This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft File: OCvsQ90a_pemT1brhUx58WP6TuY.mft (raw, json) Hash identifier: UDiHMq4tLe31BEPsaNHuamEx4x7T0U56ualhrh9FY5E= Subject key identifier: 5A:33:8F:36:15:17:1A:B0:1D:69:A2:45:72:E7:93:2E:5A:56:66:FD Authority key identifier: 38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6 Certificate issuer: /CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6 Certificate serial: 019AF2ADA1E51E2AABE3503396B768EEAD88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:56 +0000 Manifest this update: Sat 06 Dec 2025 08:00:56 +0000 Manifest next update: Sun 07 Dec 2025 08:00:56 +0000 Files and hashes: 1: OCvsQ90a_pemT1brhUx58WP6TuY.crl (hash: bAk5lL9y/zj540I4AWBjC08L4qC+XFUJpQf5AiB3tAA=) 2: ZcMWvBkTNFkQiz2yA0G8DNGlqp8.roa (hash: ElsDKcX3/AeNMZDxpF6Opg+D9XtiydscqeFlhPJCg+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a1:e5:1e:2a:ab:e3:50:33:96:b7:68:ee:ad:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382bec43dd1afe97a64f56eb854c79f163fa4ee6 Validity Not Before: Dec 6 08:00:56 2025 GMT Not After : Dec 7 08:00:56 2025 GMT Subject: CN=5a338f3615171ab01d69a24572e7932e5a5666fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:62:b7:46:2a:10:2d:88:8f:68:34:68:58:13: 75:e7:d0:c6:49:74:3b:0b:da:b9:f1:7b:f4:70:68: e9:36:5f:04:76:c2:c6:b7:61:4c:a9:d6:98:0c:e1: bb:56:71:60:27:7c:37:51:08:bb:b9:0d:dd:e6:4d: 53:09:15:12:7f:fe:69:ba:da:0d:e4:5f:e2:9f:29: f7:a2:e8:b1:dc:dd:d0:68:3e:72:47:77:cf:08:e9: 0f:6b:6c:a1:95:9e:99:3f:54:3f:cf:d7:08:46:c2: 31:69:eb:82:fe:6b:0a:94:8c:b6:13:0a:f6:5f:d2: c9:5a:ac:76:9d:49:14:5c:cc:4e:3e:45:46:78:9c: 3e:e2:01:23:3f:a2:09:d2:bb:7a:32:f8:1b:30:66: 40:b0:e7:73:ab:50:0a:aa:3f:7c:bd:6e:d8:0b:25: 95:9f:e1:15:95:42:7b:88:5a:3a:91:86:0a:bd:f6: bb:18:e5:98:a0:f6:79:0c:0f:2a:f0:62:08:53:2b: 02:2a:71:29:04:40:0c:09:8b:3f:a2:60:49:f0:52: 23:8d:77:19:78:c5:63:08:81:04:bb:74:79:b1:1d: 1e:58:98:d0:8c:11:c2:29:b6:d4:58:38:f6:44:b5: ed:68:31:88:42:78:ce:e7:38:85:25:f1:bf:38:f5: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:8F:36:15:17:1A:B0:1D:69:A2:45:72:E7:93:2E:5A:56:66:FD X509v3 Authority Key Identifier: keyid:38:2B:EC:43:DD:1A:FE:97:A6:4F:56:EB:85:4C:79:F1:63:FA:4E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCvsQ90a_pemT1brhUx58WP6TuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2a8f4-7065-474b-a03d-27509711e37f/1/OCvsQ90a_pemT1brhUx58WP6TuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:03:98:d6:3a:9c:9a:ba:fb:39:05:7c:56:fb:db:a0:90:be: 4f:38:ae:16:0d:21:71:a8:13:a2:78:a8:66:13:af:89:9c:18: 35:fc:87:01:9e:e4:39:61:d9:f5:1c:29:3e:8d:36:28:8f:44: c2:ad:9a:3e:e2:ee:ad:b3:a4:7e:a5:ac:06:b0:ef:ce:5b:42: 94:3f:c8:e3:cb:3a:f5:a5:77:45:e2:1a:52:bd:cc:a7:1a:83: 87:b6:8b:92:05:1e:10:af:5f:c4:44:1f:d9:e3:8f:0c:30:d9: 50:dd:25:1d:3c:03:b2:e0:c5:e8:70:3e:69:c4:3c:03:d3:65: 5a:50:a9:ff:26:9c:4d:1a:a3:bd:61:e9:e0:ce:38:74:d2:4b: 16:bf:86:35:52:f2:47:48:90:41:4c:0e:8d:86:9b:ad:e4:8d: b1:28:cb:82:cb:b2:d2:8e:4c:ed:9c:24:6c:36:0f:c4:5e:d9: c8:69:01:85:6a:2b:53:09:d4:0b:dd:86:71:6e:dc:fa:53:30: 8d:64:df:36:6f:76:a6:03:9a:e7:36:9d:06:cf:2f:49:a5:cd: 32:e0:5d:e9:f8:c6:0f:cc:62:9a:86:85:f9:f0:52:ff:c4:64: 0a:39:e1:4c:60:f4:f2:b4:dc:92:92:16:56:2d:55:85:fe:c5: 15:5c:f2:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryraHlHiqr41Azlrdo7q2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmJlYzQzZGQxYWZlOTdhNjRmNTZlYjg1NGM3OWYxNjNm YTRlZTYwHhcNMjUxMjA2MDgwMDU2WhcNMjUxMjA3MDgwMDU2WjAzMTEwLwYDVQQD Eyg1YTMzOGYzNjE1MTcxYWIwMWQ2OWEyNDU3MmU3OTMyZTVhNTY2NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GK3RioQLYiPaDRoWBN159DGSXQ7 C9q58Xv0cGjpNl8EdsLGt2FMqdaYDOG7VnFgJ3w3UQi7uQ3d5k1TCRUSf/5putoN 5F/inyn3ouix3N3QaD5yR3fPCOkPa2yhlZ6ZP1Q/z9cIRsIxaeuC/msKlIy2Ewr2 X9LJWqx2nUkUXMxOPkVGeJw+4gEjP6IJ0rt6MvgbMGZAsOdzq1AKqj98vW7YCyWV n+EVlUJ7iFo6kYYKvfa7GOWYoPZ5DA8q8GIIUysCKnEpBEAMCYs/omBJ8FIjjXcZ eMVjCIEEu3R5sR0eWJjQjBHCKbbUWDj2RLXtaDGIQnjO5ziFJfG/OPVIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFozjzYVFxqwHWmiRXLnky5aVmb9MB8GA1UdIwQY MBaAFDgr7EPdGv6Xpk9W64VMefFj+k7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2Qt Mjc1MDk3MTFlMzdmLzEvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lMmE4ZjQtNzA2NS00NzRiLWEwM2QtMjc1MDk3MTFlMzdm LzEvT0N2c1E5MGFfcGVtVDFicmhVeDU4V1A2VHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAOY1jqc mrr7OQV8VvvboJC+TziuFg0hcagTonioZhOviZwYNfyHAZ7kOWHZ9RwpPo02KI9E wq2aPuLurbOkfqWsBrDvzltClD/I48s69aV3ReIaUr3MpxqDh7aLkgUeEK9fxEQf 2eOPDDDZUN0lHTwDsuDF6HA+acQ8A9NlWlCp/yacTRqjvWHp4M44dNJLFr+GNVLy R0iQQUwOjYabreSNsSjLgsuy0o5M7ZwkbDYPxF7ZyGkBhWorUwnUC92GcW7c+lMw jWTfNm92pgOa5zadBs8vSaXNMuBd6fjGD8ximoaF+fBS/8RkCjnhTGD08rTckpIW Vi1Vhf7FFVzynA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:22 2025 by rpki-client