This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json) Hash identifier: 6LXkn08Z0sFCrAxyq7CBLzkuLzx18CHMkS7wfJ4C6UQ= Subject key identifier: 53:CE:8A:05:57:10:F4:47:BB:AD:C9:6E:03:EE:8A:4B:10:0B:87:4B Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Certificate serial: 019B337AC6EBADCD3BD7B2314E94CF39EC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft Manifest number: 05B1 Signing time: Thu 18 Dec 2025 22:00:42 +0000 Manifest this update: Thu 18 Dec 2025 22:00:42 +0000 Manifest next update: Fri 19 Dec 2025 22:00:42 +0000 Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: 2eQ2KvydQ0q5GRP0Yb1FKtA7E4HCTStkUNxN3xgGA2Y=) 2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:c6:eb:ad:cd:3b:d7:b2:31:4e:94:cf:39:ec:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5 Validity Not Before: Dec 18 22:00:42 2025 GMT Not After : Dec 19 22:00:42 2025 GMT Subject: CN=53ce8a055710f447bbadc96e03ee8a4b100b874b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:32:41:65:b8:88:80:28:04:ed:01:b1:ef: 97:38:0d:8b:99:7a:37:78:f9:b2:b2:53:fe:0f:26: 65:d3:6c:2b:eb:9a:de:b7:c2:a5:48:cd:c7:49:b5: 74:56:a9:de:f0:e1:5b:38:2b:b5:d4:d9:e0:22:e0: b2:c5:f9:93:78:a0:45:b4:9d:6f:a3:23:d1:0f:73: 2a:91:7a:46:8b:0e:51:66:93:5c:af:87:72:04:44: c3:50:74:c4:b1:72:a2:02:e3:d7:b7:a2:01:65:a5: 97:13:76:a2:2d:aa:cf:53:0c:9c:3f:e7:9e:2b:03: 31:24:e9:1b:6a:69:96:47:55:8e:88:b5:2f:ff:e0: d7:f0:68:6f:6e:f5:c0:6a:54:22:7a:f3:be:b1:5d: c4:89:1f:05:a6:b9:1c:52:b2:cb:33:d1:1e:38:8c: 6d:24:71:94:cc:0c:80:fd:35:da:ae:d1:8c:46:2e: 21:87:7c:97:b7:7b:b9:c8:01:84:c4:5a:c3:ac:63: 20:fa:d1:dc:a1:79:8a:cc:93:d1:a9:35:05:c7:c3: b8:03:63:97:19:d5:c5:a9:27:25:c9:af:e1:17:bf: 83:f5:47:4b:3d:d3:f4:a6:17:b7:b0:75:dc:15:4e: 77:92:5d:d6:21:da:dd:c9:d8:9f:5f:fc:c3:5c:6b: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CE:8A:05:57:10:F4:47:BB:AD:C9:6E:03:EE:8A:4B:10:0B:87:4B X509v3 Authority Key Identifier: keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:0b:28:c3:dc:63:d0:68:d9:ae:e1:d7:cf:ec:d9:3b:41: ea:40:60:2b:42:ed:98:80:66:f7:83:b4:22:25:38:7c:da:1e: eb:64:76:28:b5:89:6a:1c:00:bf:65:a4:53:a1:0b:14:e8:58: db:7f:a3:1f:f8:d8:0b:aa:c9:bb:82:f5:1e:0c:bd:56:80:53: 45:07:b5:da:22:7c:91:8e:b2:39:47:dc:91:fe:8b:c3:03:92: bf:e9:1c:f2:ae:6c:2e:7f:e4:5c:a2:19:1c:b0:76:7d:2e:6b: b1:b4:51:60:f2:a2:2c:98:37:85:25:6f:1f:cb:21:0b:0e:ab: b0:a1:54:77:57:39:d5:f7:a3:50:ed:27:0c:f8:1c:4a:d0:8f: 68:0b:d0:34:43:31:d6:b0:57:07:10:3d:73:16:c4:07:92:d4: 28:c6:a9:61:d8:37:f1:4b:c7:a9:a5:b3:9e:6e:da:78:34:11: 0d:50:b1:26:c9:3e:ee:2f:d4:5b:c6:ff:9b:c7:e6:e1:e1:c7: c4:31:cc:c4:5f:6d:a9:4c:cb:9d:0b:89:0f:04:cd:f6:41:ec: fe:70:46:4d:46:b0:5b:d5:60:45:94:74:cc:71:07:a9:55:da: c9:6b:56:96:7a:36:04:6f:b1:ba:de:91:02:6a:ba:d0:33:f5: 1b:03:1d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszesbrrc0717IxTpTPOexPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzg5ZjliNTY3ZTc0NWM5NTIxYmIxYzE1NDFhMzQ1OWFl MGU4YTUwHhcNMjUxMjE4MjIwMDQyWhcNMjUxMjE5MjIwMDQyWjAzMTEwLwYDVQQD Eyg1M2NlOGEwNTU3MTBmNDQ3YmJhZGM5NmUwM2VlOGE0YjEwMGI4NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/8yQWW4iIAoBO0Bse+XOA2LmXo3 ePmyslP+DyZl02wr65ret8KlSM3HSbV0Vqne8OFbOCu11NngIuCyxfmTeKBFtJ1v oyPRD3MqkXpGiw5RZpNcr4dyBETDUHTEsXKiAuPXt6IBZaWXE3aiLarPUwycP+ee KwMxJOkbammWR1WOiLUv/+DX8GhvbvXAalQievO+sV3EiR8FprkcUrLLM9EeOIxt JHGUzAyA/TXartGMRi4hh3yXt3u5yAGExFrDrGMg+tHcoXmKzJPRqTUFx8O4A2OX GdXFqSclya/hF7+D9UdLPdP0phe3sHXcFU53kl3WIdrdydifX/zDXGtZhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPOigVXEPRHu63JbgPuiksQC4dLMB8GA1UdIwQY MBaAFDs4n5tWfnRclSG7HBVBo0Wa4OilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2Mt YmYzNTFjMGYwZWJjLzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZTExOGUtMTEwYS00ZWJiLTg0N2MtYmYzNTFjMGYwZWJj LzEvT3ppZm0xWi1kRnlWSWJzY0ZVR2pSWnJnNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkYLKMPc Y9Bo2a7h18/s2TtB6kBgK0LtmIBm94O0IiU4fNoe62R2KLWJahwAv2WkU6ELFOhY 23+jH/jYC6rJu4L1Hgy9VoBTRQe12iJ8kY6yOUfckf6LwwOSv+kc8q5sLn/kXKIZ HLB2fS5rsbRRYPKiLJg3hSVvH8shCw6rsKFUd1c51fejUO0nDPgcStCPaAvQNEMx 1rBXBxA9cxbEB5LUKMapYdg38UvHqaWznm7aeDQRDVCxJsk+7i/UW8b/m8fm4eHH xDHMxF9tqUzLnQuJDwTN9kHs/nBGTUawW9VgRZR0zHEHqVXayWtWlno2BG+xut6R Amq60DP1GwMdjQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:56:43 2025 by rpki-client