This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json) Hash identifier: b7Z+1w9cmkDDaG0sCtmTQJv6z2Y9HZ+/1AQgg1DDEOA= Subject key identifier: 64:09:34:F1:56:C7:3B:8B:46:CE:24:D9:F1:5A:95:83:71:0B:E1:B1 Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20 Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20 Certificate serial: 019AF2ADC633CC86FCA7D3C29AC3FB38D332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: NseX_PmvqgiHi02Bi8gmlYxGhIY.roa (hash: eTG247q6syS0nLyctbop0B1s+SIN4F7hMSSRHihV/Mg=) 2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: 8LT/E7o6J2zhW+GNkrct0KYHvz223ECNFO5keAHmrzo=) 3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c6:33:cc:86:fc:a7:d3:c2:9a:c3:fb:38:d3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20 Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=640934f156c73b8b46ce24d9f15a9583710be1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:cf:f4:a5:51:96:24:dd:a8:2b:82:42:7c: b6:c9:f8:77:65:a3:53:cb:1c:be:a2:58:b4:4b:5b: 26:b1:ed:1e:c2:6f:26:9f:d6:13:64:fd:31:bf:12: 3d:fa:e1:12:ef:0d:66:27:35:dc:ec:6c:fe:b8:97: 2a:96:da:8a:b9:45:de:c1:57:61:d7:5b:21:3a:77: 4c:fd:55:1e:66:77:55:b3:eb:4f:cd:56:13:8d:8a: f8:ac:29:7d:53:5a:e6:cb:a8:b3:a5:19:1e:6a:c2: 80:cf:b7:8c:10:2b:87:a6:75:9a:25:6c:80:1d:4a: a6:ea:c1:5e:ed:11:1b:53:48:b2:f7:44:3d:69:16: 56:20:0b:f7:26:56:75:4b:a9:24:a1:6e:a5:ba:2e: c3:35:2f:ea:3e:8d:b0:3f:78:4f:9b:03:cd:52:f6: 71:e2:cc:83:4e:b9:c8:29:e9:6e:7c:0c:f0:24:06: 99:55:73:2d:e4:20:b1:d2:74:c8:de:99:02:6f:26: 70:a8:d6:a7:61:68:26:35:90:a1:66:72:0f:a2:75: 8d:1c:a7:5f:6e:be:0f:34:56:ae:4e:04:17:4c:33: 70:de:0f:32:64:2f:a9:e0:d6:dc:d3:e3:9d:ca:d8: 1c:b6:eb:0e:80:fe:fd:fd:bf:ab:17:67:c9:31:18: c7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:09:34:F1:56:C7:3B:8B:46:CE:24:D9:F1:5A:95:83:71:0B:E1:B1 X509v3 Authority Key Identifier: keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:06:5f:42:fc:a8:7d:6e:d2:d0:bf:56:9c:b2:0e:d5:d0: 91:d7:39:e4:76:f2:b3:70:a3:38:e7:68:7f:08:d8:c2:86:0a: df:28:2b:db:ec:5f:5d:48:8b:61:0d:c8:9e:9d:23:c4:cc:78: 18:41:61:db:47:13:c1:d4:ee:fe:2a:9f:7f:18:e8:aa:81:52: bf:72:f6:0d:8e:78:9e:07:35:ac:f7:e1:d5:da:8f:25:f3:d4: 17:c5:ec:cc:9d:3e:c8:fa:73:e7:43:1a:0d:09:4e:5b:bd:f9: 96:8c:d4:a2:fd:d9:6c:32:62:c4:f5:3c:3a:1d:7b:06:31:18: 5a:9a:56:b7:f4:73:da:fa:59:68:68:70:ee:35:20:4d:67:5d: e6:9d:54:9e:96:f5:64:a4:89:ef:af:6c:c3:73:f5:9a:66:3e: 3b:48:52:1a:24:fb:83:73:0b:ca:e0:ca:8a:b4:91:25:06:95: 07:29:12:01:d5:16:48:8e:93:b8:e6:fe:e1:a1:16:78:5a:d5: 21:c1:86:aa:b6:0b:c4:2a:3f:cd:b9:cf:a4:19:f2:2d:3a:c3: 56:b0:7d:93:f0:75:c0:b4:0c:dd:e6:98:4f:2c:87:41:0e:ad: 78:c6:54:b9:b1:1b:b2:42:4b:0b:62:74:57:d6:92:9d:17:78: 3d:2f:f1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcYzzIb8p9PCmsP7ONMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiM2RhZWY4OTMwNmE3NWYwYjg4MTkxNDQwNzQyYTcyMGFm YjNmMjAwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD Eyg2NDA5MzRmMTU2YzczYjhiNDZjZTI0ZDlmMTVhOTU4MzcxMGJlMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LP9KVRliTdqCuCQny2yfh3ZaNT yxy+oli0S1smse0ewm8mn9YTZP0xvxI9+uES7w1mJzXc7Gz+uJcqltqKuUXewVdh 11shOndM/VUeZndVs+tPzVYTjYr4rCl9U1rmy6izpRkeasKAz7eMECuHpnWaJWyA HUqm6sFe7REbU0iy90Q9aRZWIAv3JlZ1S6kkoW6lui7DNS/qPo2wP3hPmwPNUvZx 4syDTrnIKelufAzwJAaZVXMt5CCx0nTI3pkCbyZwqNanYWgmNZChZnIPonWNHKdf br4PNFauTgQXTDNw3g8yZC+p4Nbc0+OdytgctusOgP79/b+rF2fJMRjHfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQJNPFWxzuLRs4k2fFalYNxC+GxMB8GA1UdIwQY MBaAFDs9rviTBqdfC4gZFEB0KnIK+z8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUt YWFjYWQ4NmM2MTdkLzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mMTUwYjEtNDNiOS00OTExLWEwMDUtYWFjYWQ4NmM2MTdk LzEvT3oydS1KTUdwMThMaUJrVVFIUXFjZ3I3UHlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreMGX0L8 qH1u0tC/VpyyDtXQkdc55Hbys3CjOOdofwjYwoYK3ygr2+xfXUiLYQ3Inp0jxMx4 GEFh20cTwdTu/iqffxjoqoFSv3L2DY54ngc1rPfh1dqPJfPUF8XszJ0+yPpz50Ma DQlOW735lozUov3ZbDJixPU8Oh17BjEYWppWt/Rz2vpZaGhw7jUgTWdd5p1Unpb1 ZKSJ769sw3P1mmY+O0hSGiT7g3MLyuDKirSRJQaVBykSAdUWSI6TuOb+4aEWeFrV IcGGqrYLxCo/zbnPpBnyLTrDVrB9k/B1wLQM3eaYTyyHQQ6teMZUubEbskJLC2J0 V9aSnRd4PS/xhA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:31 2025 by rpki-client