This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: fOx5XNaN+crEiKExQwZqosLkhRX6cW5UQssp6XnvXbk= Subject key identifier: 9A:91:2C:80:4D:28:C5:DA:C6:A1:53:C2:08:0E:35:BF:24:43:A9:3F Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019AF5E5A87A47EC0B4344F9FD52F6528950 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 23:01:00 +0000 Manifest this update: Sat 06 Dec 2025 23:01:00 +0000 Manifest next update: Sun 07 Dec 2025 23:01:00 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: wowUENvTIKwRIXCOWImamAkXIMXpsrM4KYCKdDVCADo=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:a8:7a:47:ec:0b:43:44:f9:fd:52:f6:52:89:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Dec 6 23:01:00 2025 GMT Not After : Dec 7 23:01:00 2025 GMT Subject: CN=9a912c804d28c5dac6a153c2080e35bf2443a93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:aa:fd:89:f2:b9:2c:ed:0c:2a:77:dc:82: 42:8e:eb:16:98:72:ab:40:f6:c6:c6:63:b0:6d:c0: ce:da:ef:ca:d6:f8:9a:28:7f:52:aa:31:a8:0c:cb: 7c:ca:90:67:81:4f:a5:4b:7c:10:2a:73:a3:f0:45: 60:5e:f9:da:7a:4a:70:b3:69:54:9a:51:68:81:34: a9:5d:c7:fc:72:a5:54:43:1e:5b:41:01:80:8a:7b: c8:35:11:3b:a8:c3:e0:10:93:d8:ba:b0:9f:3a:6e: a7:a7:a0:f8:33:9b:e0:8e:d8:d5:94:4f:6a:fe:6b: 30:d0:b1:46:01:a8:ec:af:e0:c1:ad:36:62:94:a3: 6c:93:ba:29:ce:e5:e2:11:26:45:f5:65:31:e8:c9: e8:3a:1e:ec:ec:7f:ca:7e:f3:ee:58:a7:2b:53:54: 23:74:bf:54:77:0c:42:2a:b4:16:a6:15:42:fb:bf: 77:57:52:e9:23:b7:96:c1:80:00:4e:67:49:d8:24: a5:18:5b:5b:06:0b:81:ec:2d:5a:d7:33:d7:55:df: d2:6c:b2:68:5f:05:2a:ec:c5:a1:d1:75:1f:15:25: 8d:cb:ce:16:ef:01:93:1a:0a:d7:13:57:38:60:4a: 77:02:17:19:7a:a8:b8:f2:0b:52:84:d1:79:b9:dc: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:91:2C:80:4D:28:C5:DA:C6:A1:53:C2:08:0E:35:BF:24:43:A9:3F X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:54:a3:c4:ad:df:9f:b6:ca:7c:2c:2d:37:0b:59:cb:d4:62: 76:94:2c:59:44:51:1d:d0:4d:b4:de:62:a7:31:06:8b:89:5a: 3f:c7:20:c1:76:b1:18:51:3b:2a:3d:a3:04:73:d3:e6:93:1c: 05:c1:5d:cf:5c:22:35:a9:40:7f:d6:b4:5e:7f:e2:18:aa:97: c1:cc:de:10:d6:a0:e6:b0:ee:2e:46:0c:74:b5:f7:1c:5b:d1: 58:10:39:16:ab:5c:21:13:85:3c:4c:0e:30:58:da:aa:39:80: 85:ae:e9:90:21:08:8d:7c:60:59:d4:dd:77:0d:83:99:ee:37: 84:aa:6c:ee:a7:c0:19:8a:5d:88:e6:ea:e9:af:3e:05:d9:2c: 8b:04:26:0e:63:47:eb:54:49:44:f9:5f:e3:c5:25:e6:88:02: 30:a7:21:84:d1:17:ff:9a:78:cc:d7:30:1e:f9:ef:64:b5:3a: bd:f4:dd:5e:c2:9f:42:8f:4d:8b:51:ea:4d:45:e3:14:ce:73: 37:74:99:c5:aa:99:38:12:f6:13:8a:3a:00:51:72:30:33:92: 01:84:29:38:47:db:5b:21:98:6e:28:6d:8b:a2:17:ff:ab:51: ed:17:54:13:c1:cc:4d:17:b7:34:80:62:4d:d2:22:87:b4:8b: 4e:ee:1f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ah6R+wLQ0T5/VL2UolQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUxMjA2MjMwMTAwWhcNMjUxMjA3MjMwMTAwWjAzMTEwLwYDVQQD Eyg5YTkxMmM4MDRkMjhjNWRhYzZhMTUzYzIwODBlMzViZjI0NDNhOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucmq/YnyuSztDCp33IJCjusWmHKr QPbGxmOwbcDO2u/K1viaKH9SqjGoDMt8ypBngU+lS3wQKnOj8EVgXvnaekpws2lU mlFogTSpXcf8cqVUQx5bQQGAinvINRE7qMPgEJPYurCfOm6np6D4M5vgjtjVlE9q /msw0LFGAajsr+DBrTZilKNsk7opzuXiESZF9WUx6MnoOh7s7H/KfvPuWKcrU1Qj dL9UdwxCKrQWphVC+793V1LpI7eWwYAATmdJ2CSlGFtbBguB7C1a1zPXVd/SbLJo XwUq7MWh0XUfFSWNy84W7wGTGgrXE1c4YEp3AhcZeqi48gtShNF5udxdfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqRLIBNKMXaxqFTwggONb8kQ6k/MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1SjxK3f n7bKfCwtNwtZy9RidpQsWURRHdBNtN5ipzEGi4laP8cgwXaxGFE7Kj2jBHPT5pMc BcFdz1wiNalAf9a0Xn/iGKqXwczeENag5rDuLkYMdLX3HFvRWBA5FqtcIROFPEwO MFjaqjmAha7pkCEIjXxgWdTddw2Dme43hKps7qfAGYpdiObq6a8+BdksiwQmDmNH 61RJRPlf48Ul5ogCMKchhNEX/5p4zNcwHvnvZLU6vfTdXsKfQo9Ni1HqTUXjFM5z N3SZxaqZOBL2E4o6AFFyMDOSAYQpOEfbWyGYbihti6IX/6tR7RdUE8HMTRe3NIBi TdIih7SLTu4fbg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:39 2025 by rpki-client