This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json) Hash identifier: k/TP2FPPmCIj5ZKptncrFfRPibAvYvB+RT9r34HsB/c= Subject key identifier: AB:E8:B5:5C:CD:02:65:2D:5A:43:9C:20:5E:5B:6F:D0:EE:BD:56:C2 Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5 Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5 Certificate serial: 019AF087F50EE65AC230613FA2A89821752A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:33 +0000 Manifest this update: Fri 05 Dec 2025 22:00:33 +0000 Manifest next update: Sat 06 Dec 2025 22:00:33 +0000 Files and hashes: 1: O3UwipOzhbcra36OR7wqsPRc0eI.roa (hash: r6js7pxWhUJ5O0hB/bSR9JVoNUKTp5yLnXbbvCl45RM=) 2: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: xwrmUOQghobV3TGL6NgUC2nxE+Is3Umpk6wbfXW5b38=) 3: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:f5:0e:e6:5a:c2:30:61:3f:a2:a8:98:21:75:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5 Validity Not Before: Dec 5 22:00:33 2025 GMT Not After : Dec 6 22:00:33 2025 GMT Subject: CN=abe8b55ccd02652d5a439c205e5b6fd0eebd56c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:5e:58:f6:53:3f:78:45:d1:09:9d:f7:99: 68:92:e3:a8:03:9e:87:61:c3:4f:4f:bf:44:64:42: e2:ec:33:7c:a9:fb:e2:cf:b9:e7:36:bd:17:42:d4: 9d:b8:7a:11:e2:43:1a:06:9a:db:1e:3b:0e:a0:3a: 96:1a:0c:4a:e0:23:e0:f9:17:1c:26:df:37:1b:98: db:f4:7d:a4:b2:99:43:f0:28:56:99:b7:23:14:68: 2b:61:a4:3a:75:b5:25:96:70:22:7a:47:a2:51:8c: e5:41:04:ed:4a:44:fa:a8:2a:7b:6b:0d:59:27:f6: 93:42:89:ec:ff:f1:c6:9f:0c:a3:24:4a:44:cc:d1: 08:60:87:9b:bf:1e:08:c7:6c:d1:9b:5e:22:dc:bc: 29:4e:6f:87:89:0e:86:39:90:d5:cd:57:f0:8e:5f: 14:36:d4:3d:37:d3:3a:da:d3:79:f0:2a:60:7b:83: 1e:57:de:5b:3b:31:48:a8:e6:cf:c6:05:0e:31:05: e9:10:90:ee:6d:1f:c0:a3:05:25:12:8c:12:18:9b: 8e:4a:a2:fd:72:8d:ab:d4:7d:eb:fa:3d:cb:f4:cf: ca:92:14:08:25:57:4f:31:db:57:e5:3b:b3:9d:6b: 67:b8:a1:c5:40:92:d6:2d:27:15:28:a4:b7:d5:6c: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E8:B5:5C:CD:02:65:2D:5A:43:9C:20:5E:5B:6F:D0:EE:BD:56:C2 X509v3 Authority Key Identifier: keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f0:2e:b8:7e:19:3d:98:63:77:0d:14:9c:00:87:6a:8b:25: e1:0d:6c:bc:cd:5e:1f:bc:e0:ca:95:3b:fe:5b:05:98:1d:c8: d8:58:aa:54:dd:51:e4:17:33:b7:bd:19:be:cb:18:12:b7:b3: 92:dd:7d:ec:27:a1:5d:83:37:00:3e:42:1a:43:db:49:82:27: 13:6f:5b:bd:4b:b2:c4:80:73:e6:cb:ae:0d:e8:53:25:a7:b5: 1d:8a:42:36:b3:82:72:94:d0:15:7d:21:14:7f:75:c4:63:8e: 02:9c:41:fe:e3:a5:7c:ac:36:7c:09:55:f7:f5:75:80:e2:a7: 47:45:f2:66:0b:2b:8d:5a:03:62:7d:e0:f2:d1:cb:32:99:aa: d6:08:62:fa:43:cf:b3:5e:e1:c6:ce:47:74:d0:b6:ee:72:c2: 6b:83:e8:d6:3f:0d:c9:47:3e:e5:91:e4:57:52:d2:9c:ba:05: 34:c5:30:7b:ae:77:50:74:3d:2b:ac:f3:87:31:55:c1:ac:51: ac:59:eb:71:ad:ed:d7:ad:e0:b6:83:a8:27:f1:6e:6b:b9:4c: 3d:96:61:3f:db:af:b1:38:73:79:0c:cc:1a:65:7f:98:5d:a9: 47:86:93:01:ac:e0:07:24:d4:a5:53:9c:6d:70:18:6d:bf:63: 4f:26:0a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/UO5lrCMGE/oqiYIXUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm ZGNjYzUwHhcNMjUxMjA1MjIwMDMzWhcNMjUxMjA2MjIwMDMzWjAzMTEwLwYDVQQD EyhhYmU4YjU1Y2NkMDI2NTJkNWE0MzljMjA1ZTViNmZkMGVlYmQ1NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucxeWPZTP3hF0Qmd95lokuOoA56H YcNPT79EZELi7DN8qfviz7nnNr0XQtSduHoR4kMaBprbHjsOoDqWGgxK4CPg+Rcc Jt83G5jb9H2ksplD8ChWmbcjFGgrYaQ6dbUllnAiekeiUYzlQQTtSkT6qCp7aw1Z J/aTQons//HGnwyjJEpEzNEIYIebvx4Ix2zRm14i3LwpTm+HiQ6GOZDVzVfwjl8U NtQ9N9M62tN58Cpge4MeV95bOzFIqObPxgUOMQXpEJDubR/AowUlEowSGJuOSqL9 co2r1H3r+j3L9M/KkhQIJVdPMdtX5TuznWtnuKHFQJLWLScVKKS31Wwa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvotVzNAmUtWkOcIF5bb9DuvVbCMB8GA1UdIwQY MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt ZTFlYjc5ODk5MjQyLzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPAuuH4Z PZhjdw0UnACHaosl4Q1svM1eH7zgypU7/lsFmB3I2FiqVN1R5Bczt70ZvssYErez kt197CehXYM3AD5CGkPbSYInE29bvUuyxIBz5suuDehTJae1HYpCNrOCcpTQFX0h FH91xGOOApxB/uOlfKw2fAlV9/V1gOKnR0XyZgsrjVoDYn3g8tHLMpmq1ghi+kPP s17hxs5HdNC27nLCa4Po1j8NyUc+5ZHkV1LSnLoFNMUwe653UHQ9K6zzhzFVwaxR rFnrca3t163gtoOoJ/Fua7lMPZZhP9uvsThzeQzMGmV/mF2pR4aTAazgByTUpVOc bXAYbb9jTyYK2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:50 2025 by rpki-client