This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json) Hash identifier: CmflL7BbFr4qAbMKcUJlNpvReCWPIwtSpgzR5wjF93s= Subject key identifier: 02:BC:3A:6D:94:4A:34:28:89:D0:C3:5B:77:93:0C:0D:7D:A0:9E:C1 Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019AF389234373A0B7B5F15EF25C887445E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft Manifest number: 0FCE Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: BwvdXklmqZecC/bWQrSY8/4fkp3mUf5KUNq/nglM+EY=) 2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:23:43:73:a0:b7:b5:f1:5e:f2:5c:88:74:45:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=02bc3a6d944a342889d0c35b77930c0d7da09ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bb:5e:6d:65:fe:7d:53:1e:4b:89:40:1e:13: 84:32:84:61:df:be:28:6a:83:c9:0e:09:ae:6e:9f: d5:b2:37:aa:6f:50:5d:fe:3c:0d:0b:c4:ed:4b:4f: fb:3d:5f:0c:d3:ac:f7:17:23:54:fb:36:2b:61:f6: d3:b7:81:50:99:01:e2:fc:b9:83:44:df:16:19:54: 70:43:9a:b8:06:09:f1:37:79:79:f8:80:5a:fa:0e: c6:c5:d2:46:7d:72:a4:a9:a1:e2:0b:11:af:68:dd: cd:10:2a:1e:19:ed:ea:08:87:51:62:b8:d6:12:ee: c8:ac:5e:4d:19:fc:13:d5:c3:cc:49:2a:c1:50:a0: 53:7f:a9:53:3e:35:84:4d:b3:fc:a4:7e:cb:4e:12: 8e:a2:dc:72:51:c3:89:30:1d:08:d1:a6:83:25:90: 4e:03:e4:03:fb:4f:3f:37:97:64:29:50:ad:40:7d: 54:cb:aa:52:a3:f7:4d:64:0a:a3:a4:fd:a4:27:bc: 84:3c:47:13:8a:77:d1:60:55:2c:37:a9:54:7c:fc: 8e:d5:2f:1b:a1:ed:1e:33:4e:67:68:71:a9:09:8c: 41:67:2c:32:ce:9d:34:f3:ea:66:d3:4f:1c:f6:cf: fd:42:b8:6f:cf:39:8e:dc:06:fc:d7:23:89:ee:f8: 7a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:3A:6D:94:4A:34:28:89:D0:C3:5B:77:93:0C:0D:7D:A0:9E:C1 X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:93:e2:12:bd:68:f6:d1:0c:14:e7:dc:01:01:e2:db:ae:95: 06:c3:f2:38:32:1c:fa:3e:c9:ea:62:69:10:e2:96:00:e5:62: 54:47:62:63:43:bf:2f:4c:71:ef:9a:15:06:e3:e8:d9:3f:d5: 19:ab:05:77:d2:2a:63:11:1e:88:3b:7e:98:1c:af:02:81:03: c4:65:05:5a:d7:e2:0c:c6:95:ff:4e:ad:cc:58:a9:f1:68:13: b4:4c:53:e0:d0:f3:c5:3e:6b:95:1d:65:12:fd:77:40:d9:a9: 94:ef:b1:e7:77:e6:3d:21:d2:e0:01:b9:89:94:13:ba:8e:dc: 24:ef:71:81:e0:56:2d:48:ff:ab:e0:2c:5a:95:0f:3f:74:f4: e0:1e:d8:64:a7:5a:d2:2a:92:75:30:64:9c:e2:fb:43:2f:8c: 30:7e:22:eb:e1:4a:8a:4d:8c:92:40:02:7d:e2:a9:df:83:d3: 3a:28:e3:6f:df:3c:44:70:e9:65:7e:5e:04:40:e6:70:ee:e8: df:f6:23:17:58:1d:bc:bc:b3:1b:90:c2:4b:0d:cc:b6:9f:e5: 74:35:f6:32:72:91:16:c2:4f:2f:bd:ca:57:87:f8:3b:ea:fb: e9:9b:7c:2a:34:0e:20:69:de:c4:89:aa:0e:9f:64:46:b2:ec: cc:42:c5:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSNDc6C3tfFe8lyIdEXlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD EygwMmJjM2E2ZDk0NGEzNDI4ODlkMGMzNWI3NzkzMGMwZDdkYTA5ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7tebWX+fVMeS4lAHhOEMoRh374o aoPJDgmubp/Vsjeqb1Bd/jwNC8TtS0/7PV8M06z3FyNU+zYrYfbTt4FQmQHi/LmD RN8WGVRwQ5q4BgnxN3l5+IBa+g7GxdJGfXKkqaHiCxGvaN3NECoeGe3qCIdRYrjW Eu7IrF5NGfwT1cPMSSrBUKBTf6lTPjWETbP8pH7LThKOotxyUcOJMB0I0aaDJZBO A+QD+08/N5dkKVCtQH1Uy6pSo/dNZAqjpP2kJ7yEPEcTinfRYFUsN6lUfPyO1S8b oe0eM05naHGpCYxBZywyzp008+pm008c9s/9QrhvzzmO3Ab81yOJ7vh6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAK8Om2USjQoidDDW3eTDA19oJ7BMB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZPiEr1o 9tEMFOfcAQHi266VBsPyODIc+j7J6mJpEOKWAOViVEdiY0O/L0xx75oVBuPo2T/V GasFd9IqYxEeiDt+mByvAoEDxGUFWtfiDMaV/06tzFip8WgTtExT4NDzxT5rlR1l Ev13QNmplO+x53fmPSHS4AG5iZQTuo7cJO9xgeBWLUj/q+AsWpUPP3T04B7YZKda 0iqSdTBknOL7Qy+MMH4i6+FKik2MkkACfeKp34PTOijjb988RHDpZX5eBEDmcO7o 3/YjF1gdvLyzG5DCSw3Mtp/ldDX2MnKRFsJPL73KV4f4O+r76Zt8KjQOIGnexImq Dp9kRrLszELFBA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:22 2025 by rpki-client