdFEevvPawU6ciFpw2 v2ddArvLt/s3/IEZGQigws/w7g6fkr/HKpHl0WWzywjCrnhomT7r0t0vPU+sEmEa G99cAsRNbg/duA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:03:14 2025 by rpki-client