This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json) Hash identifier: QuFZbSApplj7GzwUHR02fO7Quc5fIr/heKx2nmdgDtA= Subject key identifier: 6A:DD:98:FF:05:97:F0:34:4F:56:A5:EC:32:B0:F3:71:7D:43:62:55 Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Certificate serial: 019AF23F7D22C4BBD18415C8181C21397D54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=) 2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=) 3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: NNlarl8t08Vvnj6tYt+jHAh50TffjaF2utdAB0BAI1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:22:c4:bb:d1:84:15:c8:18:1c:21:39:7d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=6add98ff0597f0344f56a5ec32b0f3717d436255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:fa:22:31:bb:49:32:d6:e7:62:33:ea:fe: f9:f6:a5:3a:54:bb:62:83:69:e9:67:dd:7d:d8:10: 31:5c:cf:cc:8a:34:54:17:6f:dd:d0:73:29:c2:79: ef:e0:90:47:92:c5:71:56:24:7e:93:6f:41:1f:ed: b0:d7:2b:5e:14:7e:60:d5:44:90:b2:a3:53:fb:30: 7d:a4:da:55:cc:9e:47:83:8e:44:a4:3a:0d:47:24: 7a:30:d9:79:02:04:90:0d:03:4c:14:66:66:7e:79: d7:f9:e6:46:fb:a5:32:4d:7f:ea:7d:79:98:20:9c: a2:51:eb:32:22:cf:2a:8e:5d:25:ed:f3:c9:63:c5: 2c:a9:34:51:5b:61:b6:fe:a0:fd:bb:f4:08:6c:6a: b3:fb:2e:04:5e:65:0d:1b:d8:13:1a:87:7e:64:18: ad:12:f3:75:bb:bf:4e:60:fe:e4:0e:76:58:ab:32: 59:97:bc:a7:80:ba:1d:ba:92:8e:85:90:c8:a2:fe: fc:76:20:f6:67:0b:ac:07:f7:d5:9b:55:28:6c:ae: fa:2a:96:9c:36:5a:eb:54:f6:f2:b9:39:dd:fe:e1: 76:f4:c8:10:68:15:79:31:f5:5d:ad:11:48:d1:ec: de:0c:52:a6:16:6f:56:5a:f3:96:f7:b2:72:cf:2e: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DD:98:FF:05:97:F0:34:4F:56:A5:EC:32:B0:F3:71:7D:43:62:55 X509v3 Authority Key Identifier: keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:9d:3f:d6:44:e9:98:fe:7a:55:56:fc:81:d1:8d:92:5d: cc:b5:66:17:7f:c9:e2:2b:a8:ee:7b:31:5a:b1:95:14:11:a5: cb:36:58:d2:fd:d3:3e:b7:65:f0:82:47:93:50:f0:2f:3a:1e: ea:8f:db:fc:77:7e:b0:86:93:1b:cb:13:93:df:da:09:37:08: 19:35:d9:a4:ba:67:43:87:34:14:c6:3c:d1:cf:59:02:ee:a4: 18:94:78:1c:91:a2:6c:4e:42:16:41:de:99:43:63:47:0f:29: 00:85:21:ca:1e:83:1c:7d:80:85:2f:8f:79:99:95:90:bf:e0: 7b:7b:50:ac:78:47:9a:c5:e1:f2:92:0c:b2:c9:8e:b7:b2:09: 8e:f3:92:87:96:95:3b:32:91:0a:4c:a5:fd:d5:ae:04:bc:18: 61:38:17:88:8e:2d:22:63:5c:71:93:69:37:4e:0d:c2:cf:7b: f2:2e:84:13:11:ae:e9:3d:e5:07:8a:bb:b9:fd:be:36:a3:fc: 97:25:13:45:57:6f:f6:8c:46:36:10:4b:51:c6:b8:8b:76:01: 32:e0:fe:74:53:b7:29:52:cb:8a:5b:8e:05:b4:e5:93:7d:9c: 3e:35:4e:97:3c:8d:85:38:dd:29:b1:71:5c:7a:30:0f:d2:f0: 6c:84:95:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP30ixLvRhBXIGBwhOX1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy NWJmYzIwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg2YWRkOThmZjA1OTdmMDM0NGY1NmE1ZWMzMmIwZjM3MTdkNDM2MjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri36IjG7STLW52Iz6v759qU6VLti g2npZ9192BAxXM/MijRUF2/d0HMpwnnv4JBHksVxViR+k29BH+2w1yteFH5g1USQ sqNT+zB9pNpVzJ5Hg45EpDoNRyR6MNl5AgSQDQNMFGZmfnnX+eZG+6UyTX/qfXmY IJyiUesyIs8qjl0l7fPJY8UsqTRRW2G2/qD9u/QIbGqz+y4EXmUNG9gTGod+ZBit EvN1u79OYP7kDnZYqzJZl7yngLodupKOhZDIov78diD2ZwusB/fVm1UobK76Kpac NlrrVPbyuTnd/uF29MgQaBV5MfVdrRFI0ezeDFKmFm9WWvOW97Jyzy6q3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrdmP8Fl/A0T1al7DKw83F9Q2JVMB8GA1UdIwQY MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2 LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbidP9ZE 6Zj+elVW/IHRjZJdzLVmF3/J4iuo7nsxWrGVFBGlyzZY0v3TPrdl8IJHk1DwLzoe 6o/b/Hd+sIaTG8sTk9/aCTcIGTXZpLpnQ4c0FMY80c9ZAu6kGJR4HJGibE5CFkHe mUNjRw8pAIUhyh6DHH2AhS+PeZmVkL/ge3tQrHhHmsXh8pIMssmOt7IJjvOSh5aV OzKRCkyl/dWuBLwYYTgXiI4tImNccZNpN04Nws978i6EExGu6T3lB4q7uf2+NqP8 lyUTRVdv9oxGNhBLUca4i3YBMuD+dFO3KVLLiluOBbTlk32cPjVOlzyNhTjdKbFx XHowD9LwbISV2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:19 2025 by rpki-client