This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft File: OffHSY_ZyfKGgElRYrnrdq1HxgM.mft (raw, json) Hash identifier: OdDi3YUjJeWU/rgprRiMH7dHORu73ICQA2Ufgl/GK9E= Subject key identifier: A0:DD:82:E1:E0:A2:B3:89:34:61:B8:56:58:3B:80:12:22:E4:5D:DF Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Certificate serial: 019B0B919F1ECF464F2CE9F85E35964D9F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 04:00:51 +0000 Manifest this update: Thu 11 Dec 2025 04:00:51 +0000 Manifest next update: Fri 12 Dec 2025 04:00:51 +0000 Files and hashes: 1: 7qj_io6GZjtuvcm2767a6DzG45o.roa (hash: uZEERrMTIFBh2BP5JXnes2utziAB8smvbZALk+ET43E=) 2: OffHSY_ZyfKGgElRYrnrdq1HxgM.crl (hash: QKuWl3EwOICF1Q3+EMprc+ddVTBQ//2r82tlN9u9fBQ=) 3: c_JtXmASLLY7ujsvHCfih7ECTNg.roa (hash: 1qfucHT+uH8sg+/aZR1jxJdxxkrgfBRkspkr/XTrja4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:91:9f:1e:cf:46:4f:2c:e9:f8:5e:35:96:4d:9f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603 Validity Not Before: Dec 11 04:00:51 2025 GMT Not After : Dec 12 04:00:51 2025 GMT Subject: CN=a0dd82e1e0a2b3893461b856583b801222e45ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:1f:05:51:01:2f:f8:ff:11:25:a7:0d:27: 2c:43:4b:e9:77:cd:08:2b:b1:cd:77:43:6c:5f:97: 2d:10:02:f6:08:c3:f1:07:5f:e3:9c:1d:ad:ef:36: 28:f3:cc:93:48:e1:8b:2a:57:d1:3f:83:17:b2:0c: a4:ff:f7:ab:41:21:e4:2f:91:58:bc:6d:ba:f5:ec: 8a:34:c7:0d:aa:7b:1d:72:14:78:90:f1:cf:c6:f0: 82:0f:a9:3c:4a:b8:7c:9a:e1:83:53:24:c9:02:0a: c0:27:64:e5:3d:f8:0c:99:32:ec:53:e5:3d:1d:38: 07:22:74:4b:f2:c2:76:7a:36:7c:b2:ec:32:d8:8e: 7a:49:57:bd:74:24:f3:e5:b8:e6:1b:29:88:82:68: d8:13:13:33:07:b1:2f:82:de:72:25:3a:6a:40:7d: a2:2f:8b:dc:25:45:06:1e:f2:8a:47:f6:f1:cb:ad: 43:8c:ec:7e:ae:a3:18:47:3f:ac:8f:da:d8:8e:36: 39:fe:75:d9:16:f0:c7:b6:4c:58:8c:05:96:c7:61: 68:fa:ad:c1:ef:89:57:44:c4:02:5f:bf:03:97:ed: 77:12:d8:e6:f6:0e:da:67:98:cb:fc:e3:b1:a4:0f: 82:1b:2f:33:8e:20:71:21:41:e0:78:d5:49:dc:27: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DD:82:E1:E0:A2:B3:89:34:61:B8:56:58:3B:80:12:22:E4:5D:DF X509v3 Authority Key Identifier: keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:01:38:b4:1f:d7:46:75:f2:eb:e8:f5:e2:f5:61:4e:85:bf: 29:12:54:56:4d:d7:d4:b8:d5:e2:54:39:b4:09:f0:2d:c1:9e: ba:28:c6:d1:aa:02:ba:f6:11:eb:68:a9:f8:ad:2b:51:da:f0: c3:fc:a9:d3:ff:82:6d:82:88:83:74:d5:94:89:27:61:9f:6c: a3:09:7a:83:c2:fb:cb:8c:af:0a:25:d0:45:38:1a:82:4c:21: 47:4e:d1:87:c5:08:68:b1:6b:69:1d:aa:1c:8d:6a:78:24:39: 2b:b0:46:63:cf:1a:f1:d6:c0:da:83:1b:3a:b6:2f:42:5c:73: f6:43:a1:0f:11:10:7a:1c:04:f4:53:c0:ed:62:83:86:d3:e2: 5c:54:52:87:92:ef:6e:ab:41:4d:c3:c6:7b:19:c8:f6:4e:6d: 0b:f2:90:bc:7a:f4:12:50:23:51:30:a9:40:b3:8e:12:41:0b: fe:db:af:87:ee:fd:1b:28:53:4c:7e:12:2f:75:7a:06:7b:48: 21:56:f6:12:dd:ca:3b:17:1d:19:5e:06:8b:97:64:2b:50:99: 90:c3:56:23:d8:c5:e1:bd:25:4a:11:93:75:5c:2c:02:d7:0f: 1e:50:a1:62:80:e1:52:31:94:1f:c3:aa:68:bc:cc:2d:2f:82: 22:8b:be:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLkZ8ez0ZPLOn4XjWWTZ8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZjdjNzQ5OGZkOWM5ZjI4NjgwNDk1MTYyYjllYjc2YWQ0 N2M2MDMwHhcNMjUxMjExMDQwMDUxWhcNMjUxMjEyMDQwMDUxWjAzMTEwLwYDVQQD EyhhMGRkODJlMWUwYTJiMzg5MzQ2MWI4NTY1ODNiODAxMjIyZTQ1ZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypQfBVEBL/j/ESWnDScsQ0vpd80I K7HNd0NsX5ctEAL2CMPxB1/jnB2t7zYo88yTSOGLKlfRP4MXsgyk//erQSHkL5FY vG269eyKNMcNqnsdchR4kPHPxvCCD6k8Srh8muGDUyTJAgrAJ2TlPfgMmTLsU+U9 HTgHInRL8sJ2ejZ8suwy2I56SVe9dCTz5bjmGymIgmjYExMzB7Evgt5yJTpqQH2i L4vcJUUGHvKKR/bxy61DjOx+rqMYRz+sj9rYjjY5/nXZFvDHtkxYjAWWx2Fo+q3B 74lXRMQCX78Dl+13Etjm9g7aZ5jL/OOxpA+CGy8zjiBxIUHgeNVJ3CfpxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDdguHgorOJNGG4Vlg7gBIi5F3fMB8GA1UdIwQY MBaAFDn3x0mP2cnyhoBJUWK563atR8YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUt ZWZjZmJhOTkwN2RjLzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xZDViMGItNGIwNS00MDJjLTgyNjUtZWZjZmJhOTkwN2Rj LzEvT2ZmSFNZX1p5ZktHZ0VsUllybnJkcTFIeGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwE4tB/X RnXy6+j14vVhToW/KRJUVk3X1LjV4lQ5tAnwLcGeuijG0aoCuvYR62ip+K0rUdrw w/yp0/+CbYKIg3TVlIknYZ9sowl6g8L7y4yvCiXQRTgagkwhR07Rh8UIaLFraR2q HI1qeCQ5K7BGY88a8dbA2oMbOrYvQlxz9kOhDxEQehwE9FPA7WKDhtPiXFRSh5Lv bqtBTcPGexnI9k5tC/KQvHr0ElAjUTCpQLOOEkEL/tuvh+79GyhTTH4SL3V6BntI IVb2Et3KOxcdGV4Gi5dkK1CZkMNWI9jF4b0lShGTdVwsAtcPHlChYoDhUjGUH8Oq aLzMLS+CIou+iA== -----END CERTIFICATE-----Generated at Thu Dec 11 06:46:47 2025 by rpki-client