This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json) Hash identifier: SAHenicgGTxMkKSJFZQZj/yMZ5B+gcTC4aGgFIT4/Ao= Subject key identifier: C3:2F:53:ED:BE:D5:BA:DF:92:BE:04:B0:2C:53:F5:B5:51:B1:88:94 Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Certificate serial: 019B51F350985693873C3D4A725C84226DE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 20:00:58 +0000 Manifest this update: Wed 24 Dec 2025 20:00:58 +0000 Manifest next update: Thu 25 Dec 2025 20:00:58 +0000 Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: sAVIJuJn/ix91DVJtNJnMLTafCj4IwAD8ckfnAJhV84=) 2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:50:98:56:93:87:3c:3d:4a:72:5c:84:22:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Validity Not Before: Dec 24 20:00:58 2025 GMT Not After : Dec 25 20:00:58 2025 GMT Subject: CN=c32f53edbed5badf92be04b02c53f5b551b18894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:6b:ad:f1:5f:1c:ae:41:ed:bf:99:c6:22: 48:a4:63:7b:7b:ce:d0:17:0a:76:c6:13:0a:ae:8f: 68:18:2a:d2:5c:73:27:4e:73:f9:e8:fc:4d:9a:ea: c3:d6:28:58:46:29:74:86:0d:58:9f:7a:e9:16:75: c5:aa:cf:b8:8c:aa:3d:3c:69:26:db:90:73:31:32: 4a:ef:06:63:e8:f6:95:0c:da:8f:e8:4b:61:ea:d2: c8:55:f0:e9:89:3a:70:eb:d4:46:8e:5f:71:1a:c4: 62:3f:0c:e5:60:be:1f:65:83:4d:71:d9:e9:61:6f: 09:be:da:d5:b7:ba:de:1d:28:87:5f:3b:e3:8c:95: c3:7f:d1:3c:3c:50:b9:8d:c7:62:f1:1b:69:48:f1: 33:68:65:89:16:1d:7f:d4:82:02:90:51:2c:be:c9: 28:85:6a:97:f5:ae:ae:f2:73:7d:1a:8d:ae:6f:96: a0:6a:b4:07:65:fb:e1:fa:f2:89:8a:10:76:01:86: 25:86:e3:5b:2c:9b:8f:d4:d4:5e:29:71:d7:25:8c: 22:ca:d5:4e:1b:da:81:8c:e3:6d:30:2a:64:ff:18: 97:b8:e4:1d:45:b3:17:f5:b9:48:73:14:f8:fd:4a: ff:40:ce:92:28:75:e4:bd:64:89:a0:bd:ff:7e:8c: 9f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2F:53:ED:BE:D5:BA:DF:92:BE:04:B0:2C:53:F5:B5:51:B1:88:94 X509v3 Authority Key Identifier: keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ed:cc:dc:60:ab:d5:d6:40:08:1f:40:a3:40:d4:54:9a:33: 49:e4:ed:61:43:28:7a:1b:12:9a:1f:7a:14:53:6e:06:8b:18: 55:09:19:dd:72:da:9f:37:bd:51:3b:20:a0:d7:5e:c7:98:3f: 13:88:25:83:f0:df:46:b8:73:73:e2:6b:d0:7d:37:a5:8b:d1: 47:78:37:be:55:4c:94:63:5f:9b:0a:46:85:b9:dd:b8:49:26: 2a:35:23:86:85:94:b7:6a:bd:59:7e:2a:30:9c:5a:ea:b0:4b: 67:c5:7d:96:f2:3b:bd:5d:75:d0:50:97:99:2d:0f:e8:c0:12: 0f:3d:77:0f:af:34:cf:78:eb:56:ba:41:81:95:29:91:b9:05: 06:76:30:91:9d:f5:64:88:ef:cd:d4:c9:06:eb:a5:40:c5:4c: b1:ee:82:ff:70:c6:48:d3:c7:cd:87:4b:ec:79:3d:2c:c7:62: 23:06:77:27:b5:8a:8c:82:cf:b2:27:97:76:93:ec:6d:8f:04: 8b:73:0d:cb:2c:d9:7e:2e:44:43:7c:0d:c1:aa:52:be:23:e6: 28:78:6d:b2:65:06:0f:d7:b1:66:47:e4:f1:ec:d8:88:02:48: ad:39:41:9b:b3:3b:8c:eb:2d:a7:37:d4:57:23:10:bf:ee:b7: de:27:a9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR81CYVpOHPD1KclyEIm3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0 ZjM2M2QwHhcNMjUxMjI0MjAwMDU4WhcNMjUxMjI1MjAwMDU4WjAzMTEwLwYDVQQD EyhjMzJmNTNlZGJlZDViYWRmOTJiZTA0YjAyYzUzZjViNTUxYjE4ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBrrfFfHK5B7b+ZxiJIpGN7e87Q Fwp2xhMKro9oGCrSXHMnTnP56PxNmurD1ihYRil0hg1Yn3rpFnXFqs+4jKo9PGkm 25BzMTJK7wZj6PaVDNqP6Eth6tLIVfDpiTpw69RGjl9xGsRiPwzlYL4fZYNNcdnp YW8JvtrVt7reHSiHXzvjjJXDf9E8PFC5jcdi8RtpSPEzaGWJFh1/1IICkFEsvsko hWqX9a6u8nN9Go2ub5agarQHZfvh+vKJihB2AYYlhuNbLJuP1NReKXHXJYwiytVO G9qBjONtMCpk/xiXuOQdRbMX9blIcxT4/Ur/QM6SKHXkvWSJoL3/foyfUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMvU+2+1brfkr4EsCxT9bVRsYiUMB8GA1UdIwQY MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0 LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu3M3GCr 1dZACB9Ao0DUVJozSeTtYUMoehsSmh96FFNuBosYVQkZ3XLanze9UTsgoNdex5g/ E4glg/DfRrhzc+Jr0H03pYvRR3g3vlVMlGNfmwpGhbnduEkmKjUjhoWUt2q9WX4q MJxa6rBLZ8V9lvI7vV110FCXmS0P6MASDz13D680z3jrVrpBgZUpkbkFBnYwkZ31 ZIjvzdTJBuulQMVMse6C/3DGSNPHzYdL7Hk9LMdiIwZ3J7WKjILPsieXdpPsbY8E i3MNyyzZfi5EQ3wNwapSviPmKHhtsmUGD9exZkfk8ezYiAJIrTlBm7M7jOstpzfU VyMQv+633iepXA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:56 2025 by rpki-client