This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json) Hash identifier: ofROK2Ifo+EdHwR8TZmsysQAhZvDssWh35/4u180IZI= Subject key identifier: B6:97:61:CB:9A:30:24:DE:D0:79:B8:99:D1:E1:E1:9F:12:74:4D:0E Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Certificate serial: 019B500549394B6A515E2095A09C80DFE0B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 11:01:22 +0000 Manifest this update: Wed 24 Dec 2025 11:01:22 +0000 Manifest next update: Thu 25 Dec 2025 11:01:22 +0000 Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: /Ua1cCfoYHrRBBKOKRAVAd1QBwX2MQqXNh697U2LN7U=) 2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:49:39:4b:6a:51:5e:20:95:a0:9c:80:df:e0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d Validity Not Before: Dec 24 11:01:22 2025 GMT Not After : Dec 25 11:01:22 2025 GMT Subject: CN=b69761cb9a3024ded079b899d1e1e19f12744d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:d3:8c:fd:69:0b:62:66:a7:6f:55:42:e7: 72:0b:2c:cd:fe:7a:d0:2d:3f:ea:a7:a0:7b:9b:b9: ce:cf:8a:cf:0d:0f:f3:1f:38:a2:8f:2a:bb:4b:bd: c7:a0:e0:37:73:7a:8f:33:bc:15:14:0f:c4:99:7f: 3f:98:20:e7:b6:7c:1d:61:12:8b:f9:6d:27:51:d5: 3e:48:a7:92:38:ae:c7:22:c2:9b:22:e4:32:f6:12: e0:9d:e8:2d:b4:73:63:43:ed:a0:7c:78:78:bf:2a: a2:ba:a9:49:e0:f9:de:d7:9f:80:81:96:bc:7a:b5: b1:c9:3d:ba:7c:89:4a:d5:c5:39:4a:05:1e:3f:dc: fa:15:08:06:f4:1b:af:84:41:cc:ba:25:4e:33:75: ad:80:86:3d:72:d3:38:73:d9:cc:de:4a:cb:a5:6c: 2d:7e:9c:c5:0d:b3:d2:3e:de:a8:f7:2c:6d:7b:f5: 71:9d:34:48:07:08:1f:1f:4e:d4:bb:de:2c:41:a3: 33:f6:93:a5:43:b9:ee:36:89:1b:0e:0a:c4:cb:59: 84:97:ce:27:a8:3c:3d:bb:23:59:bf:52:27:14:11: 33:b8:fe:ec:26:e8:2f:27:a3:62:0f:7d:c2:b3:3a: 11:2a:cb:e7:67:05:6c:fd:ab:60:47:43:a9:ab:f0: 8a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:97:61:CB:9A:30:24:DE:D0:79:B8:99:D1:E1:E1:9F:12:74:4D:0E X509v3 Authority Key Identifier: keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:55:8c:22:50:9f:b8:a6:3a:30:ea:4d:b5:28:26:72:c4:c3: 29:45:07:41:8f:86:62:35:ea:10:9b:8d:c8:ec:75:74:b4:d6: 88:cf:04:ec:96:18:60:ca:cf:69:33:63:59:21:70:9a:f0:a4: ae:bd:c3:71:c1:21:88:24:c3:ad:33:23:a7:01:46:52:7c:f0: a5:ee:fd:da:09:06:dc:72:ee:43:75:30:20:29:8c:fd:08:7b: 7f:7d:82:c0:07:fa:a9:cb:b3:ed:63:02:36:96:31:31:a6:43: 31:87:1d:c9:1e:fa:cd:92:0f:4b:61:34:64:83:aa:31:87:79: ba:4a:24:1a:a3:cb:09:7a:bf:0d:4c:1a:d2:44:1b:44:44:73: 41:fa:7d:a0:d0:48:cb:f0:bc:57:8d:a6:32:9a:35:4d:69:fd: 03:78:e0:2a:36:cc:5a:47:95:59:a7:38:94:65:5c:38:c4:8d: eb:74:1a:6a:03:d7:46:30:69:e0:c3:17:06:79:82:42:4d:9c: 97:d4:af:77:fe:e1:30:2a:15:7c:d4:84:0a:eb:30:1e:52:88: ab:5a:5b:82:ff:9c:31:6c:5f:c9:95:86:df:50:5a:79:cc:de: f3:94:0a:f7:63:e6:ae:d7:07:ea:53:50:d1:74:d9:67:77:2b: 01:66:dd:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBUk5S2pRXiCVoJyA3+C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjUyOGFiMWNkMWI2ZGM3M2MwYjA5YjY3ZDNlN2UzNTg0 ZjM2M2QwHhcNMjUxMjI0MTEwMTIyWhcNMjUxMjI1MTEwMTIyWjAzMTEwLwYDVQQD EyhiNjk3NjFjYjlhMzAyNGRlZDA3OWI4OTlkMWUxZTE5ZjEyNzQ0ZDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQjTjP1pC2Jmp29VQudyCyzN/nrQ LT/qp6B7m7nOz4rPDQ/zHziijyq7S73HoOA3c3qPM7wVFA/EmX8/mCDntnwdYRKL +W0nUdU+SKeSOK7HIsKbIuQy9hLgnegttHNjQ+2gfHh4vyqiuqlJ4Pne15+AgZa8 erWxyT26fIlK1cU5SgUeP9z6FQgG9BuvhEHMuiVOM3WtgIY9ctM4c9nM3krLpWwt fpzFDbPSPt6o9yxte/VxnTRIBwgfH07Uu94sQaMz9pOlQ7nuNokbDgrEy1mEl84n qDw9uyNZv1InFBEzuP7sJugvJ6NiD33CszoRKsvnZwVs/atgR0Opq/CK3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaXYcuaMCTe0Hm4mdHh4Z8SdE0OMB8GA1UdIwQY MBaAFDglKKsc0bbcc8Cwm2fT5+NYTzY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMt M2EwMmEyNDJmNDQ0LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wMDgxNmEtZWVkZi00MTkwLWJjMzMtM2EwMmEyNDJmNDQ0 LzEvT0NVb3F4elJ0dHh6d0xDYlo5UG40MWhQTmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlWMIlCf uKY6MOpNtSgmcsTDKUUHQY+GYjXqEJuNyOx1dLTWiM8E7JYYYMrPaTNjWSFwmvCk rr3DccEhiCTDrTMjpwFGUnzwpe792gkG3HLuQ3UwICmM/Qh7f32CwAf6qcuz7WMC NpYxMaZDMYcdyR76zZIPS2E0ZIOqMYd5ukokGqPLCXq/DUwa0kQbRERzQfp9oNBI y/C8V42mMpo1TWn9A3jgKjbMWkeVWac4lGVcOMSN63QaagPXRjBp4MMXBnmCQk2c l9Svd/7hMCoVfNSECuswHlKIq1pbgv+cMWxfyZWG31Baecze85QK92PmrtcH6lNQ 0XTZZ3crAWbdlg== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:32 2025 by rpki-client