This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json) Hash identifier: khwwh8fKvrUyb/bw5wNGDKx3Vu1evOuY/THAlYTv5aQ= Subject key identifier: 2D:B0:EA:53:A8:E7:3B:6D:ED:38:55:5D:3C:99:51:D4:A3:89:B8:AF Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Certificate serial: 019AF1D18D8467D224138D29F0B57DC97148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft Manifest number: 100E Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: l7IbOXARP0XfGWmLJcLRTM0xKhm1Rl2o0uVGdKsRQi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8d:84:67:d2:24:13:8d:29:f0:b5:7d:c9:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=2db0ea53a8e73b6ded38555d3c9951d4a389b8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:d0:91:31:fb:56:4e:3f:07:75:b6:45:5e: e6:f9:f4:4b:f1:f7:6c:44:fb:49:ee:2e:21:29:3e: 23:9b:35:cc:64:fc:b6:41:fe:5d:ab:b4:51:13:1c: 64:90:f6:ea:e4:f0:f2:d4:33:1a:5f:5e:f3:7e:06: d1:65:f5:ce:c8:7b:64:be:c0:cf:57:62:42:f0:41: b9:4a:76:59:9a:0c:51:b1:81:e6:d8:98:ac:8e:8e: 96:36:7d:97:55:ec:58:6a:94:7a:59:85:87:3f:53: 3d:05:58:96:cc:3e:68:ea:e3:3f:0a:86:03:ac:25: 81:23:ba:57:86:b4:75:f1:d2:0d:27:e0:b1:41:e0: 8e:9f:ad:ac:a7:4a:36:d2:09:e3:10:55:06:7f:79: 57:44:4a:57:93:30:00:ab:9c:8c:c7:37:b6:6f:f1: f0:80:85:cb:03:78:f5:80:94:06:a2:3d:e2:03:4d: d5:2d:88:3a:69:e1:cc:13:03:c3:d3:2b:51:47:36: 6d:62:3d:58:9d:b6:24:f1:3a:35:fb:b5:a0:bb:2c: 43:35:56:5c:45:de:b4:3a:88:02:6c:00:6c:87:a4: 2a:cf:e4:97:21:ec:82:02:0b:f9:0e:2c:83:73:1d: 0a:e6:3d:4a:6c:e3:d5:ce:ab:ff:23:09:13:a1:a7: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:EA:53:A8:E7:3B:6D:ED:38:55:5D:3C:99:51:D4:A3:89:B8:AF X509v3 Authority Key Identifier: keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:aa:dc:74:70:60:ca:ab:bd:bb:8f:8c:a1:ff:9f:3b:59:38: 56:2b:7e:1e:96:83:c0:f7:17:f0:9d:1f:25:4c:62:b3:8f:83: 27:0b:a6:08:c0:3b:8c:61:90:65:31:82:3a:61:c2:0a:d3:32: 73:b1:ed:ff:81:6c:5e:36:f3:13:88:cd:e6:0a:49:da:61:0a: 5c:ae:4d:c2:db:57:fa:ac:c1:54:25:fc:aa:82:49:7a:7a:e0: 0c:14:45:8d:2d:2e:5d:a9:c9:5c:25:62:96:74:1e:76:3c:64: 43:d5:61:74:7c:43:37:cb:4e:7c:f3:55:66:2b:7c:15:7a:93: 32:d0:9e:52:9a:02:21:02:f2:22:7f:4e:0a:81:cc:99:c3:94: 29:ef:06:11:68:22:1b:d1:93:dc:d9:2e:39:93:bf:1d:ca:bb: 19:ef:65:4a:a9:cf:d5:a2:4d:6b:91:1e:d6:20:c4:0c:6e:67: bd:64:02:44:56:44:8f:6c:e1:b1:f3:4d:e2:97:08:11:26:0c: 80:61:63:ad:64:99:ae:4e:a4:69:60:2f:5b:1e:69:46:33:b8: 47:c1:2e:a6:b2:1b:b1:ee:ec:76:62:92:ed:1e:46:ba:ea:4c: 03:6f:5d:13:ca:38:9d:65:6e:75:bc:04:79:75:ef:cc:69:65: 34:2f:8c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y2EZ9IkE40p8LV9yXFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZmRhNmVkMTYxZjgyMmI4MmJlYWQyOWVlMTA2MWM2OGZm ZDRhZWMwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD EygyZGIwZWE1M2E4ZTczYjZkZWQzODU1NWQzYzk5NTFkNGEzODliOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPQkTH7Vk4/B3W2RV7m+fRL8fds RPtJ7i4hKT4jmzXMZPy2Qf5dq7RRExxkkPbq5PDy1DMaX17zfgbRZfXOyHtkvsDP V2JC8EG5SnZZmgxRsYHm2Jisjo6WNn2XVexYapR6WYWHP1M9BViWzD5o6uM/CoYD rCWBI7pXhrR18dINJ+CxQeCOn62sp0o20gnjEFUGf3lXREpXkzAAq5yMxze2b/Hw gIXLA3j1gJQGoj3iA03VLYg6aeHMEwPD0ytRRzZtYj1YnbYk8To1+7WguyxDNVZc Rd60OogCbABsh6Qqz+SXIeyCAgv5DiyDcx0K5j1KbOPVzqv/IwkToac6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2w6lOo5ztt7ThVXTyZUdSjibivMB8GA1UdIwQY MBaAFDn9pu0WH4Irgr6tKe4QYcaP/UrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTct Y2MzN2MyNzJiNzcxLzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWViOTMtN2VhNy00YjdkLWFjNTctY2MzN2MyNzJiNzcx LzEvT2YybTdSWWZnaXVDdnEwcDdoQmh4b185U3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKrcdHBg yqu9u4+Mof+fO1k4Vit+HpaDwPcX8J0fJUxis4+DJwumCMA7jGGQZTGCOmHCCtMy c7Ht/4FsXjbzE4jN5gpJ2mEKXK5NwttX+qzBVCX8qoJJenrgDBRFjS0uXanJXCVi lnQedjxkQ9VhdHxDN8tOfPNVZit8FXqTMtCeUpoCIQLyIn9OCoHMmcOUKe8GEWgi G9GT3NkuOZO/Hcq7Ge9lSqnP1aJNa5Ee1iDEDG5nvWQCRFZEj2zhsfNN4pcIESYM gGFjrWSZrk6kaWAvWx5pRjO4R8EuprIbse7sdmKS7R5GuupMA29dE8o4nWVudbwE eXXvzGllNC+MiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:29 2025 by rpki-client