This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json) Hash identifier: hgM+k8UMzN3/dKGEEafmCLpSPaPxAkgSMVBpSjyOR8c= Subject key identifier: FE:2E:D3:92:0A:97:60:78:67:A7:18:83:FD:8B:63:78:8A:E8:6F:71 Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910 Certificate serial: 019AF208E456211D8F8043CE023C674244BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=) 2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: 94Q08HYhbw0Hfl/vghZz8EPi7Ee6s9l7rn/PY7YMU7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e4:56:21:1d:8f:80:43:ce:02:3c:67:42:44:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=fe2ed3920a97607867a71883fd8b63788ae86f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cb:99:0a:14:1c:a9:9a:98:e5:55:6a:8e:06: ac:33:f0:e5:ed:5e:54:16:b1:c6:52:06:f6:c7:cd: b2:19:83:d2:47:05:ab:45:f4:f3:e6:cd:69:25:43: bf:42:0d:ad:65:a1:0e:6c:64:09:b3:37:23:54:ae: 53:5c:18:85:91:6c:cd:c9:0f:34:89:41:2d:75:0c: ad:1d:c6:66:6c:c4:61:45:04:42:5f:a5:d2:9f:6a: 7d:f1:ef:fa:b8:44:3f:aa:7f:c6:77:12:9e:e8:09: 35:0b:b0:ad:57:72:98:80:a7:96:8a:ba:8d:29:82: b4:81:c5:f1:68:10:32:a9:e5:5d:7d:6a:2f:6a:57: 50:cc:84:f7:8a:ad:62:7b:92:fd:5d:b4:db:21:05: 24:3a:1a:7c:a5:dc:78:b5:f9:de:99:b6:d8:0e:f3: ad:bd:2f:69:ae:4a:6d:b9:d5:06:a1:68:ed:f7:31: 0f:01:e2:36:99:50:d8:62:1c:1f:51:34:16:97:a8: 60:c1:49:d7:14:db:8d:6e:c7:57:4b:e7:4f:7c:2f: 03:c3:b8:39:32:0e:ed:ae:ee:e1:5c:5a:11:2b:8f: c3:45:13:d8:d9:b1:75:2d:2c:e0:cc:7e:f1:d0:5d: 50:52:71:94:bf:b3:80:14:6d:6e:e3:da:8e:79:4d: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2E:D3:92:0A:97:60:78:67:A7:18:83:FD:8B:63:78:8A:E8:6F:71 X509v3 Authority Key Identifier: keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d9:7f:32:66:8e:74:60:0a:83:c4:0f:c9:6b:85:92:cb:8d: c1:db:e8:25:85:70:e1:78:4a:f3:35:f1:21:4d:d1:fd:60:c7: 24:95:2b:10:f5:66:7d:3f:c3:9f:f8:6d:2b:47:56:c3:d3:9c: 73:79:fd:bb:8d:38:84:01:9f:e5:39:50:1a:9f:b3:b3:a7:e6: 46:3c:5b:04:ae:3b:fa:bf:b1:cf:54:49:18:a7:43:59:47:16: 4e:15:01:36:da:6d:f9:dc:f7:b0:66:96:a3:17:2c:fc:d3:d2: f1:2a:6b:da:a3:35:e5:20:f3:92:23:24:2c:70:22:d0:ca:2d: 0f:fc:88:30:6d:e7:da:ca:82:43:b3:c5:af:8e:6d:40:0f:40: 0b:d9:41:39:d2:a3:38:3a:48:99:3c:1b:54:2b:96:68:47:0c: 25:ba:11:79:2f:b8:7f:3d:a8:9c:20:ab:18:02:b7:ac:23:d7: 46:b1:8d:14:f9:3f:c1:6e:76:04:4e:92:0f:e8:16:24:c8:32: 8e:2e:44:61:ef:89:f2:b8:c6:af:67:52:7b:06:31:44:b3:37: c6:54:5b:87:c6:bd:66:f0:dd:03:6d:3f:57:c2:9c:60:a7:90: 06:6a:f8:d5:f1:4f:ee:79:8c:45:2a:89:05:90:d5:0a:7a:9d: ff:54:2a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCORWIR2PgEPOAjxnQkS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy MTI5MTAwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhmZTJlZDM5MjBhOTc2MDc4NjdhNzE4ODNmZDhiNjM3ODhhZTg2ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcuZChQcqZqY5VVqjgasM/Dl7V5U FrHGUgb2x82yGYPSRwWrRfTz5s1pJUO/Qg2tZaEObGQJszcjVK5TXBiFkWzNyQ80 iUEtdQytHcZmbMRhRQRCX6XSn2p98e/6uEQ/qn/GdxKe6Ak1C7CtV3KYgKeWirqN KYK0gcXxaBAyqeVdfWovaldQzIT3iq1ie5L9XbTbIQUkOhp8pdx4tfnembbYDvOt vS9prkptudUGoWjt9zEPAeI2mVDYYhwfUTQWl6hgwUnXFNuNbsdXS+dPfC8Dw7g5 Mg7tru7hXFoRK4/DRRPY2bF1LSzgzH7x0F1QUnGUv7OAFG1u49qOeU1qYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4u05IKl2B4Z6cYg/2LY3iK6G9xMB8GA1UdIwQY MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9l/MmaO dGAKg8QPyWuFksuNwdvoJYVw4XhK8zXxIU3R/WDHJJUrEPVmfT/Dn/htK0dWw9Oc c3n9u404hAGf5TlQGp+zs6fmRjxbBK47+r+xz1RJGKdDWUcWThUBNtpt+dz3sGaW oxcs/NPS8Spr2qM15SDzkiMkLHAi0MotD/yIMG3n2sqCQ7PFr45tQA9AC9lBOdKj ODpImTwbVCuWaEcMJboReS+4fz2onCCrGAK3rCPXRrGNFPk/wW52BE6SD+gWJMgy ji5EYe+J8rjGr2dSewYxRLM3xlRbh8a9ZvDdA20/V8KcYKeQBmr41fFP7nmMRSqJ BZDVCnqd/1QqXA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:07 2025 by rpki-client