This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft File: OZ61MiamYLfJOBbGFrZtjHZVBgM.mft (raw, json) Hash identifier: CKAQoEFFMLD3a3kqMwOF78Iiq7fYu8BWkrhwr/XhLgs= Subject key identifier: C0:44:9D:1D:44:26:C7:BE:85:98:88:74:5D:4D:AC:A6:F4:2E:65:3C Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03 Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603 Certificate serial: 019AF12EEF68DA5377401CE4CF3C83D6F749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft Manifest number: 04EC Signing time: Sat 06 Dec 2025 01:02:56 +0000 Manifest this update: Sat 06 Dec 2025 01:02:56 +0000 Manifest next update: Sun 07 Dec 2025 01:02:56 +0000 Files and hashes: 1: 40TampSG5GQkpvyLk5qLlZwkf9M.roa (hash: cij1fX5KV3iHK8G+eUN/m++nExVx1hf+zVnHeptClME=) 2: OZ61MiamYLfJOBbGFrZtjHZVBgM.crl (hash: EVtYtWSVds1J7Noc2kEESHT6DYsxp+g6UEukGvK5riU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ef:68:da:53:77:40:1c:e4:cf:3c:83:d6:f7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603 Validity Not Before: Dec 6 01:02:56 2025 GMT Not After : Dec 7 01:02:56 2025 GMT Subject: CN=c0449d1d4426c7be859888745d4daca6f42e653c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:e5:07:a5:a3:4b:34:5a:27:60:e7:60:88: 68:e6:85:4e:02:90:dc:13:9d:ae:f7:cb:bf:40:51: c6:44:39:c8:42:09:db:df:07:ab:8b:a4:f6:a7:4c: 51:44:5f:0b:2d:0e:45:05:d7:21:0b:32:4b:ac:71: 50:12:c2:97:50:b5:fd:40:d9:a8:1e:97:49:b0:a8: 28:75:d2:81:71:06:96:ff:04:b9:c8:0c:6c:80:06: 16:11:01:48:b0:ac:0e:80:98:2f:3f:10:21:77:48: 7b:9d:6a:4d:c1:2c:d7:d3:04:08:c7:1a:f1:03:c4: 3a:6e:56:b1:e7:df:8b:5a:e7:3a:6a:49:a3:69:bf: 68:e9:af:80:5b:e7:dc:10:8d:5e:63:29:d2:f1:9c: 9a:d9:a9:b9:2d:0e:26:c6:e9:1b:ee:29:b7:85:bd: 12:07:7c:8d:0a:0d:14:d2:cb:49:7e:27:dc:08:fc: 3b:aa:ca:9e:41:7f:5a:9f:36:c1:f2:f1:82:24:f2: 76:fa:57:09:ce:46:69:06:1f:e2:c3:d7:91:23:98: 36:7e:06:d4:88:70:82:77:d7:32:ee:1e:ee:a5:36: 8f:e4:45:2f:e2:e5:74:d1:e9:d6:32:3d:29:cf:04: f8:89:42:44:d4:d1:35:bf:7f:d4:93:bc:c2:79:8b: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:9D:1D:44:26:C7:BE:85:98:88:74:5D:4D:AC:A6:F4:2E:65:3C X509v3 Authority Key Identifier: keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:00:47:28:bb:05:ca:87:c9:27:cb:fe:7c:38:23:9d:03:9d: dc:29:5c:d1:05:68:5b:4a:f2:b0:db:7c:44:24:59:85:8b:9a: 99:74:b3:a7:3f:e8:ab:f7:6b:b5:dc:ae:5c:86:0b:12:de:3f: 41:1d:b1:f5:6e:e2:e3:62:a7:24:c7:23:3f:fb:41:b4:b5:4d: b9:97:2e:72:a6:c9:3f:23:4e:cf:35:26:fb:64:91:de:34:f6: 66:db:ee:8c:fd:94:2c:16:9e:1b:67:de:d2:39:9c:bb:ac:8b: 6d:fe:59:59:4e:f2:90:a3:73:48:ed:db:7a:f5:78:93:b8:4f: a3:67:9b:99:f0:51:ed:72:67:e4:db:8f:d4:8a:d2:1d:cc:b4: 9b:e3:92:2b:ff:a0:63:2d:6c:56:93:8f:28:76:2a:ca:ee:f3: fe:a9:b9:4c:2f:a3:97:a6:8c:13:c4:82:fb:58:be:fe:bc:b8: 7e:09:ec:db:7e:7d:3b:c8:5a:44:15:28:96:67:08:48:82:df: 44:ea:80:7b:fa:06:5d:f9:f1:c2:8d:80:47:b7:33:73:85:20: 70:ba:64:27:f4:27:21:76:ed:c1:10:b6:b3:c9:6a:92:de:50: 62:00:82:c9:24:6a:45:24:2d:7f:89:2d:28:46:19:62:2b:92: 53:61:8e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLu9o2lN3QBzkzzyD1vdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OWViNTMyMjZhNjYwYjdjOTM4MTZjNjE2YjY2ZDhjNzY1 NTA2MDMwHhcNMjUxMjA2MDEwMjU2WhcNMjUxMjA3MDEwMjU2WjAzMTEwLwYDVQQD EyhjMDQ0OWQxZDQ0MjZjN2JlODU5ODg4NzQ1ZDRkYWNhNmY0MmU2NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWnlB6WjSzRaJ2DnYIho5oVOApDc E52u98u/QFHGRDnIQgnb3weri6T2p0xRRF8LLQ5FBdchCzJLrHFQEsKXULX9QNmo HpdJsKgoddKBcQaW/wS5yAxsgAYWEQFIsKwOgJgvPxAhd0h7nWpNwSzX0wQIxxrx A8Q6blax59+LWuc6akmjab9o6a+AW+fcEI1eYynS8Zya2am5LQ4mxukb7im3hb0S B3yNCg0U0stJfifcCPw7qsqeQX9anzbB8vGCJPJ2+lcJzkZpBh/iw9eRI5g2fgbU iHCCd9cy7h7upTaP5EUv4uV00enWMj0pzwT4iUJE1NE1v3/Uk7zCeYtnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBEnR1EJse+hZiIdF1NrKb0LmU8MB8GA1UdIwQY MBaAFDmetTImpmC3yTgWxha2bYx2VQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQt YWJlNTJkN2FhNzdlLzEvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQtYWJlNTJkN2FhNzdl LzEvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgBHKLsF yofJJ8v+fDgjnQOd3Clc0QVoW0rysNt8RCRZhYuamXSzpz/oq/drtdyuXIYLEt4/ QR2x9W7i42KnJMcjP/tBtLVNuZcucqbJPyNOzzUm+2SR3jT2ZtvujP2ULBaeG2fe 0jmcu6yLbf5ZWU7ykKNzSO3bevV4k7hPo2ebmfBR7XJn5NuP1IrSHcy0m+OSK/+g Yy1sVpOPKHYqyu7z/qm5TC+jl6aME8SC+1i+/ry4fgns2359O8haRBUolmcISILf ROqAe/oGXfnxwo2AR7czc4UgcLpkJ/QnIXbtwRC2s8lqkt5QYgCCySRqRSQtf4kt KEYZYiuSU2GOyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:10 2025 by rpki-client