This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft File: PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json) Hash identifier: WyijScubSrBXLwv6bWS22zznYNAXrf7jgX+ZXTqfpQE= Subject key identifier: 7A:BE:E4:0A:AB:3B:5F:1B:24:1E:CC:56:44:20:5C:33:DD:AF:CE:FD Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019B3BA2BDF62996B02BF4DA1CC4A70DAC93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 12:01:19 +0000 Manifest this update: Sat 20 Dec 2025 12:01:19 +0000 Manifest next update: Sun 21 Dec 2025 12:01:19 +0000 Files and hashes: 1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=) 2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=) 3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=) 4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: 1Pn9PGhmMzw/91dXkoB3FQFzv2ij4Y+mnCVGUY9cuhY=) 5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=) 6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=) 7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:bd:f6:29:96:b0:2b:f4:da:1c:c4:a7:0d:ac:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Dec 20 12:01:19 2025 GMT Not After : Dec 21 12:01:19 2025 GMT Subject: CN=7abee40aab3b5f1b241ecc5644205c33ddafcefd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:b0:e1:33:aa:03:d0:43:6b:29:a2:9a:4e: fb:af:61:c2:cd:0a:62:27:6e:fd:59:aa:1d:e9:41: 26:21:3f:4f:3e:0d:96:b2:81:8c:df:8c:a3:19:ef: 30:cf:7e:22:77:bc:1b:e9:8e:3b:a0:05:3d:ff:ce: 44:4c:6c:af:d6:c4:79:98:8b:c4:89:d9:91:a2:5a: d5:2a:86:d0:a8:b1:7a:92:2a:12:23:af:91:3c:b7: 39:b2:74:6e:3a:f5:4f:1e:81:d0:a6:c4:bc:32:09: 4d:86:b2:af:2a:15:f4:22:7d:2f:12:96:3f:f9:54: 22:af:b0:88:5d:9b:de:13:04:38:47:d2:16:d1:89: 3c:3e:81:df:30:04:f5:23:76:79:86:6c:2f:eb:c8: 68:73:46:7f:d3:9d:12:4a:86:c7:60:5a:7f:5b:b8: b7:99:f6:e4:06:c6:30:0b:70:95:70:f6:20:08:8b: 35:3d:32:de:cc:1b:9b:ef:9b:5d:be:a7:95:2a:3a: 32:8f:50:33:9f:0d:33:a8:17:4f:94:e1:8b:a8:be: 10:7d:59:6c:ef:3e:79:50:89:88:c5:6d:6e:d1:d0: bc:81:8d:3b:7a:d8:2f:ee:a8:01:a6:59:ba:57:14: cf:d6:fc:22:2e:00:07:53:a2:f6:f2:5c:24:98:9f: 17:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BE:E4:0A:AB:3B:5F:1B:24:1E:CC:56:44:20:5C:33:DD:AF:CE:FD X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:07:00:e7:f7:a5:22:d4:0d:11:30:ce:e4:5b:83:82:cd:f7: 49:49:37:2e:b7:f4:eb:20:3b:b3:2e:15:57:9d:d3:03:a2:fc: c4:c8:f4:fe:8e:46:81:46:d7:50:23:b7:25:60:76:89:ff:31: 63:da:1b:66:d4:97:a6:14:e8:e1:e5:2c:ae:43:13:62:a1:61: d9:20:ff:6d:fc:7f:c1:a8:73:7e:05:f2:c2:3c:7c:b8:4e:f3: 93:fa:10:6a:ee:55:a1:44:7c:d9:50:3b:39:67:56:9b:c8:f4: 41:1e:18:53:37:e1:3c:2b:53:71:32:70:b1:dd:c2:3a:0d:48: be:8a:2b:c9:18:ef:92:7f:3e:d5:79:23:f5:f2:f5:70:72:c8: 42:1f:0c:b7:aa:4c:a4:a0:84:63:0f:f5:79:8d:8b:e9:75:ee: 1a:5a:0b:e8:01:a3:5c:e2:04:02:97:4c:3f:aa:fb:63:b9:fa: 52:2b:cf:cd:23:ee:c7:74:c2:f4:96:f7:83:5e:d8:02:ca:7d: 44:80:20:a5:2f:b9:49:05:92:ba:98:ff:a9:97:e5:31:11:63: 25:8d:f3:e3:e4:ae:22:6a:5f:24:6c:1d:8f:bd:7f:dd:64:25: 37:bd:b2:1d:15:44:8f:49:e0:c4:6c:dc:ad:80:42:47:97:5b: 68:e5:e9:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7or32KZawK/TaHMSnDayTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjUxMjIwMTIwMTE5WhcNMjUxMjIxMTIwMTE5WjAzMTEwLwYDVQQD Eyg3YWJlZTQwYWFiM2I1ZjFiMjQxZWNjNTY0NDIwNWMzM2RkYWZjZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCKw4TOqA9BDaymimk77r2HCzQpi J279Waod6UEmIT9PPg2WsoGM34yjGe8wz34id7wb6Y47oAU9/85ETGyv1sR5mIvE idmRolrVKobQqLF6kioSI6+RPLc5snRuOvVPHoHQpsS8MglNhrKvKhX0In0vEpY/ +VQir7CIXZveEwQ4R9IW0Yk8PoHfMAT1I3Z5hmwv68hoc0Z/050SSobHYFp/W7i3 mfbkBsYwC3CVcPYgCIs1PTLezBub75tdvqeVKjoyj1Aznw0zqBdPlOGLqL4QfVls 7z55UImIxW1u0dC8gY07etgv7qgBplm6VxTP1vwiLgAHU6L28lwkmJ8XFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq+5AqrO18bJB7MVkQgXDPdr879MB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwcA5/el ItQNETDO5FuDgs33SUk3Lrf06yA7sy4VV53TA6L8xMj0/o5GgUbXUCO3JWB2if8x Y9obZtSXphTo4eUsrkMTYqFh2SD/bfx/wahzfgXywjx8uE7zk/oQau5VoUR82VA7 OWdWm8j0QR4YUzfhPCtTcTJwsd3COg1IvooryRjvkn8+1Xkj9fL1cHLIQh8Mt6pM pKCEYw/1eY2L6XXuGloL6AGjXOIEApdMP6r7Y7n6UivPzSPux3TC9Jb3g17YAsp9 RIAgpS+5SQWSupj/qZflMRFjJY3z4+SuImpfJGwdj71/3WQlN72yHRVEj0ngxGzc rYBCR5dbaOXpGg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:40 2025 by rpki-client