This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json) Hash identifier: T6BgRIfSTSdnJjREypcaoIcYFVIN2mF0+UfQP9osfKI= Subject key identifier: AB:99:14:1E:59:D3:D4:DE:FC:F4:61:30:7A:B5:EF:95:08:95:71:82 Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc Certificate serial: 019AF19B39A533F725626D0D719408E2C880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: agrgIe++VFhF+80JG6vq35CNE2Nac0ti/3kB04BmaO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:a5:33:f7:25:62:6d:0d:71:94:08:e2:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=ab99141e59d3d4defcf461307ab5ef9508957182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:a7:e8:1f:1d:1f:12:2f:a4:41:76:18:9d: 2a:a0:93:3d:49:f3:42:96:e4:3f:ab:2d:ba:7b:dc: a1:42:eb:b4:c2:57:f2:40:79:b7:da:44:4a:38:1f: 59:33:f9:67:8b:d0:5c:c1:44:ab:fb:dd:a3:5b:6b: 9f:c4:be:7f:0e:1a:e1:66:71:48:e3:6d:1c:a4:06: 07:a4:c2:93:53:88:8c:74:ad:66:7e:b5:ea:64:d6: 2b:00:b2:d0:3e:4c:33:13:e0:25:72:d7:c6:13:be: 42:f5:fe:23:16:9d:50:4c:d3:de:2c:1d:1d:dc:32: b4:17:f3:36:da:d8:01:20:10:7c:c4:45:bf:de:a1: af:1f:dc:90:a1:b6:a0:42:28:69:3a:89:9c:78:32: 43:b0:ef:46:3d:5d:88:8e:10:7b:1b:b8:4f:26:5a: e0:42:f3:7a:cf:42:01:83:e9:f9:9b:e9:32:ba:e4: a8:f7:15:27:23:b7:bb:6d:9d:f4:41:a9:33:52:b7: bb:eb:91:99:10:e6:4e:44:96:23:76:c5:96:02:96: 19:99:d4:69:78:78:87:9c:b9:95:e3:49:cf:99:60: 89:f2:ea:7d:99:26:c5:58:f1:51:fe:92:29:4d:aa: d8:52:bc:e6:23:a4:9e:7c:17:97:4c:33:56:e3:b5: a3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:14:1E:59:D3:D4:DE:FC:F4:61:30:7A:B5:EF:95:08:95:71:82 X509v3 Authority Key Identifier: keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:a6:2c:39:eb:fd:f6:ef:2b:f7:08:e4:55:19:dd:10:3f: 9b:03:3d:59:2e:63:04:b1:ca:6e:c5:98:f9:15:f8:ce:56:66: 87:55:c7:b5:79:28:95:3e:06:e0:77:33:71:5b:4d:a8:62:85: 42:88:bf:ee:f9:71:7e:ac:3e:5f:cf:9e:e2:21:12:aa:86:5c: 0e:e9:2d:fe:62:de:13:df:6b:3a:4e:39:66:26:31:6b:71:fe: 78:26:41:65:a8:30:79:3c:9b:7f:97:9d:38:0d:e9:c6:6a:ed: bc:f5:8f:0a:86:d8:47:cb:dc:b9:f5:2a:e3:cd:c6:bb:73:7a: f7:0e:1f:07:3d:b9:91:69:0f:95:ee:16:75:bd:7f:b0:26:ba: b2:f5:ef:16:cd:d9:67:3a:d4:4b:68:0a:0a:6f:2f:13:c3:a1: 2a:4e:64:81:2e:77:8c:2d:3a:57:3a:b5:7c:6e:45:b6:2c:8e: 35:32:d4:d6:63:5d:1e:bc:79:8c:89:0e:04:0b:93:d8:14:80: b8:e8:86:63:89:24:15:a0:cc:c4:45:ca:79:fb:96:15:7e:81: 8e:50:ae:06:5a:4a:5e:82:08:1a:da:30:ae:ed:62:7f:c8:0e: f2:09:ce:06:b4:5c:95:6c:94:35:04:fd:d1:32:62:84:d8:9c: a4:41:39:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzmlM/clYm0NcZQI4siAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjMzYWVjZDhkNTlhNmE0ZjA1NjkyY2NjNzJlMmI3MTM5 ZTE3Y2MwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EyhhYjk5MTQxZTU5ZDNkNGRlZmNmNDYxMzA3YWI1ZWY5NTA4OTU3MTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uun6B8dHxIvpEF2GJ0qoJM9SfNC luQ/qy26e9yhQuu0wlfyQHm32kRKOB9ZM/lni9BcwUSr+92jW2ufxL5/DhrhZnFI 420cpAYHpMKTU4iMdK1mfrXqZNYrALLQPkwzE+AlctfGE75C9f4jFp1QTNPeLB0d 3DK0F/M22tgBIBB8xEW/3qGvH9yQobagQihpOomceDJDsO9GPV2IjhB7G7hPJlrg QvN6z0IBg+n5m+kyuuSo9xUnI7e7bZ30QakzUre765GZEOZORJYjdsWWApYZmdRp eHiHnLmV40nPmWCJ8up9mSbFWPFR/pIpTarYUrzmI6SefBeXTDNW47WjQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuZFB5Z09Te/PRhMHq175UIlXGCMB8GA1UdIwQY MBaAFKHzOuzY1ZpqTwVpLMxy4rcTnhfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4Yjgt MzlkNjNlOWU1ODZiLzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMDdmN2MtMjMwOC00ZDRhLTk4YjgtMzlkNjNlOWU1ODZi LzEvb2ZNNjdOalZtbXBQQldrc3pITGl0eE9lRjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHSmLDnr /fbvK/cI5FUZ3RA/mwM9WS5jBLHKbsWY+RX4zlZmh1XHtXkolT4G4HczcVtNqGKF Qoi/7vlxfqw+X8+e4iESqoZcDukt/mLeE99rOk45ZiYxa3H+eCZBZagweTybf5ed OA3pxmrtvPWPCobYR8vcufUq483Gu3N69w4fBz25kWkPle4Wdb1/sCa6svXvFs3Z ZzrUS2gKCm8vE8OhKk5kgS53jC06Vzq1fG5FtiyONTLU1mNdHrx5jIkOBAuT2BSA uOiGY4kkFaDMxEXKefuWFX6BjlCuBlpKXoIIGtowru1if8gO8gnOBrRclWyUNQT9 0TJihNicpEE5vw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:56 2025 by rpki-client