This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft File: OzNj5H5p68XRwiUd3V2sfJiYmSI.mft (raw, json) Hash identifier: mHXclSxtKn4iB/IWnmjlnmMVpLYZYOwQt0MFP9AN5fE= Subject key identifier: F9:78:CE:2D:E3:8E:2F:F1:7C:5F:C3:8F:FF:8E:93:19:10:F1:D6:B7 Authority key identifier: 3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 Certificate issuer: /CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Certificate serial: 019B3A8F7C8F52330F465249DCDCD53FF6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:00:40 +0000 Manifest this update: Sat 20 Dec 2025 07:00:40 +0000 Manifest next update: Sun 21 Dec 2025 07:00:40 +0000 Files and hashes: 1: OzNj5H5p68XRwiUd3V2sfJiYmSI.crl (hash: Iv/GebOs9Dn2A7OGNvjqhMTumk3TU4dupm+1iHzilYY=) 2: vYaPE7wk6Qo5Lm2fpqZ1rhvLpDU.roa (hash: ZL2srvtFB3ZUj0RuUE6dDGpy3UL8CY63qkKeS+BMJ20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:7c:8f:52:33:0f:46:52:49:dc:dc:d5:3f:f6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3363e47e69ebc5d1c2251ddd5dac7c98989922 Validity Not Before: Dec 20 07:00:40 2025 GMT Not After : Dec 21 07:00:40 2025 GMT Subject: CN=f978ce2de38e2ff17c5fc38fff8e931910f1d6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:2b:93:10:08:53:86:8b:c3:36:e5:ad:5f: 8f:3f:bb:35:2b:f8:53:4d:9c:7f:d5:c0:9c:45:38: ab:0c:9e:ac:08:0b:8a:f2:3f:1b:c6:02:25:94:79: a7:0f:1c:92:70:67:8d:19:d5:ac:90:17:3c:12:81: f3:96:f5:ce:42:6d:d6:ed:03:e3:83:48:19:d0:2e: 2a:d4:56:03:27:d6:79:99:7c:ee:c5:2d:2b:a5:d4: 77:98:79:34:20:20:3f:89:ed:0e:62:7a:36:28:1e: 45:08:d2:ea:74:ab:aa:16:94:ec:26:99:0e:66:f4: 54:d8:67:f7:18:f4:17:23:8f:a3:06:7c:33:a4:ee: 50:b8:74:d8:bd:67:58:b4:0c:ad:7d:6c:09:67:35: 2a:f6:4e:51:38:2a:1a:1d:59:b6:a3:74:13:fd:54: fe:e9:42:ff:93:b5:58:a9:b8:08:5a:36:73:90:fc: f3:94:30:fe:bd:83:e0:26:b7:a5:7d:da:ea:27:e2: 80:1a:59:5d:65:2f:7e:87:99:59:8b:a5:85:31:f0: 68:9c:17:4b:60:ba:00:71:70:51:9d:93:0a:b8:ab: 1d:9d:78:0e:dd:a9:f6:a8:33:6d:2b:16:b0:b8:1c: 32:0e:30:a9:46:7e:df:eb:b4:eb:07:7d:72:87:da: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:78:CE:2D:E3:8E:2F:F1:7C:5F:C3:8F:FF:8E:93:19:10:F1:D6:B7 X509v3 Authority Key Identifier: keyid:3B:33:63:E4:7E:69:EB:C5:D1:C2:25:1D:DD:5D:AC:7C:98:98:99:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzNj5H5p68XRwiUd3V2sfJiYmSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d32cd4-ba93-4f16-899c-ccdadf7f65f2/1/OzNj5H5p68XRwiUd3V2sfJiYmSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:03:fb:3e:c2:38:1f:f3:56:4e:78:73:31:34:2d:3d:7e:ad: a3:85:59:9c:8e:f3:7e:a5:f6:81:59:82:04:0a:ce:1e:80:28: b6:43:29:33:ba:df:2e:05:36:7f:ca:e7:3c:32:48:1c:e6:95: 3c:02:0c:f9:2b:89:d1:68:4f:e5:20:90:ae:51:33:fb:a3:e0: c5:fa:aa:6b:0b:ef:53:8f:42:34:4f:02:b7:e4:f1:1f:7d:79: cb:ff:ac:f7:a6:65:c0:f4:31:5e:07:00:da:68:a7:5b:2b:89: b2:0c:a4:cd:1e:86:3b:95:87:2b:a7:d4:8a:ad:de:a4:45:b3: c1:53:67:1f:ec:a6:7f:c0:48:5b:58:00:1d:c9:39:55:17:0a: f5:5c:8f:c4:ca:ba:06:3e:ca:f1:6c:dc:b5:29:9c:75:75:eb: 98:75:be:ec:13:af:25:81:fc:6d:3e:cc:56:07:35:be:39:c9: d0:87:e3:db:ba:44:6f:78:1d:8e:48:9e:67:61:6a:2f:4c:0f: 28:e2:50:c6:6f:ec:6a:bc:a0:f3:b2:cc:92:25:b5:cc:84:16: a3:73:b2:7e:3e:1e:ef:28:65:fc:cc:56:44:e3:13:f1:c9:48: 04:65:9b:33:1e:cd:44:9f:a9:69:9f:f2:33:b7:a6:b5:50:01: 84:90:5e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3yPUjMPRlJJ3NzVP/asMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzM2M2U0N2U2OWViYzVkMWMyMjUxZGRkNWRhYzdjOTg5 ODk5MjIwHhcNMjUxMjIwMDcwMDQwWhcNMjUxMjIxMDcwMDQwWjAzMTEwLwYDVQQD EyhmOTc4Y2UyZGUzOGUyZmYxN2M1ZmMzOGZmZjhlOTMxOTEwZjFkNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1ArkxAIU4aLwzblrV+PP7s1K/hT TZx/1cCcRTirDJ6sCAuK8j8bxgIllHmnDxyScGeNGdWskBc8EoHzlvXOQm3W7QPj g0gZ0C4q1FYDJ9Z5mXzuxS0rpdR3mHk0ICA/ie0OYno2KB5FCNLqdKuqFpTsJpkO ZvRU2Gf3GPQXI4+jBnwzpO5QuHTYvWdYtAytfWwJZzUq9k5ROCoaHVm2o3QT/VT+ 6UL/k7VYqbgIWjZzkPzzlDD+vYPgJrelfdrqJ+KAGlldZS9+h5lZi6WFMfBonBdL YLoAcXBRnZMKuKsdnXgO3an2qDNtKxawuBwyDjCpRn7f67TrB31yh9q+hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPl4zi3jji/xfF/Dj/+OkxkQ8da3MB8GA1UdIwQY MBaAFDszY+R+aevF0cIlHd1drHyYmJkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMt Y2NkYWRmN2Y2NWYyLzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kMzJjZDQtYmE5My00ZjE2LTg5OWMtY2NkYWRmN2Y2NWYy LzEvT3pOajVINXA2OFhSd2lVZDNWMnNmSmlZbVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgP7PsI4 H/NWTnhzMTQtPX6to4VZnI7zfqX2gVmCBArOHoAotkMpM7rfLgU2f8rnPDJIHOaV PAIM+SuJ0WhP5SCQrlEz+6PgxfqqawvvU49CNE8Ct+TxH315y/+s96ZlwPQxXgcA 2minWyuJsgykzR6GO5WHK6fUiq3epEWzwVNnH+ymf8BIW1gAHck5VRcK9VyPxMq6 Bj7K8WzctSmcdXXrmHW+7BOvJYH8bT7MVgc1vjnJ0Ifj27pEb3gdjkieZ2FqL0wP KOJQxm/saryg87LMkiW1zIQWo3Oyfj4e7yhl/MxWROMT8clIBGWbMx7NRJ+paZ/y M7emtVABhJBebA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:15 2025 by rpki-client