This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json) Hash identifier: AuEWswkabloUbjQRC3gLxXdjUXA8UVuKMcmxenqm7zA= Subject key identifier: B9:EA:5D:15:71:CA:D0:52:5D:55:5D:09:50:20:84:D6:73:15:35:EE Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Certificate serial: 019AF50B9A999D5927D623BBAF0212FCDF8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:49 +0000 Manifest this update: Sat 06 Dec 2025 19:02:49 +0000 Manifest next update: Sun 07 Dec 2025 19:02:49 +0000 Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=) 2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: P1Dy4VavRBnO9RJ2rWjxaF3oeunpCZwAO9siqH+pURs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:9a:99:9d:59:27:d6:23:bb:af:02:12:fc:df:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa Validity Not Before: Dec 6 19:02:49 2025 GMT Not After : Dec 7 19:02:49 2025 GMT Subject: CN=b9ea5d1571cad0525d555d09502084d6731535ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:0f:a5:75:7d:39:34:5c:ec:9d:f0:7b:82: e9:ec:b4:95:5f:47:ec:fd:16:d8:fe:ab:41:ad:ae: 8d:eb:b9:93:32:fa:b7:22:cf:2f:f5:e9:9e:ec:e5: 9c:02:b3:98:83:2a:44:98:0d:81:23:8b:13:b7:57: d6:df:9f:59:49:28:5b:78:1a:f1:76:07:56:10:04: fb:ce:58:23:d4:d0:18:9b:bc:ba:45:72:4d:c4:49: ed:8b:d1:90:ea:f0:9e:bc:06:46:47:37:6f:a7:7f: bc:79:52:a2:e5:2e:53:e6:d2:1d:dc:56:a2:82:a6: 7d:5e:c1:4e:55:92:d1:bb:ff:d4:82:43:d4:00:bf: a6:b0:f1:ea:65:07:15:4e:a0:44:20:67:e2:07:d4: 18:1e:49:81:83:4a:dd:a1:42:9c:f9:fa:68:2a:3c: b8:60:1d:3b:84:01:bf:a6:a6:af:0d:d4:5d:06:08: 30:7d:d5:9a:99:38:42:df:08:84:f5:a8:3c:51:c8: 9f:5d:41:32:1d:8f:3a:5d:23:76:bb:54:01:21:7f: f4:21:f7:b0:d2:29:cc:c6:3d:2a:fd:4a:53:95:16: af:b0:69:b4:fd:93:d9:f1:a1:32:da:5d:bf:ba:50: 34:d1:89:1e:58:6b:f6:7f:18:b9:15:58:ef:01:0c: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EA:5D:15:71:CA:D0:52:5D:55:5D:09:50:20:84:D6:73:15:35:EE X509v3 Authority Key Identifier: keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:32:e2:dd:f1:2d:59:63:b9:b8:c4:8a:6c:ab:e1:20:45:08: 72:e8:d8:4d:f8:09:92:71:5f:b6:a5:db:63:2d:38:0c:de:bf: 86:a6:96:d4:31:17:85:78:0e:07:bd:fa:68:91:65:b9:3a:be: 32:58:e1:6c:6d:ac:03:bc:94:54:99:46:e0:6d:19:70:0f:74: 1c:67:a7:dc:db:2c:c8:b2:f1:65:b8:85:ac:81:57:db:70:34: 36:56:78:49:7d:8c:be:eb:df:0a:d7:ec:71:a6:09:49:78:a2: 49:70:ef:d0:a8:df:c7:9f:38:84:51:34:e8:cf:1c:68:71:6b: 2e:a0:bc:dc:91:e8:7f:b4:a4:0e:52:fb:44:f6:01:a2:07:1c: a5:93:fb:e0:93:f1:5e:2f:ae:15:47:0c:7b:11:bd:93:48:16: c7:db:e6:77:49:2f:02:d7:b0:9e:7c:fd:31:a7:3e:30:15:78: fc:7e:02:b9:5f:2f:d1:29:51:d1:3a:62:65:e4:3b:50:f2:c8: 83:f1:b3:35:4b:96:23:b0:b1:cb:f2:c0:21:79:2a:7c:53:40: 1a:ca:63:5b:7b:f2:53:47:d0:55:23:8d:77:e8:1d:c5:9d:2d: 79:9b:e6:ce:dd:49:0a:4e:24:4b:97:a6:7b:21:17:7c:28:8a: 5e:c3:f8:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C5qZnVkn1iO7rwIS/N+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZmQxNmMyNDdjZjQ2NmVlZDMxYTMwNGJiOGYxN2ZhMzIx NWFhYWEwHhcNMjUxMjA2MTkwMjQ5WhcNMjUxMjA3MTkwMjQ5WjAzMTEwLwYDVQQD EyhiOWVhNWQxNTcxY2FkMDUyNWQ1NTVkMDk1MDIwODRkNjczMTUzNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM0PpXV9OTRc7J3we4Lp7LSVX0fs /RbY/qtBra6N67mTMvq3Is8v9eme7OWcArOYgypEmA2BI4sTt1fW359ZSShbeBrx dgdWEAT7zlgj1NAYm7y6RXJNxEnti9GQ6vCevAZGRzdvp3+8eVKi5S5T5tId3Fai gqZ9XsFOVZLRu//UgkPUAL+msPHqZQcVTqBEIGfiB9QYHkmBg0rdoUKc+fpoKjy4 YB07hAG/pqavDdRdBggwfdWamThC3wiE9ag8UcifXUEyHY86XSN2u1QBIX/0Ifew 0inMxj0q/UpTlRavsGm0/ZPZ8aEy2l2/ulA00YkeWGv2fxi5FVjvAQxcnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnqXRVxytBSXVVdCVAghNZzFTXuMB8GA1UdIwQY MBaAFKH9FsJHz0Zu7TGjBLuPF/oyFaqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTct NmNlZjFhYmFiM2ZjLzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lMzAzN2YtMzM4Yi00NmYyLThmOTctNmNlZjFhYmFiM2Zj LzEvb2YwV3drZlBSbTd0TWFNRXU0OFgtaklWcXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDLi3fEt WWO5uMSKbKvhIEUIcujYTfgJknFftqXbYy04DN6/hqaW1DEXhXgOB736aJFluTq+ MljhbG2sA7yUVJlG4G0ZcA90HGen3NssyLLxZbiFrIFX23A0NlZ4SX2MvuvfCtfs caYJSXiiSXDv0Kjfx584hFE06M8caHFrLqC83JHof7SkDlL7RPYBogccpZP74JPx Xi+uFUcMexG9k0gWx9vmd0kvAtewnnz9Mac+MBV4/H4CuV8v0SlR0TpiZeQ7UPLI g/GzNUuWI7Cxy/LAIXkqfFNAGspjW3vyU0fQVSONd+gdxZ0teZvmzt1JCk4kS5em eyEXfCiKXsP4dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:04:30 2025 by rpki-client