This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft File: OzdnJSANjYwAzw91FK8l_zYjEPA.mft (raw, json) Hash identifier: 9y9yfeAqLqpyt844pSjgA0+D2OhS936Ql8IAuyZ8i5M= Subject key identifier: ED:50:4D:CE:46:A8:F3:57:58:76:99:63:5A:4A:3F:39:F6:A5:16:9E Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0 Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0 Certificate serial: 019AF12D67020706576D1383C8B74B86FB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: OzdnJSANjYwAzw91FK8l_zYjEPA.crl (hash: dt61wfAFA9M3PNqYCIndlvSwXxjs+f8+lWvByiHAHFw=) 2: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (hash: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:67:02:07:06:57:6d:13:83:c8:b7:4b:86:fb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0 Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=ed504dce46a8f357587699635a4a3f39f6a5169e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:ca:41:62:7b:13:58:1f:f7:ff:48:d1:6a: 02:b9:70:a0:66:1e:b4:8c:b6:00:c4:71:fb:c2:47: f7:05:8e:08:a2:00:c4:8e:dd:5d:98:c1:24:91:c2: 9b:a7:b2:e4:c6:c1:a8:b4:64:5f:7c:e4:58:46:e3: e7:b9:a6:08:dd:82:b0:a6:2f:54:4c:af:c8:25:7b: 49:9c:e5:c8:de:41:95:0c:0d:7c:53:76:d5:a6:0e: 68:8e:6a:d8:8f:fa:67:f9:32:71:df:5e:d1:4d:f7: 69:fb:98:c5:cf:59:b4:4c:39:9e:4d:6f:f3:ba:07: 0f:46:3b:d5:16:19:7b:ed:3f:82:ab:2a:6f:5f:d3: fe:d9:98:6a:8f:99:52:ac:25:a5:dd:1d:fb:aa:67: be:7c:8d:86:23:fd:33:08:3a:fe:08:27:ff:eb:62: d7:ca:52:e8:ab:bc:b6:85:32:a3:ff:70:2f:eb:d5: 8c:4b:27:4e:36:87:f4:93:ca:60:82:f5:e2:be:f0: f4:54:a4:19:cb:2a:50:98:3a:4d:d8:31:a6:e5:d8: 6b:8e:17:70:fb:ce:67:81:a2:8a:6c:90:15:ee:25: 00:7e:05:71:d4:72:e6:04:8f:ea:29:50:a8:01:22: 8f:b6:d0:44:1b:86:c5:ae:b9:45:9f:91:f4:41:33: 70:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:50:4D:CE:46:A8:F3:57:58:76:99:63:5A:4A:3F:39:F6:A5:16:9E X509v3 Authority Key Identifier: keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:38:29:6c:b3:a8:96:fe:06:32:1a:1b:4b:cb:f7:4c:df:c2: 2a:9a:b6:42:27:40:88:c1:6e:d7:fd:e0:34:80:c5:5b:bf:fd: 7f:28:63:6d:8e:08:f4:05:11:bb:03:3d:87:18:c7:7e:f5:b8: 08:c2:0c:74:08:b9:7a:2c:48:7a:20:55:f8:75:a6:6b:30:c9: 0d:65:51:69:85:d0:f3:0d:a2:7d:94:79:fa:4f:0e:b8:75:10: 8c:b8:2d:1f:c4:a0:7c:57:c0:fb:d6:ba:5c:64:78:4f:c3:a5: 70:58:05:22:a3:ed:61:47:67:2b:87:57:ce:60:e4:58:8c:5d: 65:36:79:d8:29:8e:32:fa:b3:1e:31:15:dc:88:48:f0:7d:66: 6a:c9:19:9b:42:7b:01:96:f7:2f:b0:e3:69:52:a8:df:2f:9c: d8:ce:69:89:88:f0:23:69:5a:ee:9c:ee:f4:01:9e:20:49:a3: 43:ee:a3:60:ff:12:8d:c6:fe:8b:28:0a:d2:08:d2:b9:e9:3a: d2:58:58:be:c8:a0:37:56:a7:c8:25:52:92:ff:a1:b5:fc:23: 66:ab:a5:78:e9:01:c9:e6:dc:ad:54:ac:83:c0:94:cf:c3:79: 31:e1:2e:bd:b5:3a:1f:b2:4a:26:74:fc:51:98:ce:97:51:43: 72:59:1e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWcCBwZXbRODyLdLhvt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzc2NzI1MjAwZDhkOGMwMGNmMGY3NTE0YWYyNWZmMzYy MzEwZjAwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EyhlZDUwNGRjZTQ2YThmMzU3NTg3Njk5NjM1YTRhM2YzOWY2YTUxNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZDKQWJ7E1gf9/9I0WoCuXCgZh60 jLYAxHH7wkf3BY4IogDEjt1dmMEkkcKbp7LkxsGotGRffORYRuPnuaYI3YKwpi9U TK/IJXtJnOXI3kGVDA18U3bVpg5ojmrYj/pn+TJx317RTfdp+5jFz1m0TDmeTW/z ugcPRjvVFhl77T+CqypvX9P+2Zhqj5lSrCWl3R37qme+fI2GI/0zCDr+CCf/62LX ylLoq7y2hTKj/3Av69WMSydONof0k8pggvXivvD0VKQZyypQmDpN2DGm5dhrjhdw +85ngaKKbJAV7iUAfgVx1HLmBI/qKVCoASKPttBEG4bFrrlFn5H0QTNwUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1QTc5GqPNXWHaZY1pKPzn2pRaeMB8GA1UdIwQY MBaAFDs3ZyUgDY2MAM8PdRSvJf82IxDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pkbkpTQU5qWXdBenc5MUZLOGxfellqRVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNTRhNjMtMzZiNC00Njg0LTkxNTkt MjkyMDk4ZGEyZTM5LzEvT3pkbkpTQU5qWXdBenc5MUZLOGxfellqRVBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNTRhNjMtMzZiNC00Njg0LTkxNTktMjkyMDk4ZGEyZTM5 LzEvT3pkbkpTQU5qWXdBenc5MUZLOGxfellqRVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzgpbLOo lv4GMhobS8v3TN/CKpq2QidAiMFu1/3gNIDFW7/9fyhjbY4I9AURuwM9hxjHfvW4 CMIMdAi5eixIeiBV+HWmazDJDWVRaYXQ8w2ifZR5+k8OuHUQjLgtH8SgfFfA+9a6 XGR4T8OlcFgFIqPtYUdnK4dXzmDkWIxdZTZ52CmOMvqzHjEV3IhI8H1maskZm0J7 AZb3L7DjaVKo3y+c2M5piYjwI2la7pzu9AGeIEmjQ+6jYP8Sjcb+iygK0gjSuek6 0lhYvsigN1anyCVSkv+htfwjZquleOkByebcrVSsg8CUz8N5MeEuvbU6H7JKJnT8 UZjOl1FDclkejw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:18 2025 by rpki-client