This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft File: ozzWJ5463BmcztFEj4CIGEKVnbs.mft (raw, json) Hash identifier: ztQXxHyVLhtXovg3lXS/9cgEByFS0B+7uohdsmQSKR0= Subject key identifier: 78:93:3F:2A:14:94:72:9E:D8:2C:2A:85:FC:42:6F:97:71:BC:37:4B Authority key identifier: A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB Certificate issuer: /CN=a33cd6279e3adc199cced1448f80881842959dbb Certificate serial: 019AF08878ABD587FB425B2171D43B8A697D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft Manifest number: 69 Signing time: Fri 05 Dec 2025 22:01:06 +0000 Manifest this update: Fri 05 Dec 2025 22:01:06 +0000 Manifest next update: Sat 06 Dec 2025 22:01:06 +0000 Files and hashes: 1: 58vpK8vRiMDsKrPDcpGa-DJvE88.roa (hash: sInLzOJCLuIv4eBWcJWicm0cgoZkrirnczsJmugMVLs=) 2: ozzWJ5463BmcztFEj4CIGEKVnbs.crl (hash: ner57lqNXexl83jxvn/ecH1NlH2lUag19l0IsOpyEkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:78:ab:d5:87:fb:42:5b:21:71:d4:3b:8a:69:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a33cd6279e3adc199cced1448f80881842959dbb Validity Not Before: Dec 5 22:01:06 2025 GMT Not After : Dec 6 22:01:06 2025 GMT Subject: CN=78933f2a1494729ed82c2a85fc426f9771bc374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:c0:40:4b:25:b1:4d:e3:74:4d:91:2f:8d: 90:d2:37:10:ed:6c:26:c9:39:22:69:48:51:05:ee: 28:78:c2:0b:dc:ca:3c:d9:d0:25:bc:30:54:41:2c: d4:a0:fa:df:ca:5d:c2:97:22:32:2e:c4:17:c5:df: 33:de:ec:62:e4:10:19:78:b0:e3:b2:4d:c7:36:71: 36:1e:4c:b8:b3:6b:02:ff:1d:eb:84:3a:45:4d:1b: ba:48:64:27:9e:b8:68:9f:cc:66:a6:09:15:88:35: 92:1c:0b:8e:d8:f4:81:05:62:10:ef:f5:b3:a3:95: 6e:60:09:8e:b1:7d:13:81:56:b2:2d:e3:a2:2f:30: 36:07:16:c7:97:6a:24:b5:25:10:49:e5:3e:aa:5c: 51:6d:9e:2a:dc:85:64:d4:ad:33:c1:ba:09:e6:2e: 27:5c:57:16:04:02:15:41:18:e7:24:35:88:ad:86: 40:6e:47:12:59:5e:b7:1f:43:c8:03:ea:1b:36:30: 63:66:4e:40:10:01:07:ec:34:27:09:bf:a1:3c:0d: ee:32:b5:cd:66:bd:98:63:92:1f:19:f3:1a:ab:76: 23:45:07:53:c3:0f:29:5a:b9:12:38:c0:6d:92:c5: fa:13:4a:e7:07:ab:ac:a6:f7:12:df:b3:52:7b:a2: 7f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:93:3F:2A:14:94:72:9E:D8:2C:2A:85:FC:42:6F:97:71:BC:37:4B X509v3 Authority Key Identifier: keyid:A3:3C:D6:27:9E:3A:DC:19:9C:CE:D1:44:8F:80:88:18:42:95:9D:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozzWJ5463BmcztFEj4CIGEKVnbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce076-126e-4e48-a759-aa5bb0abac23/1/ozzWJ5463BmcztFEj4CIGEKVnbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:70:5c:f4:c6:d2:8c:59:f7:5b:08:f5:ff:c6:c8:1f:b3: fd:53:45:98:4e:76:ef:63:50:2b:05:9f:12:30:8f:4b:27:b9: d5:84:e4:d7:74:c9:32:d0:46:90:d3:50:eb:22:20:fb:cd:9b: 0a:53:ae:6a:9e:11:08:5d:5b:87:26:31:08:68:f5:27:7a:c8: 6f:a6:de:87:0e:47:45:5e:b3:dc:df:d4:3b:85:4b:ee:57:b3: 27:15:41:7e:35:5e:7f:c8:c9:71:87:ba:52:8c:9b:1a:71:f7: cb:c0:31:4e:52:09:57:4d:e7:6b:2f:b6:7f:45:2a:fb:d6:17: 9d:5b:72:a6:e5:31:8f:20:81:87:9a:10:dd:8a:ad:b0:06:99: e2:9b:1b:ab:9c:e1:73:e2:7b:c4:01:3a:a0:f2:fa:3c:9c:ce: ec:46:a0:11:30:71:98:3a:67:f8:ec:0d:f9:1b:e7:a2:25:6d: f2:a5:f6:a0:35:d5:90:f1:40:e6:91:58:ce:26:90:c0:f6:ba: 7b:ad:40:90:cf:9d:26:bc:ff:94:d0:2f:dd:72:12:c6:80:d7: 63:1f:04:5f:d2:f3:dc:99:83:51:87:af:47:45:e5:c6:25:d9: f1:ed:95:0d:46:ad:3f:7e:ac:ba:f2:6d:6f:31:6f:65:b1:7f: 84:bc:a4:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHir1Yf7QlshcdQ7iml9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzM2NkNjI3OWUzYWRjMTk5Y2NlZDE0NDhmODA4ODE4NDI5 NTlkYmIwHhcNMjUxMjA1MjIwMTA2WhcNMjUxMjA2MjIwMTA2WjAzMTEwLwYDVQQD Eyg3ODkzM2YyYTE0OTQ3MjllZDgyYzJhODVmYzQyNmY5NzcxYmMzNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc/AQEslsU3jdE2RL42Q0jcQ7Wwm yTkiaUhRBe4oeMIL3Mo82dAlvDBUQSzUoPrfyl3ClyIyLsQXxd8z3uxi5BAZeLDj sk3HNnE2Hky4s2sC/x3rhDpFTRu6SGQnnrhon8xmpgkViDWSHAuO2PSBBWIQ7/Wz o5VuYAmOsX0TgVayLeOiLzA2BxbHl2oktSUQSeU+qlxRbZ4q3IVk1K0zwboJ5i4n XFcWBAIVQRjnJDWIrYZAbkcSWV63H0PIA+obNjBjZk5AEAEH7DQnCb+hPA3uMrXN Zr2YY5IfGfMaq3YjRQdTww8pWrkSOMBtksX6E0rnB6uspvcS37NSe6J/6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiTPyoUlHKe2CwqhfxCb5dxvDdLMB8GA1UdIwQY MBaAFKM81ieeOtwZnM7RRI+AiBhClZ27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTkt YWE1YmIwYWJhYzIzLzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82Y2UwNzYtMTI2ZS00ZTQ4LWE3NTktYWE1YmIwYWJhYzIz LzEvb3p6V0o1NDYzQm1jenRGRWo0Q0lHRUtWbmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRdwXPTG 0oxZ91sI9f/GyB+z/VNFmE5272NQKwWfEjCPSye51YTk13TJMtBGkNNQ6yIg+82b ClOuap4RCF1bhyYxCGj1J3rIb6behw5HRV6z3N/UO4VL7lezJxVBfjVef8jJcYe6 UoybGnH3y8AxTlIJV03nay+2f0Uq+9YXnVtypuUxjyCBh5oQ3YqtsAaZ4psbq5zh c+J7xAE6oPL6PJzO7EagETBxmDpn+OwN+RvnoiVt8qX2oDXVkPFA5pFYziaQwPa6 e61AkM+dJrz/lNAv3XISxoDXYx8EX9Lz3JmDUYevR0XlxiXZ8e2VDUatP36suvJt bzFvZbF/hLykYw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client