This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft File: OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft (raw, json) Hash identifier: HyTFdP5KiVSSPCJCm+C87UH56Penk3r+KvKAPh6NMa4= Subject key identifier: 88:FC:B4:E1:4C:13:25:1F:7A:B1:B4:DE:7B:10:C1:0F:E0:60:9E:B9 Authority key identifier: 39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 Certificate issuer: /CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Certificate serial: 019ABC9ABF6A33861B916EB6F97CD219B478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft Manifest number: 02C1 Signing time: Tue 25 Nov 2025 20:00:49 +0000 Manifest this update: Tue 25 Nov 2025 20:00:49 +0000 Manifest next update: Wed 26 Nov 2025 20:00:49 +0000 Files and hashes: 1: 4TBEbTwznRUyfO-99-DGzicdpVY.roa (hash: NUzc37NEChJ2ehR4MuI3RA+Wwr1maBIZ+yC3jO0gtfU=) 2: OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl (hash: CKrUms8GeOtkizR7rccsnWDLuKor7zYmHFetFAMw7Lk=) 3: dsqp4bxyFCCs7RL2PZGSdi7KthE.roa (hash: LpothYWyfl3DUg9u8R+0xehBO2vE3vsq9xV0G0H4C0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:9a:bf:6a:33:86:1b:91:6e:b6:f9:7c:d2:19:b4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f873cd3939203c778a8eaaf1683e9464ac3400 Validity Not Before: Nov 25 20:00:49 2025 GMT Not After : Nov 26 20:00:49 2025 GMT Subject: CN=88fcb4e14c13251f7ab1b4de7b10c10fe0609eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:95:a5:b7:51:a0:77:b2:59:5b:c9:7e:e6:22: 39:5f:7e:a1:c6:cc:48:34:e7:6e:12:b9:af:57:d0: e7:12:d2:9d:56:fe:99:7b:89:94:29:82:3c:cb:3d: f4:f0:dd:fc:0e:42:b5:dc:e7:7b:a4:15:cc:e0:63: 93:90:86:28:57:5e:26:a8:39:d0:fd:56:59:62:07: 55:b8:c1:5a:0f:8c:25:b6:5c:e4:37:ef:40:f6:09: bd:6c:1e:ae:ba:02:ff:d5:d7:4b:63:81:1a:28:ae: 63:bd:1c:fa:89:74:cd:c2:83:14:cb:34:dc:fd:61: 18:ec:7f:bc:76:54:4c:07:03:65:b7:c2:2e:2b:f5: 7c:88:d7:12:68:c5:22:99:ff:fa:0b:e9:3f:96:7c: 3c:21:bf:2d:b1:bd:f3:04:e6:af:d5:55:e4:a1:7b: a9:de:e5:90:91:09:16:aa:46:9d:97:83:c5:53:04: 7e:82:1e:39:71:8b:e9:91:dc:25:14:05:62:bb:2a: 16:f8:f5:7d:6e:f3:60:fc:95:9c:a7:8d:5d:9e:31: c6:10:af:6f:31:02:40:ec:c3:25:53:7f:9f:50:8c: de:fd:26:eb:00:cc:81:b9:c5:88:f2:5b:be:96:9d: b7:53:b9:8b:d6:9f:0e:a2:08:28:22:a1:1a:24:e5: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FC:B4:E1:4C:13:25:1F:7A:B1:B4:DE:7B:10:C1:0F:E0:60:9E:B9 X509v3 Authority Key Identifier: keyid:39:F8:73:CD:39:39:20:3C:77:8A:8E:AA:F1:68:3E:94:64:AC:34:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfhzzTk5IDx3io6q8Wg-lGSsNAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/90e923-2f2d-4086-819c-4e655b5b6427/1/OfhzzTk5IDx3io6q8Wg-lGSsNAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:75:47:32:0a:18:7e:12:c9:b4:7a:ab:fa:c4:c7:63:81:fd: 1d:e4:c2:1e:0f:be:86:a6:20:43:f5:e3:6e:90:22:72:09:57: a1:1b:33:2a:4c:45:c0:c6:1f:f1:1c:4e:52:5d:f3:c1:50:f1: 3e:a8:d9:e4:e5:9a:e4:5b:2a:ad:e0:0b:5c:b8:08:35:f0:ad: 11:c5:d5:63:f1:33:39:97:46:a0:54:bd:8e:cb:81:7b:01:2a: c1:ab:a0:df:10:5a:8d:fe:be:40:81:bd:55:18:fe:7e:6c:8a: f8:83:b2:9d:f6:e3:d7:d0:c7:75:68:bb:2b:e4:a1:87:06:d8: a4:94:4d:39:ae:54:e1:90:d3:b3:02:63:8a:5a:54:88:0d:16: b4:b3:a2:73:31:69:bf:4e:5d:5e:97:5f:ef:a2:28:cc:b3:18: 32:27:bf:e9:02:df:0d:2b:bc:e6:d4:3e:d0:11:15:7b:ad:bd: 0f:cc:bd:e1:9c:38:b2:f2:38:9e:3e:e1:fe:1e:5a:35:6f:96: a8:a4:b4:54:c1:8f:0f:74:97:28:88:cf:2e:4c:13:e1:64:2b: 08:ab:9b:5f:b3:8e:50:51:53:94:40:37:45:c4:6e:16:f3:7d: 06:01:6e:22:af:e0:b0:8e:a4:44:cf:d7:68:9c:01:e6:18:d1: 3f:6c:a2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq8mr9qM4YbkW62+XzSGbR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Zjg3M2NkMzkzOTIwM2M3NzhhOGVhYWYxNjgzZTk0NjRh YzM0MDAwHhcNMjUxMTI1MjAwMDQ5WhcNMjUxMTI2MjAwMDQ5WjAzMTEwLwYDVQQD Eyg4OGZjYjRlMTRjMTMyNTFmN2FiMWI0ZGU3YjEwYzEwZmUwNjA5ZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZWlt1Ggd7JZW8l+5iI5X36hxsxI NOduErmvV9DnEtKdVv6Ze4mUKYI8yz308N38DkK13Od7pBXM4GOTkIYoV14mqDnQ /VZZYgdVuMFaD4wltlzkN+9A9gm9bB6uugL/1ddLY4EaKK5jvRz6iXTNwoMUyzTc /WEY7H+8dlRMBwNlt8IuK/V8iNcSaMUimf/6C+k/lnw8Ib8tsb3zBOav1VXkoXup 3uWQkQkWqkadl4PFUwR+gh45cYvpkdwlFAViuyoW+PV9bvNg/JWcp41dnjHGEK9v MQJA7MMlU3+fUIze/SbrAMyBucWI8lu+lp23U7mL1p8OoggoIqEaJOXwJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIj8tOFMEyUferG03nsQwQ/gYJ65MB8GA1UdIwQY MBaAFDn4c805OSA8d4qOqvFoPpRkrDQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMt NGU2NTViNWI2NDI3LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MGU5MjMtMmYyZC00MDg2LTgxOWMtNGU2NTViNWI2NDI3 LzEvT2ZoenpUazVJRHgzaW82cThXZy1sR1NzTkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3VHMgoY fhLJtHqr+sTHY4H9HeTCHg++hqYgQ/XjbpAicglXoRszKkxFwMYf8RxOUl3zwVDx PqjZ5OWa5FsqreALXLgINfCtEcXVY/EzOZdGoFS9jsuBewEqwaug3xBajf6+QIG9 VRj+fmyK+IOynfbj19DHdWi7K+ShhwbYpJRNOa5U4ZDTswJjilpUiA0WtLOiczFp v05dXpdf76IozLMYMie/6QLfDSu85tQ+0BEVe629D8y94Zw4svI4nj7h/h5aNW+W qKS0VMGPD3SXKIjPLkwT4WQrCKubX7OOUFFTlEA3RcRuFvN9BgFuIq/gsI6kRM/X aJwB5hjRP2yiuA== -----END CERTIFICATE-----Generated at Wed Nov 26 03:30:33 2025 by rpki-client