This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft File: OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft (raw, json) Hash identifier: Q4WqlX9mv2tP/VGpZz921gkVfIuXYyEYHw7IcLW5Mgk= Subject key identifier: E5:B1:73:D6:AC:85:B2:E1:54:B5:D4:BB:11:49:B9:5E:0F:D8:6B:7A Authority key identifier: 38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D Certificate issuer: /CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d Certificate serial: 019AF46570C59C89960A0D95F0A36BE2DB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft Manifest number: 13FF Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl (hash: sht+PajQfm6BJ1nAqKbv0Z9F4ZQDuUuwRqFsl1HgCG4=) 2: PQhWLSkGUa_VMVGVuYBQSUZ_P_A.roa (hash: 3kRwsyvbLLbFqSNU/EJCsmBYkp3oO56TR7kGsRhAuv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:70:c5:9c:89:96:0a:0d:95:f0:a3:6b:e2:db:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3853af5014499b2fb5cd2c1e68a24ff8256d0d0d Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=e5b173d6ac85b2e154b5d4bb1149b95e0fd86b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:f7:ca:f6:ba:0a:cc:76:d0:e6:00:2b:20: 35:65:a9:d3:0a:90:38:1a:4b:ea:5d:05:f0:88:ab: 10:57:a8:cc:ef:e2:38:d4:9e:c4:60:49:36:d1:00: d2:4e:4e:7d:53:11:56:2c:7b:12:0c:35:2c:53:13: 99:72:be:28:8b:7e:6d:26:7c:a7:7b:6d:c7:ad:e5: dc:ce:a3:34:ac:d9:fe:e7:96:23:63:2f:eb:16:7f: d6:b2:00:12:68:a8:f5:6e:f8:90:b3:a3:7d:d9:b5: b8:c3:30:21:29:82:12:5a:8e:d5:37:03:aa:a9:2a: 57:bb:ed:3e:17:55:8d:e1:ce:99:7f:b7:92:77:d9: ea:cc:fc:41:cd:fa:78:c3:fa:83:ed:2a:a2:fb:6d: e4:08:48:db:59:9f:b6:17:ba:3e:48:41:2b:d5:23: 8e:31:9d:1c:7e:b6:48:55:6e:77:95:8b:76:8c:c8: c5:e2:57:3b:9d:84:8a:e3:41:b6:b5:5f:12:91:b3: ad:33:0e:a5:aa:42:b4:79:60:b0:1c:70:e4:35:e3: 5e:96:9d:bf:fe:87:dc:7f:40:ca:0a:4c:80:36:b6: 86:00:1f:c3:c3:3d:37:2f:3f:d3:db:b4:f2:15:7f: 9b:68:8c:75:0a:d7:f8:89:eb:d9:9c:12:73:5d:34: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B1:73:D6:AC:85:B2:E1:54:B5:D4:BB:11:49:B9:5E:0F:D8:6B:7A X509v3 Authority Key Identifier: keyid:38:53:AF:50:14:49:9B:2F:B5:CD:2C:1E:68:A2:4F:F8:25:6D:0D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFOvUBRJmy-1zSweaKJP-CVtDQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/30cc41-8aab-4463-99f8-dcb56acb777f/1/OFOvUBRJmy-1zSweaKJP-CVtDQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e3:c1:e4:2b:a3:e4:8e:3f:38:f1:7b:cf:6e:51:e1:ad:02: 24:2d:bb:92:fe:82:85:75:61:54:ed:51:41:98:63:47:82:fa: f5:6f:d7:79:90:b2:c4:64:05:41:59:9f:7c:c4:2d:06:9f:5a: 58:ef:02:7c:75:0d:b7:03:bd:23:87:80:e7:5c:58:3c:a6:60: 5a:a5:de:2a:36:96:be:5a:4c:58:88:33:61:d4:3b:d8:5c:98: 04:10:c8:d6:44:14:48:b9:29:e8:c4:27:37:a6:83:31:86:e0: f8:3b:e2:20:15:85:71:4f:96:ec:a6:0b:4f:3a:9d:fb:81:83: 6d:36:e5:44:84:be:06:7c:4d:d5:3a:9b:d5:37:6c:ff:b5:ad: e0:98:37:c7:26:4b:5d:28:09:15:95:2a:a4:05:79:4f:f3:49: fc:ac:7f:36:4c:1a:87:3e:62:c9:d2:a7:bd:7b:e3:da:e2:d0: 7b:99:95:2c:2e:a6:0e:c6:f7:b8:10:cd:89:a7:0b:f1:4d:cc: 5b:0c:49:9e:b5:50:ef:71:d0:b2:d6:80:7b:a2:02:67:f4:ae: 98:f6:63:3a:a3:23:ea:39:0d:22:44:69:fd:12:46:6d:75:be: 8a:9c:5e:17:cd:de:04:fb:b7:87:8b:70:6c:c5:6c:86:cc:2a: c7:1f:74:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXDFnImWCg2V8KNr4tsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTNhZjUwMTQ0OTliMmZiNWNkMmMxZTY4YTI0ZmY4MjU2 ZDBkMGQwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD EyhlNWIxNzNkNmFjODViMmUxNTRiNWQ0YmIxMTQ5Yjk1ZTBmZDg2YjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnf3yva6Csx20OYAKyA1ZanTCpA4 GkvqXQXwiKsQV6jM7+I41J7EYEk20QDSTk59UxFWLHsSDDUsUxOZcr4oi35tJnyn e23HreXczqM0rNn+55YjYy/rFn/WsgASaKj1bviQs6N92bW4wzAhKYISWo7VNwOq qSpXu+0+F1WN4c6Zf7eSd9nqzPxBzfp4w/qD7Sqi+23kCEjbWZ+2F7o+SEEr1SOO MZ0cfrZIVW53lYt2jMjF4lc7nYSK40G2tV8SkbOtMw6lqkK0eWCwHHDkNeNelp2/ /ofcf0DKCkyANraGAB/Dwz03Lz/T27TyFX+baIx1Ctf4ievZnBJzXTRVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWxc9ashbLhVLXUuxFJuV4P2Gt6MB8GA1UdIwQY MBaAFDhTr1AUSZsvtc0sHmiiT/glbQ0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5Zjgt ZGNiNTZhY2I3NzdmLzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMGNjNDEtOGFhYi00NDYzLTk5ZjgtZGNiNTZhY2I3Nzdm LzEvT0ZPdlVCUkpteS0xelN3ZWFLSlAtQ1Z0RFEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuPB5Cuj 5I4/OPF7z25R4a0CJC27kv6ChXVhVO1RQZhjR4L69W/XeZCyxGQFQVmffMQtBp9a WO8CfHUNtwO9I4eA51xYPKZgWqXeKjaWvlpMWIgzYdQ72FyYBBDI1kQUSLkp6MQn N6aDMYbg+DviIBWFcU+W7KYLTzqd+4GDbTblRIS+BnxN1Tqb1Tds/7Wt4Jg3xyZL XSgJFZUqpAV5T/NJ/Kx/Nkwahz5iydKnvXvj2uLQe5mVLC6mDsb3uBDNiacL8U3M WwxJnrVQ73HQstaAe6ICZ/SumPZjOqMj6jkNIkRp/RJGbXW+ipxeF83eBPu3h4tw bMVshswqxx906A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:03 2025 by rpki-client