This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft File: ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json) Hash identifier: avmUZR6hTh6E4dchm7WBskfWteJMIbN94n6urvf2Uw4= Subject key identifier: E1:B5:02:FA:EF:EF:C6:80:ED:56:43:2D:E9:9B:03:EC:9D:95:61:B2 Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36 Certificate serial: 019AF276CE2885A1D2F3FA7EB141CAEC7984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: 2sPPy0q5Y12qD-JkITxmoSy9VZk.roa (hash: Gj7nMEcJE/n/qMR7ny5p+eEBgM3NSrc5hNkaSKeptpA=) 2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: gqmwPGT81aTHKFrBTb5nfsUu9aFAXvyrEde9kwNH4RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ce:28:85:a1:d2:f3:fa:7e:b1:41:ca:ec:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=e1b502faefefc680ed56432de99b03ec9d9561b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:d1:51:cc:69:70:22:2e:66:37:96:4b:7b: 65:e9:71:9e:13:1a:93:a1:6a:c3:5f:e5:bd:d3:aa: 4f:96:26:14:51:d9:6c:1a:da:25:ed:7d:cd:6d:0c: 64:96:64:ab:91:12:7e:0b:05:17:04:96:60:37:1e: 91:b5:7f:81:30:20:2b:78:78:ba:74:a9:4d:49:0f: c1:2e:46:88:83:94:eb:93:33:b7:b0:94:ad:21:c5: 37:7a:7e:35:ac:4d:72:26:6e:b5:d1:33:0a:51:83: 17:21:fa:c4:10:bb:82:38:3e:de:da:b8:e9:cd:ca: cd:1e:be:19:1d:c6:49:22:6e:a3:42:2b:5f:0f:c4: 45:3d:3d:96:a7:0c:12:4b:80:c0:df:9a:38:06:db: ac:65:7b:67:34:de:f6:7c:ae:6e:70:be:00:47:20: 25:cb:2f:01:f3:4e:0b:41:f3:77:ed:86:99:d9:09: 4a:93:a8:b1:5f:c6:a5:73:e7:cb:88:22:60:33:8d: e7:81:ba:59:b2:69:1b:1d:e5:9b:fb:8f:06:92:ec: 9f:3b:84:d6:5e:23:1a:8f:70:57:bd:65:17:75:58: 68:50:47:60:8c:8e:40:f0:c6:0a:fa:1e:2a:02:5b: 41:d2:36:7b:23:45:64:ad:7d:a4:98:b8:df:d1:cd: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:02:FA:EF:EF:C6:80:ED:56:43:2D:E9:9B:03:EC:9D:95:61:B2 X509v3 Authority Key Identifier: keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:20:23:9c:7a:4e:42:ba:8c:84:bf:91:bd:75:fe:2a:78:12: 09:17:de:a7:0d:bf:fd:cd:97:db:ee:65:4b:8d:bf:78:d3:98: 42:33:6c:1d:8f:cb:7a:19:d1:1b:05:9c:c7:1b:3a:08:78:45: 6a:e9:d1:59:fa:99:bc:1e:03:1b:d3:73:0d:33:63:b2:87:e0: 9b:a6:40:95:a2:bb:0a:b6:6f:c9:dc:d1:fa:32:d6:d7:8c:97: 72:85:e9:42:51:df:a7:98:ec:96:71:58:eb:58:8b:0f:96:0a: a6:f9:96:df:76:a3:ce:75:2a:b4:c4:28:96:10:d9:d1:63:b4: 37:90:53:20:61:28:3f:99:35:87:a7:6b:b7:5e:d9:96:b7:2e: fb:6b:04:86:6c:d9:12:6d:bc:1a:dc:d2:37:eb:79:90:21:dd: b2:e4:06:51:43:74:bc:d5:44:4e:a6:98:09:fb:4e:2e:e2:eb: 3b:f3:a2:ab:e4:6d:4b:66:7e:29:67:69:e4:a4:69:6e:87:ba: 2d:12:e6:28:85:78:56:2f:32:ee:3a:bd:fe:d9:71:ec:2b:c5: 29:81:0f:df:24:7a:6e:4e:6e:11:16:9a:85:99:df:4a:ba:e0: ab:96:31:37:d7:45:3f:da:53:ce:87:06:ff:ce:8f:53:c2:1b: 13:b0:18:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds4ohaHS8/p+sUHK7HmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMzMxMTRjYmZjNmJmNjY4MzcxYzU2ODdlZTk4YTQ0MmZk OGVhMzYwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD EyhlMWI1MDJmYWVmZWZjNjgwZWQ1NjQzMmRlOTliMDNlYzlkOTU2MWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PDRUcxpcCIuZjeWS3tl6XGeExqT oWrDX+W906pPliYUUdlsGtol7X3NbQxklmSrkRJ+CwUXBJZgNx6RtX+BMCAreHi6 dKlNSQ/BLkaIg5TrkzO3sJStIcU3en41rE1yJm610TMKUYMXIfrEELuCOD7e2rjp zcrNHr4ZHcZJIm6jQitfD8RFPT2WpwwSS4DA35o4BtusZXtnNN72fK5ucL4ARyAl yy8B804LQfN37YaZ2QlKk6ixX8alc+fLiCJgM43ngbpZsmkbHeWb+48GkuyfO4TW XiMaj3BXvWUXdVhoUEdgjI5A8MYK+h4qAltB0jZ7I0VkrX2kmLjf0c3bgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOG1Avrv78aA7VZDLembA+ydlWGyMB8GA1UdIwQY MBaAFKMzEUy/xr9mg3HFaH7pikQv2Oo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMt Y2Q0OTI2NGVhZjBiLzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMtY2Q0OTI2NGVhZjBi LzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiAjnHpO QrqMhL+RvXX+KngSCRfepw2//c2X2+5lS42/eNOYQjNsHY/LehnRGwWcxxs6CHhF aunRWfqZvB4DG9NzDTNjsofgm6ZAlaK7CrZvydzR+jLW14yXcoXpQlHfp5jslnFY 61iLD5YKpvmW33ajznUqtMQolhDZ0WO0N5BTIGEoP5k1h6drt17Zlrcu+2sEhmzZ Em28GtzSN+t5kCHdsuQGUUN0vNVETqaYCftOLuLrO/Oiq+RtS2Z+KWdp5KRpboe6 LRLmKIV4Vi8y7jq9/tlx7CvFKYEP3yR6bk5uERaahZnfSrrgq5YxN9dFP9pTzocG /86PU8IbE7AYuw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:22 2025 by rpki-client