This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json) Hash identifier: mqXPp0bB7GTZyhBWxmRcY2ryXB/m1/52c5ypSHAvL+g= Subject key identifier: A8:47:08:E5:75:CC:9A:FB:8A:96:AD:46:B5:17:22:51:DC:83:E7:82 Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a Certificate serial: 019AF05139BA80270E8C24FDDC39ACD2E328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft Manifest number: 1655 Signing time: Fri 05 Dec 2025 21:00:45 +0000 Manifest this update: Fri 05 Dec 2025 21:00:45 +0000 Manifest next update: Sat 06 Dec 2025 21:00:45 +0000 Files and hashes: 1: 8fjGJEbNOKgjtgGvG0x5bdVrRFo.roa (hash: 6ZZJ4QGkpbcq3hIOVhgvm79JeONPbl5ojVu1zQKUgnU=) 2: LiZI8DHKt2cl3ZGAwMQs7hzSWLY.roa (hash: YZv7B4YQ18wMpKvjotc88oKaw7AFVr3K3Ln8F9meSnc=) 3: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: q15lIGEPurnnWGYQsvkhNYQajabCeatBmKpB0sQWUqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:39:ba:80:27:0e:8c:24:fd:dc:39:ac:d2:e3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a Validity Not Before: Dec 5 21:00:45 2025 GMT Not After : Dec 6 21:00:45 2025 GMT Subject: CN=a84708e575cc9afb8a96ad46b5172251dc83e782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:c8:8c:ab:7e:db:f3:2d:f8:45:85:de:9c: 92:2d:cb:43:4d:b7:8e:b3:9a:e9:bd:fe:56:ae:4e: 2e:25:e4:66:14:7f:a0:d0:21:07:37:75:33:50:7f: da:77:9f:d9:dd:23:36:10:48:cb:c1:6a:de:51:6d: c0:8a:66:d5:8d:65:a4:44:4f:31:c6:81:cf:11:af: ca:2e:b4:ad:1f:e7:ba:b8:e2:1d:51:98:ba:f9:a3: a0:f1:46:de:7f:41:41:f3:30:d6:4f:ca:29:90:3a: 51:20:00:23:6c:62:fb:c2:00:45:f9:b6:44:52:c5: 1f:ac:16:8c:fc:17:3a:c0:7b:35:61:cf:f9:d0:b7: 6f:9f:3a:46:fd:f5:3b:2f:c8:24:90:af:77:33:33: ff:e8:bf:1f:d2:24:35:3a:49:84:7f:a5:fe:1e:94: 75:36:d9:a8:ff:92:02:ac:e9:4c:88:2e:e4:d2:17: a1:0e:03:3b:7b:c0:b8:4f:5d:06:3e:53:0b:33:63: 69:ea:ef:41:53:4f:39:4d:c4:84:02:50:00:9f:a3: 78:5e:0f:00:a4:7f:aa:12:2c:80:34:3f:48:da:ac: fd:d8:8b:07:74:39:3f:2f:6a:db:61:42:eb:61:4d: 75:f3:96:dd:15:69:33:45:3f:ae:fc:2e:f7:0b:8c: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:47:08:E5:75:CC:9A:FB:8A:96:AD:46:B5:17:22:51:DC:83:E7:82 X509v3 Authority Key Identifier: keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e5:6b:dc:34:93:81:72:53:77:96:c3:11:aa:c0:ea:bb:68: 52:d6:73:a5:e7:8f:b4:f5:00:31:5f:a9:c0:96:ea:ba:a1:96: d3:ce:a4:e3:ce:61:b3:dd:a0:3c:56:15:af:f7:b3:ab:0f:52: 7e:a3:52:be:28:fd:97:43:d0:67:f1:e5:10:54:9e:8b:00:a2: 4a:34:d2:07:22:f2:55:b8:44:a3:ae:e4:57:8a:87:0c:fd:08: 95:c4:b9:57:22:b5:b1:2e:a2:a5:53:eb:49:46:72:d1:dd:b6: 0a:3f:87:64:7c:0b:13:de:7e:f5:b8:84:d1:71:a2:2e:a9:6d: 47:d9:16:c3:fa:0c:c1:2e:5c:d6:89:6d:62:0c:99:89:50:e1: 04:97:d8:06:97:24:bc:ce:2a:0d:82:1a:af:47:51:e2:75:16: e3:8e:7c:de:e6:58:2d:04:13:f3:7e:ac:e8:1e:9d:4b:f0:d2: 77:d8:28:12:3d:62:49:e3:a3:5d:f6:fe:7e:74:be:a0:1f:45: ca:52:8d:6f:4e:83:b2:57:2c:31:70:94:3b:1c:a4:bb:0f:ed: 2d:45:f8:c8:91:76:53:5c:97:2f:48:ed:46:17:c9:3d:86:9a: b6:92:ae:ec:8b:51:7b:0c:c2:88:5a:27:05:7b:a3:9a:80:a1: d7:f6:14:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUTm6gCcOjCT93Dms0uMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTA2ZDgwYWI1OTJkZTdiZTBhMzMxYmJmNGZhMDA2OGQ0 MTQwOGEwHhcNMjUxMjA1MjEwMDQ1WhcNMjUxMjA2MjEwMDQ1WjAzMTEwLwYDVQQD EyhhODQ3MDhlNTc1Y2M5YWZiOGE5NmFkNDZiNTE3MjI1MWRjODNlNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafIjKt+2/Mt+EWF3pySLctDTbeO s5rpvf5Wrk4uJeRmFH+g0CEHN3UzUH/ad5/Z3SM2EEjLwWreUW3AimbVjWWkRE8x xoHPEa/KLrStH+e6uOIdUZi6+aOg8Ubef0FB8zDWT8opkDpRIAAjbGL7wgBF+bZE UsUfrBaM/Bc6wHs1Yc/50LdvnzpG/fU7L8gkkK93MzP/6L8f0iQ1OkmEf6X+HpR1 Ntmo/5ICrOlMiC7k0hehDgM7e8C4T10GPlMLM2Np6u9BU085TcSEAlAAn6N4Xg8A pH+qEiyAND9I2qz92IsHdDk/L2rbYULrYU1185bdFWkzRT+u/C73C4wQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhHCOV1zJr7ipatRrUXIlHcg+eCMB8GA1UdIwQY MBaAFDhQbYCrWS3nvgozG79PoAaNQUCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgt OGRmOGFmMzAwMWJjLzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mOTRmNzgtZjI2Mi00MjA3LThmMTgtOGRmOGFmMzAwMWJj LzEvT0ZCdGdLdFpMZWUtQ2pNYnYwLWdCbzFCUUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+Vr3DST gXJTd5bDEarA6rtoUtZzpeePtPUAMV+pwJbquqGW086k485hs92gPFYVr/ezqw9S fqNSvij9l0PQZ/HlEFSeiwCiSjTSByLyVbhEo67kV4qHDP0IlcS5VyK1sS6ipVPr SUZy0d22Cj+HZHwLE95+9biE0XGiLqltR9kWw/oMwS5c1oltYgyZiVDhBJfYBpck vM4qDYIar0dR4nUW44583uZYLQQT836s6B6dS/DSd9goEj1iSeOjXfb+fnS+oB9F ylKNb06DslcsMXCUOxykuw/tLUX4yJF2U1yXL0jtRhfJPYaatpKu7ItRewzCiFon BXujmoCh1/YUXw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:36 2025 by rpki-client