This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json) Hash identifier: HhemEzLZEFLmkzPCcpmHwvil0kZpI+vd+7ZeHr+stbU= Subject key identifier: 9A:9D:34:ED:85:F9:D2:9B:94:E5:C6:1F:6B:FE:AB:75:79:3F:DE:41 Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Certificate serial: 019AF12E98C8D015D0F7CB837A4EB60C693B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:33 +0000 Manifest this update: Sat 06 Dec 2025 01:02:33 +0000 Manifest next update: Sun 07 Dec 2025 01:02:33 +0000 Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: pCc4MEth1RMJtgpomg5E81mo93UThPGN30lPSB2VecY=) 2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:98:c8:d0:15:d0:f7:cb:83:7a:4e:b6:0c:69:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Validity Not Before: Dec 6 01:02:33 2025 GMT Not After : Dec 7 01:02:33 2025 GMT Subject: CN=9a9d34ed85f9d29b94e5c61f6bfeab75793fde41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:2b:81:5c:cc:95:68:f5:3f:fe:03:10:5c: c6:c8:bb:db:fa:4c:66:e3:b3:66:d7:8d:ef:8d:84: 2f:e0:6b:3e:33:f1:14:89:c3:a8:38:b5:08:5c:eb: 97:83:10:bc:88:36:fc:1e:fc:7c:d9:03:03:6c:33: 07:e8:a8:0b:38:87:90:a5:d5:5c:9a:cf:8b:7e:78: 43:41:f8:e0:10:6b:a7:c5:b5:08:5e:1b:cd:23:97: db:50:1a:9d:22:c5:fb:42:cb:a4:5b:46:a4:68:c3: dc:25:64:4c:48:05:86:dc:5c:60:ad:ba:44:f3:84: 5d:1a:d5:0d:aa:45:10:3d:09:51:33:f3:d9:98:46: a3:ee:38:5f:55:aa:b3:e7:95:28:41:99:8a:9b:bd: 1b:be:01:31:eb:23:60:34:b5:af:e9:9e:aa:25:93: 39:eb:73:a1:dc:7f:4f:9d:43:4c:c1:69:1c:9b:1f: 3c:fc:a2:3e:06:df:13:be:fc:e8:72:a4:d6:74:f1: 66:a2:aa:df:e5:59:fd:58:c3:60:70:4f:77:0d:db: 31:b5:48:e7:e7:40:33:d0:0a:62:dc:fc:2e:26:b9: 44:63:8d:db:39:a5:b7:10:07:ad:f2:23:e5:e6:79: 6b:f8:5a:4c:22:45:c3:de:e5:60:d8:97:90:bd:db: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:34:ED:85:F9:D2:9B:94:E5:C6:1F:6B:FE:AB:75:79:3F:DE:41 X509v3 Authority Key Identifier: keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:85:36:08:f5:e7:83:94:a2:59:1b:4f:93:f1:d2:af:27:a8: 19:42:8c:7b:f1:a1:9c:99:c1:ad:f4:f1:1b:1e:43:71:43:ff: e6:46:61:d7:30:2c:88:0a:49:30:bc:a8:bc:07:71:10:6b:6d: 59:d0:7b:39:8b:12:25:3a:ff:8c:c2:a4:12:92:62:8d:67:3c: a9:5d:3b:0d:b6:50:e7:4b:39:d7:60:36:14:ac:66:5f:7a:a3: c7:ce:4c:63:8d:bd:3e:70:a9:18:bc:43:cd:1b:21:d5:69:b7: de:ce:30:f7:20:4d:3c:6d:c4:09:a6:40:50:38:18:60:40:85: a3:46:86:53:e6:33:9a:fb:a6:44:7a:e3:cf:31:63:d6:dc:3c: bd:7c:90:c3:15:8d:c3:86:45:ab:25:8f:52:8f:75:fe:76:8d: 95:f3:eb:c0:31:4f:2c:52:cf:6d:0a:f7:53:cf:c9:01:21:60: 32:93:6e:bf:8f:2c:34:46:5e:a5:43:12:a7:85:b3:3e:da:70: 38:38:fb:32:f6:bf:48:4e:eb:37:58:c5:b5:1e:f6:2b:4a:6c: fb:d7:48:62:b2:87:06:e7:10:07:a6:9b:16:de:02:6d:3b:50: 39:18:8f:68:32:46:1d:be:1b:95:7c:02:ec:33:25:5b:0f:e7: 6d:35:f7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpjI0BXQ98uDek62DGk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5 ODk5MjIwHhcNMjUxMjA2MDEwMjMzWhcNMjUxMjA3MDEwMjMzWjAzMTEwLwYDVQQD Eyg5YTlkMzRlZDg1ZjlkMjliOTRlNWM2MWY2YmZlYWI3NTc5M2ZkZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYcrgVzMlWj1P/4DEFzGyLvb+kxm 47Nm143vjYQv4Gs+M/EUicOoOLUIXOuXgxC8iDb8Hvx82QMDbDMH6KgLOIeQpdVc ms+LfnhDQfjgEGunxbUIXhvNI5fbUBqdIsX7QsukW0akaMPcJWRMSAWG3FxgrbpE 84RdGtUNqkUQPQlRM/PZmEaj7jhfVaqz55UoQZmKm70bvgEx6yNgNLWv6Z6qJZM5 63Oh3H9PnUNMwWkcmx88/KI+Bt8TvvzocqTWdPFmoqrf5Vn9WMNgcE93DdsxtUjn 50Az0Api3PwuJrlEY43bOaW3EAet8iPl5nlr+FpMIkXD3uVg2JeQvduqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqdNO2F+dKblOXGH2v+q3V5P95BMB8GA1UdIwQY MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt Y2NkYWRmN2Y2NWYyLzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4U2CPXn g5SiWRtPk/HSryeoGUKMe/GhnJnBrfTxGx5DcUP/5kZh1zAsiApJMLyovAdxEGtt WdB7OYsSJTr/jMKkEpJijWc8qV07DbZQ50s512A2FKxmX3qjx85MY429PnCpGLxD zRsh1Wm33s4w9yBNPG3ECaZAUDgYYECFo0aGU+YzmvumRHrjzzFj1tw8vXyQwxWN w4ZFqyWPUo91/naNlfPrwDFPLFLPbQr3U8/JASFgMpNuv48sNEZepUMSp4WzPtpw ODj7Mva/SE7rN1jFtR72K0ps+9dIYrKHBucQB6abFt4CbTtQORiPaDJGHb4blXwC 7DMlWw/nbTX3aw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:18 2025 by rpki-client