This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json) Hash identifier: 0LXzb5oqhQQithu0HM53LBqPgChRa37ebPmn7o7nyeY= Subject key identifier: F0:F4:06:E2:78:C3:5B:76:3A:E5:38:AA:E9:4B:EE:27:DE:DC:FB:1D Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a Certificate serial: 019B300BE0AFF34A9CCB149CF09510E59DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft Manifest number: 1676 Signing time: Thu 18 Dec 2025 06:00:43 +0000 Manifest this update: Thu 18 Dec 2025 06:00:43 +0000 Manifest next update: Fri 19 Dec 2025 06:00:43 +0000 Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=) 2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=) 3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: kJeRVVskMvkSpy7XjPWP5wR5z0T1Sw4R2rdptNvTGEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:e0:af:f3:4a:9c:cb:14:9c:f0:95:10:e5:9d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Validity Not Before: Dec 18 06:00:43 2025 GMT Not After : Dec 19 06:00:43 2025 GMT Subject: CN=f0f406e278c35b763ae538aae94bee27dedcfb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:36:90:6a:8d:53:93:52:88:73:54:c1:0f:a3: fd:39:9b:85:71:d4:af:f5:ee:10:e4:de:ca:dc:d9: ab:0a:10:f8:d1:78:a8:b8:24:2b:26:86:dc:7f:7a: 1a:37:35:f5:15:e9:1d:7f:91:09:42:76:ac:45:d4: 55:73:e3:a4:22:7c:3c:22:86:a0:37:73:02:03:fa: 72:89:59:15:eb:59:1f:fa:ee:85:44:27:20:ce:cb: cf:9d:d0:ce:12:e1:bb:5c:83:28:fe:d3:0b:d9:67: 2e:b2:43:30:4b:c7:1f:0b:7b:b0:be:58:06:9c:27: bc:36:b1:d5:ff:22:2e:2a:06:ff:bc:82:4d:75:d1: 15:ea:94:5d:bc:0b:c3:f3:21:13:51:7d:e4:5e:7b: cd:ec:43:21:03:de:91:4a:ea:a3:ca:6a:cf:03:11: 95:bf:87:35:05:19:d5:f3:de:65:ee:98:40:4a:e1: 24:f4:37:c8:27:9c:15:ac:2c:96:8f:2e:15:55:f1: f0:d6:e3:39:be:33:89:f0:87:19:aa:29:e6:12:28: 5b:43:59:67:b4:f5:2e:2c:7f:a4:03:f1:b2:4f:1c: 89:62:21:a5:59:fb:e8:0f:a3:28:d8:06:39:87:84: d1:13:e8:19:aa:91:31:09:a3:02:8a:5f:4e:9a:b4: 81:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F4:06:E2:78:C3:5B:76:3A:E5:38:AA:E9:4B:EE:27:DE:DC:FB:1D X509v3 Authority Key Identifier: keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a0:02:46:a7:b6:2f:08:bb:e9:e0:50:c6:f1:c4:eb:98:42: 63:6f:23:b8:7f:09:b1:7a:a3:0e:3f:d1:94:41:29:61:16:96: ea:35:87:c6:45:5f:e7:e5:14:2e:d4:28:6c:aa:6a:03:93:22: 7a:82:60:7f:55:c6:4c:07:58:1a:ee:b2:fd:fa:af:12:20:28: 1b:7c:f8:d0:10:9c:c9:15:f0:77:ed:f0:a1:59:79:d6:a8:29: 03:c0:c6:c4:70:a0:70:7b:bf:60:7d:5c:3b:cd:7b:42:9f:cd: f6:dd:52:c3:dc:75:fd:b4:0a:bd:da:dc:6d:92:ed:a9:ce:f9: f3:be:85:45:e1:a3:a7:8c:fb:2a:82:6e:b8:e4:90:04:21:f2: e3:e0:16:16:77:7c:7e:ea:97:95:be:67:ed:0b:a2:a7:c5:72: 45:9b:9a:26:ee:5d:71:14:6f:2b:36:b3:72:c9:ee:36:3c:9f: 09:98:22:fa:66:87:78:d7:ca:5e:94:90:87:c5:1c:80:22:00: d4:a4:01:da:c9:65:02:b0:98:11:f8:a3:3e:ab:fb:5f:98:67: 78:d5:56:85:8f:b4:51:1b:63:4c:b9:af:e1:2a:d2:09:4e:b2: 2d:3c:ea:68:83:1a:e4:bb:ac:ca:32:09:be:36:5e:26:3d:9a: 38:ce:03:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC+Cv80qcyxSc8JUQ5Z3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0 MTQwOGEwHhcNMjUxMjE4MDYwMDQzWhcNMjUxMjE5MDYwMDQzWjAzMTEwLwYDVQQD EyhmMGY0MDZlMjc4YzM1Yjc2M2FlNTM4YWFlOTRiZWUyN2RlZGNmYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zaQao1Tk1KIc1TBD6P9OZuFcdSv 9e4Q5N7K3NmrChD40XiouCQrJobcf3oaNzX1Fekdf5EJQnasRdRVc+OkInw8Ioag N3MCA/pyiVkV61kf+u6FRCcgzsvPndDOEuG7XIMo/tML2WcuskMwS8cfC3uwvlgG nCe8NrHV/yIuKgb/vIJNddEV6pRdvAvD8yETUX3kXnvN7EMhA96RSuqjymrPAxGV v4c1BRnV895l7phASuEk9DfIJ5wVrCyWjy4VVfHw1uM5vjOJ8IcZqinmEihbQ1ln tPUuLH+kA/GyTxyJYiGlWfvoD6Mo2AY5h4TRE+gZqpExCaMCil9OmrSBUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD0BuJ4w1t2OuU4qulL7ife3PsdMB8GA1UdIwQY MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt OGRmOGFmMzAwMWJjLzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqACRqe2 Lwi76eBQxvHE65hCY28juH8JsXqjDj/RlEEpYRaW6jWHxkVf5+UULtQobKpqA5Mi eoJgf1XGTAdYGu6y/fqvEiAoG3z40BCcyRXwd+3woVl51qgpA8DGxHCgcHu/YH1c O817Qp/N9t1Sw9x1/bQKvdrcbZLtqc75876FReGjp4z7KoJuuOSQBCHy4+AWFnd8 fuqXlb5n7Quip8VyRZuaJu5dcRRvKzazcsnuNjyfCZgi+maHeNfKXpSQh8UcgCIA 1KQB2sllArCYEfijPqv7X5hneNVWhY+0URtjTLmv4SrSCU6yLTzqaIMa5LusyjIJ vjZeJj2aOM4DiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:56 2025 by rpki-client