This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json) Hash identifier: CalN+6kedQ/Q/VHX+Q7NJat+5LTdHevkIR5o011capE= Subject key identifier: BF:9C:05:51:F5:46:24:D8:68:20:19:5E:5B:8C:DC:0D:12:D2:79:E0 Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Certificate serial: 019AF3C009E4AD308A22E546EA6897441AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft Manifest number: 0590 Signing time: Sat 06 Dec 2025 13:00:40 +0000 Manifest this update: Sat 06 Dec 2025 13:00:40 +0000 Manifest next update: Sun 07 Dec 2025 13:00:40 +0000 Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: DpZ/CWOtKFSp0QIuw4cP6P7Fx4bYC3nH1r+lTVdOkgM=) 2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:09:e4:ad:30:8a:22:e5:46:ea:68:97:44:1a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Validity Not Before: Dec 6 13:00:40 2025 GMT Not After : Dec 7 13:00:40 2025 GMT Subject: CN=bf9c0551f54624d86820195e5b8cdc0d12d279e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:49:4a:c3:42:34:82:70:30:e4:57:6d:68: 24:84:4f:70:d9:ad:ac:b4:45:de:18:38:eb:37:ab: 1f:0a:dd:9d:ec:12:dd:de:b1:43:0c:9f:98:7d:80: 3c:1e:4a:f2:de:b1:59:61:8c:8f:2b:2a:a9:60:4d: 0d:15:07:d0:0c:95:a8:f8:ca:a7:c5:8b:76:3a:3f: 29:02:35:86:2e:52:5c:3e:dc:a4:a8:12:e7:88:2b: d6:cc:18:3e:44:9c:57:cf:8a:a3:05:18:00:cb:5d: 18:c5:80:0a:99:5f:2b:9c:e2:fe:cb:b7:d8:49:04: d2:3d:5e:26:cf:a3:75:2a:13:73:8e:61:87:69:68: a2:86:ca:80:50:4f:10:29:6c:ad:4c:80:26:05:86: c5:f7:45:f8:cc:2a:91:e1:c5:81:16:fc:ea:5e:d6: 29:40:b1:bc:0e:29:c8:5c:15:88:d2:5a:46:4c:40: b8:9e:2a:6f:72:fb:57:d6:f5:46:44:43:1d:e9:82: dd:77:09:3a:d3:82:07:ef:1d:96:28:32:8d:3a:81: 67:67:d9:9d:df:08:b9:2d:51:db:bb:72:6b:c0:fd: 96:08:a2:2e:c2:11:b6:b9:d2:17:88:e2:c1:7d:63: f4:ba:22:6f:fd:06:3d:e5:4c:2b:c6:11:ce:51:3a: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:05:51:F5:46:24:D8:68:20:19:5E:5B:8C:DC:0D:12:D2:79:E0 X509v3 Authority Key Identifier: keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:f4:d8:5c:09:9b:35:9f:d7:1d:2c:79:7a:6f:a8:8d:3d: bc:26:de:91:a2:b2:8b:b4:71:0f:e0:99:a6:75:56:c9:9f:cf: 3f:6a:86:9f:13:df:4b:4b:c4:b2:cc:31:bd:6e:53:df:9f:6c: 1c:d7:c6:56:62:ea:8a:4e:b5:f8:05:51:91:d4:d1:16:da:82: 15:40:07:95:00:8e:0f:ae:2f:48:7d:e1:62:85:2d:f2:71:d6: 77:dd:d0:56:10:fb:9f:b0:a2:fa:c8:f3:df:15:17:b3:1f:cf: 32:4f:da:aa:1c:53:f2:cf:a5:51:fb:49:8d:e0:0e:af:a5:f9: 1e:2b:83:e0:9c:5b:18:7f:1c:9e:e7:ab:b4:11:49:ea:f3:d8: 90:21:cf:1b:e4:09:a2:ec:db:ef:4e:4c:e8:d6:83:99:3b:e3: 32:ec:62:40:a8:e7:e2:2d:45:1f:df:2d:5a:b7:4c:ec:3c:de: 02:9d:0e:35:b9:09:e8:3e:23:50:88:4b:ba:cd:64:2a:25:91: 36:a5:91:76:ad:74:49:15:a3:d0:ab:65:fe:6c:78:69:d9:c0: 28:4f:4b:a5:ad:c4:f3:e5:40:74:37:48:7f:5b:df:19:3f:f3: f1:13:48:50:e4:c4:e7:d3:6f:e8:49:ed:c8:3f:26:1c:cc:88: 51:6d:56:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAnkrTCKIuVG6miXRBrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl MGU4YTUwHhcNMjUxMjA2MTMwMDQwWhcNMjUxMjA3MTMwMDQwWjAzMTEwLwYDVQQD EyhiZjljMDU1MWY1NDYyNGQ4NjgyMDE5NWU1YjhjZGMwZDEyZDI3OWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NJSsNCNIJwMORXbWgkhE9w2a2s tEXeGDjrN6sfCt2d7BLd3rFDDJ+YfYA8Hkry3rFZYYyPKyqpYE0NFQfQDJWo+Mqn xYt2Oj8pAjWGLlJcPtykqBLniCvWzBg+RJxXz4qjBRgAy10YxYAKmV8rnOL+y7fY SQTSPV4mz6N1KhNzjmGHaWiihsqAUE8QKWytTIAmBYbF90X4zCqR4cWBFvzqXtYp QLG8DinIXBWI0lpGTEC4nipvcvtX1vVGREMd6YLddwk604IH7x2WKDKNOoFnZ9md 3wi5LVHbu3JrwP2WCKIuwhG2udIXiOLBfWP0uiJv/QY95UwrxhHOUTpr8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+cBVH1RiTYaCAZXluM3A0S0nngMB8GA1UdIwQY MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU302FwJ mzWf1x0seXpvqI09vCbekaKyi7RxD+CZpnVWyZ/PP2qGnxPfS0vEsswxvW5T359s HNfGVmLqik61+AVRkdTRFtqCFUAHlQCOD64vSH3hYoUt8nHWd93QVhD7n7Ci+sjz 3xUXsx/PMk/aqhxT8s+lUftJjeAOr6X5HiuD4JxbGH8cnuertBFJ6vPYkCHPG+QJ ouzb705M6NaDmTvjMuxiQKjn4i1FH98tWrdM7DzeAp0ONbkJ6D4jUIhLus1kKiWR NqWRdq10SRWj0Ktl/mx4adnAKE9Lpa3E8+VAdDdIf1vfGT/z8RNIUOTE59Nv6Ent yD8mHMyIUW1WNA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:56 2025 by rpki-client