This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json) Hash identifier: CZMueifGb2/nIrPALiBuOZFxxewtp4viS9jVbqjk1FY= Subject key identifier: 75:43:AF:B4:B0:83:C3:3F:52:C4:F4:A0:CF:25:E3:41:CC:22:5F:D8 Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2 Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2 Certificate serial: 019AF163D2A33A200661C351ED266DA13354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: 3CjhkonKPKe4PGNpLuHdOLNjFvCSX5NmA21JN7EhGL8=) 2: uXecHkITe3bY6-3ektwCD9ek34Q.roa (hash: 5+69NhDXNCJ8JAsANzmdkWv9h8VWfgURSoIbAe4jtSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d2:a3:3a:20:06:61:c3:51:ed:26:6d:a1:33:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=7543afb4b083c33f52c4f4a0cf25e341cc225fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:db:ab:03:b0:66:b2:24:79:a5:27:e8:ac:c4: b5:97:c7:df:0c:d8:2f:99:45:9b:b8:28:7c:c9:f4: 7e:fb:b8:ff:df:a5:31:8d:99:d5:57:48:c6:ed:2a: 9b:0d:fe:ca:59:3f:44:e2:f1:62:dc:57:34:47:eb: 5b:01:26:f8:76:7b:81:dc:35:13:5a:f3:2a:9c:27: 36:5b:0f:51:4d:8b:12:80:ab:8f:0a:00:a7:90:73: 20:8c:78:bb:19:f0:fb:38:1b:00:61:6a:a9:1e:3b: f0:e7:08:b4:de:d2:52:9e:03:b4:db:3f:9a:34:55: 3a:13:10:db:0d:1b:f0:79:9a:1c:62:11:8e:ca:13: be:27:71:61:d7:40:8d:27:94:73:7c:bd:a5:3a:47: 8b:9c:f3:a9:37:7e:be:3c:33:1e:27:5d:a9:89:ee: 16:29:cd:35:65:f8:c4:da:1b:06:a9:d2:54:f5:bd: b4:20:6d:de:f1:8c:86:1c:6c:4e:c4:dc:e5:a4:f2: 28:7e:5b:7a:fd:cb:cf:35:d4:06:d1:b7:99:92:06: 29:4e:2d:e0:09:98:cd:7e:ea:b5:ef:9b:b1:74:07: 3b:a2:bb:5b:c7:6a:ee:a3:60:92:f0:5e:71:e1:23: c3:e1:d6:25:2f:f6:33:15:f0:68:09:d8:c6:99:57: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:AF:B4:B0:83:C3:3F:52:C4:F4:A0:CF:25:E3:41:CC:22:5F:D8 X509v3 Authority Key Identifier: keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fc:ce:d0:7e:52:0a:10:e4:08:9d:95:86:83:50:91:22:b1: 08:b0:dc:98:63:12:4b:28:06:78:3e:de:db:05:65:3c:19:35: 8f:c6:aa:2e:7c:b8:a0:c6:e7:a8:b4:21:f3:0f:72:82:a1:87: 1d:dc:1a:6b:66:7f:5f:65:ca:89:cf:b2:01:e0:b9:28:0f:d1: 38:b1:74:e1:42:72:4a:1f:ce:30:91:79:a1:7b:91:d6:15:ef: df:cf:30:1c:16:0d:b0:27:2e:d2:77:66:f7:30:c6:e4:eb:c9: 01:bf:67:c4:50:18:33:25:c5:28:04:4c:bd:f0:cb:69:67:d7: 9c:e6:e3:b9:bb:3b:6b:8d:de:e0:bd:7f:06:85:9f:45:90:bc: 5f:71:b2:89:4d:a7:78:d6:6f:3b:8b:b7:67:99:f2:90:bf:59: 33:f8:ce:ab:8c:a5:c0:29:c1:c9:51:21:b2:cf:64:94:d2:00: 3e:f3:10:bc:e2:a8:d4:6b:7a:e6:87:51:61:ac:09:1a:c7:11: 50:aa:be:c1:38:1d:e2:b1:9e:ce:34:97:c6:b8:c1:8f:7e:66: 1a:81:ee:53:af:4b:d5:b2:4a:bf:7f:be:0e:fa:c1:18:19:c1: ca:88:16:fe:77:a9:1b:1f:7b:7e:2a:c6:59:90:4a:ac:71:68: 01:49:cd:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9KjOiAGYcNR7SZtoTNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh Nzk2ZDIwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD Eyg3NTQzYWZiNGIwODNjMzNmNTJjNGY0YTBjZjI1ZTM0MWNjMjI1ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4durA7BmsiR5pSforMS1l8ffDNgv mUWbuCh8yfR++7j/36UxjZnVV0jG7SqbDf7KWT9E4vFi3Fc0R+tbASb4dnuB3DUT WvMqnCc2Ww9RTYsSgKuPCgCnkHMgjHi7GfD7OBsAYWqpHjvw5wi03tJSngO02z+a NFU6ExDbDRvweZocYhGOyhO+J3Fh10CNJ5RzfL2lOkeLnPOpN36+PDMeJ12pie4W Kc01ZfjE2hsGqdJU9b20IG3e8YyGHGxOxNzlpPIoflt6/cvPNdQG0beZkgYpTi3g CZjNfuq175uxdAc7ortbx2ruo2CS8F5x4SPD4dYlL/YzFfBoCdjGmVdqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVDr7Swg8M/UsT0oM8l40HMIl/YMB8GA1UdIwQY MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5 LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvzO0H5S ChDkCJ2VhoNQkSKxCLDcmGMSSygGeD7e2wVlPBk1j8aqLny4oMbnqLQh8w9ygqGH Hdwaa2Z/X2XKic+yAeC5KA/ROLF04UJySh/OMJF5oXuR1hXv388wHBYNsCcu0ndm 9zDG5OvJAb9nxFAYMyXFKARMvfDLaWfXnObjubs7a43e4L1/BoWfRZC8X3GyiU2n eNZvO4u3Z5nykL9ZM/jOq4ylwCnByVEhss9klNIAPvMQvOKo1Gt65odRYawJGscR UKq+wTgd4rGezjSXxrjBj35mGoHuU69L1bJKv3++DvrBGBnByogW/nepGx97firG WZBKrHFoAUnN/g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:46:45 2025 by rpki-client