This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json) Hash identifier: lTSM6O+/wvdz19LP/1Q6IKsu+04p+4Z3huMiM3On1tE= Subject key identifier: 32:68:68:74:F4:2D:45:B3:04:BA:B8:73:13:25:B6:1D:EA:8B:0B:8E Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Certificate serial: 019B32D69B48C5EF0ADF8442C8C9C2F57FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 19:01:23 +0000 Manifest this update: Thu 18 Dec 2025 19:01:23 +0000 Manifest next update: Fri 19 Dec 2025 19:01:23 +0000 Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: 4V968oWcRaiAxYguDEpNhRSGjSNDFN+L95y4NJAYf4o=) 2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:9b:48:c5:ef:0a:df:84:42:c8:c9:c2:f5:7f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Validity Not Before: Dec 18 19:01:23 2025 GMT Not After : Dec 19 19:01:23 2025 GMT Subject: CN=32686874f42d45b304bab8731325b61dea8b0b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1e:dc:00:aa:ef:3d:28:1f:5f:d3:1a:3e:68: fa:65:60:0a:1f:67:44:e6:74:ca:4b:88:b8:93:5a: 74:dd:bf:c5:94:7a:aa:06:9a:6d:f7:a8:9c:4b:56: 25:e2:84:be:4a:a4:ef:2b:0b:f4:9d:01:7d:88:f2: 68:07:3c:b1:9a:f5:fd:76:ff:81:eb:76:34:8c:1a: e6:5d:3d:db:16:9d:d3:33:68:c7:fb:50:89:d6:53: ee:36:94:a4:9f:28:02:91:ec:f8:22:02:ac:18:dc: 3c:24:0b:96:e1:fc:a6:f9:ad:51:ad:25:5e:69:e5: 69:48:26:a1:ab:db:ee:ce:96:8a:f0:c7:29:5f:47: dd:03:bd:ab:11:27:32:82:10:38:a9:ef:b0:50:56: c5:ee:0e:7b:8f:31:65:d4:cc:39:e1:67:81:67:c0: 28:8b:0e:f2:71:30:33:00:44:67:b5:76:ab:99:24: ae:a7:a4:ec:a5:c7:b0:2b:1e:22:22:18:20:ca:c9: 71:0b:b3:c7:93:00:67:85:99:12:4a:1d:97:2a:d4: 7f:78:b0:5d:7c:e5:17:77:79:5a:25:b5:48:4d:34: dd:ef:8a:0b:f6:f3:89:25:ef:5d:e9:7b:f8:c6:f2: 15:01:ff:5f:ad:08:df:11:76:34:2c:d2:fa:9c:44: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:68:68:74:F4:2D:45:B3:04:BA:B8:73:13:25:B6:1D:EA:8B:0B:8E X509v3 Authority Key Identifier: keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:a5:64:98:af:5d:06:81:f7:44:6a:38:96:5b:45:3d:dc: 3b:04:2d:50:cd:c6:df:0d:eb:ef:26:a3:66:4e:6f:c9:5e:43: 01:5a:25:60:dc:ae:f0:60:67:52:a5:e2:a7:05:85:b4:af:7e: ea:d8:36:bd:dd:8e:2c:b4:bb:82:5d:19:9e:ba:02:41:a1:70: f9:43:50:25:5b:23:9d:41:22:ec:22:ff:66:34:0b:f7:8b:6b: 30:6a:9c:da:46:45:04:a8:8d:66:ff:c9:2e:94:bd:2b:b7:94: aa:15:d7:11:e4:0e:13:ab:c0:ed:d8:10:fe:8d:7f:c6:f4:6d: 14:94:9d:ca:b0:8b:24:ed:39:45:bc:c1:b5:d2:7f:1b:ef:c9: 9b:b4:3d:2f:e5:a4:e8:65:eb:9e:81:bd:eb:75:d5:c0:7d:e7: 9e:cc:e8:33:bd:c1:68:93:63:2e:4c:07:e1:9c:b1:37:31:83: 46:23:a9:a4:a8:b3:5e:44:4b:85:18:ff:86:39:41:d4:fd:94: a1:2e:8d:a8:3d:6f:55:8d:6f:57:7a:49:ae:d7:a8:c3:ff:3f: 7e:e8:b2:b1:a2:72:14:e2:06:43:38:23:e5:6d:0d:fa:91:27: fd:c1:de:ed:53:1e:55:6e:7d:7d:33:5e:7e:dc:99:60:24:48: 63:a8:5e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ptIxe8K34RCyMnC9X/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0 YjZhMmUwHhcNMjUxMjE4MTkwMTIzWhcNMjUxMjE5MTkwMTIzWjAzMTEwLwYDVQQD EygzMjY4Njg3NGY0MmQ0NWIzMDRiYWI4NzMxMzI1YjYxZGVhOGIwYjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B7cAKrvPSgfX9MaPmj6ZWAKH2dE 5nTKS4i4k1p03b/FlHqqBppt96icS1Yl4oS+SqTvKwv0nQF9iPJoBzyxmvX9dv+B 63Y0jBrmXT3bFp3TM2jH+1CJ1lPuNpSknygCkez4IgKsGNw8JAuW4fym+a1RrSVe aeVpSCahq9vuzpaK8McpX0fdA72rEScyghA4qe+wUFbF7g57jzFl1Mw54WeBZ8Ao iw7ycTAzAERntXarmSSup6TspcewKx4iIhggyslxC7PHkwBnhZkSSh2XKtR/eLBd fOUXd3laJbVITTTd74oL9vOJJe9d6Xv4xvIVAf9frQjfEXY0LNL6nET1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJoaHT0LUWzBLq4cxMlth3qiwuOMB8GA1UdIwQY MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTilZJiv XQaB90RqOJZbRT3cOwQtUM3G3w3r7yajZk5vyV5DAVolYNyu8GBnUqXipwWFtK9+ 6tg2vd2OLLS7gl0ZnroCQaFw+UNQJVsjnUEi7CL/ZjQL94trMGqc2kZFBKiNZv/J LpS9K7eUqhXXEeQOE6vA7dgQ/o1/xvRtFJSdyrCLJO05RbzBtdJ/G+/Jm7Q9L+Wk 6GXrnoG963XVwH3nnszoM73BaJNjLkwH4ZyxNzGDRiOppKizXkRLhRj/hjlB1P2U oS6NqD1vVY1vV3pJrteow/8/fuiysaJyFOIGQzgj5W0N+pEn/cHe7VMeVW59fTNe ftyZYCRIY6hecg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:02:49 2025 by rpki-client