This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json) Hash identifier: 0Ue6ecuWBj/ZO52aL+eCzPu4LAl+f4olD/kzdsA55mU= Subject key identifier: A2:2D:B5:95:FB:3B:46:D4:11:AC:A9:C6:EF:9D:93:E7:28:7D:F2:BB Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1 Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1 Certificate serial: 019AF23FD81AA517B2CBE1B73445410D306D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft Manifest number: 1423 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: LzOPFVwwlI3xLKXD4eUrmAY0yQU.roa (hash: FOOM9kMpwPkSzslFZMnKyIoaQBQCR3WyFVCTjxN9D/4=) 2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: 4Xeq8Zh01BjEgEjleJmpXWnY3ymCZ1Q6jJCnt11Jjhc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d8:1a:a5:17:b2:cb:e1:b7:34:45:41:0d:30:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=a22db595fb3b46d411aca9c6ef9d93e7287df2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:8e:e9:33:56:8b:11:5d:56:18:d8:4c:d7: 41:c3:16:ea:8d:5f:22:68:b2:9d:dc:86:a8:ec:7e: 8b:56:80:cc:e8:59:94:fb:6f:99:bf:fb:f6:84:7f: c7:fe:40:05:21:77:3a:cd:9b:82:1a:fb:b9:8f:fc: e8:e4:41:c0:cc:c0:f5:0a:69:de:1f:b3:f8:d4:a3: 63:a5:10:4e:39:b9:a0:76:8a:f5:5a:46:63:bd:75: 50:d0:c0:f6:65:08:51:08:be:5a:56:5c:d0:e8:8d: 00:21:26:a9:90:c9:8a:77:43:7e:dd:76:35:7d:c5: 30:29:af:88:23:2c:9a:7b:84:12:7a:40:a1:37:8b: 77:cd:e5:af:24:05:52:f5:2b:9c:47:42:38:b6:2e: f6:be:46:f6:16:12:fc:8f:5a:1d:66:0a:05:65:ae: 06:17:89:c6:39:60:fd:3f:ef:a4:08:e1:d1:3e:a2: 52:2b:1b:64:f0:7a:4e:c8:ab:37:be:7b:6e:41:50: 95:94:01:a7:b3:13:38:2a:d7:44:0a:3c:b1:d8:fa: ea:8b:5d:57:d6:cf:ab:21:d0:f3:df:43:51:2a:af: 74:cc:ba:7c:b0:64:00:a9:e4:ee:6e:ca:83:d7:70: 36:f5:02:f4:ce:ea:15:61:a4:d3:ee:f8:de:b9:c6: 35:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2D:B5:95:FB:3B:46:D4:11:AC:A9:C6:EF:9D:93:E7:28:7D:F2:BB X509v3 Authority Key Identifier: keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:fd:5f:7e:15:ff:9b:39:15:f3:0f:c0:bf:9d:ec:db:c5:a9: a2:01:4a:82:97:ed:92:d4:01:3a:29:38:01:ce:4b:40:a1:d9: df:cd:37:a1:e8:ab:47:60:6f:68:15:8c:9e:15:28:29:c5:cb: a3:96:33:71:d0:bb:6b:fb:de:05:e0:40:dc:c2:12:7e:db:d4: 6c:3b:5a:ee:81:4e:c4:6a:e5:8e:8c:26:f4:bf:3e:ab:8e:a3: 33:d1:e1:dc:cb:b7:d5:28:80:0c:70:dc:d5:dd:bb:ad:43:2d: 6c:93:51:18:2d:53:9c:b2:86:8c:35:e7:78:36:aa:c2:05:bd: c4:7f:8f:f6:c1:6f:d7:6a:e0:07:99:83:ce:2e:da:00:0a:fc: ea:ea:20:e9:d9:56:94:18:c2:af:40:3d:c4:c4:9f:48:1a:84: 71:9e:02:65:44:21:ff:5b:70:42:10:7b:70:f9:91:2c:38:cb: 38:f7:2a:d6:ba:da:be:35:84:a8:b3:0c:d8:87:81:2e:8b:12: 79:ad:7a:d9:4d:c2:34:75:97:ac:2e:ac:bd:0c:31:5e:1e:03: 8d:73:4f:30:65:f0:ef:ac:57:d3:89:15:04:25:1b:0a:b0:46: d9:97:f1:f3:c9:2f:69:58:60:74:7f:d9:04:02:84:67:de:6d: c4:7b:93:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9gapReyy+G3NEVBDTBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OTNkNTRlNjM5MDgwYTQ2YzNmZTNkNThhYTg3ZTMwNWRi NjlhZDEwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhhMjJkYjU5NWZiM2I0NmQ0MTFhY2E5YzZlZjlkOTNlNzI4N2RmMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCO6TNWixFdVhjYTNdBwxbqjV8i aLKd3Iao7H6LVoDM6FmU+2+Zv/v2hH/H/kAFIXc6zZuCGvu5j/zo5EHAzMD1Cmne H7P41KNjpRBOObmgdor1WkZjvXVQ0MD2ZQhRCL5aVlzQ6I0AISapkMmKd0N+3XY1 fcUwKa+IIyyae4QSekChN4t3zeWvJAVS9SucR0I4ti72vkb2FhL8j1odZgoFZa4G F4nGOWD9P++kCOHRPqJSKxtk8HpOyKs3vntuQVCVlAGnsxM4KtdECjyx2Prqi11X 1s+rIdDz30NRKq90zLp8sGQAqeTubsqD13A29QL0zuoVYaTT7vjeucY1RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIttZX7O0bUEaypxu+dk+coffK7MB8GA1UdIwQY MBaAFDmT1U5jkICkbD/j1YqofjBdtprRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMt ZDQ4ZmJjMWEyNDNiLzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMtZDQ4ZmJjMWEyNDNi LzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/1ffhX/ mzkV8w/Av53s28WpogFKgpftktQBOik4Ac5LQKHZ3803oeirR2BvaBWMnhUoKcXL o5YzcdC7a/veBeBA3MISftvUbDta7oFOxGrljowm9L8+q46jM9Hh3Mu31SiADHDc 1d27rUMtbJNRGC1TnLKGjDXneDaqwgW9xH+P9sFv12rgB5mDzi7aAAr86uog6dlW lBjCr0A9xMSfSBqEcZ4CZUQh/1twQhB7cPmRLDjLOPcq1rravjWEqLMM2IeBLosS ea162U3CNHWXrC6svQwxXh4DjXNPMGXw76xX04kVBCUbCrBG2Zfx88kvaVhgdH/Z BAKEZ95txHuTug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:21:55 2025 by rpki-client