This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json) Hash identifier: Y+FWr9YwTfDTvtoguI5g9qeMdwHeZsQUpNxQ9mo63SU= Subject key identifier: FA:20:5C:B0:4C:B2:D6:4B:97:B4:66:22:12:66:F1:5A:00:A2:2F:49 Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Certificate serial: 019B3C107E224066773E8929074AAE9D3CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft Manifest number: 0768 Signing time: Sat 20 Dec 2025 14:01:12 +0000 Manifest this update: Sat 20 Dec 2025 14:01:12 +0000 Manifest next update: Sun 21 Dec 2025 14:01:12 +0000 Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=) 2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: 6A0u27U+QeNFNYdr+IFYyJZiEkkwpges0IoOAD3sx7A=) 3: gu88WpvtkXuc7R66ZpDpE_3pKFA.roa (hash: ehlUCMIeJxZkhfnlJeweCnR9EA26oToRAoh5TK8ORKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:7e:22:40:66:77:3e:89:29:07:4a:ae:9d:3c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de Validity Not Before: Dec 20 14:01:12 2025 GMT Not After : Dec 21 14:01:12 2025 GMT Subject: CN=fa205cb04cb2d64b97b466221266f15a00a22f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:0b:90:f9:48:f5:07:19:9e:b3:1d:fc:17: ea:4f:9b:2c:6a:20:fd:4f:9f:f4:fa:f4:26:af:ec: 16:f4:9b:fe:c2:2e:cf:a2:69:79:aa:96:49:fc:5b: f3:93:36:dd:a2:4d:87:11:89:70:3e:46:1c:8e:11: 24:55:e7:d9:db:a9:55:56:b9:fc:7e:10:9b:df:be: 18:26:87:0c:37:10:5a:1e:17:fc:fa:06:9c:a4:9f: 45:d1:81:4e:bb:bc:45:4f:2b:96:7f:54:aa:80:df: 8a:31:05:ef:c0:cc:23:c8:46:69:96:46:17:09:9e: 0b:48:35:ae:7e:e4:9f:e3:26:2a:7e:ec:49:36:34: 24:e5:0e:72:57:04:80:c9:83:97:28:37:a9:db:7e: fb:b5:62:95:1f:09:41:88:81:bf:27:3b:aa:f5:60: 87:90:ba:f1:f2:18:2f:b9:77:fe:58:41:ee:85:64: da:5f:d5:ce:da:ce:c2:88:88:21:99:21:b3:02:e9: 16:0b:99:4a:ad:47:8a:58:ba:3b:79:17:39:ac:e8: b1:97:ef:d2:34:75:a6:3d:db:71:76:a2:76:73:c2: d4:5e:bb:73:df:16:e7:f4:04:c9:5b:15:5c:53:6e: 27:96:af:d9:1a:34:bc:d2:71:6a:d8:e2:a5:7f:6d: ed:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:20:5C:B0:4C:B2:D6:4B:97:B4:66:22:12:66:F1:5A:00:A2:2F:49 X509v3 Authority Key Identifier: keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fb:6c:70:66:fd:48:54:a4:b6:9a:1e:93:17:b8:d9:f8:b9: 9e:4b:d3:4c:80:11:bf:2f:52:0f:bf:2a:35:c3:35:43:b1:48: da:fc:37:62:f1:cc:9c:93:36:af:56:c3:aa:23:cf:50:12:a7: 1b:14:4f:9b:d8:fe:2c:c0:13:31:d9:22:92:1b:50:ec:9b:28: 82:3e:20:30:e1:b0:ac:d8:52:d3:2d:20:46:e8:d6:ce:05:89: 34:63:7c:02:73:52:3f:08:1c:2a:a9:6d:75:28:d6:a9:34:dc: 46:25:32:b6:11:88:eb:58:cf:de:a1:41:38:00:2d:b7:d0:f5: 93:c3:b6:44:6b:7a:7a:53:22:7a:90:d3:35:e6:93:53:40:77: 17:6b:a0:8b:83:b3:40:67:50:69:a8:54:ee:53:fd:ee:2b:b2: 2c:7a:21:f5:93:de:5a:ff:3c:0a:a5:c9:9e:f8:d0:2a:c1:f5: 91:39:30:d5:f9:af:3e:5c:ae:e8:33:32:d5:27:17:77:d5:96: 86:eb:b6:22:7a:55:e7:c1:61:6d:ba:c9:29:a8:a4:62:4b:6b: ee:16:33:5c:3f:1b:55:4f:64:e1:e0:9c:d4:05:e6:fa:78:7d: f0:2b:d3:2b:f3:27:38:8c:f8:45:53:38:17:fe:d0:39:bb:86: 5f:63:99:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EH4iQGZ3PokpB0qunTz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiM2EwNWRiYjljNzdmYTE2ZWQxMDQ2OTc0N2E1YzZlNmVh Yjg4ZGUwHhcNMjUxMjIwMTQwMTEyWhcNMjUxMjIxMTQwMTEyWjAzMTEwLwYDVQQD EyhmYTIwNWNiMDRjYjJkNjRiOTdiNDY2MjIxMjY2ZjE1YTAwYTIyZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst4LkPlI9QcZnrMd/BfqT5ssaiD9 T5/0+vQmr+wW9Jv+wi7Poml5qpZJ/Fvzkzbdok2HEYlwPkYcjhEkVefZ26lVVrn8 fhCb374YJocMNxBaHhf8+gacpJ9F0YFOu7xFTyuWf1SqgN+KMQXvwMwjyEZplkYX CZ4LSDWufuSf4yYqfuxJNjQk5Q5yVwSAyYOXKDep2377tWKVHwlBiIG/Jzuq9WCH kLrx8hgvuXf+WEHuhWTaX9XO2s7CiIghmSGzAukWC5lKrUeKWLo7eRc5rOixl+/S NHWmPdtxdqJ2c8LUXrtz3xbn9ATJWxVcU24nlq/ZGjS80nFq2OKlf23t3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPogXLBMstZLl7RmIhJm8VoAoi9JMB8GA1UdIwQY MBaAFDs6Bdu5x3+hbtEEaXR6XG5uq4jeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgt YTAxYzM3Yjg4NzI4LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS81YWEwNWEtNzIwZS00ZDU2LWEzYTgtYTAxYzM3Yjg4NzI4 LzEvT3pvRjI3bkhmNkZ1MFFScGRIcGNibTZyaU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/tscGb9 SFSktpoekxe42fi5nkvTTIARvy9SD78qNcM1Q7FI2vw3YvHMnJM2r1bDqiPPUBKn GxRPm9j+LMATMdkikhtQ7Jsogj4gMOGwrNhS0y0gRujWzgWJNGN8AnNSPwgcKqlt dSjWqTTcRiUythGI61jP3qFBOAAtt9D1k8O2RGt6elMiepDTNeaTU0B3F2ugi4Oz QGdQaahU7lP97iuyLHoh9ZPeWv88CqXJnvjQKsH1kTkw1fmvPlyu6DMy1ScXd9WW huu2InpV58FhbbrJKaikYktr7hYzXD8bVU9k4eCc1AXm+nh98CvTK/MnOIz4RVM4 F/7QObuGX2OZEQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:30:10 2025 by rpki-client