This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json) Hash identifier: 3WLZcDaQKNI46Pv/AfsivguUSxTiMekpHbjWK4A4G5g= Subject key identifier: 87:C3:AB:54:72:D2:43:42:DA:38:15:C7:69:C0:A7:69:20:97:6B:A6 Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca Certificate serial: 019B3A21F8B8F711B7F868BC866ED16F27FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 05:01:03 +0000 Manifest this update: Sat 20 Dec 2025 05:01:03 +0000 Manifest next update: Sun 21 Dec 2025 05:01:03 +0000 Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=) 2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: CCZqbxqQsVYmNrivwFOZNJFZu6EUxQr+FwTcZQ4joMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:f8:b8:f7:11:b7:f8:68:bc:86:6e:d1:6f:27:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca Validity Not Before: Dec 20 05:01:03 2025 GMT Not After : Dec 21 05:01:03 2025 GMT Subject: CN=87c3ab5472d24342da3815c769c0a76920976ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f5:b3:7b:65:fb:56:1f:a4:e9:f1:b5:5d:2e: 1e:7c:c3:32:37:82:bc:81:02:8f:b7:63:74:b6:4a: 18:a5:74:f0:1e:29:49:b9:22:37:13:36:58:93:b5: 51:2c:f9:55:43:c8:93:37:fc:e1:80:c3:d7:9d:a9: df:5e:4a:d8:34:00:10:df:97:5a:cd:4a:c3:49:8f: a0:1a:ae:82:4b:2b:ba:b8:79:38:be:9c:4d:77:2f: e2:c8:d5:ec:54:f4:75:4b:ad:e3:ec:76:f1:c9:be: 9a:60:c6:23:2f:33:be:94:9f:0d:8f:34:da:d3:51: 00:13:a0:51:1d:2d:c0:76:6c:28:77:7e:8c:06:2f: b7:37:a2:29:a4:f5:ca:3c:6a:a0:5d:39:10:73:fc: c6:bd:5b:48:4d:52:49:04:ea:34:b2:14:de:ff:b3: 00:57:3b:f0:87:42:bd:13:e1:58:37:0b:3b:d8:58: 4e:3c:f4:97:e2:59:6c:a4:e2:b1:02:cd:2c:70:d4: cd:14:57:29:0d:2b:f4:a1:ac:2f:06:cb:8c:c5:ff: 33:49:91:f1:4c:8c:e2:b8:6e:65:8b:cb:55:01:aa: 30:5b:23:3e:7a:7f:b9:a4:af:5b:42:7b:71:56:9e: 7e:d4:53:84:15:57:ad:aa:ea:66:f1:b8:ad:7f:5e: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:AB:54:72:D2:43:42:DA:38:15:C7:69:C0:A7:69:20:97:6B:A6 X509v3 Authority Key Identifier: keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:70:f4:21:70:ca:7e:91:97:78:8c:c9:ad:b1:d4:27:14:9d: 50:91:58:a7:32:9d:7a:86:cc:48:90:d1:23:61:6c:c4:41:56: b8:6d:11:b0:d8:dd:1d:c2:52:b5:df:fc:2f:5f:4f:66:06:73: 26:f4:b2:bc:15:9b:d4:0c:44:cb:aa:9a:6b:5c:91:cc:90:e7: 7a:06:a5:de:a0:1f:5f:38:25:77:27:6d:dd:08:4d:af:ca:4f: ed:45:52:de:70:f5:99:5f:db:61:8c:ab:ed:f1:15:2c:b4:6e: 16:e9:d6:09:a5:ca:44:ba:a5:d0:bc:d1:1b:07:15:b3:f9:5d: 3b:cb:ac:d1:27:ba:5b:4a:62:40:ee:0f:60:62:7a:0c:ba:41: 91:35:4a:63:b7:3d:79:43:5b:7b:68:59:55:6f:9a:ee:c5:c9: b3:23:c2:1a:22:c1:af:f7:2a:55:1a:7c:1d:64:de:1d:9c:11: 2d:38:91:0c:ea:1d:c4:55:98:5e:92:ad:95:fb:69:0b:64:2e: 7c:0d:dc:61:c9:93:55:4e:42:9b:37:a0:d6:2e:e6:2f:72:85: 97:dd:91:22:42:57:b2:41:c7:a1:a8:48:2f:5a:1c:c9:64:50: 5e:40:85:7d:2b:9a:09:f7:6f:d4:f3:7d:eb:25:d8:3a:f7:f8: 37:56:3e:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ifi49xG3+Gi8hm7Rbyf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYzFiZTA5ODFhNGU3NTc2YzU2MmY2ZjA5ZTY1YzE3YzE4 MGUzY2EwHhcNMjUxMjIwMDUwMTAzWhcNMjUxMjIxMDUwMTAzWjAzMTEwLwYDVQQD Eyg4N2MzYWI1NDcyZDI0MzQyZGEzODE1Yzc2OWMwYTc2OTIwOTc2YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/Wze2X7Vh+k6fG1XS4efMMyN4K8 gQKPt2N0tkoYpXTwHilJuSI3EzZYk7VRLPlVQ8iTN/zhgMPXnanfXkrYNAAQ35da zUrDSY+gGq6CSyu6uHk4vpxNdy/iyNXsVPR1S63j7Hbxyb6aYMYjLzO+lJ8NjzTa 01EAE6BRHS3Admwod36MBi+3N6IppPXKPGqgXTkQc/zGvVtITVJJBOo0shTe/7MA Vzvwh0K9E+FYNws72FhOPPSX4llspOKxAs0scNTNFFcpDSv0oawvBsuMxf8zSZHx TIziuG5li8tVAaowWyM+en+5pK9bQntxVp5+1FOEFVetqupm8bitf16a7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfDq1Ry0kNC2jgVx2nAp2kgl2umMB8GA1UdIwQY MBaAFKHBvgmBpOdXbFYvbwnmXBfBgOPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYt OThkZmMyZWU2ZTBjLzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84MWU1YTUtYWMzOS00M2MxLTg3MmYtOThkZmMyZWU2ZTBj LzEvb2NHLUNZR2s1MWRzVmk5dkNlWmNGOEdBNDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3D0IXDK fpGXeIzJrbHUJxSdUJFYpzKdeobMSJDRI2FsxEFWuG0RsNjdHcJStd/8L19PZgZz JvSyvBWb1AxEy6qaa1yRzJDnegal3qAfXzgldydt3QhNr8pP7UVS3nD1mV/bYYyr 7fEVLLRuFunWCaXKRLql0LzRGwcVs/ldO8us0Se6W0piQO4PYGJ6DLpBkTVKY7c9 eUNbe2hZVW+a7sXJsyPCGiLBr/cqVRp8HWTeHZwRLTiRDOodxFWYXpKtlftpC2Qu fA3cYcmTVU5Cmzeg1i7mL3KFl92RIkJXskHHoahIL1ocyWRQXkCFfSuaCfdv1PN9 6yXYOvf4N1Y+5A== -----END CERTIFICATE-----Generated at Sat Dec 20 13:54:43 2025 by rpki-client