This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json) Hash identifier: zauQg89YHU//S3u9vdya4EaHS9ewMyMP+cBR38LfNwo= Subject key identifier: 4A:39:32:90:B8:B5:06:72:88:8F:78:22:A6:AB:09:FF:77:FD:E7:01 Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Certificate serial: 019B661E7800AE9064915439D9DC14164309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft Manifest number: 0561 Signing time: Sun 28 Dec 2025 18:00:31 +0000 Manifest this update: Sun 28 Dec 2025 18:00:31 +0000 Manifest next update: Mon 29 Dec 2025 18:00:31 +0000 Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: SnVvuO5iy4F2JwM93bYc/Z9UEUPcu8b+c6oyspBEjyo=) 2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:78:00:ae:90:64:91:54:39:d9:dc:14:16:43:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef Validity Not Before: Dec 28 18:00:31 2025 GMT Not After : Dec 29 18:00:31 2025 GMT Subject: CN=4a393290b8b50672888f7822a6ab09ff77fde701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:57:73:8f:f6:39:dd:e8:96:72:ce:ed:3d: f9:28:14:29:1b:7e:68:e0:dc:54:a6:5a:09:4c:4c: bb:5e:28:d4:02:67:b7:88:bd:bf:d5:6d:9a:e9:d1: 9c:49:c6:84:56:08:78:5b:e2:9b:08:22:13:84:02: f0:55:e4:88:c9:73:2b:af:d0:07:f7:86:ef:64:d1: b5:95:f0:02:bb:b6:8b:d2:e5:27:ad:0c:9c:94:fe: ed:c3:3f:6d:64:85:dc:bc:01:a0:4e:73:bc:a1:0c: b0:42:c6:d3:6a:ba:ec:1f:7f:4a:6b:88:19:5a:f2: 7e:83:ef:ff:e7:43:b4:4a:62:fe:50:ce:63:8b:b3: c1:8e:fe:c5:16:93:7d:1f:ed:91:06:d6:48:ac:0f: 93:6a:d3:fe:92:b1:c3:7a:c5:fa:ed:a9:95:f4:12: de:53:2f:95:bd:c7:f9:67:06:75:2c:e9:94:db:9c: 1c:df:8c:5e:c2:93:9e:6e:75:b6:6f:b1:d8:10:bc: 44:1d:21:f6:ed:8b:44:db:8b:90:49:fb:55:46:12: 7a:7b:bd:e0:bc:ae:f4:99:55:f1:7b:b5:00:b9:b1: c3:23:db:4d:ce:fd:7f:0a:11:39:d6:c0:45:0e:9c: aa:42:0e:67:c8:6e:d7:3f:45:59:4d:dc:43:c9:17: 7f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:39:32:90:B8:B5:06:72:88:8F:78:22:A6:AB:09:FF:77:FD:E7:01 X509v3 Authority Key Identifier: keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e2:6d:aa:b3:4c:65:a4:bc:8b:3f:c7:cc:6b:c4:ce:f6:2b: 2d:49:d0:eb:8a:73:5a:7b:25:53:6d:67:1b:a4:fe:c5:41:1b: aa:1d:ac:0b:31:10:50:31:36:1d:7f:79:a1:03:47:e9:3a:3f: eb:b4:97:35:b8:84:4e:99:9d:14:e5:8d:6c:53:51:67:1d:1a: 63:15:cd:1e:a8:ac:50:59:18:f2:78:91:ea:6e:c5:82:71:53: 11:6a:7f:ae:e7:ac:43:d0:6e:d6:86:0e:2e:6d:8e:7b:9b:2f: b3:66:79:64:4a:4e:c3:66:c4:19:4f:4d:bc:63:b8:44:9d:a5: 6d:3f:8a:a6:28:71:26:e5:0b:14:e4:06:93:a1:8a:a2:8f:39: 40:49:3a:d5:fa:cb:d8:83:d6:76:55:aa:38:df:94:37:8c:e1: 5d:6f:14:3a:88:a6:33:54:e8:af:9c:6d:00:e2:f6:41:e7:ed: bb:0a:8e:77:a9:d1:27:f9:00:29:aa:0b:20:35:ff:99:65:ac: ff:29:0b:06:d7:d3:6f:84:c8:85:74:e6:9d:63:e3:d6:68:a3: 4e:5d:e4:27:48:fb:42:fe:82:42:06:ca:b4:1e:14:3c:4c:d0: 6f:7a:16:4e:12:66:7d:70:97:8e:62:b9:52:c2:66:ee:7e:1b: 0f:a2:62:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHngArpBkkVQ52dwUFkMJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy NDk4ZWYwHhcNMjUxMjI4MTgwMDMxWhcNMjUxMjI5MTgwMDMxWjAzMTEwLwYDVQQD Eyg0YTM5MzI5MGI4YjUwNjcyODg4Zjc4MjJhNmFiMDlmZjc3ZmRlNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPJXc4/2Od3olnLO7T35KBQpG35o 4NxUploJTEy7XijUAme3iL2/1W2a6dGcScaEVgh4W+KbCCIThALwVeSIyXMrr9AH 94bvZNG1lfACu7aL0uUnrQyclP7twz9tZIXcvAGgTnO8oQywQsbTarrsH39Ka4gZ WvJ+g+//50O0SmL+UM5ji7PBjv7FFpN9H+2RBtZIrA+TatP+krHDesX67amV9BLe Uy+Vvcf5ZwZ1LOmU25wc34xewpOebnW2b7HYELxEHSH27YtE24uQSftVRhJ6e73g vK70mVXxe7UAubHDI9tNzv1/ChE51sBFDpyqQg5nyG7XP0VZTdxDyRd/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo5MpC4tQZyiI94IqarCf93/ecBMB8GA1UdIwQY MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOJtqrNM ZaS8iz/HzGvEzvYrLUnQ64pzWnslU21nG6T+xUEbqh2sCzEQUDE2HX95oQNH6To/ 67SXNbiETpmdFOWNbFNRZx0aYxXNHqisUFkY8niR6m7FgnFTEWp/ruesQ9Bu1oYO Lm2Oe5svs2Z5ZEpOw2bEGU9NvGO4RJ2lbT+KpihxJuULFOQGk6GKoo85QEk61frL 2IPWdlWqON+UN4zhXW8UOoimM1Tor5xtAOL2QeftuwqOd6nRJ/kAKaoLIDX/mWWs /ykLBtfTb4TIhXTmnWPj1mijTl3kJ0j7Qv6CQgbKtB4UPEzQb3oWThJmfXCXjmK5 UsJm7n4bD6Ji1w== -----END CERTIFICATE-----Generated at Sun Dec 28 21:41:51 2025 by rpki-client