This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft File: OCxntKtK-G_mHqjG4X0R4-BdClE.mft (raw, json) Hash identifier: V80ZqLELy+r254KUsL1QSpRsFGD+4bsVoag3mZ5Qmek= Subject key identifier: 00:05:79:38:1D:13:A8:8E:94:33:41:22:85:24:3C:F8:6E:92:69:1B Authority key identifier: 38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 Certificate issuer: /CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Certificate serial: 019B42B6F3191DFAE0BC39057FBCE965D98D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft Manifest number: 0FF7 Signing time: Sun 21 Dec 2025 21:00:44 +0000 Manifest this update: Sun 21 Dec 2025 21:00:44 +0000 Manifest next update: Mon 22 Dec 2025 21:00:44 +0000 Files and hashes: 1: OCxntKtK-G_mHqjG4X0R4-BdClE.crl (hash: Eq/pZjloDc0gPQFDCxXbjJR4XCnmUG21x2djszXvCww=) 2: uurNEPjhRtDIDBb3Oc-e5-rgs-I.roa (hash: N52vo6FqVd0GdLu55AAXlbmzEZo+baOISMz+vvdeY6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:f3:19:1d:fa:e0:bc:39:05:7f:bc:e9:65:d9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382c67b4ab4af86fe61ea8c6e17d11e3e05d0a51 Validity Not Before: Dec 21 21:00:44 2025 GMT Not After : Dec 22 21:00:44 2025 GMT Subject: CN=000579381d13a88e9433412285243cf86e92691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c0:49:d0:4c:e1:8c:34:dc:c0:16:87:df:bc: c9:44:22:f9:7d:ab:ca:40:9e:61:2b:32:07:69:f9: 11:05:7c:19:1a:f7:91:18:11:1e:ca:a0:49:1a:c2: e1:4a:28:3a:f5:db:ad:f8:0b:58:f8:72:04:e3:f2: fb:65:58:3e:ed:13:ef:28:ba:79:02:0f:e7:90:60: 9b:6b:e1:4f:fb:9b:70:48:92:81:0d:da:f4:fb:34: 89:82:29:b4:4e:ae:f1:69:a4:13:84:25:60:94:eb: 9a:71:d6:02:14:48:01:79:43:e7:b3:b5:3c:1d:01: 04:5e:d4:54:05:b7:15:9c:7f:07:ed:e4:79:8b:cf: 25:cd:ba:5b:dd:bc:be:8f:64:b4:0f:71:51:2f:14: f4:28:46:b8:cc:ea:5f:2c:65:db:2e:9c:bf:02:01: e1:a6:94:32:6d:94:0a:64:70:74:80:d8:a1:4f:91: db:1f:b6:07:d5:1e:a0:aa:ee:e8:04:a0:07:46:63: d2:1d:6f:bb:b5:57:54:28:dc:2a:1e:47:88:c1:03: b9:96:05:06:ea:5c:7a:70:79:47:6f:5f:f8:e4:1e: be:f9:82:e3:e1:29:ba:a6:7c:56:4a:37:09:94:2b: 73:b1:66:e0:74:aa:51:05:70:65:cd:e6:c4:11:72: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:05:79:38:1D:13:A8:8E:94:33:41:22:85:24:3C:F8:6E:92:69:1B X509v3 Authority Key Identifier: keyid:38:2C:67:B4:AB:4A:F8:6F:E6:1E:A8:C6:E1:7D:11:E3:E0:5D:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCxntKtK-G_mHqjG4X0R4-BdClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c6716-1715-4320-aa25-279906eb5c85/1/OCxntKtK-G_mHqjG4X0R4-BdClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:12:f2:dc:48:b7:e9:c9:b8:5c:70:2d:71:53:8c:25:e9:75: 9c:53:f2:5f:d8:c9:c1:5b:c7:a1:25:eb:55:79:aa:e7:eb:26: a3:5f:ff:2b:2a:2b:1c:8c:ef:13:df:cf:eb:9d:2f:f7:4b:f1: 3f:fc:31:0c:12:92:c2:04:bf:4a:80:57:36:65:34:7b:21:f1: 34:7b:ac:c7:c5:40:e3:b2:f2:85:63:66:e1:35:10:45:f0:61: 3b:87:95:e1:00:cb:47:58:ac:db:19:a8:d0:2a:9e:75:40:ac: ba:dd:1d:4d:90:08:08:9e:2c:c3:f4:89:84:f7:16:a6:6c:60: af:47:58:bc:0d:08:21:95:ef:63:4d:1c:c9:fc:13:82:8d:b3: 75:c4:41:9a:8a:5c:01:78:d3:16:66:9e:bb:aa:9e:6d:1b:2a: 03:fd:a6:bd:00:e2:5a:3f:49:aa:bc:db:05:8d:b7:a1:7b:e8: e3:84:e1:04:29:2b:ba:e8:32:cc:54:e3:7b:cb:78:04:66:46: c3:92:6d:8c:f7:a8:55:75:7e:d0:95:58:25:ec:2c:bd:3b:65: 77:5c:36:6f:03:5f:c5:de:35:27:4d:23:81:38:a3:e8:71:f1: 95:70:0b:b6:4c:43:97:89:9b:a5:5b:b7:37:f8:d0:e9:93:e1: 92:e1:65:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtvMZHfrgvDkFf7zpZdmNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmM2N2I0YWI0YWY4NmZlNjFlYThjNmUxN2QxMWUzZTA1 ZDBhNTEwHhcNMjUxMjIxMjEwMDQ0WhcNMjUxMjIyMjEwMDQ0WjAzMTEwLwYDVQQD EygwMDA1NzkzODFkMTNhODhlOTQzMzQxMjI4NTI0M2NmODZlOTI2OTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsBJ0EzhjDTcwBaH37zJRCL5favK QJ5hKzIHafkRBXwZGveRGBEeyqBJGsLhSig69dut+AtY+HIE4/L7ZVg+7RPvKLp5 Ag/nkGCba+FP+5twSJKBDdr0+zSJgim0Tq7xaaQThCVglOuacdYCFEgBeUPns7U8 HQEEXtRUBbcVnH8H7eR5i88lzbpb3by+j2S0D3FRLxT0KEa4zOpfLGXbLpy/AgHh ppQybZQKZHB0gNihT5HbH7YH1R6gqu7oBKAHRmPSHW+7tVdUKNwqHkeIwQO5lgUG 6lx6cHlHb1/45B6++YLj4Sm6pnxWSjcJlCtzsWbgdKpRBXBlzebEEXJWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAFeTgdE6iOlDNBIoUkPPhukmkbMB8GA1UdIwQY MBaAFDgsZ7SrSvhv5h6oxuF9EePgXQpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUt Mjc5OTA2ZWI1Yzg1LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wYzY3MTYtMTcxNS00MzIwLWFhMjUtMjc5OTA2ZWI1Yzg1 LzEvT0N4bnRLdEstR19tSHFqRzRYMFI0LUJkQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBLy3Ei3 6cm4XHAtcVOMJel1nFPyX9jJwVvHoSXrVXmq5+smo1//KyorHIzvE9/P650v90vx P/wxDBKSwgS/SoBXNmU0eyHxNHusx8VA47LyhWNm4TUQRfBhO4eV4QDLR1is2xmo 0CqedUCsut0dTZAICJ4sw/SJhPcWpmxgr0dYvA0IIZXvY00cyfwTgo2zdcRBmopc AXjTFmaeu6qebRsqA/2mvQDiWj9JqrzbBY23oXvo44ThBCkruugyzFTje8t4BGZG w5JtjPeoVXV+0JVYJewsvTtld1w2bwNfxd41J00jgTij6HHxlXALtkxDl4mbpVu3 N/jQ6ZPhkuFlMg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:15:35 2025 by rpki-client