This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json) Hash identifier: otnf+kg2G7kTwP1cGul2Kd7qpE3znK7zDbcAlLbQP7Y= Subject key identifier: 63:57:8C:5C:6B:15:6B:71:94:05:C1:CE:FC:3D:97:EB:2B:96:DE:7E Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Certificate serial: 019B3EA37820717148CDDCCD8F9BFB0577F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:00:59 +0000 Manifest this update: Sun 21 Dec 2025 02:00:59 +0000 Manifest next update: Mon 22 Dec 2025 02:00:59 +0000 Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: U0neKUdogC/pX4IN7Zsvy8dPV5yGPWMitz8wYoH0fh8=) 2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:78:20:71:71:48:cd:dc:cd:8f:9b:fb:05:77:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Validity Not Before: Dec 21 02:00:59 2025 GMT Not After : Dec 22 02:00:59 2025 GMT Subject: CN=63578c5c6b156b719405c1cefc3d97eb2b96de7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:1f:6a:6c:1f:ee:66:36:51:71:43:f8:b7: 32:6e:dc:92:3f:01:e4:52:a5:02:47:b2:56:57:fa: 7f:d6:1f:86:64:26:49:fc:3a:69:7a:cf:79:7d:26: aa:63:ef:c7:c8:0e:30:b6:1d:25:f3:b4:7b:93:e6: 5f:1d:97:5c:ae:d3:2f:cf:a9:8f:d5:fc:17:7b:63: 49:2a:09:aa:d3:a0:66:09:5b:c6:d2:e5:f6:be:60: 78:af:35:35:3c:cb:3b:af:18:53:61:d6:94:84:30: ae:94:fc:21:3f:2b:6c:ba:d3:ce:71:a8:06:d3:0b: 5a:8c:89:20:3a:bb:08:31:ba:ba:df:ea:46:65:08: 01:74:e4:80:5d:75:e3:a0:d3:6b:3c:1a:d7:9b:86: 5c:8d:c5:fe:e5:60:34:8d:0b:22:fb:0a:ec:4c:da: 5a:bb:03:7f:a3:55:bc:1d:32:3f:25:89:a0:6b:98: 6c:4a:98:10:f7:31:97:5b:28:4d:1e:32:bf:21:4c: 30:2d:15:9e:a0:ff:46:a4:85:d3:71:8a:55:28:2b: c4:f2:dd:93:88:02:42:e5:81:f8:0d:5a:b9:03:09: e9:55:05:6a:e3:b1:93:58:0d:92:92:4d:56:2e:05: 2a:d6:a2:8c:1c:80:c7:e8:a3:f6:75:d5:02:22:87: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:57:8C:5C:6B:15:6B:71:94:05:C1:CE:FC:3D:97:EB:2B:96:DE:7E X509v3 Authority Key Identifier: keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:04:a8:9a:7a:d3:e5:d2:60:e3:98:20:4c:aa:b7:a4:ca:a6: 6b:49:6d:b1:55:b2:69:3d:0f:09:7f:3b:82:a3:a6:78:a3:a6: b6:e9:e7:1b:49:bc:e4:90:65:9e:bf:ac:f6:3d:ae:0c:1f:e2: cc:cb:1b:d1:38:00:c1:34:b7:a9:5c:ed:db:e8:48:77:16:ce: e4:8d:fc:0e:f3:dc:14:9f:41:af:95:c3:52:12:e8:59:c2:29: 94:17:f0:22:91:0e:35:9a:2a:cc:5f:05:c8:77:7d:64:1d:7e: ee:0c:c0:24:06:62:ea:34:b5:ad:a6:c5:82:93:5a:ae:a3:b3: 69:df:f7:76:8b:b0:f2:b0:96:26:55:ac:28:db:14:34:66:97: 66:e9:8e:02:ea:ea:a2:c2:7c:0c:13:ff:77:e5:73:5a:7b:8a: 63:42:d8:ae:b2:ed:67:18:b5:fd:8c:7d:a3:e1:c5:3a:64:fc: 00:52:10:f6:5e:c0:98:07:ba:16:e4:50:6c:27:2e:f4:95:c4: d8:4a:0d:84:59:76:4a:70:49:b5:54:d2:fe:64:b4:a3:38:04: 4c:8e:d2:27:06:9d:a3:ef:11:b6:0b:ca:41:f9:c7:4d:37:1b: 04:9d:02:f0:fe:32:7c:08:71:f6:8d:c6:3d:c5:a8:66:16:3a: f5:d9:5c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3ggcXFIzdzNj5v7BXf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0 ZjM2M2QwHhcNMjUxMjIxMDIwMDU5WhcNMjUxMjIyMDIwMDU5WjAzMTEwLwYDVQQD Eyg2MzU3OGM1YzZiMTU2YjcxOTQwNWMxY2VmYzNkOTdlYjJiOTZkZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/sfamwf7mY2UXFD+LcybtySPwHk UqUCR7JWV/p/1h+GZCZJ/Dppes95fSaqY+/HyA4wth0l87R7k+ZfHZdcrtMvz6mP 1fwXe2NJKgmq06BmCVvG0uX2vmB4rzU1PMs7rxhTYdaUhDCulPwhPytsutPOcagG 0wtajIkgOrsIMbq63+pGZQgBdOSAXXXjoNNrPBrXm4ZcjcX+5WA0jQsi+wrsTNpa uwN/o1W8HTI/JYmga5hsSpgQ9zGXWyhNHjK/IUwwLRWeoP9GpIXTcYpVKCvE8t2T iAJC5YH4DVq5AwnpVQVq47GTWA2Skk1WLgUq1qKMHIDH6KP2ddUCIoechQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNXjFxrFWtxlAXBzvw9l+srlt5+MB8GA1UdIwQY MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0 LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhASomnrT 5dJg45ggTKq3pMqma0ltsVWyaT0PCX87gqOmeKOmtunnG0m85JBlnr+s9j2uDB/i zMsb0TgAwTS3qVzt2+hIdxbO5I38DvPcFJ9Br5XDUhLoWcIplBfwIpEONZoqzF8F yHd9ZB1+7gzAJAZi6jS1rabFgpNarqOzad/3douw8rCWJlWsKNsUNGaXZumOAurq osJ8DBP/d+VzWnuKY0LYrrLtZxi1/Yx9o+HFOmT8AFIQ9l7AmAe6FuRQbCcu9JXE 2EoNhFl2SnBJtVTS/mS0ozgETI7SJwado+8RtgvKQfnHTTcbBJ0C8P4yfAhx9o3G PcWoZhY69dlctw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:40:08 2025 by rpki-client