This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json) Hash identifier: 8F6c4sUG7RVgbPW79e1HI28EQPba5PkLXK0SedJfKAA= Subject key identifier: F4:2E:B1:28:1A:3F:10:E1:70:6C:F7:33:A4:28:EF:CA:4B:51:B1:A4 Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca Certificate serial: 019B3DFEB49A547FAE87F08AA9FB7B960C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 23:01:01 +0000 Manifest this update: Sat 20 Dec 2025 23:01:01 +0000 Manifest next update: Sun 21 Dec 2025 23:01:01 +0000 Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=) 2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: uRlSwR23i87G7fzmKitIc6ttD8ubdNqC9WvraocV4GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b4:9a:54:7f:ae:87:f0:8a:a9:fb:7b:96:0c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca Validity Not Before: Dec 20 23:01:01 2025 GMT Not After : Dec 21 23:01:01 2025 GMT Subject: CN=f42eb1281a3f10e1706cf733a428efca4b51b1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:17:12:44:d7:c3:bc:93:48:db:53:f0:6a: 52:09:f0:95:69:16:a5:4a:20:d7:2b:35:43:6d:be: b1:51:d7:d8:a6:2a:29:41:83:dd:a2:67:0a:b2:ae: 0e:c8:94:53:ea:b4:7a:23:52:ca:7c:46:cb:33:2f: af:af:4e:e5:c4:b2:ef:19:dc:6e:5b:e7:4c:38:b0: 6e:08:04:0b:a3:da:78:c3:3e:71:3e:8c:38:89:7e: 35:cd:7e:c4:1c:e0:6c:34:69:60:0c:9c:95:07:f9: 63:71:c6:de:a1:9f:c1:23:fd:c8:53:55:63:52:4d: ec:79:20:ee:59:91:8c:7c:5e:87:1b:8a:40:60:ac: ec:0b:8e:11:b9:79:1e:b3:b9:3c:63:fa:8c:a6:b5: b4:00:d3:2e:35:04:5a:e9:82:88:82:fe:61:d1:bb: 04:34:04:84:28:be:66:f6:0f:00:d4:d2:a8:6c:35: 0a:17:bd:46:16:c9:0b:e1:fc:32:f6:cb:ae:d8:b9: 18:ed:5a:43:55:51:31:82:ec:8d:bb:ec:e6:0d:59: 7e:24:aa:7b:36:29:f6:ca:74:25:5c:88:d2:d4:28: 69:fe:21:7c:26:88:47:fc:e7:db:f9:77:82:2c:9d: 50:18:02:bb:9a:36:6a:af:33:4a:d8:e2:df:07:62: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:B1:28:1A:3F:10:E1:70:6C:F7:33:A4:28:EF:CA:4B:51:B1:A4 X509v3 Authority Key Identifier: keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:0a:68:38:f9:98:10:84:0e:be:05:25:b7:df:66:2e:74:9e: 6d:f8:ae:59:a6:9d:c3:ef:6f:af:1a:55:4a:e5:f8:df:9f:3a: 47:59:76:f5:59:a6:01:16:b0:14:39:85:d0:39:27:ad:23:93: 28:0e:fc:c4:8f:5e:96:f6:7d:9d:65:4b:23:0a:b2:00:d5:a4: 74:e0:7b:d6:7d:d7:a2:68:f6:d3:51:38:52:54:bb:08:f5:10: b6:76:4a:a3:df:60:df:bb:24:32:36:56:dd:24:65:52:0b:c6: a7:bc:6d:63:45:10:8d:23:18:b2:7c:11:29:fb:45:be:9a:69: e8:47:a6:2c:78:23:4c:a0:63:cd:07:76:07:8e:74:98:87:f3: f7:27:b0:b4:33:6e:9f:bd:41:b8:12:38:de:75:56:82:a7:83: b2:bc:74:ce:51:21:b8:18:2b:e6:b4:b1:eb:aa:a8:d8:cc:47: c8:2d:e8:e4:e4:3a:5b:eb:54:b5:74:6f:7a:d9:a8:00:24:09: 5b:bc:22:eb:9c:df:25:3a:2d:67:d7:d2:b5:95:9f:c7:b6:89: d5:8f:45:f0:a1:62:19:0b:26:a5:79:9d:48:c1:56:4c:db:86: 7f:2b:2a:bb:00:1b:cd:4e:12:d4:07:21:1b:13:5d:b1:78:45: b7:89:a9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rSaVH+uh/CKqft7lgxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYzFiZTA5ODFhNGU3NTc2YzU2MmY2ZjA5ZTY1YzE3YzE4 MGUzY2EwHhcNMjUxMjIwMjMwMTAxWhcNMjUxMjIxMjMwMTAxWjAzMTEwLwYDVQQD EyhmNDJlYjEyODFhM2YxMGUxNzA2Y2Y3MzNhNDI4ZWZjYTRiNTFiMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ4XEkTXw7yTSNtT8GpSCfCVaRal SiDXKzVDbb6xUdfYpiopQYPdomcKsq4OyJRT6rR6I1LKfEbLMy+vr07lxLLvGdxu W+dMOLBuCAQLo9p4wz5xPow4iX41zX7EHOBsNGlgDJyVB/ljccbeoZ/BI/3IU1Vj Uk3seSDuWZGMfF6HG4pAYKzsC44RuXkes7k8Y/qMprW0ANMuNQRa6YKIgv5h0bsE NASEKL5m9g8A1NKobDUKF71GFskL4fwy9suu2LkY7VpDVVExguyNu+zmDVl+JKp7 Nin2ynQlXIjS1Chp/iF8JohH/Ofb+XeCLJ1QGAK7mjZqrzNK2OLfB2IcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQusSgaPxDhcGz3M6Qo78pLUbGkMB8GA1UdIwQY MBaAFKHBvgmBpOdXbFYvbwnmXBfBgOPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYt OThkZmMyZWU2ZTBjLzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYtOThkZmMyZWU2ZTBj LzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQpoOPmY EIQOvgUlt99mLnSebfiuWaadw+9vrxpVSuX43586R1l29VmmARawFDmF0DknrSOT KA78xI9elvZ9nWVLIwqyANWkdOB71n3Xomj201E4UlS7CPUQtnZKo99g37skMjZW 3SRlUgvGp7xtY0UQjSMYsnwRKftFvppp6EemLHgjTKBjzQd2B450mIfz9yewtDNu n71BuBI43nVWgqeDsrx0zlEhuBgr5rSx66qo2MxHyC3o5OQ6W+tUtXRvetmoACQJ W7wi65zfJTotZ9fStZWfx7aJ1Y9F8KFiGQsmpXmdSMFWTNuGfysquwAbzU4S1Ach GxNdsXhFt4mpHw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:52 2025 by rpki-client