This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json) Hash identifier: 2/q/tOpTuB1Y/5pC7bPJ4C0h930dFSgrlxIVyIni0hk= Subject key identifier: F3:44:03:59:20:7E:BF:AC:2E:87:A3:87:B6:F2:21:F4:54:A9:EE:8E Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Certificate serial: 019AF509B20B99A398322FA35F02F933F45F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:00:44 +0000 Manifest this update: Sat 06 Dec 2025 19:00:44 +0000 Manifest next update: Sun 07 Dec 2025 19:00:44 +0000 Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: D8goRAauW9OMe86EcGekZOBD0F23zvi/exNRFhjRGyA=) 2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b2:0b:99:a3:98:32:2f:a3:5f:02:f9:33:f4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Validity Not Before: Dec 6 19:00:44 2025 GMT Not After : Dec 7 19:00:44 2025 GMT Subject: CN=f3440359207ebfac2e87a387b6f221f454a9ee8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:b8:7e:ce:92:32:95:ac:4c:cb:d5:e0:6f: 8f:68:6e:8b:fa:67:88:31:fa:0a:fb:97:6a:08:46: f8:6d:76:11:f0:62:48:27:05:f8:39:48:e6:50:45: e7:ea:c7:70:78:26:1b:b9:c2:3b:01:1e:ad:ab:71: 51:56:8a:44:e9:58:a8:fd:37:e3:78:25:e2:e9:13: 4d:da:55:27:50:ca:24:6b:d5:44:06:33:52:25:d1: d9:b0:18:c7:e4:27:de:5e:ff:30:dd:b2:6c:ad:3e: a6:06:42:1a:2e:c7:ba:ba:84:7b:59:72:b9:88:4a: fa:5b:1d:a2:49:74:3a:7a:c2:90:58:cf:05:16:29: 41:d8:eb:d8:05:e5:62:7b:74:09:bf:c8:39:b9:d6: 49:cc:ab:f9:f8:12:c8:17:a4:14:5e:01:5e:0b:a9: e3:2a:06:8b:07:a9:69:d9:18:c8:e9:8d:4e:25:9c: b8:6b:c3:b2:b9:e8:7d:30:f7:df:f3:cf:53:7a:c5: 38:5f:cc:2e:2a:be:e5:be:f8:45:6f:09:e0:22:0a: e4:32:f9:a8:f7:87:a3:4f:66:ac:9d:ce:83:2a:65: 12:62:75:60:1c:11:dd:dd:09:d5:d8:d8:46:5d:0e: be:d3:03:05:6f:3b:c5:95:68:4c:72:f6:33:c2:76: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:03:59:20:7E:BF:AC:2E:87:A3:87:B6:F2:21:F4:54:A9:EE:8E X509v3 Authority Key Identifier: keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:db:6d:b2:c7:d8:99:8e:5e:88:d1:db:33:61:12:ae:0a:fc: 3f:ea:6a:76:b5:86:51:3a:d4:32:c0:53:62:a9:5d:8f:4c:c0: d8:eb:ba:d0:c8:fe:9a:97:b1:ff:9a:64:b4:ea:45:6b:2d:01: a4:2d:94:34:bf:61:53:3d:63:7f:8f:02:7b:50:90:c7:c2:c3: 32:68:e9:62:00:64:52:b7:f4:a1:46:0e:06:dd:20:94:6e:ac: 64:88:2c:0c:e4:6b:05:27:71:a0:50:c6:04:1d:41:ae:0c:b6: 54:ac:e8:10:c0:1c:3b:c4:5e:82:f4:62:57:62:d6:bf:50:16: b1:69:21:be:b5:d9:df:4a:10:14:1b:e4:cc:9c:55:e2:66:ba: 8f:e3:d0:19:a3:d5:3e:2c:4a:fa:17:ea:6d:40:13:67:04:ba: 4b:3d:95:fd:4e:b9:d8:a3:38:b4:65:f0:f3:a0:81:a0:fa:2c: d4:6b:93:16:bd:65:de:09:97:84:fb:27:b4:32:fc:b8:03:e0: 3c:e1:38:b6:25:46:4b:d3:4d:50:af:4e:ed:74:d4:60:d6:f2: 92:b3:f2:28:aa:1d:5c:f2:92:e2:92:b9:87:a6:23:eb:3a:dd: d0:63:49:13:41:9c:e1:92:a5:0b:85:c4:8a:0e:c4:74:7e:69: e7:c6:91:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbILmaOYMi+jXwL5M/RfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0 YjZhMmUwHhcNMjUxMjA2MTkwMDQ0WhcNMjUxMjA3MTkwMDQ0WjAzMTEwLwYDVQQD EyhmMzQ0MDM1OTIwN2ViZmFjMmU4N2EzODdiNmYyMjFmNDU0YTllZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbK4fs6SMpWsTMvV4G+PaG6L+meI MfoK+5dqCEb4bXYR8GJIJwX4OUjmUEXn6sdweCYbucI7AR6tq3FRVopE6Vio/Tfj eCXi6RNN2lUnUMoka9VEBjNSJdHZsBjH5CfeXv8w3bJsrT6mBkIaLse6uoR7WXK5 iEr6Wx2iSXQ6esKQWM8FFilB2OvYBeVie3QJv8g5udZJzKv5+BLIF6QUXgFeC6nj KgaLB6lp2RjI6Y1OJZy4a8Oyueh9MPff889TesU4X8wuKr7lvvhFbwngIgrkMvmo 94ejT2asnc6DKmUSYnVgHBHd3QnV2NhGXQ6+0wMFbzvFlWhMcvYzwnaMPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNEA1kgfr+sLoejh7byIfRUqe6OMB8GA1UdIwQY MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9ttssfY mY5eiNHbM2ESrgr8P+pqdrWGUTrUMsBTYqldj0zA2Ou60Mj+mpex/5pktOpFay0B pC2UNL9hUz1jf48Ce1CQx8LDMmjpYgBkUrf0oUYOBt0glG6sZIgsDORrBSdxoFDG BB1Brgy2VKzoEMAcO8RegvRiV2LWv1AWsWkhvrXZ30oQFBvkzJxV4ma6j+PQGaPV PixK+hfqbUATZwS6Sz2V/U652KM4tGXw86CBoPos1GuTFr1l3gmXhPsntDL8uAPg POE4tiVGS9NNUK9O7XTUYNbykrPyKKodXPKS4pK5h6Yj6zrd0GNJE0Gc4ZKlC4XE ig7EdH5p58aR6w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:15 2025 by rpki-client