This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json) Hash identifier: We0RmLqQzCemRza8WQb9EJr6dAc+mqBy3xOPXStPdjA= Subject key identifier: 28:79:1D:03:0D:F4:F6:3B:E7:F3:F4:7C:2C:35:31:0E:A1:ED:4E:7E Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b Certificate serial: 019AF3F7B7A57EC427B9DC084DCF8C004BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft Manifest number: 0343 Signing time: Sat 06 Dec 2025 14:01:29 +0000 Manifest this update: Sat 06 Dec 2025 14:01:29 +0000 Manifest next update: Sun 07 Dec 2025 14:01:29 +0000 Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: wXWUNeI3Ffa78GiVtxlb6YGEjdtap007WI9GonEmls0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b7:a5:7e:c4:27:b9:dc:08:4d:cf:8c:00:4b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b Validity Not Before: Dec 6 14:01:29 2025 GMT Not After : Dec 7 14:01:29 2025 GMT Subject: CN=28791d030df4f63be7f3f47c2c35310ea1ed4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9c:4c:59:58:20:f4:8d:0c:03:2a:0f:7a:6c: bb:6b:2a:90:c0:ac:a8:3e:d1:57:5e:df:a1:af:04: c5:8e:36:be:2c:cd:a3:60:62:84:41:ce:69:2d:a1: b5:b0:93:64:a3:99:26:9b:50:af:3a:75:2b:21:4f: 37:07:6e:a9:f1:a9:3e:2b:7c:22:4f:a5:4a:07:0d: b6:99:8f:99:c9:45:9f:ff:85:aa:1e:34:3d:f4:00: b0:d5:f2:0b:6d:3b:54:f6:0d:15:70:b3:6c:c7:42: fe:0d:17:d7:ed:51:bd:3b:83:13:3b:46:23:8f:eb: 8b:80:48:9c:d4:4b:1c:63:c6:04:a4:a4:4a:78:92: 92:2d:90:9b:5d:9c:5d:31:6a:48:5c:14:c2:97:c9: 73:06:71:ce:08:6d:19:26:bb:6a:60:0a:2f:35:2e: d9:4b:6f:14:35:3c:89:f8:d8:e5:9e:0c:91:1f:bc: b8:7d:82:34:30:22:bb:28:04:6e:9f:7a:a6:f2:47: e3:f1:77:43:d7:71:0c:f1:ec:4c:36:fb:de:e1:d7: 2a:91:89:9e:ce:62:46:6d:bb:52:ea:06:ed:e3:a7: b3:a0:c3:d7:11:89:4c:c0:fd:ec:2d:6f:0f:c3:39: 7a:cf:8b:77:f9:95:54:a3:9f:b6:53:13:40:0f:6d: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:79:1D:03:0D:F4:F6:3B:E7:F3:F4:7C:2C:35:31:0E:A1:ED:4E:7E X509v3 Authority Key Identifier: keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:52:07:40:b5:00:96:fa:83:8c:8d:3c:83:4c:02:8c:3e:c4: 62:87:5b:ad:5b:a0:a5:bb:a5:30:e8:2d:79:53:21:5d:dd:67: 54:b4:ba:a6:d8:82:0b:dc:c4:da:77:dc:f5:b6:bb:72:09:c2: ed:95:66:94:a5:1b:02:58:47:44:b8:48:58:f2:86:e1:a3:eb: 0b:d2:c1:a1:b9:64:5f:84:01:64:24:8f:94:dd:70:04:9b:7a: cc:38:49:3a:be:4e:1f:b6:26:e6:7b:38:b5:87:cc:00:8e:00: 9b:a1:b8:4c:18:4c:5a:7f:c9:0c:c2:73:7f:4e:03:17:63:8b: f9:96:61:1c:f4:c5:d3:ab:1d:10:77:9e:bf:f3:c9:76:dd:46: db:5d:77:d1:d0:a5:3b:9f:dc:2c:37:8a:f9:1b:76:85:8b:11: 06:91:5e:28:ff:f3:39:e0:fb:bf:10:d9:c2:a3:20:96:07:8c: 1f:60:e0:c3:e4:1a:3e:53:40:10:29:95:05:6b:38:99:9d:6b: a4:63:a3:e2:b0:2c:64:bf:14:ee:11:25:ce:2a:0b:17:70:47: aa:9c:e2:d8:3c:cb:e0:9d:c6:47:ab:c2:9d:29:ae:8b:23:14: bf:77:8c:5b:fe:9d:ba:46:8c:08:fb:ea:36:b7:9c:30:e6:eb: c0:cb:d1:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97elfsQnudwITc+MAEvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MmFkOTA2ZDcxOWE2NmE4NWEzMTNkMTA1Mjk0MDAyY2I2 NTdmN2IwHhcNMjUxMjA2MTQwMTI5WhcNMjUxMjA3MTQwMTI5WjAzMTEwLwYDVQQD EygyODc5MWQwMzBkZjRmNjNiZTdmM2Y0N2MyYzM1MzEwZWExZWQ0ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZxMWVgg9I0MAyoPemy7ayqQwKyo PtFXXt+hrwTFjja+LM2jYGKEQc5pLaG1sJNko5kmm1CvOnUrIU83B26p8ak+K3wi T6VKBw22mY+ZyUWf/4WqHjQ99ACw1fILbTtU9g0VcLNsx0L+DRfX7VG9O4MTO0Yj j+uLgEic1EscY8YEpKRKeJKSLZCbXZxdMWpIXBTCl8lzBnHOCG0ZJrtqYAovNS7Z S28UNTyJ+NjlngyRH7y4fYI0MCK7KARun3qm8kfj8XdD13EM8exMNvve4dcqkYme zmJGbbtS6gbt46ezoMPXEYlMwP3sLW8Pwzl6z4t3+ZVUo5+2UxNAD20E5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCh5HQMN9PY75/P0fCw1MQ6h7U5+MB8GA1UdIwQY MBaAFDgq2QbXGaZqhaMT0QUpQALLZX97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MTRkOTEtZWU3MS00MjI0LWIzMDAt NmNlNTJiZWU2NjZhLzEvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85MTRkOTEtZWU3MS00MjI0LWIzMDAtNmNlNTJiZWU2NjZh LzEvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlIHQLUA lvqDjI08g0wCjD7EYodbrVugpbulMOgteVMhXd1nVLS6ptiCC9zE2nfc9ba7cgnC 7ZVmlKUbAlhHRLhIWPKG4aPrC9LBoblkX4QBZCSPlN1wBJt6zDhJOr5OH7Ym5ns4 tYfMAI4Am6G4TBhMWn/JDMJzf04DF2OL+ZZhHPTF06sdEHeev/PJdt1G21130dCl O5/cLDeK+Rt2hYsRBpFeKP/zOeD7vxDZwqMglgeMH2Dgw+QaPlNAECmVBWs4mZ1r pGOj4rAsZL8U7hElzioLF3BHqpzi2DzL4J3GR6vCnSmuiyMUv3eMW/6dukaMCPvq NrecMObrwMvRmA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:12 2025 by rpki-client