This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft File: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft (raw, json) Hash identifier: gQnMJIeYruWwoUAW33bi19QCWaJo/PCO8LAdVlj88Hs= Subject key identifier: 54:85:6D:04:26:4A:67:F7:80:1A:7B:33:CB:B5:46:56:46:93:95:6A Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82 Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682 Certificate serial: 019AF50A04B42298DCBD8EAD57E703C512E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft Manifest number: 0D24 Signing time: Sat 06 Dec 2025 19:01:05 +0000 Manifest this update: Sat 06 Dec 2025 19:01:05 +0000 Manifest next update: Sun 07 Dec 2025 19:01:05 +0000 Files and hashes: 1: 0KlQdT1lu0CsM24p9yilVmugr4k.roa (hash: IYmqpSxBWUxOlCC0FW+IpqPujhd/KHXz7dmBrQJbXYA=) 2: OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl (hash: 9xggXcd7rsdJZ/v4jx9EiVsB1v5LyweJ3PG4dYMI/p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:04:b4:22:98:dc:bd:8e:ad:57:e7:03:c5:12:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b363e09bd6942adab42415999f979990ab96682 Validity Not Before: Dec 6 19:01:05 2025 GMT Not After : Dec 7 19:01:05 2025 GMT Subject: CN=54856d04264a67f7801a7b33cbb546564693956a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ec:52:63:4c:97:9a:76:e3:e0:f4:db:72:71: 21:aa:f3:75:ba:15:a6:2f:7d:9f:5f:62:c4:e9:59: c7:8c:8e:d8:1a:bc:03:d7:0f:7a:bd:65:71:c6:aa: a2:58:f3:02:81:27:39:18:98:88:09:60:af:69:cc: 0b:ec:63:ac:59:e1:3e:de:fc:a3:76:fd:5c:99:d9: 47:ef:c2:e3:ed:e3:5a:c6:93:17:42:09:73:8b:10: 57:e7:a2:b9:b8:58:e1:bc:a5:f1:b7:43:68:5f:33: fc:cf:38:85:cd:8b:70:b0:4d:6e:7f:a1:98:f2:52: dd:71:89:1f:51:9a:04:93:7c:c8:bf:27:cb:52:1c: d6:38:72:5b:06:a7:f4:46:bc:3a:3f:5d:89:a6:9d: 39:13:3f:94:01:b8:4f:35:36:d6:c8:cc:b4:fd:4d: 88:d2:a4:4e:dc:34:91:41:9e:92:ff:1f:14:38:24: a8:24:90:65:84:ec:97:cc:bb:c4:4f:8d:c6:dc:20: ff:4a:a0:8f:c8:e0:5d:7a:38:a5:a5:21:84:67:49: c6:0d:53:ff:d7:74:41:23:e8:34:e4:48:71:2d:f5: 2b:e0:f7:21:40:3d:36:c3:c9:a5:1f:71:96:91:e4: f0:b1:26:52:48:04:44:65:3b:17:0d:6f:9d:72:5c: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:85:6D:04:26:4A:67:F7:80:1A:7B:33:CB:B5:46:56:46:93:95:6A X509v3 Authority Key Identifier: keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:09:7a:80:b2:c2:a8:55:15:f0:49:63:6c:d0:04:dd:07:91: 85:4b:ce:96:7e:3e:f4:ce:ba:d5:6f:e2:43:b1:63:35:13:10: a1:e2:1c:3a:28:81:0b:54:85:58:04:40:88:14:cf:65:f8:a3: 29:48:11:c5:ab:c8:b9:45:49:a0:20:90:1f:d8:9a:25:ac:3d: cd:99:05:54:60:3d:1c:8f:cf:a0:65:f5:3f:ac:8e:6c:0e:42: 1e:92:ff:07:0a:d5:a1:43:8c:77:30:d9:bc:ed:29:fa:48:17: 9f:69:e4:de:d8:62:5c:a9:44:41:cd:47:3b:47:69:91:eb:5d: 06:80:65:32:54:98:38:1b:93:82:ef:e6:3e:de:50:4e:5f:da: 7e:2b:4d:03:f1:b5:7a:f0:d6:af:5d:b2:18:86:88:c0:0d:d0: b8:b9:8c:a0:d9:93:21:26:29:7a:92:8a:f3:d8:37:ce:49:f2: 72:46:ab:10:79:98:34:a5:a1:c8:ae:6c:2c:a6:af:b7:c4:ca: 8b:b9:de:00:7d:39:e8:d3:7a:e2:cc:8b:d4:bf:a6:9d:58:ca: 10:21:f3:ca:ab:60:63:58:4c:67:d8:1a:55:5e:e2:cd:7b:10: 2d:82:6b:6f:3f:5b:00:55:58:55:20:cd:cd:86:93:28:df:6a: 7c:05:ab:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgS0IpjcvY6tV+cDxRLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzYzZTA5YmQ2OTQyYWRhYjQyNDE1OTk5Zjk3OTk5MGFi OTY2ODIwHhcNMjUxMjA2MTkwMTA1WhcNMjUxMjA3MTkwMTA1WjAzMTEwLwYDVQQD Eyg1NDg1NmQwNDI2NGE2N2Y3ODAxYTdiMzNjYmI1NDY1NjQ2OTM5NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOxSY0yXmnbj4PTbcnEhqvN1uhWm L32fX2LE6VnHjI7YGrwD1w96vWVxxqqiWPMCgSc5GJiICWCvacwL7GOsWeE+3vyj dv1cmdlH78Lj7eNaxpMXQglzixBX56K5uFjhvKXxt0NoXzP8zziFzYtwsE1uf6GY 8lLdcYkfUZoEk3zIvyfLUhzWOHJbBqf0Rrw6P12Jpp05Ez+UAbhPNTbWyMy0/U2I 0qRO3DSRQZ6S/x8UOCSoJJBlhOyXzLvET43G3CD/SqCPyOBdejilpSGEZ0nGDVP/ 13RBI+g05EhxLfUr4PchQD02w8mlH3GWkeTwsSZSSAREZTsXDW+dclzyRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSFbQQmSmf3gBp7M8u1RlZGk5VqMB8GA1UdIwQY MBaAFDs2Pgm9aUKtq0JBWZn5eZkKuWaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hNzIxYTAtZWRiYS00NzZkLThiZTMt MTQxNDIyOTQwMzg1LzEvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9hNzIxYTAtZWRiYS00NzZkLThiZTMtMTQxNDIyOTQwMzg1 LzEvT3pZLUNiMXBRcTJyUWtGWm1mbDVtUXE1Wm9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgl6gLLC qFUV8EljbNAE3QeRhUvOln4+9M661W/iQ7FjNRMQoeIcOiiBC1SFWARAiBTPZfij KUgRxavIuUVJoCCQH9iaJaw9zZkFVGA9HI/PoGX1P6yObA5CHpL/BwrVoUOMdzDZ vO0p+kgXn2nk3thiXKlEQc1HO0dpketdBoBlMlSYOBuTgu/mPt5QTl/afitNA/G1 evDWr12yGIaIwA3QuLmMoNmTISYpepKK89g3zknyckarEHmYNKWhyK5sLKavt8TK i7neAH056NN64syL1L+mnVjKECHzyqtgY1hMZ9gaVV7izXsQLYJrbz9bAFVYVSDN zYaTKN9qfAWrHw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:00 2025 by rpki-client