This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json) Hash identifier: YGIgc/XmTOVrZynF+WrUuy6lv7haNIO5aBypPrCPnsM= Subject key identifier: 76:3D:FA:70:A4:73:1C:74:2E:42:CD:E0:D6:72:42:79:2A:20:B3:A5 Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f Certificate serial: 019AF12CE5B5BC56F77C07DF1C8BCAA83564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft Manifest number: 0BD9 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: VTKAN/2lfn6ENTE6lAn0m9X8DtvufWbTLqpBxHI3eHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e5:b5:bc:56:f7:7c:07:df:1c:8b:ca:a8:35:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=763dfa70a4731c742e42cde0d67242792a20b3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:d4:54:9a:49:3d:c6:f8:cf:99:9e:e6:f0: 3f:ff:85:c6:86:3d:5c:6a:9a:0b:f1:ca:ab:0b:5c: 3b:98:8d:20:86:2f:86:2d:7b:07:e4:eb:50:c2:0e: 33:af:b6:a6:eb:2b:24:18:28:71:13:59:6c:4d:11: 12:82:73:0e:3e:4a:84:cd:fe:d9:1c:0b:ff:c3:43: 1a:37:29:5a:75:d5:78:52:0f:6a:1b:0b:24:1f:28: a9:61:9b:51:b8:92:57:fa:03:36:69:6b:c7:31:50: 3f:26:5a:39:ff:43:b2:5f:3c:44:cb:06:52:20:2b: 42:2d:9f:92:35:ba:b1:5f:07:d9:bc:3b:7b:00:c5: 47:b5:43:0b:56:a3:d1:49:33:74:c6:0b:1d:41:51: 92:27:f0:c3:12:82:cb:00:b2:d8:4d:4b:d7:1a:92: 5c:ef:d6:8f:10:80:14:8c:43:43:fb:0f:90:2e:b0: f7:84:d0:7e:ec:50:93:ad:38:80:08:66:a4:aa:41: e6:be:b0:59:56:b7:4d:08:9f:a3:1b:bf:77:f5:47: ff:9f:ae:86:b6:bf:f0:4b:b6:df:99:c3:91:a0:7f: 39:e0:85:cf:48:b9:00:e0:ca:e6:69:37:fc:bf:66: c7:37:39:f8:4b:0c:8d:e3:38:6f:15:3a:e2:d7:73: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3D:FA:70:A4:73:1C:74:2E:42:CD:E0:D6:72:42:79:2A:20:B3:A5 X509v3 Authority Key Identifier: keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:48:9e:4a:fa:e5:43:f5:1d:58:4b:cb:38:fa:ca:0f:20:4d: 49:cd:f6:e1:a6:60:7e:7d:c3:af:67:22:f0:9f:23:02:f7:02: 1d:df:00:5f:55:16:90:59:fd:cc:0d:f9:94:6a:eb:0d:5c:e4: 22:98:9c:5a:16:1c:d2:31:5d:f8:33:dd:7a:d8:ea:1d:45:da: 8d:b5:f7:2d:a1:44:6c:29:18:2b:56:f4:b8:d2:c0:ec:8a:73: e1:4b:2c:2c:33:87:f6:95:0c:cc:e3:0c:1b:70:95:b6:c8:d3: a8:80:dc:99:bb:24:b8:5e:b6:02:a6:1f:fb:ea:d6:8a:ab:94: ea:af:31:64:38:2d:e1:e1:ea:16:71:8a:b0:f3:27:65:d6:0e: 59:e1:f4:f4:44:65:6b:bd:78:98:1b:d8:20:ce:f9:df:85:44: 3a:76:f9:f0:4f:5b:32:8a:c5:7c:bb:b0:72:cd:a1:1b:88:69: 0b:3b:8f:72:7d:67:0f:cc:3e:3b:37:69:ce:71:ca:a1:ae:09: 30:47:55:8e:18:a5:e2:38:c4:af:5b:4b:ae:ec:aa:07:19:39: f6:35:b1:8a:1e:8e:e7:b1:0f:7e:47:af:d6:fa:2f:0b:b0:35: 33:fc:99:ac:1e:63:40:99:56:7c:f1:72:ee:9b:8d:85:ab:6f: 25:3f:99:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOW1vFb3fAffHIvKqDVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZmY4ZmMxNmU5MmZiY2MwNzlkODBkNmJlM2Q3ZGVkZjFk MDY2OGYwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg3NjNkZmE3MGE0NzMxYzc0MmU0MmNkZTBkNjcyNDI3OTJhMjBiM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyLUVJpJPcb4z5me5vA//4XGhj1c apoL8cqrC1w7mI0ghi+GLXsH5OtQwg4zr7am6yskGChxE1lsTRESgnMOPkqEzf7Z HAv/w0MaNyladdV4Ug9qGwskHyipYZtRuJJX+gM2aWvHMVA/Jlo5/0OyXzxEywZS ICtCLZ+SNbqxXwfZvDt7AMVHtUMLVqPRSTN0xgsdQVGSJ/DDEoLLALLYTUvXGpJc 79aPEIAUjEND+w+QLrD3hNB+7FCTrTiACGakqkHmvrBZVrdNCJ+jG7939Uf/n66G tr/wS7bfmcORoH854IXPSLkA4MrmaTf8v2bHNzn4SwyN4zhvFTri13OCdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY9+nCkcxx0LkLN4NZyQnkqILOlMB8GA1UdIwQY MBaAFDn/j8FukvvMB52A1r49fe3x0GaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQt ZjAxNzA3NTQ4NTRhLzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83NzkxMzktNTc1MS00N2ZjLTk2YWQtZjAxNzA3NTQ4NTRh LzEvT2YtUHdXNlMtOHdIbllEV3ZqMTk3ZkhRWm84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEieSvrl Q/UdWEvLOPrKDyBNSc324aZgfn3Dr2ci8J8jAvcCHd8AX1UWkFn9zA35lGrrDVzk IpicWhYc0jFd+DPdetjqHUXajbX3LaFEbCkYK1b0uNLA7Ipz4UssLDOH9pUMzOMM G3CVtsjTqIDcmbskuF62AqYf++rWiquU6q8xZDgt4eHqFnGKsPMnZdYOWeH09ERl a714mBvYIM7534VEOnb58E9bMorFfLuwcs2hG4hpCzuPcn1nD8w+OzdpznHKoa4J MEdVjhil4jjEr1tLruyqBxk59jWxih6O57EPfkev1vovC7A1M/yZrB5jQJlWfPFy 7puNhatvJT+ZpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:56 2025 by rpki-client