This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json) Hash identifier: Qoc5MOdJCoRJ9vIui3rtm3WixfwA3RiSLWx0ojl0+yw= Subject key identifier: 72:57:40:2C:F5:02:E4:29:F4:9F:4D:CA:A6:4E:44:F0:00:26:41:3E Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a Certificate serial: 019B22878BE84F66EED224D4C1710E8FC75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft Manifest number: 166F Signing time: Mon 15 Dec 2025 15:01:07 +0000 Manifest this update: Mon 15 Dec 2025 15:01:07 +0000 Manifest next update: Tue 16 Dec 2025 15:01:07 +0000 Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=) 2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=) 3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: KktiHRns/ILweG+xeKdi8NejDz+h8eAEG1tN1lhUUZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:8b:e8:4f:66:ee:d2:24:d4:c1:71:0e:8f:c7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Validity Not Before: Dec 15 15:01:07 2025 GMT Not After : Dec 16 15:01:07 2025 GMT Subject: CN=7257402cf502e429f49f4dcaa64e44f00026413e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:72:59:fd:70:b4:da:b2:43:ae:09:d4:bf: bb:0c:b2:41:6b:1c:74:b5:e3:ec:c6:43:68:4c:22: 93:4f:30:ac:53:b2:f1:f5:1e:c0:aa:62:50:e5:be: 71:a1:3e:29:fd:47:3b:85:95:97:86:a6:35:d7:7f: 91:6a:f2:04:f9:60:7a:f4:fd:d4:a4:88:3e:13:40: 06:d6:49:85:a6:00:6d:be:c3:66:df:19:b9:14:18: ff:8b:e7:8d:f5:f7:8b:09:ed:12:4c:4b:32:2b:c8: 2e:52:f2:55:e8:54:db:b9:e8:2e:a6:e6:33:b7:4b: 55:83:d8:8e:0e:87:91:65:b1:a2:98:ef:29:bf:ba: d4:71:13:f4:82:d8:03:a4:46:5d:04:5d:37:2e:aa: 1c:18:8a:10:63:5c:7b:6c:50:41:c0:a0:e5:83:77: b6:0a:fc:2a:45:dd:0f:bb:e5:c3:47:64:02:39:bd: e0:bf:8f:88:54:83:69:52:89:9f:11:9e:8a:e4:5b: 03:00:a0:17:ad:3b:a1:60:a4:18:5b:19:c4:7a:1a: c5:5d:a0:f2:c7:0a:2a:12:f0:f5:cb:82:37:10:b0: 2b:37:ac:38:51:0b:e9:ef:d2:e4:60:36:55:c4:81: 04:c5:4a:76:94:9b:8b:e6:00:4e:a0:d8:11:e1:b4: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:40:2C:F5:02:E4:29:F4:9F:4D:CA:A6:4E:44:F0:00:26:41:3E X509v3 Authority Key Identifier: keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:89:77:4b:63:4e:85:96:59:9a:df:d6:9e:f7:9c:c1:65:33: 23:8e:e1:f3:08:8c:c4:67:cb:8d:40:0e:ac:7f:ca:ab:b7:9b: ad:99:0a:d9:17:83:ed:f9:06:49:dc:69:86:22:cf:5c:78:ca: 15:74:68:b4:b7:48:90:e0:4a:6b:c7:c4:da:07:d0:64:d5:ca: be:8e:02:ea:6e:0a:81:0f:ca:c6:a0:54:76:ee:cc:b8:1c:fc: 8e:d9:61:a7:35:39:65:e2:ce:3e:27:c7:98:49:33:ff:f0:91: a8:bd:17:bb:8b:13:83:5a:1c:eb:56:89:d0:ed:cd:31:5f:40: 0d:ef:38:a7:aa:a4:af:19:f5:a7:8f:ee:0d:ce:f3:6f:a4:2c: 00:a0:cb:6b:b5:4b:3c:fa:4b:66:02:99:f4:6d:31:90:a9:e8: 32:01:92:90:5e:bf:29:59:1f:f5:ce:c2:15:6f:ee:f7:9d:32: 9a:6a:7a:50:e5:e6:5a:7a:07:8b:ea:2a:36:f7:9d:ea:5d:33: 74:18:d6:4f:96:23:ce:63:50:a6:2e:c0:f4:bf:12:25:f0:f3: 83:4b:e2:58:f8:cf:d3:29:14:b5:bc:e5:59:1d:d7:37:59:b7: 72:a7:23:ad:40:26:f5:d8:c4:1e:07:d4:81:51:59:67:95:6b: 8f:11:cf:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih4voT2bu0iTUwXEOj8dcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0 MTQwOGEwHhcNMjUxMjE1MTUwMTA3WhcNMjUxMjE2MTUwMTA3WjAzMTEwLwYDVQQD Eyg3MjU3NDAyY2Y1MDJlNDI5ZjQ5ZjRkY2FhNjRlNDRmMDAwMjY0MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlyWf1wtNqyQ64J1L+7DLJBaxx0 tePsxkNoTCKTTzCsU7Lx9R7AqmJQ5b5xoT4p/Uc7hZWXhqY113+RavIE+WB69P3U pIg+E0AG1kmFpgBtvsNm3xm5FBj/i+eN9feLCe0STEsyK8guUvJV6FTbuegupuYz t0tVg9iODoeRZbGimO8pv7rUcRP0gtgDpEZdBF03LqocGIoQY1x7bFBBwKDlg3e2 CvwqRd0Pu+XDR2QCOb3gv4+IVINpUomfEZ6K5FsDAKAXrTuhYKQYWxnEehrFXaDy xwoqEvD1y4I3ELArN6w4UQvp79LkYDZVxIEExUp2lJuL5gBOoNgR4bQ3nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJXQCz1AuQp9J9NyqZORPAAJkE+MB8GA1UdIwQY MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt OGRmOGFmMzAwMWJjLzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYl3S2NO hZZZmt/WnvecwWUzI47h8wiMxGfLjUAOrH/Kq7ebrZkK2ReD7fkGSdxphiLPXHjK FXRotLdIkOBKa8fE2gfQZNXKvo4C6m4KgQ/KxqBUdu7MuBz8jtlhpzU5ZeLOPifH mEkz//CRqL0Xu4sTg1oc61aJ0O3NMV9ADe84p6qkrxn1p4/uDc7zb6QsAKDLa7VL PPpLZgKZ9G0xkKnoMgGSkF6/KVkf9c7CFW/u950ymmp6UOXmWnoHi+oqNved6l0z dBjWT5YjzmNQpi7A9L8SJfDzg0viWPjP0ykUtbzlWR3XN1m3cqcjrUAm9djEHgfU gVFZZ5VrjxHP/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:27 2025 by rpki-client