This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json) Hash identifier: WhQoIbdH9RKasoUahKIvGacoieqI1jOHVh2kqJE6O/E= Subject key identifier: 88:55:F7:D6:26:0F:44:09:10:BD:93:D5:EB:71:52:74:7D:D7:9E:1D Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d Certificate serial: 019AF208E0DC2A29CFB4A08DA559E39A9268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft Manifest number: 0B96 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: LSGj1AzabpkOb7ubbYfPSKMLjjxTXjLudTyDQXbCrs0=) 2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e0:dc:2a:29:cf:b4:a0:8d:a5:59:e3:9a:92:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=8855f7d6260f440910bd93d5eb7152747dd79e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:c1:2c:7e:45:ea:db:80:6c:fc:ad:ca:e1: 36:61:76:69:b7:9c:99:f3:01:2f:bf:14:d8:b4:42: 61:1e:d1:42:75:1b:93:8e:ff:c4:30:e3:1b:11:4e: 1b:fa:38:28:2d:05:bf:99:bd:06:96:83:45:c5:ce: f2:b7:b1:02:ab:55:60:a1:63:d2:14:37:d6:bc:6e: 64:a9:f2:15:ab:0c:49:af:6b:fc:7d:3b:9e:79:92: 42:f5:6d:05:1d:c6:74:ef:e4:79:ec:17:b4:0a:11: 50:75:8c:21:56:18:5b:d6:bd:cc:15:0c:4c:c7:01: 02:25:ba:e7:70:ee:41:f4:f8:0d:ee:5a:10:52:c2: 3a:34:f7:58:0b:2a:5e:e0:bd:c9:0f:b8:11:05:28: 00:ed:1e:c1:ec:55:bd:d6:75:fd:5f:b6:c8:8a:e9: a8:2e:6e:e0:9d:ac:eb:6f:0e:f8:9b:5a:67:2e:f2: a4:2b:f1:90:d5:9a:eb:bb:34:be:7f:71:c9:61:40: 2b:bb:64:01:65:c4:75:4e:5f:1e:ad:78:c8:92:3b: 55:93:fd:b7:20:83:8a:e5:ac:22:e0:f5:d4:c1:0b: 15:52:19:c0:dc:8c:d9:ae:6c:b5:60:6b:50:cb:21: 87:93:0e:7c:d2:e2:fc:1e:aa:4e:aa:36:23:2a:70: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:55:F7:D6:26:0F:44:09:10:BD:93:D5:EB:71:52:74:7D:D7:9E:1D X509v3 Authority Key Identifier: keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3f:c6:83:c2:b4:59:4c:cc:60:7f:f4:0a:ef:08:15:77:c5: 31:81:1c:fa:ff:74:9f:42:e0:ac:ca:dc:82:cd:74:04:dc:c4: dd:1c:fb:69:b1:96:fe:2d:00:1b:66:1c:8d:16:84:b6:28:c3: 7f:08:9c:82:79:d2:0b:ec:fb:4f:4b:29:1f:f2:ff:97:d8:90: 49:df:6c:d5:db:fa:2d:07:e6:05:a8:f3:db:e7:44:ad:99:9d: 94:1b:7f:fd:be:9f:8f:9a:07:97:10:fd:66:ca:d3:56:52:8a: e3:a4:cc:53:2d:ed:41:9d:29:c0:42:d6:9c:c9:42:69:0b:d8: 4c:fc:be:a2:c1:14:16:b4:57:89:4f:10:d3:a5:d6:15:90:c1: c5:62:4e:57:ca:69:1e:24:1c:1c:4f:51:49:5f:ee:4f:e7:65: c2:85:97:dd:30:84:ab:bc:6a:94:f3:4d:3b:14:b7:1e:ff:a8: 7c:a6:e9:31:c0:26:a5:f8:f2:41:d2:9a:c3:1e:7e:51:63:6c: 22:38:09:f0:d2:1e:c3:10:23:2c:03:17:eb:d6:83:f5:6c:4c: 97:c9:11:86:0f:52:79:de:3c:03:ea:4e:32:b3:58:4b:c7:da: 20:b5:2c:9b:ed:1b:4b:ac:0e:2f:e8:05:f7:56:0e:7e:98:c0: d4:b1:8d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCODcKinPtKCNpVnjmpJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjY0MjNlYjAxOTU1MjI0ZTZjMTFkMTljNmQzOTM4MWU4 YmUyMWQwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD Eyg4ODU1ZjdkNjI2MGY0NDA5MTBiZDkzZDVlYjcxNTI3NDdkZDc5ZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhLBLH5F6tuAbPytyuE2YXZpt5yZ 8wEvvxTYtEJhHtFCdRuTjv/EMOMbEU4b+jgoLQW/mb0GloNFxc7yt7ECq1VgoWPS FDfWvG5kqfIVqwxJr2v8fTueeZJC9W0FHcZ07+R57Be0ChFQdYwhVhhb1r3MFQxM xwECJbrncO5B9PgN7loQUsI6NPdYCype4L3JD7gRBSgA7R7B7FW91nX9X7bIiumo Lm7gnazrbw74m1pnLvKkK/GQ1ZrruzS+f3HJYUAru2QBZcR1Tl8erXjIkjtVk/23 IIOK5awi4PXUwQsVUhnA3IzZrmy1YGtQyyGHkw580uL8HqpOqjYjKnATPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhV99YmD0QJEL2T1etxUnR9154dMB8GA1UdIwQY MBaAFDgmQj6wGVUiTmwR0ZxtOTgei+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2Et Nzg1ZTNlODc2OGY5LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2EtNzg1ZTNlODc2OGY5 LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjD/Gg8K0 WUzMYH/0Cu8IFXfFMYEc+v90n0LgrMrcgs10BNzE3Rz7abGW/i0AG2YcjRaEtijD fwicgnnSC+z7T0spH/L/l9iQSd9s1dv6LQfmBajz2+dErZmdlBt//b6fj5oHlxD9 ZsrTVlKK46TMUy3tQZ0pwELWnMlCaQvYTPy+osEUFrRXiU8Q06XWFZDBxWJOV8pp HiQcHE9RSV/uT+dlwoWX3TCEq7xqlPNNOxS3Hv+ofKbpMcAmpfjyQdKawx5+UWNs IjgJ8NIewxAjLAMX69aD9WxMl8kRhg9Sed48A+pOMrNYS8faILUsm+0bS6wOL+gF 91YOfpjA1LGNkw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:56 2025 by rpki-client