This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json) Hash identifier: LJEz1npp5w9xc+6M09kgQ9Ufd7XnP9QrxK37hBUvbl8= Subject key identifier: EF:CF:E1:AF:CB:78:0E:8E:BC:B6:D5:E2:EF:B9:CD:D1:2F:6D:10:E2 Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d Certificate serial: 019B6DA0F7EDAB6FAC819167EBDEBF43EAC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft Manifest number: 0BD6 Signing time: Tue 30 Dec 2025 05:00:24 +0000 Manifest this update: Tue 30 Dec 2025 05:00:24 +0000 Manifest next update: Wed 31 Dec 2025 05:00:24 +0000 Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: KXWXyMusTLw6Fayg742YKJIj6/aRltPltedlw9frv5E=) 2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a0:f7:ed:ab:6f:ac:81:91:67:eb:de:bf:43:ea:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d Validity Not Before: Dec 30 05:00:24 2025 GMT Not After : Dec 31 05:00:24 2025 GMT Subject: CN=efcfe1afcb780e8ebcb6d5e2efb9cdd12f6d10e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:aa:47:f7:d1:59:da:a1:e7:61:59:21:ff: 7e:65:95:51:1e:bb:c0:9a:cc:9a:76:5e:41:51:b6: a0:d8:8f:79:a1:98:04:6c:36:56:f8:7c:41:80:32: 61:64:99:9a:0b:7b:61:02:05:93:94:30:55:0f:76: bd:a9:2a:bc:9d:42:b6:e9:35:bc:3a:e8:d3:94:2b: eb:dc:4d:24:72:a1:fe:b5:29:74:44:60:4e:1b:c4: 46:c1:72:70:70:42:8f:02:01:6e:56:3e:6f:19:ad: a8:44:f2:a0:70:79:51:10:73:63:31:97:bf:68:ce: 4b:61:b7:45:fd:d9:a6:2a:29:85:4d:25:28:98:ef: 27:3e:72:40:c1:30:ac:88:68:50:96:56:ae:30:67: 3a:5a:f9:8f:cc:bf:13:0f:c5:1d:e4:af:44:fa:a5: 24:9d:2c:b5:81:b4:2a:c2:26:6b:9b:d2:0c:3f:32: c7:c9:e4:85:70:b4:91:cc:68:97:ea:73:a2:10:ee: f8:a3:19:99:09:c3:13:d1:8d:e1:88:d9:b9:3f:20: c9:97:e3:20:af:a4:26:a5:fb:de:94:2e:0c:8d:b8: 95:28:5b:be:a7:b5:7c:73:87:d5:dc:7f:bb:f4:52: 0b:f9:f6:9e:e6:e3:99:fd:ce:ce:9f:8c:39:b3:21: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CF:E1:AF:CB:78:0E:8E:BC:B6:D5:E2:EF:B9:CD:D1:2F:6D:10:E2 X509v3 Authority Key Identifier: keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6b:d8:94:93:89:df:4f:3f:75:5e:ac:43:1a:51:e5:9e:f6: aa:ad:af:12:ad:2f:0b:81:68:b6:a5:56:2e:6e:d2:c9:e1:e4: 99:be:f5:c8:63:83:1c:c6:3e:1d:43:14:de:57:f9:38:49:29: 97:9c:60:0d:c4:f2:cc:b7:e6:15:1a:56:d0:86:02:35:73:99: 82:14:59:3c:8e:df:ef:eb:d8:a3:d1:e2:2b:97:33:29:bc:dd: 65:6d:09:98:35:f4:3c:6f:c1:ea:15:0a:db:db:2b:07:4b:02: aa:26:f9:c8:c9:e3:b9:78:4e:a9:5d:9c:a3:b1:98:64:25:0b: 04:87:ad:8f:26:04:dc:04:69:7c:c3:57:66:ad:e8:3b:2b:07: 43:b5:a7:6b:ec:a3:e8:25:7e:7d:3a:f9:ef:d0:fd:a1:e1:84: fa:96:67:f1:82:ae:f5:7e:33:43:75:6c:4c:c5:be:ac:02:48: 62:62:eb:fd:da:f4:4d:5e:31:e5:59:52:47:29:5e:b5:61:08: cb:4e:78:8c:67:91:5f:75:38:5b:31:eb:3e:84:87:d8:1a:28: eb:50:df:98:a7:20:71:9a:64:5e:8d:69:65:09:93:93:0c:0e: a4:40:cb:68:d9:bd:e8:b4:61:74:08:a0:18:33:19:55:9c:db: 6e:cd:10:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoPftq2+sgZFn696/Q+rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjY0MjNlYjAxOTU1MjI0ZTZjMTFkMTljNmQzOTM4MWU4 YmUyMWQwHhcNMjUxMjMwMDUwMDI0WhcNMjUxMjMxMDUwMDI0WjAzMTEwLwYDVQQD EyhlZmNmZTFhZmNiNzgwZThlYmNiNmQ1ZTJlZmI5Y2RkMTJmNmQxMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5WqR/fRWdqh52FZIf9+ZZVRHrvA msyadl5BUbag2I95oZgEbDZW+HxBgDJhZJmaC3thAgWTlDBVD3a9qSq8nUK26TW8 OujTlCvr3E0kcqH+tSl0RGBOG8RGwXJwcEKPAgFuVj5vGa2oRPKgcHlREHNjMZe/ aM5LYbdF/dmmKimFTSUomO8nPnJAwTCsiGhQllauMGc6WvmPzL8TD8Ud5K9E+qUk nSy1gbQqwiZrm9IMPzLHyeSFcLSRzGiX6nOiEO74oxmZCcMT0Y3hiNm5PyDJl+Mg r6QmpfvelC4MjbiVKFu+p7V8c4fV3H+79FIL+fae5uOZ/c7On4w5syHB3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/P4a/LeA6OvLbV4u+5zdEvbRDiMB8GA1UdIwQY MBaAFDgmQj6wGVUiTmwR0ZxtOTgei+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2Et Nzg1ZTNlODc2OGY5LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2EtNzg1ZTNlODc2OGY5 LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2vYlJOJ 308/dV6sQxpR5Z72qq2vEq0vC4FotqVWLm7SyeHkmb71yGODHMY+HUMU3lf5OEkp l5xgDcTyzLfmFRpW0IYCNXOZghRZPI7f7+vYo9HiK5czKbzdZW0JmDX0PG/B6hUK 29srB0sCqib5yMnjuXhOqV2co7GYZCULBIetjyYE3ARpfMNXZq3oOysHQ7Wna+yj 6CV+fTr579D9oeGE+pZn8YKu9X4zQ3VsTMW+rAJIYmLr/dr0TV4x5VlSRyletWEI y054jGeRX3U4WzHrPoSH2Boo61DfmKcgcZpkXo1pZQmTkwwOpEDLaNm96LRhdAig GDMZVZzbbs0Qgg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:20 2025 by rpki-client