This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json) Hash identifier: R/zzL7TPYHi5g1jILnHP54Oy8TytDLY5WTPHRhlICso= Subject key identifier: 04:9C:56:90:F0:1D:32:1F:71:A8:F0:E1:B0:F9:21:33:AE:B4:CE:05 Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Certificate serial: 019B2F9E1C02141D5E456B1C7C01C04FF72E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft Manifest number: 102E Signing time: Thu 18 Dec 2025 04:00:49 +0000 Manifest this update: Thu 18 Dec 2025 04:00:49 +0000 Manifest next update: Fri 19 Dec 2025 04:00:49 +0000 Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: K6+CAnWcKk08mbb3jHJNpBSKim+AHv9ZiYCS1f7aJfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:1c:02:14:1d:5e:45:6b:1c:7c:01:c0:4f:f7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Validity Not Before: Dec 18 04:00:49 2025 GMT Not After : Dec 19 04:00:49 2025 GMT Subject: CN=049c5690f01d321f71a8f0e1b0f92133aeb4ce05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:2e:01:22:9b:b0:04:37:ae:4e:cb:47:2d: a4:58:1f:6c:70:ae:65:0c:c7:53:0b:fd:53:a5:dc: 5a:91:ce:a9:78:84:ce:0a:26:86:21:75:3d:7d:6d: 39:9e:71:30:b5:08:a9:40:01:30:fc:8a:7f:28:fb: 16:a5:96:53:fa:5a:7e:07:6a:87:7e:32:a4:e4:3b: f4:e1:6e:fd:17:ef:58:22:60:a5:50:21:f8:25:1a: 6b:69:00:de:7a:08:04:96:0f:13:31:77:e6:cd:e3: 12:c4:01:77:d9:9e:21:96:5d:6d:2f:a8:99:0f:00: ac:83:39:75:a8:33:ab:13:d9:c0:0e:66:a7:aa:a8: 96:ff:4e:57:26:3c:e8:29:7b:08:66:59:e4:30:98: a7:df:fa:9b:0d:a6:84:3e:cb:d2:5f:51:48:94:82: 0c:33:85:30:3c:9d:87:af:5d:7c:ab:67:61:58:e9: 42:fc:6b:71:e9:4b:40:37:36:30:e3:ab:37:40:36: 12:b8:1b:3b:d0:41:70:5c:0a:f2:12:f0:12:64:b5: c6:9d:da:6b:63:b7:99:ee:30:80:3c:ce:00:c3:44: b0:a6:de:81:f8:87:e8:45:03:61:b8:4a:d6:94:4a: 5e:2d:c8:ae:e2:e2:5b:fa:82:d2:a6:0b:d2:9c:b7: 6e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9C:56:90:F0:1D:32:1F:71:A8:F0:E1:B0:F9:21:33:AE:B4:CE:05 X509v3 Authority Key Identifier: keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3e:94:43:ba:5e:4b:9d:eb:36:2e:03:bc:c1:f5:74:a1:30: b7:8b:26:e8:84:cf:8a:40:4b:5f:71:37:af:d8:4d:06:70:d4: cf:64:09:05:ca:68:f2:28:72:b1:d7:5a:68:79:79:4c:07:34: c9:38:8a:a8:9d:79:ee:b5:83:e9:27:3f:8c:2b:f6:5b:36:08: 2b:1d:ba:00:b7:51:e6:ae:e1:6d:d1:a3:c1:44:03:f2:4a:5a: 23:2a:21:f1:99:4e:61:88:2c:01:a7:f3:a0:6b:91:bb:f0:a7: e8:7a:a1:b0:a7:63:42:d7:50:1e:ff:c3:7a:c2:67:a3:fc:8c: 1d:7d:9d:9a:7b:13:80:0f:21:80:98:bf:fb:35:ed:50:e5:98: 61:a4:4d:0e:1c:f9:e3:e7:9d:d4:59:0b:fd:de:58:a7:aa:7a: a6:42:e6:1d:3c:89:e0:05:55:d9:34:46:4e:c0:4e:38:22:0a: 25:3f:c2:0b:77:40:12:9f:98:f6:2a:95:95:3c:5e:23:d0:8f: 7d:e7:07:f2:ce:bf:b7:b6:21:a7:78:81:03:b5:e3:41:d9:7d: 69:21:0c:8a:8f:cf:7c:1d:44:b8:a9:b3:6d:bb:07:a0:80:25: b1:2e:4d:c6:d5:41:25:53:c9:26:b0:37:81:94:b3:eb:47:15: a4:80:11:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnhwCFB1eRWscfAHAT/cuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm ZDRhZWMwHhcNMjUxMjE4MDQwMDQ5WhcNMjUxMjE5MDQwMDQ5WjAzMTEwLwYDVQQD EygwNDljNTY5MGYwMWQzMjFmNzFhOGYwZTFiMGY5MjEzM2FlYjRjZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nwuASKbsAQ3rk7LRy2kWB9scK5l DMdTC/1Tpdxakc6peITOCiaGIXU9fW05nnEwtQipQAEw/Ip/KPsWpZZT+lp+B2qH fjKk5Dv04W79F+9YImClUCH4JRpraQDeeggElg8TMXfmzeMSxAF32Z4hll1tL6iZ DwCsgzl1qDOrE9nADmanqqiW/05XJjzoKXsIZlnkMJin3/qbDaaEPsvSX1FIlIIM M4UwPJ2Hr118q2dhWOlC/Gtx6UtANzYw46s3QDYSuBs70EFwXAryEvASZLXGndpr Y7eZ7jCAPM4Aw0Swpt6B+IfoRQNhuErWlEpeLciu4uJb+oLSpgvSnLdu5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAScVpDwHTIfcajw4bD5ITOutM4FMB8GA1UdIwQY MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD6UQ7pe S53rNi4DvMH1dKEwt4sm6ITPikBLX3E3r9hNBnDUz2QJBcpo8ihysddaaHl5TAc0 yTiKqJ157rWD6Sc/jCv2WzYIKx26ALdR5q7hbdGjwUQD8kpaIyoh8ZlOYYgsAafz oGuRu/Cn6HqhsKdjQtdQHv/DesJno/yMHX2dmnsTgA8hgJi/+zXtUOWYYaRNDhz5 4+ed1FkL/d5Yp6p6pkLmHTyJ4AVV2TRGTsBOOCIKJT/CC3dAEp+Y9iqVlTxeI9CP fecH8s6/t7Yhp3iBA7XjQdl9aSEMio/PfB1EuKmzbbsHoIAlsS5NxtVBJVPJJrA3 gZSz60cVpIARpA== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:15 2025 by rpki-client