This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json) Hash identifier: VOSyE/1RaM9Ng+Hrc6IS183IAy869lIjID2hpdn5b38= Subject key identifier: A3:46:33:9C:CB:42:5E:78:02:22:31:B5:DE:6A:39:91:6D:65:AD:1A Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Certificate serial: 019AF2401930804E3EF83BA12EF26AABB718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft Manifest number: 0525 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: 6ZglxtyZbIn0MZoOesBxoBsRKDyYZTuQsUeUsEFMQ5o=) 2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:19:30:80:4e:3e:f8:3b:a1:2e:f2:6a:ab:b7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=a346339ccb425e78022231b5de6a39916d65ad1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:86:f2:c0:3c:ac:9e:eb:5f:b8:6a:74:5c: fa:1c:1f:9f:b5:3a:66:5a:a1:cb:84:31:5b:c6:16: 25:8f:c9:3e:5d:f8:f9:fd:ce:12:76:b7:2f:fb:f5: 26:1f:ed:26:33:79:12:bc:7f:49:d9:e3:24:6c:c9: 56:08:2b:6b:d1:10:f0:0f:4f:ec:94:fe:21:bf:49: b3:86:30:4a:6b:3e:27:92:ce:e3:3c:6d:e1:11:68: 31:48:92:3e:26:5d:cf:c5:de:18:ad:30:d7:4c:79: 38:40:85:cf:40:11:b0:72:2a:c2:38:99:0d:0c:fd: ef:86:ca:f3:67:fd:0f:0a:41:1d:88:c2:4d:13:6a: bd:5d:9a:fd:58:09:84:22:c6:53:36:cd:b3:c5:52: 4d:03:b9:1b:d7:54:06:b8:80:be:ad:9e:e6:b8:f6: ff:ba:ae:17:e3:09:84:32:66:d0:80:09:4d:b3:58: 59:7d:90:0a:fa:10:97:c5:a3:ce:bc:fe:87:d1:4c: d9:45:f0:38:20:66:4d:af:98:43:7f:0d:33:59:eb: 99:1a:28:2c:14:9f:10:4a:0a:0b:e5:3c:e2:40:cd: 1a:12:d0:2a:42:b3:c1:f7:3a:df:8e:80:ed:df:91: 68:f7:92:cb:f2:69:bc:ad:e2:1c:43:45:37:97:39: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:33:9C:CB:42:5E:78:02:22:31:B5:DE:6A:39:91:6D:65:AD:1A X509v3 Authority Key Identifier: keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e8:29:98:3f:b4:fd:66:50:05:b8:34:2f:8f:f7:a5:b1:db: 4f:1d:56:61:eb:a4:4c:69:15:03:60:80:06:9b:86:fb:e5:47: e3:5f:f1:ef:d3:be:9a:64:b8:8e:22:38:f6:18:df:da:c7:15: 0e:92:c0:0e:35:46:83:96:8c:c5:07:73:32:47:da:2b:04:c9: bf:80:93:61:5b:fa:5b:5b:8c:a3:6c:e9:19:90:65:95:91:f2: db:30:d7:3e:23:e2:35:5e:1a:29:2f:33:0a:60:63:9a:b9:0f: 5e:be:5c:c7:73:6b:3a:b7:21:f2:7c:62:e3:fb:b7:49:ba:97: 5e:41:18:7c:ee:95:8e:c7:f2:f8:4c:7f:9e:db:57:9a:71:bc: 96:ae:54:fd:36:9e:d2:24:f4:c3:1e:ad:cd:48:4f:01:32:92: 68:5e:df:59:44:d3:29:40:19:ba:b3:3b:78:b6:c3:8c:2d:9b: ef:0e:1b:7e:14:81:52:c5:90:59:9e:fb:e4:03:ad:7c:f5:2a: 24:20:22:52:da:70:fb:7b:76:f6:fb:08:7c:ec:bc:96:d5:36: ae:6c:ba:ab:1f:bf:29:70:6c:94:9f:cd:b5:ab:e6:ec:79:e4: 08:17:9a:58:cb:aa:f8:d2:17:07:20:d9:f4:4d:7a:71:c6:a4: 4f:d5:e5:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBkwgE4++DuhLvJqq7cYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy NDk4ZWYwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhhMzQ2MzM5Y2NiNDI1ZTc4MDIyMjMxYjVkZTZhMzk5MTZkNjVhZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqiG8sA8rJ7rX7hqdFz6HB+ftTpm WqHLhDFbxhYlj8k+Xfj5/c4Sdrcv+/UmH+0mM3kSvH9J2eMkbMlWCCtr0RDwD0/s lP4hv0mzhjBKaz4nks7jPG3hEWgxSJI+Jl3Pxd4YrTDXTHk4QIXPQBGwcirCOJkN DP3vhsrzZ/0PCkEdiMJNE2q9XZr9WAmEIsZTNs2zxVJNA7kb11QGuIC+rZ7muPb/ uq4X4wmEMmbQgAlNs1hZfZAK+hCXxaPOvP6H0UzZRfA4IGZNr5hDfw0zWeuZGigs FJ8QSgoL5TziQM0aEtAqQrPB9zrfjoDt35Fo95LL8mm8reIcQ0U3lznlNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNGM5zLQl54AiIxtd5qOZFtZa0aMB8GA1UdIwQY MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZugpmD+0 /WZQBbg0L4/3pbHbTx1WYeukTGkVA2CABpuG++VH41/x79O+mmS4jiI49hjf2scV DpLADjVGg5aMxQdzMkfaKwTJv4CTYVv6W1uMo2zpGZBllZHy2zDXPiPiNV4aKS8z CmBjmrkPXr5cx3NrOrch8nxi4/u3SbqXXkEYfO6Vjsfy+Ex/nttXmnG8lq5U/Tae 0iT0wx6tzUhPATKSaF7fWUTTKUAZurM7eLbDjC2b7w4bfhSBUsWQWZ775AOtfPUq JCAiUtpw+3t29vsIfOy8ltU2rmy6qx+/KXBslJ/Ntavm7HnkCBeaWMuq+NIXByDZ 9E16ccakT9XlFA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:37 2025 by rpki-client