This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json) Hash identifier: L6lbgi1mNxnGLOiaSdR8TV6xrWv7IKmdqYlAEp3xlsw= Subject key identifier: 18:CF:1F:BF:D0:D4:DC:E1:01:56:60:D6:7B:AD:01:98:33:D1:15:C4 Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d Certificate serial: 019AF42E8CA1A2AE2709EFBFB2DB627F78FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft Manifest number: 135C Signing time: Sat 06 Dec 2025 15:01:22 +0000 Manifest this update: Sat 06 Dec 2025 15:01:22 +0000 Manifest next update: Sun 07 Dec 2025 15:01:22 +0000 Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=) 2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: QECbzgKHZhFtYsgHsi/k8VD9kiOMnh2V7SAh4xXOE/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:8c:a1:a2:ae:27:09:ef:bf:b2:db:62:7f:78:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d Validity Not Before: Dec 6 15:01:22 2025 GMT Not After : Dec 7 15:01:22 2025 GMT Subject: CN=18cf1fbfd0d4dce1015660d67bad019833d115c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8d:f1:dd:36:b2:d3:48:5a:d2:87:a2:dc:0f: ef:50:04:a2:ab:f8:98:68:d1:bc:71:40:6c:72:f7: ed:ad:36:02:14:2b:c8:be:bd:ca:1e:7a:55:27:4d: da:cd:9f:e5:31:30:30:fd:a7:8a:d5:bf:3f:f7:de: ae:b2:b7:4b:da:c3:09:d4:da:a6:6c:df:c7:d1:e1: 9d:12:c6:1c:66:73:b5:7d:95:35:bf:14:85:50:e1: 99:4c:31:73:7e:ee:8b:e0:95:b4:b8:cf:7b:68:3d: 8c:ad:28:e7:f3:b5:02:69:b8:59:1b:c4:b8:42:52: 4c:c1:92:71:a9:a3:cb:a1:50:21:85:87:62:7b:60: 72:8f:39:3c:70:77:84:81:65:bd:ac:a6:d7:32:6f: 3a:1b:d3:b7:d2:df:c9:df:cf:a0:99:ef:22:95:40: 45:4d:43:43:36:1e:2a:92:c0:41:ea:e5:c1:27:68: 78:30:37:74:78:4c:b4:05:2f:8d:69:4b:e6:a9:e7: aa:4e:57:94:40:6c:8c:2c:4c:24:82:79:fd:75:12: cc:f7:6c:ed:cc:2a:bd:e7:23:fe:99:bd:52:20:0c: bd:ed:9e:f0:86:21:ab:e8:70:e5:bb:ab:90:15:46: 28:aa:8e:ff:44:a1:9e:3b:1a:5a:45:b6:10:1e:35: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CF:1F:BF:D0:D4:DC:E1:01:56:60:D6:7B:AD:01:98:33:D1:15:C4 X509v3 Authority Key Identifier: keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7a:8c:03:8a:1a:14:79:6a:42:8d:99:fc:05:e7:e5:cf:57: 51:c2:f7:6c:60:26:0e:bb:dc:6f:14:3b:60:42:de:3d:18:54: 80:f7:73:66:b8:eb:75:f8:58:d9:af:42:71:cf:8c:bd:03:5e: a0:86:c7:ed:f2:a8:6b:1b:5f:c9:77:9e:f4:8b:c2:b3:be:54: 54:d5:ca:89:79:eb:c0:ac:08:9f:6e:11:cc:1e:64:5b:d5:64: c9:f2:4b:1f:fd:8e:b7:2a:c4:9d:42:4d:05:d7:87:c2:2f:f8: 82:50:e5:7c:ce:3f:3a:3d:1c:01:3d:5a:1a:5f:8d:4c:e4:31: ce:05:53:4b:19:b4:74:a2:f9:a2:b2:b3:3c:e4:29:4b:dc:47: 1c:1d:2b:6a:f9:34:da:0c:8b:29:ea:81:63:ad:d8:06:0e:cc: 2a:64:87:8e:c1:52:8b:10:40:b4:d9:4c:5b:2b:74:05:dc:40: fc:78:ba:47:2d:43:6d:09:85:54:05:c1:55:7d:56:90:31:33: 0a:0e:24:ba:db:b8:38:ac:25:80:88:c4:c3:db:eb:9b:73:e5: 7b:64:9c:39:0b:7f:02:2b:89:59:9e:b2:49:0d:4e:2e:52:a0: cb:c8:8b:7f:6e:f9:d2:f3:18:63:20:c9:dc:24:a0:f4:fc:74: 05:f9:23:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Loyhoq4nCe+/sttif3j9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5Y2E1MDY1MDQzZDI4YTJhZGMzNjM4M2ExZGY3ZDNiZWM4 MWNlOGQwHhcNMjUxMjA2MTUwMTIyWhcNMjUxMjA3MTUwMTIyWjAzMTEwLwYDVQQD EygxOGNmMWZiZmQwZDRkY2UxMDE1NjYwZDY3YmFkMDE5ODMzZDExNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio3x3Tay00ha0oei3A/vUASiq/iY aNG8cUBscvftrTYCFCvIvr3KHnpVJ03azZ/lMTAw/aeK1b8/996usrdL2sMJ1Nqm bN/H0eGdEsYcZnO1fZU1vxSFUOGZTDFzfu6L4JW0uM97aD2MrSjn87UCabhZG8S4 QlJMwZJxqaPLoVAhhYdie2Byjzk8cHeEgWW9rKbXMm86G9O30t/J38+gme8ilUBF TUNDNh4qksBB6uXBJ2h4MDd0eEy0BS+NaUvmqeeqTleUQGyMLEwkgnn9dRLM92zt zCq95yP+mb1SIAy97Z7whiGr6HDlu6uQFUYoqo7/RKGeOxpaRbYQHjXSbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjPH7/Q1NzhAVZg1nutAZgz0RXEMB8GA1UdIwQY MBaAFDnKUGUEPSiircNjg6HffTvsgc6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2Njgt ODcwYWNmZWNiY2RmLzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zNDdjMzQtOTZkOC00MTg0LWE2NjgtODcwYWNmZWNiY2Rm LzEvT2NwUVpRUTlLS0t0dzJPRG9kOTlPLXlCem8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXqMA4oa FHlqQo2Z/AXn5c9XUcL3bGAmDrvcbxQ7YELePRhUgPdzZrjrdfhY2a9Ccc+MvQNe oIbH7fKoaxtfyXee9IvCs75UVNXKiXnrwKwIn24RzB5kW9VkyfJLH/2OtyrEnUJN BdeHwi/4glDlfM4/Oj0cAT1aGl+NTOQxzgVTSxm0dKL5orKzPOQpS9xHHB0ravk0 2gyLKeqBY63YBg7MKmSHjsFSixBAtNlMWyt0BdxA/Hi6Ry1DbQmFVAXBVX1WkDEz Cg4kutu4OKwlgIjEw9vrm3Ple2ScOQt/AiuJWZ6ySQ1OLlKgy8iLf2750vMYYyDJ 3CSg9Px0Bfkj3A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:08 2025 by rpki-client